skysight-inc/HackerNews huggingface dataset:
Oh great, a private company promising to store my home address and other sensitive personal details in a database. That surely won't get breached at all, ever, in any way, due to terrible malfeasance of even the most basic security principles.

Oh, and combined with lobbying cities to force adoption?

Realistically, how do we prevent every blockhead with an unsecured database from hoovering up personal information? Can we start instituting major fines and the requirement to carry liability insurance or something?
I do enterprise Java and .NET consulting, in what concerns Web frontends, if we use a SPA framework, it is most likely Angular.

If we are using just a couple of WebComponents with traditional server side rendering, then Vue.
I have off grid pv powered telecom systems that for the last 18 months have averaged seven nines uptime, but they also cost a lot more than a small home built setup. Typical setup is sixteen 360W 72 cell panels on a ground mount, big Schneider charge controller, lots of battery.
Because new people are still being crated and they live longer, it means that saturation level is higher.

To me the title sounds like we were in "children of men" or "handmaid's tale" but the supply of people is the same. Amount kids is the same because they "die" when they become adults. So simple math tells us there's more adults.

It's easy to imagine as a stream of ants going out of a wall crack. they walk straight and they die. If you take 1st few inches or cm, those are children, they enter and leave this area at a constant pace so the count is the same. Now you count ants on the rest of the path. How there can you make more ants there? They gotta die later.

You can make them die statistically, cut path into sections and see how total or each section count change.
> I don't have a degree so I scrape by at 32k a year

My employer is hiring people straight out of bootcamps for more than that and we are a low cost-of-living area. Maybe the lack of a degree isn't your problem. Maybe you need a change of scenery?

> while I watch people on /r/leanfire /r/financialindependence

Comparing yourself to others can be painful.
They claimed that no training was required to fly this plane (a requirement of it being able to retain the 737 type rating). If it does in fact require additional training then that's very bad for their narrative.
Works for me too windows 10 and chrome beta
Observing private homes can help select your targets. By observing the inside of the home you may learn if the owner has access to secrets (national security or commercial), what kind and what level. From where you can switch to traditional methods. My 2c.
Possibly related to the fact that reader mode also removes ads.
It’s fine to have some barrier, but the income level of your parents is probably the most unreasonable one.

So let’s have free college and figure out some other barrier, please.
APR 1.7.0 Released
People used to say "Five Eyes" is just a conspiracy theory. And then Snowden showed up.
The top frauds of 2018
>> I of course refused to give any kind of statement under video

Realize too that a great many officers now don body cameras. If you aren't willing to say it on video, do not say it. No matter what they tell you, police officers are not capable of private conversations. Every conversation with a cop is a conversation between a person and a government. It might be recorded. The cop can take notes. They cop can get back to their car and relate the conversation to a camera, creating very powerful evidence. There is no concept of privacy when talking to police.
That's kind of outweighed by the more relevant fact that the people who had the time and inclination to create the software preferred one set of tools, and the preferences of some after-the-fact passerby would obviously not factor into this kind of decision.
And also what Microsoft has been doing since a few years ago on Windows with Hyper-V isolation.
+1 for reader mode. Or use Lynx (I'm not even joking).
An analytics phenomenon reveals his secret using Champions League's 2019 data
Up and Running with Gatsby #3: Gatsby's Default Files and Folders [video]
Something I've wondered- why hasn't Lenovo received the same flack that DJI and Huawei received?
How long has this been around? I had to recently build a React app for Salesforce and I had to set it up as something called a Lightning Container Component, which was pretty much a glorified iframe.
The issue is an unprivileged container fooling the host, not the host intentionally escalating to root.
Oh man. I've been hearing people complain for years that there was "suspicious behavior" before a lot of the school shootings. I was always nervous about the kind of precedent that set. Maybe just a bad day? Dog died? Suspicious. If some one calls and reports you, police can come "check on you" and monitor you (cause no one would ever abuse that).

When people say "nanny state", this is possibly a more literal interpretation than I ever hoped to see. "You feeling all right? Maybe take a time out and calm down".

I guess my annoyance is based on the same issues I have with facial recognition, fingerprinting, or any "databases": if I have committed no crime, police should not have my information, know where I am, or maintain information on me.
Enterprise/high-touch/on-site sales assumes you go and see everyone involved in the decision, understand every element of their business process and design a solution to fit that, obviously using a massive pre-sales budget to do so. And yes, you probably do end up exchanging 75 emails as well as an awful lot more minutes of time, but if the sale fails after that you know why.

