skysight-inc/HackerNews huggingface dataset:
I'm not denying that they're serious vulnerabilities–made especially concerning because it looks like they're the work of a nation state against an ethnic minority–but headlines of "1 billion iPhones hacked" do not convey the issue accurately.
Apple issues statement refuting Google's 'false impression' of iOS security
Feds Order Apple and Google to Hand over Names of 10k+ Users of a Gun Scope App
Neighborhood character and height limits can mean a lot of things and be implemented for different reasons. If done in the NIMBY sense of "you can't have anything I don't like", yes it's horrendous.

But there's a reason Paris "feels" different than Dallas, or Brooklyn different than Manhattan. A big reason I enjoy traveling is to experience these difference "neighborhood cultures". Without some restrictions, you risk destroying what makes a city special.

I'm not making any sort of value judgment here--it's not up to me alone to decide "character is more important than housing" (or vise versa), and I won't pretend to know where to draw the line on those restrictions.

Height restrictions are often put in place because the underlying infrastructure (water and sewage, electrical grids, traffic/roads) and occasionally even the ground itself simply cannot support a high rise every block.
Pretty true. The worst is when they butter you up a bit with, "how was your weekend?", or "The weather is pretty nice today". Like they actually care about you, ha!
The world was largely pro-Mugabe in 94. That's the year that the British gave him an honorary knighthood.
I wonder if I can use visidata as a pg pager
I think the OP is referring to zoning regulation and not housing regulation. Zoning in the Bay Area is truly horrendous. There's vast swaths of land that's mandatory detached single home only. Some cities in the Bay Area, for example, even ban a second storey.
Can I opt out if I'm not a Facebook user? i.e. opt out of having them store records of my face?

PS don't tell me they don't have records of my face
Is it even feasible to scour all their backups? And I don't mean the hot backups, I mean the annual data dumps stored on tapes in a data archive built in a cold war nuclear bunker somewhere in the Rockies.
That's how I memorized it too!
Really struggled with it until I started thinking of it that way.
This is totally ridiculous.

Test coverage clearly matters even if it's not 100%, as anyone who has ever worked on an older codebase knows.

As long as you're not causing coverage regressions, it is perfectly acceptable to leave untested code that "should" be tested, but hasn't been changed in years.

Test it when you change it; don't test for the sake of achieving a coverage benchmark.
The point of a browser's security model is to make it so that "remote code execution" does not mean "arbitrary remote code execution with elevated privileges".
If part of the box remained on the cart, then there's an air gap, and that might put you into broken or bruised bone territory instead of crushing damage.
The Legend of Baltimore Jack
The scope works perfectly without the app. Have used one. I believe apps don't fall under ITAR.
"lapse"
I wonder about this too. They say they delete the template (the statistical model they know is your face). Ok.

So now I register a new fb profile, using a picture of you, opting in to facial recognition. Now what?

They can't match the picture against your profile, because they've deleted the template?
"iOS security is unmatched because we take end-to-end responsibility for the security of our hardware and software."

Good stuff
Even for the ones who didn't do anything illegal, they were certainly "let off the hook" in the sense that the massive bonuses they were paid for economically destructive decisions were never clawed back, and in fact the same fundamental structures of "no skin in the game" and "privatized gains, socialized losses" were preserved and even strengthened in the aftermath of the financial crisis. In the most egregious instance of this, firms which would have been nothing but smoking holes in the ground without public capital injections and backstops were allowed to pay out colossal bonuses to the same people who got them into that mess in the first place.

However, it's also certainly not the case that there were no criminal acts of fraud committed by Wall St execs during the 2000s bubble. Dick Fuld's Repo 105 scam is a great example: https://www.epsilontheory.com/repo-105/
So, don't bother writing any tests unless you can test everything?

At a previous shop, we had a simple test that ensured user could log in for a while, until we created more coverage. We didn't test every aspect of the code. This simple sanity check saved us once or twice.

Should we have not written this test just because we couldn't test every conceivable piece of code?

