skysight-inc/HackerNews huggingface dataset:
Change the name. Especially if you're a security oriented service and not having the dot com opens you up to this sort of, I guess its phishing? .info and all are basically active red flags, especially for a security oriented project...
opendns flags this as a phishing threat, which is nice:

https://phish.opendns.com/main?url=keepass.com&server=ams16&...
You have to enable developer mode to run crouton; you don't have to do that to run Linux apps.

Unfortunately I couldn't get crouton to work on a chromebook I bought recently; after switching into a chroot the screen would freeze. I think the issue might be that my chromebook has an AMD APU and an older kernel.
Avdi Grimm has an explanation [0] more worthy than what I was managing to conjure up.

[0]: https://www.rubytapas.com/2012/10/17/episode-011-method-and-...
If you could find what the installer was actually looking for, you could setup a proxy server to rewrite the URL and point it to someplace that has it e.g. locally.
When playing a song I can't drag the time mark.
Interesting, and perhaps not surprising since a college acquaintance once told me (quite some years ago) that AmEx would only cancel your card in one country at a time. Seems he'd had some trouble in Europe (parents shut off funds or something), and while making his way home before eventually getting it sorted out, discovered that little tidbit.
Not doubting you at all. Also, I recently bought a 128GB iPad and copy my pictures to it - from phone and camera (using the SDCard adapter for iPad). It works great for me. iPads are cheaper and last quite a bit.
One less reason to consider a Mac :)
...npm

Nope...

.fusumarc.yml

Oh hell no.

Whoever thought yaml was a good idea (not for this project, I mean at all, ever) is mentally deficient. Those that insist on using it are barely any better.
That data is several years old now (up to 2016). Anecdotal but most of my high-income friends left in the past 1.5 years.
> ... which is important because even with the protections afforded by Dodd-Frank, it's a very real possibility that you won't work in the finance industry again.

If nobody will hire a whistleblower, that leads me to believe everyone has skeletons to hide.
Like, Privacy.com has access to your bank account and have the authority to collect? Because then it is the same problem.

All I want, is the digital equivalent of a personal check.

A one time promise to pay money. If the merchant has a dispute with me, or thinks I owe them more money, they are free to sue me.

If my utility company wants automatic recurring payments, I have to sign paperwork which makes it very clear that I am authorizing recurring bank transfers.

The system we have now makes no sense at all.
I ad a similar issue when parts of Ukraine were invaded by Russia and my Ukranian developers were suddenly "Russian" developers.
What’s New in Android Q Security
Even when the ORM models start to get cumbersome I like to use sqlalchemy.sql to assemble SQL queries.

It maps pretty much 1:1 to SQL and for me it beats the alternative (using text interpolation for composing queries).
Queue the Hardening Enhancements
To be more specific, you should not keep your money at a 3rd party with more control over your money than necessary for longer than necessary.

Giving PayPal an interest free loan and control over you balances rather than sweeping them into a (potentially interest bearing) account controlled by you is one example of this.

Another is having a second account at a different bank that you sweep money from the first one. That second bank account should be set up to reject automated ACH withdrawals so that you can push money into it but PayPal, your payroll company, your bill payers, or even other companies that ACH payments to you cannot withdraw from your account without your permission.
If it were forever possible to trace this idea back to me, or to whomever I got it from, that would sort of disprove my point :)
Audi and Jaguar are also luxury cars, and X isn't.
The aviation industry is actually pretty notorious for tight lippedness given that it's a sector that has higher than normal cross-section with National Security concerns.

A lot of information that has come out has likely been lead to by the fact there are people who can tell others where to look, and what questions to ask who aren't bound by any sort of an NDA, or any concerns of getting blackballed by the industry.

That's my guess anyway. A little bit of knowledge, speaking the lingo, and an independent perspective goes a long way toward piercing through the veil of institutional secrecy. The truly arcane is very infrequently the root cause of a severe problem in my experience. Almost every high severity problem results from the seed of problems endemic to the culture that has been architected in a workplace.

