skysight-inc/HackerNews huggingface dataset:
Articles like these are a great anecdote of the ease of getting people into security.

Despite the need for people, you'll still encounter a lot of barriers to getting a job.

It doesn't make sense to have a bunch of hoops to jump through when the demand is there, you can train people easily, and there are people willing to learn.

You can disregard 99% of calls-to-action regarding security hiring and talent demand.
> You can't compile the code of scripting languages

Of course you can. Compiling is a process that takes some code as input and produces other code as output. The output code doesn't have to be at a lower level of abstraction (like assembly or machine code).

A compiler that produces code at the same level on abstraction (eg. going from TypeScript to JavaScript, or newer JS to ES3 JS) is often called a "transpiler" but a transpiler is just a type of compiler, and it's totally valid to call it such.
That's a bit of a misconception. From what I understand, Amazon's non-AWS branches don't get deeply-discounted services from AWS. There is a discount, but it's not enough to turn dark skies into sunshine and rainbows.

Amazon tends to want every part of itself to be in ship-shape, and giving itself a massive discount would discourage efficiency in non-AWS parts of the business.

Disclosure: neither a current nor former Amazon employee.
We messed up a bunch of the first ones and we don’t really have centralized capacity to manufacture the tests at scale because of our privatized, outsourced healthcare system, we’re being prevented from using overseas ones (the senator from Hawaii is publicly begging Japan for tests), the CDC and other responsible agencies are in disarray from GOP gutting and malfeasance.

Take your pick.
"I'm a businessperson, I don't like having thousands of people around when you don't need them," Trump said.
The number of people I've seen 'properly' covering their mouth when they sneezed, with their hand instead of, say, elbow sleeve, and then touching all the things, is worrying.
Gah, the data in this article is literally medical science. It's reporting on a paper from the Chinese Journal of Epidemiology, which it even links you to directly.

Now, maybe this science is wrong. If you want to make that argument, though, you need to make it with evidence. You don't get to dismiss it like that without doing your own science.
Nothing quite like the “maybe” credit backed SLA.
> And they're going to restore extension functionality

I put the odds of that somewhere around the same as the odds that GNOME Screensaver will ever support any of the xscreensaver demos it claimed it would … which is to say, I'm not holding my breath.
Many best practices can be done in that context:

1. Wash your hands frequently

2. Especially wash your hands before eating

3. Practice not touching your face. In particular eyes, mouth, nose

4. Keep distance from people. Aim for 1.5 feet. Double that if person coughing or sneezing

5. Don’t shake hands

6. Avoid large gatherings

7. If sick, take sick days

8. Watch out for objects many touch but which are infrequently cleaned. Doorknobs, pens, elevator buttons, etc. Using your elbow or sleeve is better than your hand. Once community spread starts, wear gloves.

More here. If everyone did the above the R0 would drop.

https://foreignpolicy.com/2020/01/25/wuhan-coronavirus-safet...
I believe it falls under "Incendiary or Demeaning Content" (https://support.google.com/youtube/answer/7354993?hl=en). And I wouldn't be surprised if a lot of schools consider that inappropriate for e.g. middle or high school (though I certainly haven't taken a poll).
That's the core issue in my mind -- YouTube et al. are publishers when it benefits them and platforms when it doesn't. They can't simultaneously identify as press but then not be responsible for user-uploaded content.
Yes, just like the freedom to spread fake news and twisted facts that PragerU is using.
That was my conclusion looking at them both last year. Hasura had an amazing first-time UX, but postgraphile felt like it was built with production concerns in mind (testing, integrating with larger codebases, easy to add custom or wrap generated CRUD resolvers in js/ts). The most off-putting thing to me, at the time, was that Hasura's solution for auth was to spin up a separate auth service. I prefer a flexible monolith for anything with less than 10 devs working on it. Looks like postgraphile has started paying attention to the first-time UX, but still not as friendly as Hasura's: https://github.com/graphile/starter

Both feel kind of limited by forcing you to encode a ton of logic in SQL which must be migrated vs a mongoid model you can just tweak and commit, but I guess I'm old school and what's old is new again.
There are a lot of comments here suggesting that this case is cut-and-dried obvious. YouTube is a private entity, QED.

