skysight-inc/HackerNews huggingface dataset:
Other than Trey Gowdy being a member of the GOP, not sure what you're criticizing here. His line of questioning was not partisan, and got to the heart of the matter - their lack of competence and ability to follow regulations and/or written contracts.

The OPM had a serious data breach, and demonstrated a marked lack of ability to do their job. To date, they have not been held accountable, unless you count the stern questioning.

What remedy would you prescribe to fix OPM? How would you hold them accountable?
According to the docs, it has local fault injection (I.e. you can tell it to respond with “resources unavailable / exhausted”) which makes it “even better than the real thing” for development. (But have never used it so cannot comment about how well that works).

I usually prefer to develop against as-live-setup-as-makes-sense, because test environments often miss something critical; however, it is often hard to verify (on both test and live systems) error condition behaviour - to debug response to S3 errors or resource exhaustion, you actually need them to happen.

Looks like this project does provide for testing these conditions. Neat.
The comment explicitly states "serious adverse events", which is well-defined: https://en.wikipedia.org/wiki/Serious_adverse_event
Maybe OP was living in different country than yours? I don't think you can dismiss their statement as 'complete nonsense' before confirming what exactly are they talking about.
Sales Engineer typically means Pre-Sales. It's a supporting sales position, part of the sales organisation. I think the title is unnecessarily misleading.
Seems like DNS TTL was a big issue before HTTP 1.1.

Connections are cached and reused.
As an occasional user the biggest gripe I have is that credentials are not supported - in our current code base the connection to AWS is done by specifying the region and credentials and leaving the actual endpoint discovery to be done automagically. When using LocalStack you have to instead explicitly specify the endpoint of the service that you want to connect to.

What this means is that if I want to test something locally its not as simply as spinning up the docker container - I also have to make a code modification for the service(s) that I want to interact with.

It's not a big deal - and the benefits of being able to test locally outweigh the minor inconvenience but it still bugs me every time
How does the creation of trillions of dollars of new capital out of thin air fit into this theory?
This is intriguing, but how does one go about scaling this? Relational DBs are often where scaling breaks down and sticking more of the application in that problematic part of the stack seems like it could end poorly...
This trick fuels the modern "supplements" industry too.

(In the UK for example) You aren't allowed to advertise "This product will make you smarter" because that's a lie.

But you are allowed to advertise "Vitamin D is essential to normal cognitive function" and "This product has all the Vitamin D you need" which are both technically true - and let the audience draw the false conclusion themselves that they'd be smarter if they used the product.

The product maker has plausible deniability, and especially if consuming the product has no major harmful effect they'll be allowed to keep this up. After all there are also advertisements for fizzy drinks, booze, and plenty of other products that are hardly a good idea, so what's the problem?
Correct, this block would be for two functions (Site Reliability Engineer and Support) and we currently have no people in that role in China and Russia.

Please note that we're still discussing this change. We work out in the open so you can see us working on it. I hope that people appreciate the difference between that and what you would see in a non-transparent company (probably nothing, they would just not open up a vacancy in the offices in that country).
And the Netherlands.
I got it when I was 18 as the girls were getting it, the government decided it would be cheaper and more effective to do boys at the same time.
HPV effects have plummeted, but this is hard to prove.
What shocks me is that a lot of comments show a understanding of the average Facebook-mom. (misinterpreting workings of herd immunity, whilst the article doesn't even mention that, it clearly is about direct effects.)
This is HN!
> How would I use a load balancer to fail traffic between, say, London and Amsterdam with no fiber in place between them?

What people use in those sitations is Anycast.

Of course, DNS itself, or e-mail, don’t need this kind of redundancy, since the NS (or MX) records themselves provides a list of failover servers. The corresponding alternative for HTTP, SRV records, has been consistently stonewalled by standard writers for HTTP/2, QUIC, etc.

