skysight-inc/HackerNews huggingface dataset:
This is exactly extremely common. In my company there is this constant battle about the devs having admin rights on their machines. We need admin rights to do our job. We have had dozens of meetings explaining the situation but IT can’t come up with a solution so the devs go around security because they have no alternative if they want to finish their work . Same with Dropbox. They block it but we have suppliers who use Dropbox. So the result is that people download confidential files from Dropbox on their home computers or phones and transfer them to their work machines.

In my view security shouldn’t be isolated at corporate headquarters but they should be close to the end users so they see what users need to do and help them to balance security with getting things done. They can’t just block stuff without providing alternatives or they will either hurt the business or they will be circumvented.
Story: Rejected from YC 2x, pivoted 3x, Omny Studio acquired by Triton Digital
I find most “IT security policies” that hamper developers to be mostly security theatre. No matter how many policies they put in place, since they aren’t developers, one junior developer can write:

var sql = “select * from Customer where firstname = ‘“ + firstname + “‘“;

And thwart all of your security “best practices.”

I was the lead dev at a medium size non tech company, and the hoops I had to go through to get anything done dealing with the “security team” was ridiculous and of course I didn’t have access to production to troubleshoot for awhile.

I had ultimate control of all the code that did go through the process. If I were to do something stupid or purposefully malicious, while I didn’t have access to the environment - my code did.

As far as someone mistakingly installing a “crypto wall”, if a user can download a program that doesn’t require admin access, that program has access to the user’s files. The system can be restored much easier than the user’s data.
And if you are into graphics, then it is more headaches than what one cares about.

That is how I slowly moved back from a Linux zealot during university, into Windows/MacOS land as desktop OS.
(Just FYI I don't know if I could put a source / article on this, but this information was information that Robert Hanssen allegedly leaked to the Russians [Aldrich Ames also leaked similar things and a lot of the same HUMINT sources]. I initially read this in a Robert Hanssen non-fic book a while ago)

Apparently, during the construction of the embassy in (edit: Moscow) -East Berlin-, the construction company (surely at the direction of the KGB / GRU) placed passive bugs in the concrete (they only transmit when blasted with microwaves at the right frequency and would avoid counter-intel sweeps unless active). They built the buildings almost pre-fab style, laying the concrete out then assembiling it. It's then when the bugs were placed.

The west eventually learned about this, if I recall correctly, it was from a Russian defector by the codename of Mother.

It was called Operation Top Hat (that's where i'd start googiling). The US knew the embassy in (edit: Moscow) -East Berlin- was bugged on the first 3 floors by the Russians as well as having secret hollow support columns with clandestine access to the building. The decision was made to just not use the first 3 floors of the embassy for classified discussion. The remaining floors were built by Americans and undoubtedly under FBI/OGA watch.

IIRC there was also a network of tunnels leading from the embassy in West Berlin to under the wall to listening posts.

Edit: my memory is shot apparently. It was in Moscow, not Berlin. https://www.smithsonianmag.com/history/private-tour-cias-inc... https://www.latimes.com/archives/la-xpm-1991-07-29-mn-177-st...

I think i screwed up another thing Hanssen revealed and that was a tunnel from West Berlin to East Berlin and under the Soviet embassy.
Daniel Hannan... cant trust that guy.
I've worked with people who had been working in programming jobs for some years, and didn't have any instinct for coding. Give them a detailed spec, or some detailed business logic, and they could write code to match it. But when left to their own initiative they would fail completely.

I am curious as to how they would do with fizzbuzz.
Hong Kong rejoined China under specific agreements. Those agreements were in place because the people of Hong Kong did not want to becomes just another piece of China. As such they retained high levels of legal, government and economic autonomy. Colloquially it's known as "one country, two systems."

So, yes, someone probably foresaw this issue and didn't want Hong Kong to become a puppet of China used as a giant fly swatter after re-unification.

You're probably being down voted due to the utter lack of history and context (ie: lack of basic research) you're showing which generally makes intelligent discussions pointless.

edit: A example of similar systems in the west are native reservations which enjoy varying levels of autonomy despite being part of the country they're located in.
I remember that at the time, people were saying that leave and remain were running equally distasteful and underhanded campaigns. Now they're saying that Remain was worse. I think the memory might be getting socially Orwell'd.
Craig Mazin: “Please remember that a terrible tragedy occurred there”
Sure -- if we also discipline IT when their policies fail to meet business needs, because they ultimately serve the business, not themselves.

It's really easy to secure / fix / support a system by making it nonfunctional and redefining that as success.
Learning Powerful Policies by Using Consistent Dynamics Model
Reuters Institute for the Study of Journalism Digital News Report 2019 Released
Its effect on people goes beyond those two amendments. In Roper vs. Simmons the Supreme Court ruled that the death penalty for crimes committed while a minor (under 18 years of age) is cruel and unusual punishment.

