skysight-inc/HackerNews huggingface dataset:
I had all three of the things you described. But let me add a new one to the list that was incredibly frustrating:

4. Instead of integration tests (or static typing), all systems made by a couple programmers only had unit tests. The call boundary was NEVER tested, and everything relied on RSpec's "allow(obj).to receive" mocking.

So, not only it was very difficult to refactor (because I had to change two or more different sets of tests + mocks), the tests for dependencies didn't fail when I changed function signatures, or even if I removed chunks of code randomly. I had to find which test to change by myself.

In the end we had tests and we had coverage, but they didn't test anything properly and made maintenance a major pain in the ass.
My point is that hiring humans is wrong for Google.

> So, what if a person does not sympathize with Google or care about them making more money?

I have no advice for them. They should do what makes them happy. My point is that Google does not sympathize with them (mostly because it is not a person) and makes decisions based on how the people who control it will benefit.
At this point, I assume the point of the process isn't to ferret out liars, but to ferret out people who were trained to pass a polygraph under stress, on the theory that such people are more likely to be spies. It's the only thing that makes sense given the scientific unreliability, the random unfounded accusations by interviewers and whatnot.

But maybe I'm being to generous.
Is it common to be able to borrow money directly from a state like this?
Well, if it was a misconfigured WAF (which usually is just a reverse proxy with mod_proxy) to an application then you would not need to gain access to any Tokens, etc. all you would need to do is gain access to the server. Or be able to use that WAF as a proxy to gain access to other http bound resources?

From there any IAM role access the underlying server had, you would now have as well. And that would work with any sort of access (don't need root, etc.)
People are taking their own sweet time to realize adding like, view, click, upvote, downvote, favs, forks, downloads, follower, subscriber etc etc counts to everything amplifies everything. Good and Bad.

These are control variables in feedback loops.

And therefore many of these runaway feedback based processes can be tweeked.
By the sounds of it, the s3 bucket was internally accessible only. But attacker connected through the corp's Web Application Firewall after grabbing the credentials to login to the S3 bucket.
> Do you have a cite for that?

I have first hand experience that this does indeed happen...

Drug dealers have a desire to expand their customer base just as much as any other small business but have very limited ways in which to do so.
Raven Paradox
College Financial-Aid Loophole: Wealthy Parents Transfer Guardianship of Teens
Sadly, 'Fuck you and the horse you rode in on' would be an inappropriate response.
Hi. I'm unsure about submitting my latest project to HN (old school idea in print format - not software or directly related to software). What's the etiquette here, please?
I think you meant "fusion". Fission is sooo 20th century.
Lyft is in the same boat--or arguably worse. I fully expect these services will see significant price increases. One of the consequences will be that both the driver and passenger sides of the network will thin out, which probably means they won't work as well in less-dense areas.
The whole issue here is in thinking about pricing carbon as a "fine".

It represents fixing the economic incentives.

If a beef burger is 10x more environmentally damaging than a vegetable one, it should cost approximately ten times more.

As I've posted below - this is child-level logic. It's time for us to sort our shit out. There really is no option.

We need stable homes, nutrition, and a bit of entertainment. We don't need no-holds-barred competition to literally use as much of everything as we possibly can; and we _certainly_ don't need that to be apportioned essentially randomly - the more damaging activities should cost more.

If it bothers you to be confronted by that - if your first thoughts are "economic damage" and the fact your life might slightly change - I'm sorry for you. Because you really are fucked, you're coming down with all of us.
Vos is scum and has a history of behavior to back it up
Why would any talented engineer work with this guy?
Sad bullying story that will make you cry
Why are you assuming that 80% batteries are discarded?
It's a dependency for our main visual library, PivotalUI, which is meant to give a uniform brand across all our products. When you get a flagship site falling behind the products that customers have installed, it looks dumb.

But more to the point: it slowed development. I could deal with a bit of visual glitchiness, but my job as an engineer is to create software to solve problems. Piling hacks on top of hacks doesn't do that and it's shitty to the next engineer who joins the team.
> I don't know how to get around the business physics of this.

It seems like the best way to get around the business physics is to switch from a business model to a federation model. Something like Mastodon where hosting costs are distributed and the algorithm can be tweaked for exposure rather than dollars earned for the hosting company. Of course there you have a chicken and egg networking problem and an ease of use problem.
This theory was one of the most interesting ideas in Sapiens, take a look at a model of what other great apes look like, if so many types of dog can interbreed why wouldn't these great apes?
Medieval Christian cemeteries often overfilled, especially if the cemetery was thought especially holy. Demand was so high in some places graves were regularly reused: the bones were exhumed and stacked wherever they would fit.