If you have a culture that discourages costly non-value adds (and is daft enough to consider Quality/Safety Assurance a non-value add), you're going to have blind spots that will come back to haunt you. Engineers may not find it a naturally comfortable course of action to speak up and hold people accountable, right down to requiring a manager to deliver to you a signed piece of paper swearing that X or Y will not happen because reasons, and it is the decision of <insert manager's name here> that this path of inquiry is not productive enough to follow, for you to then pin your rebuttal to and send up formal chains of authorization; creating that dastardly paper trail that makes everyone squirm.

I don't even pull that one out unless it is something particularly egregious, and at that it would usually only be after getting the ball rolling to bring about a culture change to undo the myopia that has clearly set in already to allow things to degenerate to that point.

Nobody wants to be the bad guy, or think they are working for the bad guy, which makes it d difficult at times to assume the mantle of That Guy, but that's where your people who really do Quality thrive. It doesn't make you super popular or get you invited to fancy parties, but if you stick to it, you'll become one of the most positive forces for change wherever you are.

Until you run into the Liar up the chain of command of course. Then the politics commence, and victory/positive outcomes are not guaranteed.

And Quality people seldom have golden parachutes.
Not really. In settings where a PE is required any asshole can work on the project so ling as they're under the supervision of a PE who ultimately signs off on the whole thing. I imagine medicine (residency?) and law work similarly.
Fascinating, I’ve never heard that definition before but it makes a lot of sense.
YAML is a mess of a language but what's wrong with npm?
That's because there is none. This person you're responding to is taking a story about someone doing a pretty prudent move as an attack on him or herself.
>but is the goal to keep trees alive as long as possible?

For some trees, being 100year old means that the trees are in their late teens/twenties/thirties (source above book). With that in mind, the answer to above question becomes somewhat difficult.
Delta tells workers they should buy video games instead of joining a union
Singapore passes ‘fake news’ law that critics fear will stifle free speech
I'm pretty sure you're frequently using LIMIT, which (TIL) is non-standard SQL. (PostgreSQL shares that syntax though.)
Of course I immediately thought of "Anathem" by Neal Stephenson ;)
A related concept (and tool for whistleblowers) is the qui tam lawsuit:

https://en.wikipedia.org/wiki/Qui_tam
I see this as the opposite: nyt colluding with silicon valley VCs to show that killing yourself at any and all silicon valley start up is guaranteed to make you a billionaire.

just like when wired published that fake profile for Steve Jobs with the fake cover image that he lived in a SF condo without furniture because he lived for work, and so should you!
One of the huge ones was the ability to use > 1 cpu core for big aggregations or huge select queries. That and a massively better query planner.
Safe at Any Speed: Building a Performant, Safe, Maintainable Packet Processor
Hey! yes, although one the reasons for going with Buildkite was that we had it working well for Synapse before we got our Gitlab up and running, and so rather than doing a Jenkins->Travis->Circle->Buildkite->Gitlab journey, we decided to give Buildkite a fair go. The team also has more experience with it. Gitlab CI could work too, though, and we've heard good things. It would be yet another function to worry about self-hosting though (if we used gitlab.matrix.org for it).
In your opinion, but from the business's point-of-view, if they're enabling a shady business (like a spammer), then people will publicly complain about how that company is aiding and abetting bad actors. It's just like how Twitter gets blamed for neo-Nazis using it to spew their garbage.

Companies aren't the government, and are allowed to choose who they want to do business with. They don't have a responsibility to uphold free speech, and only have to make sure they don't discriminate based on protected class (race, sex, etc.). Otherwise, if they don't want to be known as "the company that helps neo-Nazis accept payments" or something like that, they're free to not do business with them.
I use MS-SQL for my day job, and Postgres for personal projects. Pros of MS-SQL are mainly 1) easy integration with the universe of Microsoft dev tools, frameworks, and infrastructure, and 2) great database tooling in itself:

* SSMS - SQL Server Management Studio

* The MS BI stack: SSRS (reporting), SSAS (analysis), SSIS (integration)
Sounds like any dictatorship ever.