One consequence is for the brothers Tilmon and Kevin Golphin. Tilmon was 18 and Kevin was 17 when the crime occurred. At the time, both were convicted of the death penalty for the same event. However, due to the US Supreme Court ruling, Kevin later had his sentence changed to life in prison. Tilmon is still on death row.

Their situation presents a lot of moral questions about the death penalty, morality, fairness, and so on. Justice is never going to be fair, and it is always hard for a society to determine the correct balance.
Somewhat tangential: Do you think there are no spies operating in China whom are known to the current government? Why would China choose some random Westerners over known intel assets while knowing full well the case will appear so prominently on the world stage? Tourism makes up 10% of their economy.

Nations tolerate this stuff and are well aware of who is who, it's how it is. Kicking out a known operative means another unknown will replace them. Better the enemy you know and such.
There's a recent video from the CIA on the lengths they go to disguise embassy-tasked folk and how they get them out into the _world_.

https://www.youtube.com/watch?v=JASUsVY5YJ8
I agree. Personally I've had similar thoughts but instead of viewing it as a signal of their lack of talent, I viewed it.. sadly, as a signal for their lack of attention to IPFS.

From a largely outsiders perspective, it has felt like FileCoin was the thing they wanted to do. Either that, or they just don't have enough bandwidth to take on all of these projects.

Regardless, it doesn't feel to me as if IPFS has had the attention it deserves from ProtocolLabs. I love the idea of FileCoin, but I'd at least like ProtocolLabs to get one thing finished before they chase the next shiny project. Hard to imagine the "next internet" being created with such floaty attention spans.
Total Internet Shutdown in Ethiopia
Chromium and the Browser Monoculture Problem
also, it show if a candidate is actually a gung-ho code monkey or has some methods in his coding.

our fizzbuz variant asks to print numbers from 1-100, and basically everyone among the few that did the fizzbuz part right got that part wrong, mostly printing 0-99 but also had one 0-100 printed.

this doesn't immediately disqualify a candidate of course, because the are a lot of reasons behind the mistake including the interview stress, but on requisite driven project attention to details is a major benefit.
I am interviewing candidates in the Fortune 10. We get a lot of fraudsters that have found a way to lip sync Webex interviews and do all manner of silly things to get marginal people hired into roles they aren't suitable for. After 25+ interviews, and hundreds over the last nearly 20 years of my career, I can tell you in just a few minutes whether I want to work with that developer or not. I don't have to ask them to code, I just have to ask them things about our day to day work that only real developers know, for example:

If you're writing Spring Boot applications, tell me about which jars you include in your build to do that. Oh you only use Spring initializr? Okay, well, then tell me about which jars you added to your project after that initial setup. You say you use Kafka in your current role, tell me what jars allow you to set up Spring Boot Data for that. Oh, you don't use that approach? Interesting. We looked at doing that, too. And then, hopefully, you get to understand what they are doing and what they know.

Interviewing for Angular: What is your least favorite thing about working with Angular? What packages are you using in your application? Have you had trouble with your CI builds in Jenkins (or whatever they say they use?) I listen to them and I ask questions that ought to be relevant to them.

I typically start "hard" and then if I don't get anywhere, I ease back. You stated that you write REST services? Tell me, what Java library do you use for making a REST call from inside your application? Oh, okay, another team did that, I see...

And so on. It becomes very obvious whether the person is bullshitting you. I recently interviewed someone for a tech lead role who says he had been a tech lead at another company but I was astounded by not only how bad his answers were but also by how little he appeared to know about the business of coding. Either the guy was lying to use completely or he was in a real creampuff kind of lead role where you don't need to know anything about coding, anything about the architecture of the system you are responsible for, or anything useful at all, really. How do I get that job?
Not that I'm in this stuff everyday, but it's the first I've heard of it. Their own website mentions notebooks and not this on their main page: https://jupyter.org/

Edit: Nevermind. I see it is a separate project.
what do you mean?

msha.ke is shorter than milksha.ke

Or were you thinking of another domain?
In what way did they fail?

The first time I was given this problem on an interview it took me two attempts to get it right. That is, I wrote the code, ran it and it failed to do multiples of 15 properly

I went back and fixed it.

Would you count that as a failure?
Let's ignore the SaaS security issues for a second. When IT says "No" it's not like the area asking is going to go away and not try to solve their problem. Organizations are going to find ways to solve their issues and IT can either help from the beginning or help clean up the mess later. I try to take the stance of offering the right solution and a lot of the times a now solution at the same time. There is no saying "No" in the long term, either help them now or get stuck with the shadow solution the magic macro guy cobbled together that became a critical business function.
The analogy of the cliff seems nice, until you give it some thought. a) We are not actually running. What does stop and think about it actually mean? If there is a cliff and if we can stop or change direction. why not on the edge of the cliff, why way before that? b) Nobody is excepting a bridge to miraculously appear, but we might be thinking about how to cross that cliff when we get there and prepare. Humans are actually quite good at that. Will it costs us more than we were expecting when we could not yet see that 'cliff' yet. Definitely, but we were not born with foresight and have a limited time-frame of reference even if we can predict with some certainty. The later is why we are not investing everything for the time our sun will turn off its light. Call it the human condition.