Lower-cost B2B SaaS means the solution already exists, and you've got to understand how/if their business process will adapt well enough to it to make it worth the money to them based on a lot less information. You'll miss a lot more, and get 'ghosted' a lot more as a result. But you do get to speak to a lot more prospective buyers.
Absolutely correct. I've got a cross-compile toolchain set up right now that needs Debian (Ubuntu won't do because of different glibc versions in the cross-compile toolchains). I used debootstrap to make a basic Debian Stretch filesystem, chroot into that, and apt-get the remaining pieces and run the build. Works like a charm, no Docker required. And, unlike containers, it's intentionally persistent so future builds go very quickly.
Close faster. Don't do any of this "custom code or helped with integration" bullshit unless they're paying you for it. Develop intuition.

That's about all you can do. 75 emails is... A lot without making a sale. Fwiw I'll usually get 1-3 emails asking what client wants, hopefully a phone call, I write a proposal and send it over, I wait a few days and follow up asking what they think. Maybe the want to negotiate terms or whatever, that's 1-3 more emails and maybe another call. All in all <10 emails, 2 calls max, and I either have a sale or I say thanks and feel free to contact me in the future if they're interested in this or other work.

I never work for free without getting paid for something first. I won't do coding tests, I won't write code, I won't figure out a problem. I will give them expert advice if I can and if it will help them see the value of my work. However say I've had a client pay for a job before and they have a small ask - I'll probably do it for free if it's 2 or less hours one time.

And intuition - I mean that's hard but you gotta be able to read people. Know when they're kicking tires, know when they're in over their head or out of their element, know when they don't have the Auth to get a request filled.
I'm confused, are you saying CS degrees are not preparing students properly? Are there lots of people getting CS degrees who can't find a job? My understanding was the opposite: there are many opportunities to find a job despite not having a degree, but that the general topics covered during a degree are still pretty useful (data structures, algorithms, operating systems, distributed systems, statistics, programming language paradigms, networking, machine learning, ...).
The key difference is that Japan was defeated utterly; the US was never even close. The last fighting we did on our home soil was the Civil War; discounting that, 1812.

In warfare more than almost anything else, might matters.
> we now know where the loyalty of HN moderators lie

Loyal to consistently implementing the rule of "HN submission title should match the original page title"?
Molecule-sized motors that drill through the surface of cancer cells
How to Manage a Team of 43 Developers in Different Time Zones
Ultimately, it is up to the bar to decide whether or not they want to use this system. Their bar, their rules.

I show my ID to bouncers, in my hand, to avoid the common practice these days of putting it into a scanner and logging my data. If that’s not good enough for them, I go somewhere else.
Faster based on what benchmark?
The North Face used Wikipedia to climb to the top of Google search results
Ease of refactoring is the big one, especially with an IDE since you'll catch a lot of problems as you write.

However, any decent IDE will work with type hinting (putting types in the comments, basically), and as long as you're fastidious about using them, you can realize those same benefits.
Ruby is strongly typed, just not statically typed (by default). There's a lot less ambiguity in Ruby's types compared to, say, JS or PHP. But yes, optional type checking would be a nice thing indeed.
Then why pay the customer to do it too?
As a counterpoint, I love ActiveRecord. It's a Swiss Army knife that's got pretty much everything you need, you just need to find the right tool and use it.

What ActiveRecord isn't is discoverable. Which is to an extent understandable. Its domain is literally anything you could express in SQL. But you really can do anything you want with it, you just have to find the right abstraction. A tool I use a lot is to .to_sql which will show you the compiled SQL fragment in a debugging session. You can compose with bare SQL fragments and ActiveRecord even includes an intermediate library so that you can work at the relational algebra level if you want.

It's not that ActiveRecord forces you to work a certain way. It just doesn't advertise all its features.
I'm currently contracting for a rather large news outlet and I had a talk with the VP of Engineering about why every media outlet is like this and he shed some light on me.

The print edition is losing money for them and business decided to start giving them away for free to increase brand awareness.

The paywalled stuff is making them modest revenue, definitely not enough to make a living for now but they're still experimenting with the model.

The ads and user tracking is where the real money is. The bidding ad network stuff is okayish, but it seems the big money is in the sponsored articles and in skins (custom stylesheet designed for a specific brand). The former two seem to make even seven digit figures per contract for them.

Looking at the backlog and their style of organizing work you can obviously tell that the users actually visiting the site are treated as second hand citizens while their partners are kings.

This leads me to the conclusion that this is what people might not really want, but it's what they got used to. Finding a sustainable high quality news media business model is an interesting problem worthy of a startup I'd say.
I suppose they will be in for a bit of a shock when they try to make their way into the workforce to find out that the majority of enterprise-land is using Java or .Net and a bit of python mixed in.
“As God is my witness, I thought turkeys could fly.”
Isn't it a little weird to have straight-up marketing as an HN article?
I think I can provide some context. When I was working as engineer in an R&D group for a large corporation, I typically have to email a lot of vendors and buy a sample to test it out for solving some internal. Ghosting usually happens when:

1. Your product doesn't meet the spec and/or doesn't work as advertised

2. Your product is good but I wasn't able to get the budget cleared to actually move forward.

3. There is budget now but stuck internally in political/procurement hell after my handover to the project manager or procurement person.