There is an interesting draft RFC which I am keeping an eye on, but I don’t want to get my hopes up:

https://tools.ietf.org/html/draft-nygren-dnsop-svcb-httpssvc...
Why .well_known/ instead of HTTP headers (possibly on a HEAD request beforehand, like CORS)?
There are practical reasons for bereavement leave, too. My father-in-law passed away suddenly. He was a CPA and died during tax season. Wrapping up his business, organizing a funeral and executing his will took my wife a couple weeks.
You’re lucky you didn’t bet him, because you’d have lost. I’d have bet against you as well.

The SVP and Chief Human Resources Officer at Informatica when this incident happened was Maureen Brennan. She’s also a former VP and BoD Trustee of the Women's Health and Counseling Center in New Jersey, which focuses on reproductive healthcare services.
For any further questions related to this, please review our EULA, Terms of Service and Privacy Policy.

As someone who was literally about to order a whole set of Ubiquiti gear for his business this month, having never been a customer before: no, I don't think I will.

Ubiquiti, you blew it once by trying to push this out in the first place. Now you've blown it again, by thinking some token opt-out button was enough to fix the problem, instead of realising that what you're dealing with here is a major trust issue and you're fundamentally on the wrong side of it. You don't get a third shot. I need to protect the security of my business data, and I need to be confident that the professional gear we're buying isn't going to actively undermine that.
This is not new. There have been checks for private API usage for as long as I can remember – at least on iOS. It could be the case that there was less enforcement on OSX.

However, this is not really about unsigned binaries. These APIs are from OSX itself. This is about access to private APIs. These have no contract and can be changed at any time, as they were not intended for public consumption.
We did not live up to the high standards that we setup for ourselves
More links:

https://www.adacore.com/uploads/books/pdf/AdaCore-Tech-Cyber...

https://www.adacore.com/gems -> https://blog.adacore.com/

https://web.archive.org/web/20190709111613/http://www.drdobb...

https://github.com/Componolit/libsparkcrypto

https://people.cs.kuleuven.be/~dirk.craeynest/ada-belgium/ev...

https://www.adacore.com/uploads/books/pdf/ePDF-Implementatio...

http://www.loper-os.org/?p=1913

https://github.com/ohenley/awesome-ada
You’re mistaken — 0.08% is the legal limit in most of the US. And 0.08% corresponds to a moderate level of impairment. Certainly dangerous for driving, but nowhere near “dead drunk”.
I mean, the complaints are a bit rich coming from the very people that dump countless of third-party "crash collection" SaaS and other marketing SDKs into their apps or have marketing insert whatever script tags they want into websites. Where is the personal responsibility gone to?

Chances are, if you are reading this, you are working at a company that does this very thing! For much more meaningless things than enterprise hardware with custom OS.
Tracked over at:

https://github.com/electron/electron/issues/20027
The lesson here is write native apps using the preferred native tools of the platform, and avoid shortcut solutions.
No. The symbols mentioned in the rejection are all in signed Apple libraries; the problem is that those symbols aren't part of the public/documented/stable API.
Show HN: Peacemakr, Crypto SDK and SaaS for Data-Security
Fair enough. It does say "may". :) It's still possible for other data to be "anonymous" if it's stored independently of an IP address, device identifier, etc. since recital 26 allows for data that is "no longer identifiable".
it's a macbook pro with airpods so none of that stuff applies
It's possible electron team isn't even aware chromium is doing that.
Pre-Sales pretty much always get team comission and the kind of product Informatica sell have sales cycles longer than 1Q
On page 60 "CONCEPT ART (FROM OTHERS)" there are some beautiful images this guy used as inspiration, but I can't find a link or reference to their origin.

Does anyone know where they come from?
And how do you know that she was the one to make this decision? And that men below her tried to stop this but were overruled?

It all looks highly speculative to me.
This already happens. On one of our web fingerprinting solutions we provided our certificate to the vendor so they could use our domain when we loaded their resource (the fingerprinting code) on our app running on the user's browser (sorry - more of a data, slightly backend dude over here, so maybe networking doesn't even work like I'm describing) and the ad blockers wouldn't block the script execution - even thought the script is NOT an ad
Less effective, because browsers don't cache, recursive resolvers do, and they are often shared; and it may be harder to tell the difference between a cache hit and a cache miss in DNS (responses can be very fast).