This case is more nuanced than that, and part of an ongoing, evolving understanding of the purview of the First Amendment in the United States.

(NOTE: IANAL, much less a constitutional law scholar, I'm just digging into some news over coffee as an interested citizen)

Poking around the case materials a little bit:

PragerU lawyers reference a decision
(here: https://caselaw.findlaw.com/us-9th-circuit/1332974.html) in which a corporate entity tried to remove street preachers from grounds (the Rose Garden) partially leased from a public entity (the City of Portland). The court found in favor of the preachers, holding that the corporation effectively was a state actor over which the court had jurisdiction.

If you read the reasoning in that case, you'll find reference to other cases in which the courts tried (unsuccessfully) to hammer down what counts as a state actor. From a very cursory reading there's substantial jurisprudential churn around the notion of "state actor" - there are commonly accepted "tests" (which are sort of like thought experiments in philosophy), a substantial amount of common sense, and a large margin of error involved in determining whether or not a private entity is behaving in a way that might run afoul of restrictions placed on public actors.

It's clear that there are cases where publicly owned resources are leased to private entities, and that "speech" happens over these resources (broadcast frequencies, ISP rights, publicly-owned domains, etc.). There certainly are private actors in this space that do fall under the purview of the First Ammendment.

Again, I don't think YouTube is such an entity - and the courts agree - but this is a space where limits are evolving and being tested all the time.

edit:

I enjoy the court's somewhat punchy decision:

Both sides say that the sky will fall if we do not adopt
their position. PragerU prophesizes living under the tyranny
of big-tech, possessing the power to censor any speech it
does not like. YouTube and several amicus curiae, on the
other hand, foretell the undoing of the Internet if online
speech is regulated. While these arguments have interesting
and important roles to play in policy discussions concerning
the future of the Internet, they do not figure into our
straightforward application of the First Amendment. Because
the state action doctrine precludes constitutional scrutiny
of YouTube's content moderation pursuant to its Terms of
Service and Community Guidelines, we affirm the district
court's dismissal of PragerU's First Amendment claim.
Straws are neither here nor there. More power to you on whatever choice you make.

The point is these measures solidify indoctrination. Let us tell you what to do. “We’ll think it through for you. Here is what’s good.” And as kids grow up they grow up trusting these voices telling them what’s best for them. It undercuts their critical thinking skills. It’s one big “YEA”.

Rarely are they asked to follow the rabbit hole or all the unintended consequences. But it makes people feel good about “having agency” and “doing good”.
Wouldn't iLO be even more important if the server is meant to be deployed at a site with no technical staff?
Yeah, you just lose 6 hours of prod data on gitlab. :)
I guess we'll find out how susceptible viruses are to propaganda, political spin, and troll farms...
Yet you can't mention all the Charile's to Bobs on the planet like FB.
The same rule as for any critical system applies: Make sure your site uses 2 ACME providers and implement fallback on failure.
Yes. But the guidelines also say If they'd cover it on TV news, it's probably off-topic.

An awful lot of what gets discussed here, IMO, falls into the "generic story that would be covered on TV news" category. But that's just me.
I believe it falls under "Incendiary or demeaning content" (https://support.google.com/youtube/answer/7354993?hl=en).

Edit: other commenters (https://medium.com/@ephromjosine/okay-prageru-lets-look-at-w...) note that it may very well simply fall under "Mature Subjects" (terror, war, crime, politics).
>Softricity was absolutely amazing but shelved

Why do you say that? I thought it was just renamed App-V and it's still going strong to this day.
https://docs.microsoft.com/en-us/windows/application-managem...
I've been working on this problem for a few years now. The problem is systemic. You can solve the retail/consumer level issues but the big problems are market-level.