4. All good, but project cancelled.

TLDR - Moby Dick theory of enterprise procurement. [1]

I try my best to let the salesperson know whats up but after the handover I lose contact.

[1] https://pmarchive.com/guide_to_startups_part5.html
I can assure you that syntax highlighting really was a thing before PHP and Apache was a thing. Maybe not on anything that came with Notepad, though.
Guys, JIRA cloud is terribly slooow...
Same... not interested because of that.
Does "patron" mean boss or regular clients ?
Surfing the web via google results has become a pain, and I try to avoid it as much as possible now.
In those countries there is a big divide between the liberal elite, which tends to be more secular, and everyone else. But any “coercion” caused by classist attitudes pales to the coercion on the other side. To put that article in context for our American readers: it’s like someone writing an article about how someone from rural Georgia went to Atlanta and someone mocked their accent. Except it’s written against the backdrop of the state passing the heartbeat abortion law.
==For social security the insolvency date is 2025 according to our own governments accounting. ==

Without changes, the Social Security system will pay out 79% of benefits starting in 2034 [1]. The concept that there will be no money paid out is oft-repeated, but mistaken.

Certainly a 21% cut is very significant, but there will still be funds. Obviously, the sooner we make small changes, the better funded it will be long-term. Things like changing the inflation index, removing the income cap or adjusting the full-retirement date could fill the gap entirely.

[1] https://www.ssa.gov/policy/trust-funds-summary.html
Isn't it the same with the US government? They can request info from any US company using the well known NSA letters.

It looks like the US technology is a national security risk for any other sovereign nation.
Lack of foresight is a collective trait of the human condition. It'd be interesting to see who the protestors of said outsourcing in the 80s were, and see what they say now. How did they foresee it in the first place? Is the current outcome better or worse than they thought it'd be? What's their current prediction for the state of things in another 40 years? A good article topic for the journalists out there.
I can't read TFA because it's paywalled, so I don't know if it talks about the information saved, but they don't need your home address, ID number and issuer is all they need to store as far as PII goes and you don't even have to store those directly - you can encrypt them like a password.
I got terribly sick and made a full recovery. Here’s what I learned
You're unlikely to learn anything, statistically conclusive, from 10k views -- unless the test is like 100% better than the control, which is very rare in testing.
Comprehensive Analysis of a Remote Desktop Services Vulnerability
So student B tried to live beyond his means, and paid for it in lost opportunities (from the debt). Bottom line is that taking on high debt to get educated is only worth it if the expected wages from said degree is going to be high - like a medical/law degree. Paying such high debt for a low paying job (presumably, accounting isn't a high paying job) isn't worth it.
This practice can only be stopped if people stop attending any bar that uses this company's technology...
No allies doubt the Chinese engage in hacking and other forms of digital espionage. Do other nations need a white paper detailing our weapons systems to believe in our capability? The world doesn’t owe you proof of anything and government intelligence agencies know more than you. Sorry but nobody is going to give you a white paper.
We tried our best to explain the value of Volument on the features page:

https://volument.com/features/

The solution page just explains the technical details. We mostly use abstract images when explaining things. The demo works like the product works.

Thank you for the feedback! Definitely valuable and something to take insights from.
Implementing Convolutional Neural Net Backprop from Scratch in Python
But why optimize for how many dollars something costs? The primary reason shipping goods like iPhones across the ocean appears cost efficient is due to exploiting cheap labor. We could lower the minimum wage, eliminate worker protections, or institute slavery to drive down costs, too. It’s not moral because it happens somewhere else.

And cargo ships are large sources of pollution and have substantial tax privileges; the costs are externalized.

Tangentially, if you read the “There’s Too Much Stuff” article that was recently on the front page, there’s plenty of cheap junk I’d love to see priced out of existence.

Anyway, the deeper issues we have are not likely to be solved by global trade and cheaper goods. There are other factors which I’d argue are more important.
Let's see this strategy has been tried for about 7 years now..is it working yet? Just new device oem trying it nothing more rinse repeat
Apple should make more iPad apps for the Mac
The updates for the desktop app happen automatically. I would like the option turn auto update off.
Have we not been optimising for power usage for the last ten years at least? It's really important for tablets, phones and laptops.
Vue.js seems to be particularly popular with the Ruby/Rails and PHP/Laravel crowd. I'm guessing it has to do with the SSR integration with the framework's views.
I'm sure this has been posted here multiple times.
In the US, "patron" of a public establishment is a customer.
That's not a viable explanation, as "A response to feedback on the proposed changes in Manifest V3" is not the page title. At best it's a modified version of the first sentence.