But I guess it could work too
> I did write back to Apple trying to explain that I am using Electron and I can't really change any of these public-framework usage

Yeah. So? By linking a framework that's using private APIs, this becomes your problem now. And Electron's problem, by extension. Go bug them, not Apple.
> AFAIK only one US 2020 presidential candidate atm is even talking about data rights.

Are you talking Yang [0]? I think he's taking it most seriously but even as a Yang Ganger I do see other politicians talking about it, but I would say that they aren't taking it seriously [1]. I can't find anything about data privacy rights on Warren's, Sanders's, or Biden's issue pages. I did find mentions on Buttigieg's[2], Klobuchar's[3], and Gabbard's[4] (which is more anti-NSA than anything else). But yeah, I would say that Yang is the only one that I'm aware of that is making a very clear statement on this issue (since he ties it to his UBI issue).

[0] https://www.yang2020.com/policies/data-property-right/

[1] https://www.dailydot.com/layer8/2020-democratic-candidates-i...

[2] https://peteforamerica.com/issues/#ConsumerProtections

[3] https://www.klobuchar.senate.gov/public/index.cfm/consumer-p...

[4] https://www.tulsigabbard.org/tulsi-gabbard-on-civil-libertie...
> Power outage corrupts Mongodb in the UniFi Cloud key. They won't fix that.

The Cloud Key 2 has a battery inside it and shuts down gracefully if you pull the power.

So that's a kind of fix. Although it does involve buying a new device.
I'm a big fan of replacing old laptop HDDs with an mSATA SSD in a 2.5" 44-pin IDE adapter. The JM20330-based ones have had the best compatibility for me. Just be sure to disable any auto-defrag that old OSes like Windows 98 come with by default :)
Location: Moscow, Russia

Remote: No

Willing to relocate: Yes (USA)

Technologies:

- PHP: Laravel, Symfony, Yii

- Javascript: Backbone, Angular JS, Vue.js, React, React-Native

- SQL: MySQL, PostgreSQL, Oracle, Microsoft SQL Server

- NoSql: ElasticSearch, Sphinx, Redis

- Docker, AWS

Résumé/CV: http://tiny.cc/NickIvanov Email: mrcool.ru+y <at> gmail.com

-------------

Senior Fullstack developer with more than 8-year background in web development, with excellent problem-solving skills. Strong knowledge of OOP principles, and design patterns. Extremely good in PHP, SQL, and JavaScript.
Its looks as if the Electron team had the assumption that developers would be unlikely to distribute their Electron Mac apps via the App Store, but instead as a DMG or zip which doesn't require Apple reviewing private APIs.
Is column based authorisation possible?

What about group/role based security concepts?
I am talking about that exact point - "not much goods or services that you can store for more than a year" and elaborating why that is an important thing to understand. The point of the GP was that the goods and services consumed by those that don't work have to be provided by those that do. A lot of people don't understand this because individuals can save through money and other financial instruments almost as though they are storing goods and services that can be consumed in the future.

But this analogy fails at a larger scale - an entire generation can't just save up enough while they work and expect to be provided for in retirement because what they saved up are just claims on future production - their consumption still has to come from the production provided by future generations. Their claims cannot and will not automatically cause the excess production to occur.

Now this is a purely hypothetical problem and we're arguably in a world with the opposite problem (too much productive capacity, too many people trying to save and not enough demand). Though arguably even this problem is due to too many people to save up to prepare for the other scenario, decades before it happens.
>In reality, many many people work at jobs that they don't believe in. I personally haven't been able to hack it - I'm too stubborn to keep my mouth shut at appropriate times.

I'm in that situation, and I don't shut up either. I can't even count the amount of times I've said something along the lines of "this is not the way to do things, I can do it anyway since you pay me for it but I think it's a bad decision".