As for your insistence that 'growth' cannot be sustained. I suspect you mean population growth, although nobody is actually "thinking" as in wishing for that. I for one cannot have a meaningful conversation on that. People who really belief that is our biggest problem are no longer here to have that conversation with and all others tend to mean: There are too many _other_ people. That discussion has been taking place under many different guises, none of them remotely interesting.
Yeah, it seems like the VP's choices were A) risk IT security or B) guarantee total personal career failure

Having the resources to install a CRM for someone this year is a fundamental part of any properly equipped IT department.

Can you call your IT security strong if you are dangling irresistible incentives to break the security?
I don't think it's reasonable to treat everyone you work with as your customer, but that's not what's being proposed.

IT's role is generally to support the organization. The organization is its customer. For the most part, it doesn't "work with," but it supports. In any organization, there's a complex network of who is a customer, who is a client, who is a peer, and so on.

There are places I'm not IT's customer, but they're the exception rather than the rule. If IT isn't providing a service I need, then that's a failure of IT. At the end of the day, the fallback is to purchase the same service elsewhere. If IT needs to know about that (e.g. for audits or security), it's fine to have a process for that (I report to IT, IT verifies what it wants to), but if that process becomes an unnecessary roadblock (IT doesn't want to compete for my business, rather than a core security issue), either people will circumvent that process or the business will take a hit.

The customer-provider networks vary on business. In some cases, engineering is the customer of marketing, and in some cases, the other way around. You have companies where marketing decides what to build based on customer conversations, and engineering builds it. In other cases, engineering decides what to build, and marketing sells it. And then you have all sorts of cases in between, from synergistic peer relationships to all sorts of balances where one drives but the other informs.

That doesn't change the gross organizational dysfunction being described in this article.
Inkdrop uses Electron but Quiver doesn't.
Why hidden price? The E-Mail announcement was very clear about the price increase. The space increase is just PR. But that's ok, no? They can increase prices, and that's what this is.
What Does Bert Look At? An Analysis of BERT's Attention
It's not the cost that's preventing what you mentioned. It's the ISPs which don't allow incoming traffic and have symmetric NATs all over there network. IPV6 is here and we should have gotten rid of NAT long ago but there's no incentive for corporations or ISPs so we are stuck here.
I'd also like to know how Voilà compares to Panel.

The recent Panel announcement stated that it was widget/graphing library agnostic and mentioned plotly and Altair explicitly. I have not used it myself though.
I see an assertion, but no numbers.
Domain Admin for everyone!

Trust is always contextualized. I trust my mom to watch my kids but not to remove my appendix. The purpose of technical controls and security policy is to wall off areas where employee capabilities or motivations are too uneven or complex to safely expose them without a risk of loss that's incompatible with the appetite of the business.
As pointed out in the article, fizzbuzz doesn't test "can you code at all", it tests "can you code under interview conditions, including highly unnatural ones like on a whiteboard".

On the other hand, "hiring for future potential" sounds great but is really vulnerable to personal bias since it's inherently about the unknown future. If you want to run a deterministic interview process you need to have a standard set of questions and a rubric for assessing answers, written up in advance.
I remember Al Gore saying we got 10 years in 2006.

In fact this type of rhetoric has been going on for centuries. [1]

[1] https://wattsupwiththat.com/2018/10/08/the-ever-receding-cli...
I actually interviewed a candidate once who regularly spoke at tech conferences. This person certainly had an industry track record, yet they failed spectacularly with FizzBuzz and did even worse on the questions about simple data structures. It's possible they were having a bad day, but it's equally plausible that we had encountered someone who could just talk really convincingly about things in very general terms.
I was thinking more along the lines of burying it deep under an inactive seabed. We’d have a hard time now digging things up. We aren’t even able to do simple floor mining well.
All you are writing sounds exactly like my company.
They redone a trial for a canadian and gave him the death penalty, I said that's quite the retaliation for the whole huawei thing.
I still shudder thinking about my time working as a developer on corporate IT locked down IBM leased laptops. Every time I did npm install I needed to request admin access to Windows which took 2-3 hours to action by IBM team sitting on the other side of the world in India.