Here are a few facts often overlooked because they aren't surface-level.

- 1.3 billion metric tons (2,866 billion pounds) of food worldwide are produced and not consumed each year, representing approximately one-third of total food production by volume (FAO, 2011).

- Most importantly, nearly 40 percent of losses in North American fruits and vegetables occur at the farm and distributor level...before it gets to the consumer.

- USDA ERS: "The inelastic nature of fresh produce demand causes prices to fluctuate rapidly due to changes in supply. Prices fluctuate daily and can often cause the value of edible product to drop below the marginal cost of production. Depending on where and when the price fluctuations occur, produce could be left in the field, discarded at a packing shed, or dumped from the back of a truck."

- Growers today earn roughly 30 cents for every dollar their products command at the end-customer point.

It's a market system problem. It's a middleman problem. It's an incentive problem.

It's going to change but it will take time and a willingness to ignore sexy-looking things like Imperfect Produce and the like.
>Note that the Sentencing Reform Act of 1984 has increased the fine for any criminal misdemeanor to as much as $5,000. In practice, though, no one has been prosecuted for not filling out the census since 1970, according to a 2014 Politifact article.

That article is wrong, and the fine is absolutely not $5,000. If that article were correct, then there would be no federal fines under $5,000 anywhere. This is misinformation that the census bureau likes to spread around to scare people. In face, the Sentencing Reform Act of 1984 applies only to criminal cases.

This means that the fine is actually $100.

I went through this rigmarole when I got one of those off-year census forms during the Obama administration, asking about what my family eats, how many toilets we have, etc. I refused to fill it out. A guy showed up at my door. He showed me the brochure that said it was mandatory, and what the potential fine was. The same $5,000 number was quoted. I told him I would not be participating in this program, and that his brochure was lying because this was not a criminal offense. He agreed it was not a criminal matter. And that was that.
Better option is graceful degradation, just Target those specific problematic UAs for the other input type.
This should be a state provided service. Or provided by the UN. Essential stuff like this or root DNS should be a planetary responsibility.
Get Ready for Walmart Prime [Walmart+]
The test-kit that the CDC sent to local labs had a faulty reagent, so all test requests have to be sent back to the CDC.[0]

Local labs could develop or purchase their own test kits, but during an a public health emergency, they must get FDA authorization before launching such a test.[1]

This seems to me like a giant institutional and bureaucratic screw up.

Hopefully the FDA may be finally getting its act together and fast-tracking approval of local tests: https://twitter.com/ScottGottliebMD/status/12330216819181936...

[0] https://www.politico.com/news/2020/02/20/cdc-coronavirus-116...

[1] https://threadreaderapp.com/thread/1231944326827081729.html
US pneumonia rates are under very close scrutiny. There is no spike of pneumonia anywhere currently, which means there is likely no huge cluster of 1000s of people infected. That's why it's low risk as in chances of catching COVID-19 is very low. But this doesn't mean they will be able to contain it.
Yeah I saw that and was like, 'a 2GB Pi 4 is $35 but a 4GB Pi 4 is $55? That's most of the way to buying two 2Gb Pi 4s'
Very cool but can you fill in the eye whites instead of leaving them as background color? The characters looked really odd with a dark mode extension enabled so all the eyes were completely black :D
Related, How does one receive a webhook in Hasura? Say I need to take some action on a Stripe rest webhook. All the docs show sending events somewhere, how about receiving and transforming data from 3rd parties?
See point 3, this is a complete redesign so they don't have support for any other extensions yet, compared to the existing Firefox on android. But what irks me is that they will only support "recommended extensions" in the near future with no indication on how to install "unsupported" extensions or how to get "recommended".