Don't let perfect be the enemy of good...
Show HN: Senior Tech Jobs Delivered Weekly
If you want to add the complexity of diff, you could do what Debian does[0][1].

[0] https://askubuntu.com/questions/365840/compare-differences-w...

[1] https://raphaelhertzog.com/2010/09/21/debian-conffile-config...
Cool! Did not know that.
You make a good point. The article is light on specifics so it's hard to determine how they made the request. It says "court order" which, as you know, could mean a number of things.

That said, no court should be approving any demand for this data. It's 100% fishing.
The title is disingenuous. A better title would be "100% test coverage should be the goal". Though that is laughably obvious and would generate no clicks, so I can see why the author made the choice they did.

That said, if you have a single test, that better than no tests. And 90% is better than 80%. Yes, 100% is ideal, but if you let perfect be the enemy of good, than you waste time when low hanging fruit breaks.
People in the US prefer inexpensive. They have a certain price point they don't want to go beyond. The Eatery I described was as far from "fancy" as possible. Dishes were under $10 and were rich in vegetable and protein content. They were also very flavorful. Eating flavorful food does not make it "fancy".

How fast food proliferated in the US goes beyond "fancy"/"not fancy".
Discussed at the time: https://news.ycombinator.com/item?id=11088125
If you're behind a carrier NAT, would dyndns even have a purpose?
Yet even then, you can turn a profit without pushing gambling on children.
I think that also highlights that they should care about the big picture enough to even worry about breaking existing things - that and be able to see the big picture at all.
I still couldn't do it on the command line, probably cheating, but Midnight Commander shortcut is CTRL-X-S :)
What about the opposite? Exclusively marked as tested and assumed to not be otherwise?
problem with any messaging system is people abuse it / don't respect other peoples time, and software can't control for that. people have to own up.

an example not necessarily tied to work directly: there was a slack channel at work that was dedicated to free food. if you brought in food, or someone or a vendor was giving out food, you told the channel what food / when / where + an optional picture. Problem was, some people would just chat - about their vacations, dogs, etc and I would have to ask them to take it to another channel or talk direct message, because they would bury actual food announcements and cause all sorts of notifications. instead of realizing their folly, they would fight back and say you can always mute the channel, which totally negates the reason for being in the channel.

You also see alert crepe. someone has an idea of sending service information to a channel, and before you know it you have 25 channels dominated by computer talk.
Definelty highlighting their approach vs Google's.
http://archive.is/WpkDd
I wish I could upvote this multiple times. Thanks for sharing your knowledge!
Your attorney is mostly right. But we've had a number of clients apply at land-crossings, such as Peace Bridge, and explain that they're just applying now to make sure that they can get a TN before actually moving to the U.S. and the CBP officers consistently have been fine with this. You still would need to enter the U.S., however. I would recommend calling Peace Bridge and asking. You should be able to get an answer.
I remember having been able to jailbreak my iPhone 3GS for a period of time entirely through visiting a website and letting it exploit such vulnerabilities enough to perform the task. Searching for a related article, appears to have been possible on iOS 4.0/4.0.1:

https://www.cultofmac.com/53323/jailbreakme-2-0-jailbreaks-i...

Edit: I use ‘letting’ above loosely meaning that the specific website mentioned allowed the visitor to control whether the exploit was actually executed or not.
I remember it as FROM source, TO target, so the real file comes first
I'm the same way with scp, I never remember the order and then it changes if you're uploading or downloading.

Also, an obligatory xkcd: https://xkcd.com/1168/
The link doesn't work for me. Another commenter mentioned that the laser pistol is shown in a Russian military museum, which is evidence enough for me.

