skysight-inc/HackerNews huggingface dataset:
Ask HN: How dangerous is source code access?
For a small startup whose product requires source code access (think static analysis as a CI service), how dangerous is it having access to the (non-open) source code of commercial customers?

How do we protect ourselves from the risk of a "IP troll" trying to earn money by claiming that we have used their source code, looking for similarities between their code and ours if it comes to a court?

We are planning to have a free tier where anyone can sign up, and without any protective measure it seems that we are opening up ourselves to risk.

At the same time I realise that the situation of having source code access is common (GitHub, GitLab, Travis, Netlify, ...) - how do the big players protect against the same risk, besides having a formidable legal department?
It strikes me as a good play, if we were living in times that were normal.

Take 2019 for instance. If that scheme existed then, without any pandemic, it would be a great way to soften the exit and allow folks time to find new jobs.

But the world we're in now, not so much. It's pulling the band-aid off slower, and my take is, waiting for a hail-mary play when someone magically comes up with a solution for this problem.

My interpretation of all of this waves hand around at world leaders is that they genuinely believe science and technology work like magic, and will come up with something, soon.
There are tons of well-functioning communes, cooperatives and similar communities all over the world, doing quite well for themselves and the people who live in them and their surrounding communities. Many have existed for decades, such as garden allotment associations here in the Nordic countries. Freetown Christiania has been a cooperative commune since the 1970s. A significant percentage of housing here in Denmark exists as cooperatives, and the best ones have long waiting lists of people wishing to move in and join.

They tend not to shout a lot about how great and awesome they are, because that sort of thing goes against the idea and mindset.

Perhaps you should look beyond your own ideology, and you'll see that there are a lot more and sometimes better ways to do things than your particular way.
This makes a ton of sense. I assume it's smart enough to use data like your location to charge up all the way (or more than usual) if you're in some random hotel, instead of having to remember to turn it off when traveling.

If it's smart and takes all these things into account, that would be so much better than setting some arbitrary threshold (is 50% okay? is 80% okay?). Adding arbitrary options enables a lot of bullshit advice to spread.
I don't understand this, you just collect a list of people, then ask the business to reach out to them? Sounds like there will be a very low follow through rate
> Yet every year we have just a handful of candidates

You must have very large hands, unless you are only talking about major party nominees (i.e., winners of the first round of voting from the two biggest parties.) There's a reasonable basis, arguably at least, for limiting consideration to major party candidates, but the nomination process is part of the selection process and the candidates that enter that process, not just the ones that win it, are part of the choice set. If one ignores the process until after most of the critical decisions are made, the remaining choices are quite limited, but that is itself a choice.
Where is data outside any object accessed? Note that forming a pointer just past the end of an object is well-defined; only dereferencing it isn't.
Let's say that when you deploy, you want to direct 1% of traffic to the new code, then 5%, then 25%, then 50%, and finally 100%. And if monitoring metrics go red at any point, automatically roll back. A typical canary deployment.

How do you do that with a sproc? With normal application code, you can have the load balancer send an arbitrary percentage of traffic to the new instances of the service. A sproc binds the code and the data together. But you only have one database, so there's no way to do a gradual deploy of the code. That would be like doing a gradual deploy of a schema migration. It's only possible if you have a lot of databases.

Also unless you're using MS SQL server, debugging sprocs is a pain. The only workaround I've seen is to add a debug or loglevel arg to the sproc. But actually pausing execution and inspecting data? Good luck.
After Michelangelo died, someone found in his studio a piece of paper on which he had written a note to his apprentice, in the handwriting of his old age: “Draw, Antonio, draw, Antonio, draw and do not waste time.”

(The Writing Life by Annie Dillard)
This article uses Sweden as some kind of null-hypothesis reference, but it's important to understand that Sweden is only one of the least locked down countries de jure.

Sweden is de facto as locked down as most other countries, everyone that can work from home does so, schools are almost empty, restaurants are almost empty, people are traveling less, the border is closed, etc.