Mozillas own FAQ on the subject, with many more questions in the comments there: https://blog.mozilla.org/addons/2020/02/11/faq-for-extension...
Thanks for the elaborations! Very informative.
In summary the main issue is that, according to the spec, `<input type="number">` is only for numbers that are going to be parsed into a Javascript number. It has to make sense to increment, decrement or do other numerical operations on it. It's not to be used for strings or identifiers that just so happen to be numbers, e.g. credit card numbers. I'll admit this is slightly surprising to me but it does make a certain amount of sense.

The solution is to use `<input type=”text” inputmode=”numeric” pattern="[0-9]*">`.
> Input sanizitation doesn't work, because it doesn't know what is dangerous and what is not dangerous.

This is only true if you write or use shitty validation rules. You act like its impossible to do it right...it is not.
Seconding this recommendation. Google Earth VR almost brought me to tears (in a good way)
There's no sides here, and the particular reason for failure doesn't matter. This is a disease that will kill people. Letting people go untested out into the wild is not going to help.

People fuck up, that's what people do, leaders catch and acknowledge failure early and try to fix it. Unfortunately, at this point, people will die that didn't have to. And that's going to be because:

1. Tons of people weren't tested that should have been.

2. People can't afford to get a test because of the health insurance situation in this country.

Aggressive no cost testing would help, I'm sure trump is going to announce that here any minute for a problem that he doesn't think is real.
Are any of the other providers this big? 10% of all websites and growing. If the NSA get hold of the keys then it's just like the old days, or am I missing something?
Borderlands 3 Latest Hotfix Update Drops Today with Weapon Changes and Fixes
Raspberry Pi 4 Linux computer gets twice the RAM and USB-C power fix
Yeah, really hoping someone else will come along and give me alternatives though. Cloudflare is a bit iffy.
> It's "you can now get the 2gb version for $35, which was/is the price point for the 1gb version", not "raspberry pi now has double the RAM".

Yeah, I was expecting an 8GB model :'(
That was insightful to some point. But, of course, the relevant metric is "expected availability" -- before I decide to go on the service; therefore, not the same as "customers served". If I have to think about downtime then my experience is degraded; moreso if I have to delay and batch planned interactions (all of which will later count as successful!)

[Edit: To the point: a high rate of randomly-timed failures is a kind of degraded experience, but not as critical as blocky patches of downtime. A 1% rate of randomly-timed failures is much much much preferred than having the service go out three straight days every February.]

Also: uptime is not the same as "customer delight". It's all about time.
Haha yeap that was the first I did. Thanks
What a strange way to phrase it. It sounds like you're suggesting the reason students go to school is because parents don't want to deal with childcare.

How is school "used" in other countries, then?
Awesome! Since the YouTube staff predominantly aligns with me ideologically (coastal progressive), it makes me so happy that they can shut down the people who I intellectually disagree with! I mean, they're all actual literal nazis anyways, right?! Yay legal technicalities, boo foundational values that make this country a haven for freedom and liberty.
This isn’t true. Containing the spread through mass testing would allow us to more appropriately measure the response and direct resources accordingly. Every epidemiologist I’ve read says the lack of testing is a very concerning in terms of our ability to address and respond to the pandemic.
I use Linode and I've had great experiences with Digital Ocean and Prgmr.
Maybe Sanitizing is the wrong word for what I'm doing. For example, I need to strip marketing/tracking information from URLs before saving them or else someone coming from Google will have a different URL than someone coming from FB and then the comments won't load.

I guess I meant normalization.
Can Congress vote to provide emergency funding to the CDC to make up for the cuts?
These aren't the same things. Hasura is not an admin interface, although it provides something like one. It's an application API.

The django admin interface is not usable by a frontend as an application API.

Django requires you to "meta-model" you have to write Python classes that map to your tables, this is usually duplicate work.

Django's ORM must support many databases, so it produces "least common denominator" SQL and is (stock) oblivious to Postgres' many enhanced data features, you are forced to use various community sourced extensions to get access to features that have been in postgres now for many years.