Still looks goofy, though.
What could possibly go wrong with that...
> The attack affected fewer than a dozen websites that focus on content related to the Uighur community

Expect a bunch of green accounts to come in and argue on China's behalf.
Slack has shared channels now which solves this quite well for my company.
My web search activity went up a lot with experience. Back in the day, almost all of my work consisted of cranking out stuff in the main language (PHP or Python), spiced up with SQL and occasional web or db server setup. I needed manuals sometimes, but not web searches so much. After the hipster-programming/devops explosion of the early 2010s and my dive into highly optimized heterogeneous solutions, the work switched to whipping up logic in a handful of different languages with incessant fiddling of couple dozen specialized technologies and trying out new ones constantly. I don't need the manuals for the core languages anymore after all the years, but I'm not gonna learn Maven, Gradle, the Big Pile of Java Options and whatever else to set up another data-crunching daemon, in Java this time.

I also looked into freelance jobs lately, and it's pretty crazy there too, especially with the JS' frantic mutations. You'd mostly need a handful frameworks and a whole load of specialized microsolutions, but still: last year everyone was using Ionic, now React Native is everywhere. Web APIs are also evolving nonstop. Chill out for some months, and you're lagging behind the others.

And that's not even beginning to mention compiling other people's C programs under MacOS. Pretty sure that ‘The voodoo of satisfying the compiler’ would be a book of respectable thickness without ever getting into programming proper.
Beautiful statement
One of signatures of Henry Spencer ( https://en.wikipedia.org/wiki/Henry_Spencer ) looks like this:

--
Americans proved to be more bureaucratic | Henry Spencer
than I ever thought. --Valery Ryumin, RKK Energia | henry@zoo.toronto.edu

https://yarchive.net/space/rocket/fuels/hydrogen.html
Hi Peter, thank you for doing this.

Have you read about the recent pushback to the reduction from 5 years to 15 months for the duration of E-2 visas delivered to French citizens? (revision of reciprocity schedule: https://fr.usembassy.gov/visas/nonimmigrant-visas/treaty-tra...)

In your opinion, is this reduction going to be confirmed ?
If so, will it also impact the duration of E-2 renewals ?

Thank you
FYI - Debian 10 Buster (and thus also Devuan 3) uses wget2 1.99.1, so not far behind.
Given the number of things that use different source vs destination with the same type, I just have trained myself to always look it up, even if I am 99% sure I remembered it correctly, because holy shit when you get it wrong sometimes it's bad.

softlink dest <- src

file cp src -> dest

std::memcpy dest <- src

java arraycopy src -> dest

golang io.Copy dest <- src

etc etc

I'm only 80% confident I didn't make an error in the above 5 examples...
Just from a purely legal perspective, I'm not sure Apple and Google are even supposed to have that data? The company that sells the app, assuming they collected the information, technically was not supposed to share anything with Apple or Google. (Or rather, they were only supposed to share under certain very specific conditions.)

So I can't really tell what the Feds are asking for in particular? But assuming they are asking for information specific to the app, I'm not sure that Apple or Google were supposed to be snooping that information under GDPR? And I'm very sure that the app maker was not supposed to be collecting it in any kind of a way that shared it with Google or Apple. (Certainly not sharing it outright.)
What is Apple trying to gain by publishing this article? The tone is accusatory and defensive in a combination that does not make me sympathetic towards Apple.

When Google posted the Project Zero articles, that did not impact my view of Apple in any way. However this press piece affects my view of Apple negatively, so from my perspective this press article has turned a more or less neutral event into one that is negative.
And yet there are coding interviews that expect candidates to write complex regex expressions from memory
In this type of job, at this level of complexity, we just can't hold it all in our minds.

It's too much, and it changes all the time. We need a near-telepathic reference to get the necessary info when required. Thankfully, we have that and it makes the job possible.
I wonder how much Boeing's strategy to reduce regulatory oversight as much as possible is going to cost Boeing shareholders going forward.

Share price may have benefited for a few decades, but Boeing's image will be tarred with this for quite a few decades with far higher certification costs worldwide in numerous jurisdictions. There are many potential jurisdictions [1] looking out for their own interests, and may choose to defensively force a certification on Boeing instead of trusting the FAA.