What is unsettling is that the US is clearly not a dictatorship (or at least, not like "any dictatorship ever"). It manages to stay reasonably democratic even with this and other dictatorship enabling mechanism (powerful Executive Power, heavy sectorial financing of the government, etc). On this point, they are exceptional.
yeah but it would never happen to me
So, they are claiming to have done so but did not reveal which ones?

The spy in me wonders if this is fake to discourage campaigns to use AV software in the coming elections. The non-spy just worries about my company's AV software.
The article is fine. If you read it you would have discovered that the hackers claim to be selling access to three US AV companies. This is a group of attackers that has a history of selling access to large organizations, so there's a good chance that what they are offering is real. It doesn't sound like the hackers have revealed the names of the companies. If they did reveal the names, the value of what they are selling would be significantly lower.
It's only free if your time has no value.

In reality, programming is a highly skilled profession that requires considerable investment in time and hard work to get good at it. If you make that investment and gain those skills, you can use them to generate a lot of value, and that's why it pays relatively well as an industry.
The Uber IPO Day Is Finally Here
For anyone thinking of moving out of California before/during a major tax event, I _highly_ advise finding and planning with a really good CPA and a tax lawyer that they recommend.

I've not personally done it, but I've had my fair share of small talk with CPAs who regal you with "funny" stories about people who attempt to move out of California to avoid the high tax rate when, e.g., they sell their business or some other major tax event.

The California FTB is extremely aggressive in these cases. They will both investigate and sue you. It doesn't take much imagination to know what being sued by a state government is going to be like. (The California FTB is a double edged sword; I've had pleasant and helpful experiences any time I've called them up and asked tax questions; but their attentiveness goes both ways it seems)

So you better have an immaculate plan in place to prove that you have indeed moved out of the state. One person went as far as making sure to keep every Starbucks receipt from their daily coffee trips after moving to Seattle. (And yes, they had to use that evidence)

This only applies to high net worth individuals, and I'm sure the stories can be exaggerated. But a couple hundred bucks of a CPA and lawyer time is worth every penny of the horror you might save in fighting with the FTB.

Also, I didn't see it called out in the article, but the biggest downside of California's tax code isn't so much the high tax rate as it is the treatment of capital gains. California doesn't give special treatment to long term capital gains like the IRS does. So the difference is exaggerated in that case; you're paying a marginal of 20% to the IRS and a marginal of 13% to California. That's rough. I do generally agree with California's way of doing it, but with the way things are today I can see why many HNWI at least fantasize about moving out of California.

Finally, there are some other tricks to avoid California's tax that have varying rates of effectiveness depending on your situation and desires. I find CRTs to be quite interesting if you find yourself in a situation where you have a high tax FU money event and want to both avoid taxes and do good for the world.
And we did eliminate them.

But no one can seriously claim that GC is a magic bullet, because it's only clearly winning against plain C.

Carefully designed, popular languages are choosing RAII and reference counting implementations and those are very competitive.
Incident Review for Grafana’s Security Release 6.1.5
unsanctioned access to data

You misunderstand what happened. 1) Users installed a quiz app, 2) Users explicitly accepted a permission dialog that included "information about your friends", 3) The quiz app saved this data, 4) Cambridge Analytica bought the app (and data).

If CA got your data, it's because one of your friends sanctioned the critical link in this chain.

Facebook at least provided this level of security, however illusory it may have been. In a decentralized system, anyone who touches a piece of data can pass it on to whoever they want. There is no way to enforce "my friends can look at my data but it's my data and they aren't allowed to pass it on".