So it's not the case that a country can completely lift the lockdown and expect to continue along the same path as Sweden, you have to look at and model what people are actually doing, not what they're told to do.

Still, the article is very interesting because it shows that every country is suppressing the exponential growth somehow, it's not really out of control anywhere anymore.
Dashboards Are Dead
LinusTechTips recently took a look at a gaming laptop with the same APU and were super impressed with its Intel-scorching performance: https://www.youtube.com/watch?v=ZYqG31V4qtA
What happened to irc.com? It seems like you had pretty big plans for it (especially with the letter you wrote on it), but it doesn't seem to have gone anywhere.
Here's two that prove it.

[0] - https://blog.codinghorror.com/quantity-always-trumps-quality...

[1] - https://www.amazon.com/dp/0961454733/?tag=codihorr-20
No touching! https://www.youtube.com/watch?v=_LEJ6tZI7_k
Thanks for the tip! I would imagine URLs in the text would be auto-recognized but it looks like not :/
That still isn't decentralization: There may be a bunch of mirrors, but there is still a single "source of truth". One entity determines what is acceptable and valid in a repository model, as the entire ability to trust packages you install tends to be on the assumption that entity is making good choices.
this is not a delivery service - it's curbside pickup.
Facebook's Libra: national currency tokens, a new white paper – what this means
I would love to see a walk through of taking a container of unknown origin through a process to make it ready for a living space.

My uneducated assumption was that you walked into one and sprayed your sand/particle blaster at the interior surfaces until you've got raw metal everywhere, then you paint the interior with a metal sealant, followed by a powder coat. Then set up heating coils inside, take the interior temperature up to 210 to 220 degrees C, go back and remove the heating coils and then be ready to start installing flooring/walls what have you.

But I have no idea how practical that set of steps are, or even if they are sufficient. Hence the desire to see the process that someone has used successfully to prepare containers.
If we're doing T&M, it's pretty agile. If it's fixed bid - which is often - we are bidding on a release's worth of work and working them through. If we were to go full agile on fixed bid projects we would lose our shirts with a lot of indecisive clients. We also don't charge project overages on our fixed bid and guarantee our work.
I was in the hospital for a procedure a few weeks ago and it was empty. I saw maybe three people who weren't staff the entire time.
Know Why How You Should Do Air Quality Test to Check Quality of Air at Your Home
What I’ve found with Whole Foods delivery is that if you wait for a notification you’ve lost the slot. I use a bot that plays a loud sound when a slot is available and foregrounds the Firefox window. I then have to click the checkout flow immediately. If I’m even a foot away from my machine when it happens I lose the slot. I only get deliveries when I’m active on my PC.
prove what? That someone printed the anecdote in a book?
I just want to say thank you to Stripe for being amazing.

I'm just now dealing with canceling service with a traditional merchant account (I switched completely over to Stripe back in August), and the experience has been terrible and stupid.

Around 2003 or 2004, I was working on my first startup. I signed up for an authorize.net account through a merchant account called Capital Merchant Systems (later acquired by EVO Payments). At the time, the process required filling out a pile of paperwork, including writing an actual cover letter to get approved.

Things were fine until recent years, business for this particular service had slowly dropped to the point where it was no longer feasible to run through authorize.net. So I decided to finally make the switch over to Stripe (which I'd used for a number of years on another project).

Signing up for Stripe is so painlessly easy, straightforward, and friendly.

After switching my system over, I called and emailed my merchant account to cancel (this was in August). Then I called and emailed again in November. Then I called and emailed again in January.

All the while, they've been withdrawing from my checking account.

Then I emailed again in April, and filed reports with the BBB and FTC. Only then have I heard back from them, and they're claiming my January request is the first request.

So the short of it is, use Stripe. They are amazing, open, and transparent, their API is a joy to work with, and their dashboard is great. I wish Stripe was around 16 years ago when I first got started processing payments.