For a spectacular answer to the "What do we do with all these bones?" question, check out the ossuary at Sedlec in the Czech republic:

https://en.wikipedia.org/wiki/Sedlec_Ossuary?wprov=sfla1
Sometimes the best way to handle "bad" traffic is not to reject/block it, but to respond to it incredibly slowly, or divert to an uninteresting flaky phantom server, or reject every login attempt (even with correct credentials) to divert attacker's attention.

The ingress was okay, but the egress flow was very very bad!
All true, but I still disagree that the Model 3 is affordable. It's still in the luxury space in terms of pricing.
It's weird that someone as tied to Google Maps would be looking into a privacy-oriented phone like Librem 5.

AFAIK, Google Maps will record your location/speed even while you are not using it (to get their traffic information), it will record any nearby wifi APs to help populate their aGPS database (so your private APs will get recorded along with their locations on Google's servers), and who knows what else.

Why would you want a Librem 5?
Why can't we reverse your argument and say that "equality of rights is a noble cause"? Sure, we would of course prefer that, but barring that, I would absolutely prefer well-reasoned compromises for disabilities than nihilistic idealism.
Do they need to notify those of us not located in California?
I had to do some research to understand the downvotes. For anyone else, the Weston A. Price Foundation and Price's writing has a fair bit of criticism for its weak science (see Quackwatch [1], Science Based Medicine [2], Rational Wiki [3] among others).

It's hard to navigate their website, but it seems they're, among other things, pro-homeopathy, critical of vaccines, anti-soy, pro 'natural' foods, and advocate some controversial and potentially dangerous diets.

[1] https://www.quackwatch.org/01QuackeryRelatedTopics/holisticd...
[2] https://sciencebasedmedicine.org/sbm-weston-prices-appalling...
[3] https://rationalwiki.org/wiki/Weston_A._Price_Foundation
Why not? They provide the most funding for it through their taxes.
This doesn't surprise me per say. The number is nevertheless smaller than the number of engineers they hire, and they only had a handful major services to offer.
Do you think that any ancestors of Homo sapiens are extinct?
AI’s third wave: Less science fiction, more focus on customer problems
There's nothing in the article to corroborate the most scandalous accusation here: Epstein, an American born in Brooklyn, was a secret Israeli agent operating a honey-trap in a plush Manhattan apartment.
> Anything else is just stakeholder over management and or inexperienced teams.

At Pivotal we see the PM as part of the balanced team. The PM, just like designers and engineers, will have the daily standup, weekly retros and planning meeting together. The goal of the standup is to share what of interest happened yesterday, if help or opinions are needed and discuss pairs for the day. Sometimes discussions start about topics mentioned in the article where it's crucial to have the PM there.

Standup should usually be around five minutes. That's the reason it's not a sit-down meeting.
> The resulting big ball of mud (and subsequent performance problems of a long pipeline of relations) could be compiled away, resulting in a single artifact.

So..something like `git rebase` or `git merge` for both code and data. That actually sounds cool, but certainly not trivial. Part of why I've always liked git, despite its warts, is that it's a robust tool that has never crashed on me, probably due to the immense amount of man-hours that have gone into hardening it to be usable for the kernel. According to my Google eng friends, there's even crazier levels of VCS sophistication going on to make the Google monorepo work. How hard would it be to make something like that for data? Call me crazy, but I've found it generally harder or maybe just _higher risk_ to reason about data, because incorrect assumptions result in bad things happening -- heisenbugs or zombie bugs.

Given that we're talking about data migrations...what happens when you have a merge conflict? That's the hard part. Fuzz testing and writing tests based on the final state of the system? Also hard, but will be hard no matter what because making sure the end state doesn't contain undesired corner side effects could end up being a combinatoric explosion that results in data corruption and an alarmed user (or more).

> "just re-project your domain models based on the new flow of events"

just re-project your domain models? Sounds like a migration to me.

I get a little annoyed by abstract models in the subject article because they 1) re-imagine things that already exist and 2) focus on making the easy things easier and not on making the hard things possible.

For example, I even see this in your reasoning, which I don't agree with. Time is already a first class concept in most software development models. If you're using an imperative programming language, sequence is the default. Likewise for most RDBMS migration frameworks I've used.

It's the data migration that's the problem. It's applying temporal evolution to data in a structured, testable way that scales and doesn't decay which is challenging. I've been thinking about writing a data migration framework for a while -- something like `alembic` but expressly for migrating data and testing that the migrated data is sane. Thing is, that's hard, and it gets harder the larger your data gets in volume and heterogeneity. At a certain problem, it's 100% a question of how well your understand your data, your UX, your business logic, and the history of your data. In fact, the majority of places I've worked at suffer from the situation where an old, inactive customer has bad data that no one bothers to fix because it's a poor usage of resources for the business.