Privacy advocates and decentralization advocates are mortal enemies; their only common cause is that it's popular to hate on Facebook these days.
One of my parents has a Chromebook, one has a Macbook. Guess who I have to field more support calls from? Hint: The one that thinks different.
Despite the fact that there are plenty of free tools to learn the technical skill, not many people want or have the time to invest into learning it. There is a pretty high demand for programmers but the supply is comparatively low. This leads to high salaries.
I can easily levee the same accusation of cherrypicking the numbers against the sources cited here, like this claim:

"even if it were charged 100% from coal, an EV would still be cleaner than the average ICE vehicle"

...where the "average ICE vehicle" is a car running on 30 mpg of gasoline. However, the point of the study isn't to compare average cars in the gasoline-hungry US. The point is to show which new cars would perform the best in terms of achieving the CO2 goals set by the EU for the car industry. This is important, because it has implications on future taxes and subsidies of car purchases. People focus on the "EV vs. Diesel" part, but the actual recommendation of the study is neither EV nor Diesel, but gas-powered vehicles.

Now indeed if we pick the slightly different numbers that this EV proponent would like us to pick, we may arrive here:

"The Fraunhofer Institute reported in March that EVs typically produce “28 percent less greenhouse gas emissions than a luxury-class diesel, up to 42 percent less than a small car petrol engine.”

The catch with these numbers? They only count for the smallest batteries (200km range). The study also has a graph that shows that at 500km, the advantage is down to 5% and at 650km, it flips in favor of the Diesel.

Has anything been debunked here? Not really, it just shows that different numbers mean different things.
The internet is literally saturated with Paypal horror stories. Why do we still see so many tears so often? How many bad reviews does a business like Paypal has to have before people start learning from the mistakes of others and not trust them with their business?
It's not the same problem.

They block charges over the limit.

You can "turn off" a card after you use it.

They have "single use" cards that turn off automatically two minutes after the first charge.

You can set the spending limit on single use cards or for non-single use cards on a per month basis or per year basis.

You can use any billing name and address with the merchant.
There's a still a big catch: normally, when a computer "runs Linux", you can keep installing new Linux distros until the hardware dies, which could be decades in the future.

Chromebooks reach "end of life" after a few (edit: ≤ 6.5) years, effectively becoming software-defined garbage: https://support.google.com/chrome/a/answer/6220366

You can install Linux on some Chromebooks, but it's often a lot of work to disable the "press Space to erase your operating system" prompt. It would be better if all EoL Chromebooks received an update to disable secure boot, because secure boot stops being secure when it boots you to an unpatchable OS.
Can you give some examples by name? I'd like to know more. Thanks
5G Health Effects: Dangers of New Wireless Technology Exposed
It is, but more. When it's tied into the OS, wiping data is much easier. Resetting / removing your profile just takes seconds.

It's a great OS too to give your parents who only need it for web browsing. Less maintenance and tech support.
What’s right with it?
Video description:

At Jane Street, we’ve been building systems to trade electronically for over a decade. As technology advances and the scale of the markets grows, we need our systems to be able to process ever growing amounts of data in ever shorter time windows.

In this talk, we explore how to build a highly optimized single-core packet processing system that is capable of processing millions of messages per second. We see how to bridge the gap between the high-level abstractions we’ve come to love when structuring code, and efficient machine-level execution necessary to process messages at line-rate.
>These are businesses, not charities.

It's not just that: these are businesses, not the government. A lot of free-speech advocates and libertarian thinkers seem to think somehow that private businesses somehow have a responsibility to uphold free speech, and they simply don't. It's the government that can't restrict you from free speech (in the USA); but companies don't have to put up with it on their property or when using their service.
It was mostly a side comment, but it seemed appropriate in this context.

For such an important system, I would think that a single instance would be too little (single point of failure: even in less mission critical system it wouldn't be allowed), while using two you would not be able to resolve a reading conflict between them (which is the point of the quote), so three is probably a reasonable number.