That will cost Boeing a lot of money. If the 737 line is continued at all, every single 737 variant that comes out after this will have a really steep hill of sales objections to climb, and they'll be handing out steeper discounts and lower profits to counter those objections. It may turn out that accepting an adversarial relationship with the FAA instead of lobbying to co-opt it was the optimal profit strategy in the long-term.

If it pans out this way, then the optimal profit strategy is to encourage the most stringent regulatory regime in the corporation's home country that all others hold up as the gold standard and follow without question. This avoids the multiple costs individual certification efforts rack up because no one can trust each others' certification results because they all recognize they're too weakened by industrial lobbying efforts.

A strong, quasi-centralized regulatory body then acts as the company's buffer to buy the benefit of the doubt, an insurance policy against a prolonged period when the company's culture is called into question.

[1] http://www.dgca.nic.in/Global_Links.pdf
American Tycoons Created the Dinosaur
Starting new apps aren’t the only initiatives that fail. Whatsapp was the target to meet or beat for every single speed and reliability metric during the development cycle of Messenger 3.0 (2013).
dumb question: What is the practical application of this conjecture?
I think it's machismo. In a room full of people white knuckling everything, nobody wants to be the 'baby' who calls for rational behavior.

I see the same thing in white collar jobs, but the damage is harder to see. Physical and mental health rather than broken bones and lost limbs.

There's no reason everyone should have to be a hero all the fucking time. But often the only way to fix it is if everyone refuses. Not saying unionize, but if everyone slows down to a sustainable pace then what can they do about it?
If I’m not mistaken, the panic spoken of here is in the equities markets. No?
Seems like 50% coverage is better than 0% coverage and 75% coverage is better than 50% coverage.

The author argues about the horrors of going from 80% to 79.9%, but I don't see how that is any different from the suggestion to explicitly exclude code. The excluded code is still in the gray area of code that is included but not covered by tests. What happens when someone starts making breaking changes to excluded code?
It's working fantastic
Hi Peter, thanks for doing this!

Using a throwaway here. I am an Indian citizen about to file for a marriage-based green card with my US citizen wife. I currently live in the US and we are a very vanilla case, in my opinion.

Have you encountered any new challenges over the past two years, owing to the current immigration climate? I see that the overall process is significantly longer than even just a couple of years ago.
Senior Network Engineer (Linux/Centos) (Remote)
Please email me at Nancy.Kaur01@sap.com if you are interested and would like to set up some time to speak about the role.

PLEASE APPLY USING THIS LINK:

https://jobs.sap.com/job/Bellevue-SAP-Concur-Senior-Network-Engineer-Job-WA-98004/552086101/

Security Clearance required for the role

I cannot accept resume's over email
i've personally given up on this after googling it a dozen times and now i just cd into the target directory first and omit it
Everyone should download the app in protest to ensure there's a lot of noise in the data.

Android: https://play.google.com/store/apps/details?id=com.atn.obsidi...

iOS: https://apps.apple.com/us/app/atn-obsidian-4/id1337731256

Downloading an app should never be considered reasonable suspicion or probable cause.
this is shockingly relatable. not only the same type of things i google in an average day, but some of the exact same queries.
Why would you learn Maven AND Gradle? Pick one.
High-flying geese are ‘the astronauts of the bird world’
The British government being “unfair” doesn’t excuse Mugabe’s tyranny or avarice. And tyrants are usually very good at generating applause while they are still in power.
Each wayland compositor is like a combination of X and a singular wm wherein the existing Wayland standard provides a framework for implementing rather than each person reinventing their own x alternative.
These days I just walk away from places with these idiotic ideas.

Test the things that are high risk, that you are personally worried about, that have caused defects in the past.

Testing whether the language's getters and setters work is a total fucking waste of time and money.

For a long time, until my current project got off the ground and got stable funding, our entire test suite consisted of one integration test that made sure Spring Boot started up. As time allowed we back filled other tests. But when your ass is on the line you don't waste time.
Running .NET Core Global Tools Without the SDK
There are very few things considered an “unlawful termination” in at Will employment. A difference of opinion about an implementation is definitely not one of them.