New ideas of programming "styles" or "models" that don't emerge from these pains -- are they going to solve them? Maybe. But this one doesn't seem to do so.
It's satire. Dissing math as irrelevant should have been your first tip off.
The ultimate vanitas.
I think you are being a little uncharitable towards the author here. He was just pointing to the "Silicon Valley" crowd as an example of the highly visible/vocal proponents of "Technology will solve Everything" dogma without necessary foresight. The caveat is that Technology may solve your immediate problem but also create far more severe ones in the process. And he is right. The whole of Human Civilization is rife with such examples. At this stage in our "progress" we are sufficiently knowledgeable enough that we should always focus on long-term whole systems-view of everything.
Attacker had access to the account. It is in the complaint posted by user iancarroll.
Not exactly true. If you drive full-time for Lyft or Uber you MUST change the oil of your car EVERY MONTH. Leased Hyundai's don't see that kind of stress until a year goes by so the Lyft/Uber car is getting destroyed at least 4x more quickly.
I've had AWS support tell me exactly what processes are running on my instance. They do seem to have some visibility beyond metadata.
The whole point of moving to a cloud provider it allow the quick setup and deployment of new projects/products as well as trying to limit your costs. With that sort of open-ended system, unless everyone is always thinking security first and okay with the inevitable slow downs associated with a highly locked down system then you will more than likely always run the risk of this sort of situation.
Also do you like prefixes? Asking for a friend.

If you like x86 at all then prefixes are not a good thing but indeed a great thing. Prefixes are what allowed AMD to completely destroy Intel's Itanium. They simply took x86 and reused the REX prefix to access 16 more registers. Yeah, the committed a few other architectural atrocities before the god of expediency, but they won and Intel had to crawl back and beg forgiveness in the x86 space that they owned.
OK, all the time is a bit extreme but pair programming is actually a lot of fun and a great way to pass on knowledge when done right.
> I took down the mailbox at my house

Serious question... is this legal?
Wow I guess I'm old now. But people cared about Internet privacy well into the 2000s. To the unreasonable extreme in fact, but it was still better than the lousy Internet we have now.

Putting your personal information online was unthinkable for most until Myspace gained popularity. Then once Facebook took hold, no one seemed to care about online privacy anymore.

The change in this perception was drastic and precipitous. Though it was younger folks who started it, and the older generations followed out of ignorance.
In my experience anything more than 10 minutes is a smell. It typically means you've got stories that are too big, have unaired problems, that you dive into implementation instead of just syncing briefly, or the team has too many people.
How much diversity can one realistically expect from AI Portraits? It was trained on 15th century European paintings.
> surely it follows that there is no point to the sanctions?

Not at all. Either the sanctions pressure Iran into changing their policies, or the sanctions restrict their ability or enact those policies.

Of course the US is pressuring Iran to act according to the Interests of the US. But if you want to criticize that, you’d have to look at what they are in this situation.

* Protecting allies in the region (which Iran openly and repeatedly vows to wipe of the map)

* Preventing nuclear proliferation

* Doing so while avoiding war

You have to try quite hard to apply the USA-is-just-a-bully trope to this situation.
That's the power of advertising!

You can do it with anything. Spend enough on advertising, and you can get people to hand over $100+ for a pair of sunglasses that cost $5.85 to manufacture.

Maybe you are immune, sitting up there on your elevated equus.
Gary Martin, Creator of TradeWars 2002
Judging by all the negative responses do most people see themselves as some sort of vigilante programmer in their company?

I'm not a PM but I sympathize with how difficult it is to discern where a project is up to when it comes to software, especially when you can't come up with short enough milestones...
Is it really common for software engineers to work under these conditions? As an electrical Engineers I have plenty of deadlines and do plenty of work with PMs, but none of this daily standup and thankfully Jira was recently dropped as it was considered more trouble than it is worth (management just wanted to know the big things going on and not all things). Of course it's better than plenty of other jobs, but the constant treatment of employees like they're on an assembly line sounds rough. I know software development is tough and respect those that do it. I have critical time sensitive tasks and I'm expected to have them completed on time. My manager might check in once a month on a year long 1/4 million dollar project among all the other work I do. I know that's peanuts compared to a large software project, but still.
I'm a PM and this does not resonate with me. If you're getting status twice a day... I think something is very wrong.

The brutal truth of software development is that the quality of your output is going to vary with the quality of the engineers you work with. Good engineers don't need daily standups to build great products, and bad engineers aren't going to be helped by doing twice-daily checkins.
They didn't support any MMU at all. People would add one as a separate chip, right between the CPU and the RAM, but this wasn't supported. The CPU was unaware of it. There was no way for the MMU to tell the CPU to take a recoverable fault.

Sun solved this problem in an expensive way. The MMU would make the CPU wait while a second 68000 was used to process the page fault.
Ask HN: How does your company run QA?
What processes or products does your company use to run QA. Are there any pain points that you wish could be addressed with the help of a SaaS?
Do you still have access to the Yandex account or the email address used to register it? Are there any future bills expected from them? These are things that will make it hard to identify you and/or contact you in the future.
Amazon won't spin off AWS. That's too bad for AWS
It's not so much about cost but rather simplicity of manufacturing, ease of use, robustness, and not signalling that they want to be clever for the sake of it.