Even if applied to design and not to software programming, the concept is still sound. The point was what the quote meant, not its source.
And let's not forget the controversy from just five months ago where the nytimes reported (and dozens of other media outlets blindly re-reported) that facebook allowed companies like spotify, netflix, and the royal bank of canada to read, write, and delete our private messages. All because the nytimes's tech reporters don't understand how an API works. Or maybe they do, but the nuance doesn't fit with their current agenda.
The Universe Probably 'Remembers' Every Single Gravitational Wave
MySQL has Galera: is there a multi-master option for Pg?

I know of BDR, earlier versions of which are open source, but there hasn't been much movement with Pg 10 or 11 AFAICT.

We don't do anything complicated, but simply want two DBs (with perhaps a quorum system) that has a vIP that will fail-over in case one system goes down (scheduled or otherwise).

Galera provides this in a not-too-complicated fashion.
> One of the obvious things you can see between the versions is the gradual trend of dumbing-down and flattening the UI,

This has been my experience for the majority of software, from native to web and mobile to desktop. Less options, less tools, less customization.

I think it's partly because software has become more mainstream over time, and instead of trying to teach people to use more complex things, developers have chosen or been forced into appealing to the lowest common denominator. Make it as simple as possible so people who aren't interested in learning how to use the tools can still get by.

I don't necessarily think this is a problem on its own, but combined with the business needs enforced by people looking to maximize profits it becomes less palatable. If we've built something that works for everyone, it's a hard sell to create more powerful options for the 10% (pulled that number out of my ass, I have no idea what the actual amount would be). Then we're all stuck with worse tools.
When I was at Mentor Graphics in the late 80s, somebody took all but 1M of the RAM out of all the managers' Macs. Nobody noticed for months.
The big missing piece of information is how they get an email address in order to attempt phishing. An iCloud-locked phone obscures the email address associated with the iCloud account. There's no way to obtain the email.

This is one of the many things that Apple is doing that are environmentally unconscionable and purely profit-motivated.

If the email address of a locked phone was available, or if Apple simply relayed a message to the owner without displaying the plain text email address, it would facilitate the return of lost iPhones and allow people who legitimately bought locked phones to contact the owner for an unlock.

But no, even with a trillion dollar market cap, Apple is so greedy that they want every single lost iPhone ground up for scrap so they can sell a new one.

They want every poor victim who bought a locked iPhone legitimately from an owner who forgot or was ignorant about iCloud to suffer and waste their money because it might cost Apple the sale of a new phone.

Apple wants every iPhone donated to a reuse program to be garbage instead, because they activate iCloud lock by default and donors never remember to deactivate it. Never!

I am heavily invested in Apple technology as an owner of almost every Apple product, current and legacy, but I have come to hate Apple so hard for this and other outrageous behaviour that I have started to move over to Samsung and other manufacturers who make products that I can root and factory reset without Apple's crap.

Apple, I hope you go broke, and the sooner the better. If you had the slightest integrity or care for the environment, you would relay a message from a locked device to the owner of record. You have become monsters.
Real Time Lambda Cost Analysis Using Honeycomb
Unless they made 7 million or more (after taxes), they will need a job again. The life expectancy of a 35 year old is 50 more years. That is effectively forever when managing money. Single digit millions will not sustain an upper middle class life style forever, even in Texas. When they need a job again, they are better to look where their network and friends are. So stay close to them.
After the terrible treatment I received as a Volkswagen TDI customer, I will never buy another VW. Period. They fraudulently sold me a car, then managed to finangle their way out of any financial restitution by putting up not only extensive hurdles for customers who wanted to opt for restitution instead of return, they then penalized customers who experienced delays due to their internal system faults by simply rejecting applications for restitution that were even a little bit out of spec.

Never. Again.
He said once in a "fireside chat" with his brother that if Amazon went all to shit and never took off, he would probably be a perfectly happy software engineer somewhere.