And DO NOT, under any circumstances, use EVO Payments. Cancelling with them is like cancelling a shitty gym membership - at the end of the day, you'll have to file complaints with every 3-letter organization you can think of, and file transaction disputes to cancel your account.
I'd love to see a comparison between this and a $3000 Macbook Pro.

Plus, look at all those ports that Apple will never give you!

Thanks for the link, this might be my new laptop.
Global warming is melting away the glaciers.
Did you publish your findings somewhere?
That's tempting, but as long as a standard has design flaws, there will be libraries out there that don't prevent bad configurations, and people (through innocent ignorance) will use them and end up in a bad place.
Keep an eye out! :)
It's just a Linux VM. Here's a link (search for NC6 Promo on the page): https://azure.microsoft.com/en-us/pricing/details/virtual-ma.... Once up and running you can ssh into it and install whatever you want onto it.
Second that. I've taken excellent videos freediving with a GoPro HERO7. It is color corrected for underwater lighting and waterproof down to 10 meters/33 feet.
Show HN: Chatty – a Slack app that help you stay on top of your networking
I share your interest for a silent yet powerful homeserver.

Unfortunately, there doesn't seem to be any desktop motherboards for mobile zen2 yet.

Too bad. I would even settle on a NUC.
Terraform as a Server Provisioning I can understand. What I don't understand is: why would you use an Ansible script for server configuration rather than have a Template Engine (e.g. Packer) with a readymade image?
It's enough of an analogy to make the point, though. Most people's needs for letters security are option #2, not option #1. If you can get the email from source SMTP server to destination mailbox encrypted over the wire, then most people don't care if someone could possibly look at it in your mailbox. And, very few people mind that the "lost letters" division of the postal service opens their mail and packages to try and return it to them when something goes wrong.

While I understand that in an ideal world, #1 would be perfect — in today's real world, #2 would be better than the often-unencrypted mess we have today. I've seen a lot of personal mail servers that no one set up encrypted SMTP on, and yet their owners have GPG keys published and signed. Transport encryption and end-to-end encryption are not conflicting goals.

I refuse to accept the defeatist view that "encrypted email cannot be made mandatory without breaking compatibility anyway". I'm not interested in building an encrypted utopia that doesn't interoperate with email. Every social network and web forum for the past 20 years has tried to do this, and none of them have replaced email at all.

I'm interested in protecting people who think that email should be safe in transit — the same expectation that postal services give them about their mail today — by seeing everyone who operates an email server enable transport encryption. It's not a big ask, and it doesn't prevent GPG from succeeding.

But it might have prevented some random person who probably doesn't need ciphertext encryption from wanting to use GPG if they'd realized that option #2 was in place for them, and thus prevented this entire article's UX nightmare at all.
DARPA Seeking Disruptive Capabilities for Future Warfare
Does anyone know of something similar for matching technical people with non profits? I’m suddenly filled with free time and want to find a non profit with short term technical needs. Ideally looking to help lgbtq organizations if that helps
And here's the text in another book, courtesy of Google Books, on page 264:

https://books.google.com/books?id=TuvOng_Yh6wC&newbks=0&prin...
> He might have chosen to not disclose his discussions with other people.

Including the SEC?

> He might have meant it in earnest.

You can be as earnest as you like and still be capable of making statements that are factually incorrect. As to your previous point, one would presume that an absolute defense against the SEC's charges about making materially false statements would be to show that said statements were not, in fact, materially false. That didn't happen though.

> For fraud, surely he must have had the intention to profit from it personally at the expense of shareholders?

You mean the hope that the share price would go up, with him as a large shareholder. "At the expense of shareholders" would include "shareholders who may have bought, sold, or changed their strategies, or not, based on Mr Musk not making said statements as a matter of fact, that weren't".
for the most part, the grocery stores themselves don't seem to make any effort to prioritize curbside or delivery slots for high-risk people. why should a third-party notification service be expected to do so?
In fairness, CPU segmentation is not just disabling working hardware. Silicon is a lottery and a many dies will be only partially working, or have worse performance than other dies, so you fuse off the bits that don't work and sell the die as a particular SKU. However, if you don't have enough defective dies for a particular low-end SKU, I assume that does result in working parts of dies being fused off.
CFEngine is also incredibly well designed. It's almost as if it's creator took several years off just to perfect its... wait, that's exactly what happened.