Furthermore it's a rule which is rarely followed. Look at most of the title edits: more edits are deviating the submission titles away from the original page title.

https://hackernewstitles.netlify.com/

Of course it's a moot point now. This article's new title has caused it to drop off the home page and it's now effectively dead.
I will now invent Basiscoin, which, as part of its cryptographic hash program, encodes the cost basis at which it was last sold in each transaction, and generates 1099 forms automatically. Never again will users have to manually calculate capital gains!
Microsoft did such a write up about a laptop.
The trade war won't fix issues with OTA as a vulnerability. It is useful for the US to point it out to tip things in their favor so it gets a lot of coverage.

I also agree with you that the solution to OTA updates is tight control, but that isn't realistic either. They are talking about drones in the article. These are devices bought and run by companies that build infrastructure in the US but are not directly related to the government. They want OTA because it has legitimate benefits in worker time and cost savings and helps keep their "fleet" running with all the latest features.

Now, an example attack might be an OTA update for the drone controller to shunt mapping data back to home base in China to give them high quality military maps of infrastructure for attack planning. The attack might be unrealistic, but the spying threat isn't. Alternatively, if car autopilot takes off, imagine the economic damage an OTA attack could do that causes 30% of the traffic in the US to just stop. To prevent this sort of attack, you would have to review ALL code coming out of China since you can't directly hold them responsible after the fact when they are out of your sovereign jurisdiction. The kind of dedicated and educated workforce required to code check all firmware/software updates for such huge classes of consumer products is just not going to happen and it can only get worse.

Intel ME is an abomination, but it's also well known and gets a lot of coverage. It's just not in the mainstream news right this minute.
Says the country whose NSA scoops up on every piece of data and spies on everyone, including their own citizens.
It depends. For some contractor jobs, they need high level engineers short term and don't want to deal with the normal Google hiring process, which is expensive, difficult, and time consuming for many current employees (most technical interviews at Google are carried out by a random assortment of other engineers). In those cases, they can and will often pay equal or higher salaries to the contractor.

In my case, the equivalent job at Google definitely carried more responsibilities, and they were paid more. However, I believe Google paid my consulting company more than the FTE salary for each of us, with my company taking their cut off the top (at least, that's what I heard).

In short, it's complicated
Apparently even user namespaces can't be trusted for secure isolation, so much so that Arch Linux even has them disabled by default[1]. That said, it's possible that security improved since then, and I don't know when the most recent user namespace vulnerability was found.

[1] https://lists.archlinux.org/pipermail/arch-general/2017-Febr...
Check out r/cscareerquestions over on Reddit to get a taste of how hard it is to find a job for some CS grads that didn't get any practical programming experience.

If you are self taught and know the popular stacks, it's often easier to get a job than one based on theory. Your typical software as a service CRUD app maker doesn't care if you can "invert a binary tree". Most companies outside of large tech companies don't care at all about the list of "general topics" that you outlined - especially for entry level positions.
A way to do atomic writes
I suppose I could see myself picking Rails if 1) I need particular functionality that is well-served through a gem that doesn't have an equivalent Elixir package, or 2) I need others to work with me and there's a pool of Rails devs available.

Other than that I'd also go for Phoenix/Elixir, especially with LiveView being a thing now.
> you have to train and will leave right when they become useful?

so pay them more as they become useful. They leave because now that their skills are up, the junior salary is no longer commensurate with their skill level.

I bet if they were paid the same as if they jumped jobs, they would not leave.
Indeed, Wikipedia dates it back as far as 1982 (which is further back than I would have guessed.)
A church is not a child care facility. It has priests and other people that get in touch with tons of people, including but not exclusive to children.

What they do or not do is not up to the church, is up to them. The catholic church didn't tell them to abuse someone. Did a local catholic church help people wanted by the law or convicts escape the law (and also extradition)?

Now, if the church took someone accused as a child abuser (that somehow the law neglected to convict) and moved them in another country in a church position they still work with children, then sure, we can condemn the church authorities.

In the eyes of the church, even flawed people that did abuse can be accepted and transferred to positions where they cannot do such harm (e.g. in a monastery). The church was created to welcome flawed people and to help them, not to ostracize and condemn them. It's role is not even to hand them to the law, if the law doesn't ask for them (which is also why something confessed during catholic confession, even a murder, is not supposed to be revealed).

(I'm not Catholic btw, just reasoning based on their principles).