My company basically just humors me by hearing my complaint and doesn't make any change whatsoever. I get my salary anyway.

It's not the best situation to be in, but I'm sure it's not uncommon at all...
> For our backend, we deploy it as a nix package on NixOS, so we can atomically rollback the deployed code, as well as any dependencies like system libraries

Same for us, but we use nixpkgs directly over CentOS. Nix is perfect for rollback. It can be done on an entire cluster in seconds.

For the DB, We use schemaless DBs with Devs that care about forward and backward compatibility.
Wonder why they couldn't do the same for the iOS appstore. Like js apps based in phonegap
The title here really should say "considers" - the discussion seems to be ongoing - and it looks like legal is advising strongly against it.
It's hard to understand exactly what you mean when you don't explicate what you disagree with and provide the reasons why you disagree. If this is a field you have experience with, you should have knowledge of information sources that can help dispel the incorrect information that is being spread.

Without any of this, your comment comes across as low value and will attract downvotes.
Woman registers period late on app, is starts seeing baby related ads
A lot of things at big companies aren't ever going to be worth doing at little companies. In cloud companies they spend tens of millions of dollars going after 1-2% efficiency gains that really make a big difference when many of these little gains are all stacked and applied to billions of dollars of equipment. Maybe if these companies got broken up, several little companies could sell these little gains, but that seems much less likely than one of the broken up companies naturally becoming big again and doing it themselves.

This field has a ton of natural incentives to scale as big as possible. I feel like the main beneficiaries of breaking up big tech companies are business people and lawyers getting to insert themselves everywhere to interface between groups that used to be the same company.
@edjdev wrote
There is an unacceptably high risk that these nations may apply pressure to individuals living within their borders with sensitive data access (based their role at GitLab).

Given the current australian law changes, the rampant israelian IT spy sector and despotic Belarus position on human rights, it's surprising that they only mention China and Russia.
This whole debacle doesn't look good and makes one to loose all faith in Gitlab.
Thanks! Those are good arguments I was looking for (downvote accepted).
Right, but neither of those benefits exist in a vacuum.

American health insurance is usually tied to your job. If you lose your job, you can continue it, temporarily, through a provision called COBRA, but it is often outrageously expensive.

In the UK, I believe you’re able to access the NHS regardless of your employment status (right?). Equivalent insurance would cost you hundreds of dollars a month in the US, if not more, and would have to be paid from your benefits. An apples-to-apples comparison between the two system ought to include that fact.
Sales commission for a Pre-Sales role is complicated. You get commission for deals that have been worked for 1+ quarters.

If a big deal closes that you worked on for the last year while you're on leave, you wouldn't get commission. That's not right
> IMO in most projects, the intermediate layers never do anything interesting so that's why postgrest (as a proxy) is a good fit

I try to avoid generalizations about "most projects", because different people have different experiences and it's hard to make a good argument about which case is more typical. At best I think you can lay out the toolbox and explain where PostgREST fits in the toolbox. Whether or not you should use it on a particular project depends on the particular project, and I have no idea what mlthoughts2018 is working on or has worked on in the past, so that's an entirely different question :)
> The only potential problem is if attacker will also link same resource to your domain.

That's the example used in the article (www.forum.example/moderators/header.css).
In other words: over HTTPS.
Ah. Interesting. That's a good innovation. How do you determine the domain/URL? I guess it's just the URL of the source?

What would you do if your HTML extraction script had a bug in the pre-compiled form? I guess you're just stuck?

I guess that's not the end of the world.

The EPUB form in a future version of Polar would at least require an EPUB reader which makes it a bit heavier.
By that logic retail and financial services could claim the same output. All of these physicists and companies have to use them to survive in the modern world.
Interested in #2 as well http://vmano.com https://www.upwork.com/fl/manoweb
> Shouldering some extra burden when someone else is suffering from a much greater one foisted through no fault of their own is just how it should work.