I have to deal with ansible at work, with all its warts and accidental misfeatures. Doing CFEngine for my personal stuff is a bliss.
Mini-ATX FF too big? If not, something like this: https://pcpartpicker.com/user/spety/saved/#view=QR7ZZL

(disclaimer, double check my research especially clearances for the cooler if you move forward :))
> of course solar can't really power everything because half the time it's dark

And this new thing called internet could never work because half the time people is sleeping so trying to access a webpage in Australia would work only 12 hours a da... oh, wait...

We have batteries.

> you'd need a solar farm about the size of Spain

https://mapfight.appspot.com/sahara-vs-es/sahara-desert-spai...
I think Taleb said coronavirus isn't one because pandemics are a known thing.
It does, the more young healthy people are immune, the less likely the virus will make it to them.
Structural modular with offsite prefab, for sure, but I don't know any specifics on the Wuhan hospital builds. From some other coverage, the units appear to have ISO corner castings, but the proportions don't look like 'normal' containers. There are other proprietary connectors for volumetric prefab - like Z Modular's "VectorBloc" - but these don't seem to be using anything fancy.

What stands out to me, watching the time-lapses: SO. MANY. WORKERS! They are everywhere on site, moving constantly, and the equipment never sits still either. That workforce, along with the certainty that zoning and environmental impacts weren't even a question mark show what the "command" side of a hybrid economy can pull off.
Agreed embedded is probably a good way to go. Much simpler to understand systems, along with simpler ASM.

Many schools in the US have organized robotics programs, but those are expensive and require a lot of support. Making a demo is know how, and some HW.

Probably the main thing missing is the the materials. I've been skimming through the links here to find good starting points. Its a lot to collect -- many of the entry level techniques are so old, they're not always written up (or the target audience is different).
This post needs some positivity!

The Wikimedia Foundation is still hiring many of the same positions we were before all of this. You can see the currently-open positions at: https://wikimediafoundation.org/about/jobs/

They've been an outstanding employer during these difficult times, as announced publicly on our blog: https://wikimediafoundation.org/news/2020/03/06/wikimedia-fo...

Come help us bring free knowledge to the world!
This was the easiest way that we thought of to bring this live. We definitely don't want to be the transaction layer here. It's built mostly on goodwill of the patrons of those business. We're definitely open to suggestions!
A new PC for my studies
Well yes it’s an unusual way of looking at one’s self and the unusualness of that awareness probably makes me strange. But I am ok with that.

I write because I write. It might help to think about an analogy to growing flowers in the garden instead of cash crops like cotton, tobacco, or weed. While cash crop husbandry is interesting in and of itself what cash crops produce is cash. Of course cash is useful but it’s one of the less interesting things a person can spend their time making and thinking in terms of cash tends to make people a bit tedious to be around, well at least it makes them so for me because they’re often preoccupied with Bol Weevils and spot market prices and the cost of diesel for the truck and payroll taxes.

On the other hand, when a flower gardener looks up from their work they are likely to say something practical in general like “I’m thirsty” and occasionally something about our shared experience such as the weather. But sometimes they say something insightful because of all the time they spent not thinking about all the things one must think about because those things are part of what “growing cash crops” means when someone says it and they are not part of what “a flower garden” means.

I enjoy writing. I write because I write. I write because writing is productive. I write because writing produces interesting things.