A company is very unlikely to ever side with a subordinate over their manager.
You should build one! And then make it so good that Apple will finally copy it for a future version of MacOS :D
Hell, it doesn't even have to be Asia. As a white dude working in Australia I found myself on the wrong side of arguments and perceptions cuz I had a different accent.
IMO technical interviews should give you a terminal with Google. And ask questions that can't be answered without it. It's a more business-valuable skill than memorizing things / having had experience with some specific technology and its problems.
Your salary can be used to meet the financial support requirement (but definitely consult with an attorney before applying because there are other issues that you need to be aware of as well since you are here in visitor status).
That list of things reads like a bad cliche of the narrow view mindset in some of SV that doing web development somehow amounts to software engineering.

Web development, unless you’re doing something novel, is not software engineering. Getting some hodge-poge of react drivel to work is not engineering no more than configuring a router is software engineering.

Choose your words with more precision.
There's a guy I work with that does this _in real life_. Let's call him Bob. Bob sits maybe 15 feet from me in the same room. We work on the same kinds of things. In this company, it's encouraged to engage with others immediately if you have a question. If they are too busy right at that moment, they will tell you and check back with you later and everyone knows not to take offense in these situations.

However, Bob pretends to be afraid of me. People walk up to me all the time when I'm working and ask questions and it's perfectly fine. But when Bob has a question, he _whispers_ to get my attention. Or he'll stand just in the periphery of my vision and literally wave until I respond. I've told him, nicely, more than once, that he can just talk to me whenever he wants. His response is always along the lines of, "well I didn't want to break your concentration" or, "I didn't want to bother you if were busy." Bob knows I don't ignore people whether I'm busy or not. I don't want to believe he does it just to annoy me but I'm failing to come up with a more logical explanation.
All my mentions of issues or friction in my previous comment was about pre-k8s team's experiences... I try and clarify a few key cases in the following:

> Successful utilization of k8s, interesting metric, what is your criteria ?

Sorry, what pain motivated using k8s, and using k8s relieved that pain.

> I have seen properly staffed startups (in silicon valley)

What is 'proper' for staffing?

>> Are your SRE shipping the new features, or running like a red queen to keep the product developers able to keep shipping?
> Yes to both

Is it the appropriate use of a Reliability engineer's skills to develop or change arbitrary features? Or are you saying they are at least Engineers so they should be able to pitch in everywhere... CSS accessibility features or k8s config.

>> What development process or cycle has overheated with friction that requires k8s?
> Upgrading k8s :)

This tautology keeps me away from k8s. Before k8s what pain in the process required using k8s to solve?

> a pipeline getting product to production fast

Does k8s make it fast? Does k8s make it possible? I think I'm deploying "fast", without k8s... But because you keep mentioning ITIL I suppose it's more about the infrastructure changes? Or are you talking about ITIL tension because k8s requires a more liberal policy than ITIL allows?

There is so much assumed context when talking about k8s, the only comprehensible part of these discussions is k8s is a rabbit hole to end all rabbit holes.
Many of the early philosophers operated in this way. They followed new ideas/paradigms to an impossible extreme, but it's under the name of progress. How does one get to understand the true limits of an idea if no one tries pushing it to the absolute max logical conclusion? How do you ensure that the new idea stays in culture if you do not actively promote it?
We all take open-source for granted today, but it was the early pioneers that made a lot of noise and ruckus that got the movement slowing going on its way.
New species of dinosaur discovered in Japan
This is a straightforward calculation, with modest bookkeeping requirements, that is possible with undergraduate physics and calculus. As a sci-fi author, your craft will be improved by forcing yourself to do it. You'll be concerned with centripetal acceleration, yield stress, density, pressure, free body diagrams of pressure vessels, summation of forces on a differential element, and fairly basic integration (after taking symmetry into account).
It's already done and will impact E-2 renewals as well.
The proper response to mediocre skillsets is to do the work to improve skillsets. Whatever else is meant by "adults", one would hope they're helping that process.