If I am voluntarily bearing the burden I would like bear it for someone who is suffering the most in the world. Bearing it for someone who happened to apply for job at the same company doesn't make any sense. If you have food on your plate and live in a first world country on a 6 week paid bereavment leave then you aren't even in the vicinity of suffering, like not even close.

Only framing I can think of is that I would like to have privileges applied to me if same thing happens to me. This is much more selfish and sensible way to look at it.
ROS1 is primarily used with linux unless you use a VM. ROS2 can be used on linux, mac or windows. You can also check out AWS robomaker to use ROS in the cloud.

https://wiki.ros.org
https://index.ros.org/doc/ros2/
https://index.ros.org/doc/ros2/Installation/Crystal/Windows-...
https://aws.amazon.com/robomaker/
Exercise Your Memory and Watch Creativity Blossom
Ruffled Role Feathers, Why We Need Generalists
First, yes, perhaps I was using a bit of hyperbole.

But the point still stands that my response had really nothing to do with whether 8 weeks or 6 weeks or 16 weeks is "good enough". When someone has a baby, and that baby dies, it doesn't take much to realize you don't nickel and dime that employee over a couple of weeks of leave. You send flowers and a heartfelt letter.

The job of HR is specifically to lower employee related risk for a company, and is should be obvious that sending an email to the effect of "well, since your baby died, you'll be ready to come back to work sooner!" would in fact raise multiple risks for the company.
> and avoid shortcut solutions

and then the app is never written
separate from the main topic, i like your use of coalescing multiple insta posts together into one huge art :)
Yes, but only if users know about containers, and they do proper compartmentalization. Which they don't.
The Smallest MIDI Synth
The NT/2k/XP installers prompted the user to load a controller driver from a floppy. Would this serve as a fix for the problem you describe or are you referring to installing Windows XP on something modern-day?
How to teach sensible elementary statistics to lower-division undergraduates?
With a significant fraction of Internet traffic (and all eCommerce traffic) end-to-end encrypted, is it really realistic that they would have sensitive data (usernames, passwords, real names, addresses, credit card information, etc.) in memory of an AP? This is the point of Let's Encrypt, after all, to close the exposure that we give to our ISPs and our ISPs ISPs.
“once we have automatic driving cars” is overly optimistic. There is no reason to believe self-driving cars will ever exist in most places in the US.
How would it kill it?
I'm relieved (no really) to know you too find Anki/flashcards being ineffective when the content is not, to steal your word, "atomic". I felt as I was using Anki all wrong. Actually, that's what led me to search all over and found most uses were for language learning.
Easier but that’s cheating LMAO
This is dumb, I cannot say it more specific. UX today is both an area of expertise and a set of tasks to be done - making everyone doing it is the same as making people from the whole organization writing software in addition to their other daily tasks. It’s not just that most of people are not qualified for this job and need to be educated and get necessary experience, it’s also about them losing their focus. UX as a discipline was created because there was a need in specialization: the tasks that could not be done by other people and required a dedicated person to work on them. What is really necessary today is to go further and specialize more: stop talking about UI/UX and emphasize that UX is not UI. And even more: UX research is not the same as the interaction design or data science. And more: DesignOps is something that needs focus. And more: accessibility design is something that does require attention, focus and expertise.
And on my own re-read: "Current team members are prevented from moving to these countries and remaining in a role that prohibits it."

That would seem to apply to current employees in Russia / China who are in roles covered by the block.

Which is kind of A Big Deal.
Gravity keeps bank on the ground, thus physics funding is essential to the finance world. Imagine all banks floating away.
I did this during jury duty, it’s the only way I was able to take in all the information.
I see an obvious flaw in this plan.

How do you ensure the economic power of say, gay people, when they can be legally fired from their job for just being gay? When they can't even visit their dying loved ones in hospital because they're not allowed to be legally married, never mind get tax benefits or inherit pension benefits etc. How do you stop a majority from punishing them economically and punishing others who try to help them?

Can you talk me through how your approach would have worked for the civil rights movement in the 60s or how the various law currently being drafted that legally prevent people from boycotting specific countries would affect your plans if used against your suggestion?