I wrote this with my thumbs because my phone was in my hand when I read your comment. I just got on with the work. I didn’t futz with switching devices to use my Unicomp model M keyboard because doing so would have changed what I wrote by forcing me to write faster. Not actually forcing me of course but the interruption would require me to chase what I was thinking instead of thinking it. And of course the model M is an awesome weapon for arguing the internet. So awesome that the pleasure of forum combat would also change what I write. Buckling springs machine gun clicking like the old days.

So I optimize for doing this because this is what I do but that means not optimizing in the ways people mean when they say “optimization” in regard to writing on the web. It means optimizing with the premise that writing this matters and is the goal and that it was a productive day looks like. YMMV.
That is pretty ridiculous. When I was laid off, I was given 2 months of full salary upfront. Of course, CA raped me on the taxes, but that's a discussion for another time.
Office campus proposed at site of Fry's Electronics store in N. San Jose
My company was featured in a story on Herman Miller, where we spent more on Chairs then we had in revenue for the entire 24 months of our existence.
Sorry - yes ML tasks. The pricing is on par with a D8v3 but offers more RAM and a GPU, but likely with slower CPU perf (though I haven't benchmarked the machine).

My laptop doesn't have a discrete GPU, so I can't do any ML tasks on it so running a Jupyter server on a remote VM is my way of doing those tasks.
Show HN: Crib-note – Collaborative study notes. Edit, make and share study notes
Lots of good reasons. In hardware your costs go down and quality control goes up if you can re-use parts. It's better to have one circuit board for everything, and enable or disable features as needed. Sometimes this means an end customer can enable hidden features, but sometimes they are left disabled for good reason (for example, too much heat for a particular mechanical design)
And here's audio of the authors saying that it's a true story:

http://www.innonavi.com/wp-content/uploads/2017/04/David-Bay...
"The project would require demolishing a 283,200-square-foot Fry's Electronics store. The warehouse building also serves as the San Jose-based company's headquarters."

Fry's is dead. Long live Fry's!
I have yet to run across a cryptographer that I trust whose opinion differs significantly.

But I have no trouble finding ones that I trust who agree with the key parts of that rant. For example https://www.schneier.com/blog/archives/2016/12/giving_up_on_..., https://blog.cryptographyengineering.com/2014/08/13/whats-ma..., https://dev.to/artis3n/encrypting-files-in-a-post-pgp-age-59... and many, many more.

Whether or not you can trust your phone doesn't change that PGP is missing nearly 30 years of what we've learned about best practices for encryption.
> Let's say that when you deploy, you want to direct 1% of traffic to the new code, then 5%, then 25%, then 50%, and finally 100%. And if monitoring metrics go red at any point, automatically roll back.

> How do you do that with a sproc?

Wrap the real sproc (well, the set of real sprocs, since old and new will sometimes coexist) with a wrapper sproc that probabilistically directs to the appropriate working sproc based on a table value (or anything else the sproc can read) that is updated to reflect the current stage in the conversion process, including any monitoring-based reversals.
Back when gopro first introduced 4k video on their cameras, it was an impressive feat for the price compared with the many thousand+ dollar cameras available at the time.

Most midrange+ phones these days can do 4k video. Sure they don't have a wide angle lense, but that is something like a $30 purchase on your favorite eretailer.

The problem is that gopro is still selling the same midrange sony sensors, and expecting a premium. If they were doing 8k@60 FPS, then they would have something that could command the price premium vs the dozens of competitors that have discovered sony sensor+cheap SOC+battery = action cam.

Or for that matter, they could move into the mirrorless camera market, but they are only releasing gimicky UI upgrades and drones to attach your camera while wondering why a lot of people are just buying cellphone mounts for their bikes/etc.

So why exactly are the gopro's so darn expensive given its just using an off the shelf Sony IMX277 sensor (https://gethypoxic.com/blogs/technical/gopro-hero7-teardown) and a super low-end SOC?
Try a $20 upper back brace. Wear it for 20 minutes at a time while you're working. It conditions your upper back to straighten up and become less rounded.

https://www.amazon.com/Posture-Corrector-Men-Women-Truweo/dp...