One day a grey beard took pity on me and installed a Linux VM where I was admin, copied the security certs from the Windows host and I could access all corporate resources at my leisure. Never logged a single IT Helpdesk ticket after that.
5 that are innocent of everything and always were

10000 that are guilty of something else (example: they were not the shooter, but they helped)

Compare with deaths by lightening, car crash, bath tub...
> it seems like they should be able spare a probe for Venus.

Venus is hard unless you want to just stay in orbit. Surface temperature that's steady right around 872F (tin melts at 449.4F, lead at 621F, zinc at 787F) and a surface pressure that is equivalent to being under 3000 feet of water.

Sure, something in orbit over Venus could do some mapping and stuff but meh, Mars could have harbored life like we find on Earth now at some point in its past, we can hang out for months or years taking photos from orbit and the ground, on the ground missions can last months or years instead of hours (Venera 12 sent data back for 110 minutes, it could have for longer but was out of range of its orbiter after 110 mimutes) or days that evne modern equipment would be able to survive before you started having multiple failures. Best case you'd have to land something akin to a submarine with expendable coolant and buy some time as you consumed coolant but realistically you aren't going to get more than a couple of days if that on the surface.

Something like a balloon is just as likely to fail as it is to succeed given we have no way to realistically test one before sending it and even then, it's still going to collect very limited amount of data, not much more than the Russians already collected via the various Venera missions.
What's new in Core ML 3 and why it matters for iOS devs
That is a cogent point but I fail to see how it benefits from the snarky tone.
Per update from the author " Thanks for letting me know Have taken the site down until this is fixed" . Basically, the author is fixing an issue wherein resumes were serially numbered and anyone could potentially see anyone else's resumes.
If you see a 502 error, this might be the reason :-)
I don’t think that’s true in the USA - the idea that the application of the punishment rather than the punishment itself can make it cruel and unusual is the essence of the famous Furman v Georgia decision of the US Supreme Court in 1971 which led to a de facto moratorium on the death penalty until the late 1970s. What’s more eg in Coker v Georgia in 1977 the US Supreme Court ruled that rape of an adult woman was insufficient to qualify for the death penalty.
Perhaps you can, perhaps you can't. Why comment if you haven't further information to add?
Well last time I checked the Linux kernel was C and not C++, so that might explain why ;-).

I don't know anything about kernel programming, but I assume that there's some very, very strict conventions about how the various parts of the Linux kernel interact, and nothing gets accepted for merging unless you follow them. This would be similar to imposing scope/visibility constraints at the language level, but considering C doesn't have anything for that, an extremely strict development process is the best you can do.
> If you don’t think this is happening in your organization, think again

That story probably never happened anyway. But the essence of the article is very true. I never have been in a corp where IT enforces 100% conformity anyway (apart from medical industry).

Sure, there are actual successful attacks, but that is mostly not the fault of unsanctioned programs.

But there are systems where people should not just start to use any system, because information gets lost on the way. That would include CRM and ERP in my opinion. That a company can exist without a CRM is questionable to begin with and solutions are plentiful. If they did not have anything like that...

If the story were true, it would not be the fault of Chief Input/Output.
The problem with contracting is that you end up interviewing even more, not less!
Though I somewhat sympathize with this view, there can be legitimate reasons for depublication. The Internet is deep and vast.

That said, removal may entail simply removing public access, rather than deleting archived content:

The Internet Archive may, in appropriate circumstances and at its discretion, remove certain content or disable access to content that appears to infringe the copyright or other intellectual property rights of others.

https://help.archive.org/hc/en-us/articles/360004716091-Wayb...
There death penalty isn't about deterrent: bad people rarely consider punishment when making the decision to commit a crime.

The death penalty exists so the decent don't have to suffer the truly evil to live.

This is why arguments weighing pros and cons fall on deaf ears.
It sounds tempting, but then again, what would you tell your children? That if they want to become like you they have to take steroids too? Or hope for some epigenetic effect?
I think part of the problem here is that 1984 has so utterly permeated our cultural milieu that it's hard to even conceptually surveillance independently of totalitarianism. The book instantly inextricably links them in our minds.
std::swap<>? CMPXCHG? LDREX/STREX?

The XOR trick is cute but you shouldn't use it on anything larger or more modern than a Cortex-M0. Just put it through a temporary variable and let register renaming deal with it.

(Perhaps a more interesting question would be a multi-threaded examination of swapping two numbers...)
> yet be totally OK with locking people up for the rest of their lives

There are countries where prisons are not exploitative hellholes, and locking people up for life is not a form of punishment but an acknowledgement that society has failed them, so there is no point in making the prisoner's incarceration as unpleasant as possible.

If it's "cruel and unusual", it's your society that makes it cruel and unusual. It doesn't have to be that way.
If I ever saw the xor trick in a workplace environment I'd flip out. Python's tuple unpacking is fair enough, but whatever happened to good old

tmp = a, a = b, b = tmp?