The door handles are a symptom of the design ego of Tesla. It's the same thing with the elimination of nearly all physical buttons. It's the right instinct but they've taken it too far.
I think lots of people have just had genuinely shitty experiences where they were slowed down in their work by interruptions or made to feel that they were not trusted as professionals.

They see this and it fits a pattern and so they are fairly skeptical.
Until recently, I shared your sentiment about product managers, but recent experience has refined my point of view.

IMO a good product manager does not focus on trying to understand _why_ things are hard, but rather _what_ things are hard.

With this understanding they can either 1) work to change scope/requirements so that the bigggest user pain points are solved ASAP or 2) accept that more time than anticipated is required to solve user problems.

Implicit in all of this is the trust that when engineers say something is hard, it is actually hard.

When I see the author talking about paranoia, trust is the first thing that comes to mind.

To be fair, I don’t think that trust is easy. But I also don’t think that effective product management is possible without it
Well, the meaning of "reduced" has shifted from "not having specialized instructions" to "load-store and preferably fixed-length".

Ain't that the truth. Reduced never meant anything; they never defined it. Patterson said they cooked up the name on the way to a grant presentation. I think they should call it Warmed Over Cray. What was new in RISC that wasn't in Cray? It was like the Geometry Engine; it was possible for an academic department to accomplish but that doesn't mean they accomplished anything that hadn't already been done.

preferably fixed-length

Or fixed-length/2.
You should probably have your management team look at these comments. How much hated it is getting. I can say from experience that I have quit because of a manager like this. Don't do this. You will lose any engineer that can get another job and be left with those that can't jump ship. I'll let you determine the quality of those engineers.
Show HN: Get serverless Q&A out of Slack groups and back on the web
I don't know, as someone who's visited Kansas I honestly think that it's some of the most beautiful country in the US. You can see pretty much everything for miles around. But to each their own I guess. :)
Sounds kinda like a firewall would server you better. Not that I don't think you should or shouldn't be able to have this feature.
Google Continues Investments in Military and Police AI Technology Through VC Arm
What are the principal use cases?
I wonder why data security professionals don't practice compartmentalization. 100 million accounts should not be accessible from one account. It should be like watertight compartments in a ship. Breaching one doesn't sink the ship.
That was more the Bushes, who were involved in the oil industry. Less so today.
Yeah fair enough, I've been lucky and haven't been made to feel that way
This is misleading. Superficial physical appearance isn't always a good indicator of genetic similarity or sexual compatibility.
>If you're particularly desirable to the managers who're looking to hire you, they'll keep inviting you to take more polygraphs, and you'll eventually pass.

Now, I am no expert on these things, but something tells me that they are doing this wrong.

"All of your previous polygraph tests indicated to us that you couldn't be trusted as far as we could throw you, however your latest one clearly shows that you have suddenly become as honest as the day is long. Welcome to the team."
That's a fair point of view. I refer with a footer wouldn't have offended me, or a link in the profile.
Qt core and most libraries are written by the same group of people in the same development process.

Splitting it up into libraries is good engineering practice as it ensures boundaries. (Whether it is packaged into their own dll/so/a/dynlib is a deployment question, you can compile all parts statically together)

The licensing is a political/business question independent from code being nice, good and clean. (Except one has to be careful during refactorings, as code might change license, but since afaik the Qt Company has CLAs ensuring copyright ownership they are able to do that)
More like... What's in their wallet.
I don't see how it could directly cause harm...but I'm also having trouble seeing how it will help, and if it doesn't help it may cause indirect harm.

The indirect harm would be that by spending effort on something ineffective it may make it harder to do things that would be effective, by taking some of the heat off politicians on the health care cost issue.
The standard for plugins on windows was for a long time "go to shady website and download a dll with arbitrary code. drop it in the magic folder to run it with full permissions"
Their mobile apps are top notch though. I used a card in the past and it came with free credit scoring and the mobile apps were better designed (UI and performance) than most. At least here in my country.

It even had automatic categorization of spending in a Mint.com style.
Scientology did one better - they bought their own books at retail, then fed them back into the distribution chain. It was common for "new" books to arrive with price tags still on them.
Audit any Instagram account for fake followers, engagement and posts
My colleague shortj and I put this together. Basically a public repo of serverless questions and answers. Don't see your question? Submit to the form and we'll answer it. Or you can update the repo directly with your own Q&A: https://github.com/trek10inc/serverless.help
I think it's pretty obvious that nobody buys a Domino's Pizza because it tastes good! They buy it because someone shows up at your door and gives you food!