Django's security system is django only. You are forced to go through django for access control across your business. Eventually this abstraction leaks, and someone starts logging into the db from some other framework and now you have two problems.

This is my opinion and I'm sure I'll get downvoted for it, but Django, Rails, Node, all the Java frameworks, all the meta-modeling and NIH syndroming, are all utterly obsolete. Everything they do can be done in 99% SQL by a data scientist with the help of a competent DBA. "Web application programming" is going to go the way of the dodo bird and devs who don't start learning higher level skills like complex SQL, statistical modeling, linear algebra, and to either be a competent DBA or learn how to treat them fairly with be the first batch of programmers "automated out of a job" by tools like Hasura.
Too right! Low risk and unknown risk are very different things.
There is such a demand for phones in prisons that there are companies that manufacturer "prison phones" that easily fit into a prison wallet.
Mini moon orbiting earth for 3yrs leaves in April 2020
Just because a customer has access to L2 fabric via a VLAN between customer's hardware does not mean the customer has access to be able to tweak ToR switch configuration.

Using BGP on a L2 vlan for handling a single digit number of IP addresses allocated to the entry points is akin to using K8S to host a static HTML page.
> However the inputmode attribute is now supported by all the mobile browsers we test in.

This isn't extensive, which might be a tad misleading if you don't double check. They test on Chrome & Samsung for Android, and iOS is only the one engine.

And those three browsers seem to be the only mobile browsers that have implemented it. (Well, Opera Mobile as well). [0]

Desktop support is also extremely spotty.

This seems like it might be leaping the gun on expecting this standard to pick up the slack.

Whilst they might feel the support is there for their particular audience after 2019, I wouldn't, and would suggest that you need to check your particular audience closely before following this advice for your own site. (Which is fairly generic advice, but appropriate.)

[0] https://caniuse.com/#feat=input-inputmode
Maybe this will cause a number of people in the US to question our culture of "shut up and work, work, work" that encourages people to suppress humanity, vulnerability, and illness in the name of making their bosses more wealthy.

Nah.
This is really cool. Everyone looks a bit... wispy? though
Show them how easy it is to catfish online. How easy it is to fake even a live webcam.
> Section 230 gives special protection on the assumption that platforms aren't involved in selecting what users post.

I don't believe that is true. There is nothing in the law that says the platforms can't select or edit what their users post.

> No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider.
That one probably sells like hot cake. There have been shortages on it for a long time since release.
The Ultimate Guide to Scrape the Web Without Getting Blocked
This argument has become a meme at this point. EFF debunks it.

https://www.eff.org/deeplinks/2018/04/no-section-230-does-no...

>These are inherently conflicting things. Section 230 gives special protection on the assumption that platforms aren't involved in selecting what users post. But then with the other hand, platforms are selecting what users post via their content guidelines.

No. If HN removes spam or off topic content or anything else, it does not automatically mean that it's suddenly liable for someone posting libel and getting sued over it. That wasn't the intent of the law from the text, and it was never interpreted that way.
Show HN: Alphacortex (for AWS) – a consolidated reference to all things AWS
No, it’s not. My parents barely even know how to use YouTube, let alone use it regularly.

You spend too much time in tech and you get blinders and literally start to think that nothing else exists. Most people still get their information from television and, believe it or not, radio.

YouTube just makes video hosting easy. You have a freedom of speech, not a freedom to a guaranteed audience.

Have you ever actually seen someone in a public square going on a rant? They are often lucky if they reach a few people.
While I am quite sympathetic to the argument, PragerU would need to disagree (if we assume they actually believe their videos are true). So they are American conservatives in the sense that they argue that free markets have the right outcomes, and more importantly they are originalists, that is they argue that one should interpret the US constitution as intended when written, not in a sense, what the principle would tell one when we imagine the US constitution was written today.