skysight-inc/HackerNews huggingface dataset:
Ask HN: Cease & Desist on using the word egress. Sign it away for eternity?
I'm a small time founder of a TLS firewall. It is published on AWS and GCP marketplaces as 'secure egress gateway' and allows outbound/egress VPC traffic to be filtered by TLS versions and hostnames (which are set through the parameter store in AWS for example.) It's DPI and not a proxy.

Last month, received a C&D from lawyers of a co that holds trademark over the e word. So far, I have agreed to remove all use of the word except in a descriptive context and the time has come to sign an agreement with the other co.

The proposed agreement is perpetual. My lawyers strongly suspect the other co would refuse to agree to include a term that the agreement terminates after a set period of time, or if they were to lose all of their registered trademark rights in that word. Lawyers are funded by an insurance policy I had luckily taken out and bill every 6 minutes of their time.

Should I push back on the perpetuity of this agreement? Should I get a second opinion?
If someone made tools that were simple, flexible, and easy to use for exposing a SQL wrapper around your underlying business logic layer, then I would happily use those tools, probably alongside stored procedures to avoid arbitrary client queries.

As far as I know they don't exist. Things like foreign data wrappers in postgres are a pain because you have to drag in the entirety of postgres and because they're difficult to extend with your own functionality.
Neat! I love the model of giving powerful CI tools directly to the user. I ended up with a similar solution for my personal projects: a private bors-style CI GitHub bot, written from scratch, running on my own hardware, that I control via GitHub comments (the bot ignores comments from other users).

It's quite spartan, but it gets the job done, and I love that a) it's fast, b) I can see exactly what happened, down to ssh'ing into the build directory and poking around, and c) If there's a feature I want, I can just add it!

Here's my bot in action: https://github.com/lukechampine/us/pull/37#issuecomment-5936...
>...the PGP fanbase sees their 6 levels of trust as Zimmerman dogma that must not be altered under pressure of earthly realities, or security insights developed after the Code was written down.

I am an actual OpenPGP shill who is entirely in favour of a very conservative approach to the standard but I really don't see the problem here. Autocrypt is a separate standard. Clients can implement it completely and just switch the trust to OpenPGP if a PGP identity shows up. There is nothing wrong with a client adding some extra trust information to accommodate autocrypt.
Ha, thanks! I try to always stay 100% honest and true to myself and others.
This is massively informative. If anything pregnant women take a lot more precautions than other people. They are most likely under representing the overall infection rate.
As an outside insider (live and work here but haven’t gotten funding directly ever), here’s my question: Do you even need funding?

It’s never been this easy to start a thing. Build stuff, get some users, see how much they pay. Then go from there.

Most funded startups these days just feel unnecessarily bloated. Over engineered, over staffed, building run-of-the-mill boring stuff you could slap together in a couple afternoons using 3rd party tools and some glue.
They ran out of money, blew too much on marketing/brand trying to emulate GoPro’s model. There were other business issues, but that’s the gist of it.

At the time, their hardware was only 6 mos. behind GoPro and the software was much better. But I’m biased because, full disclosure, I used to work there.
It looks like Plangora made a youtube video recently. https://www.youtube.com/watch?v=Nqr5ly35tu8
throwaway account for obvious reasons.

Work permit workers (H1, OPT and L1-B in increasing order) are the worst exploited and least privileged sub group of the entire tech workforce.

Be it an upcoming economy with a flood of opportunities like we saw for the past 7 years or a downturn, like the one we are witnessing now, visa workers will be exploited no matter what.

They are not cheaper than non visa-dependent hires, but they are abundant, easy to hire, easy to fire, easy to replace, incredibly easy to bully, pressurize and basically exploit. The only barrier to total exploitation is the manager's own conscience and values. And we all know, values are easily compromised when it can help the bottom line.

Working on a visa in USA is fucked.
NHS in standoff with Apple and Google over coronavirus tracing
This is like complaining that you need to sign up for the internet using personal info to get onto the net.
Many banks are online-only without branches to go to.

Germany: You download the forms from the bank, then go for identification to the postal office. They check your id/passport. It doesn't cost anything (the receiver, the bank pays). In recent years you can even do that online via video chat (run by the postal company but I've also seen one startup doing it).
Agreed. Not opening up location.
Thanks, voz!

As long as that other platform has some API that supports link sharing, it shouldn’t be too difficult. What would you like to use?
I wasn't trying to make a point, and I don't have an opinion on California's taxes one way or the other. Please assume like the HN guidelines state, that I'm only trying to help everyone regardless of their views.
I believe the claim was that it's safer per terawatt-hour, not that it's absolutely safer.

Those are different metrics.
Of course ironically prosperity can be more dangerous dirtectly as risky "vices" like extreme sports and fast cars are expensive. The Kennedies tend to die doing activities restricted to or done far more often by the privledged.

Extreme sports may technically have a long term boost on life expextancy (from fitness) but short term would make a spike in accident deaths. I guess money is sort of the same way - better outcomes from affording healthcare but the temptation to take risks results in more immediate deaths.
On the other hand, I took a few semesters of elective photography courses in high school, and there’s a certain essential amount of time it takes to make a good photo print and run it through all the chemicals. It can’t really be compressed down shorter than about 35–40 minutes for the whole process with only limited ability to parallelize the work while maintaining quality, which makes it tough to make more than 1 or possibly 2 good prints in 1 class period.

All of the students I knew who focused on making 1 good print every day ended up learning more and making better images than the students who constantly tried to rush.
I mean, in some places, with some companies, they hire people as temps or contractors and later make them permanent. That effectively amounts to the arrangement you describe. This can't be obscure, so I don't understand your tone as if it was. It's just a matter of what kind of employment you consider worth applying for.
Using ConfigMaps to Cache?
I don't think SQL is a better API language than GraphQL.

1. First of all, they are designed with different compromises in mind, GraphQL is much less flexible language than SQL — no ad-hoc, joins, joins are predefined in the schema, no ad-hoc filters, ...

Now because GraphQL is a less flexible language it allows more freedom on the implementors side. Implementing GraphQL endpoint is as simple as specifying a set fo resolver functions (parent, args) -> result (of course there could be more sophisticated implementation but the point is that you can start just from that). Now if you want to implement a "virtual table" which would work with SQL — it's much more work.

I'd be very cautious to expose SQL based API (because the languages is so expressive). And if I'd have a task to make SQL less expressive to make it fit then it'd probably look a lot like GraphQL but with a weird syntax.

2. Secondly, SQL is not really as ergonomic as GraphQL for nested data. Even given the modern extensions, it is designed for querying relations, not for nested object structures we like to operate in our JavaScript programs.

3. And third, SQL grammar isn't as composable as GraphQL one. Look how GraphQL has fragments in the language to support composability. It'd be very weird to do the same with SQL. Or you'd need to extend it in some way which may be a good option but I haven't see such extension in the wild.

That said I still think there's some class of apps (internal admin UIs, dashboards, ...) which will benefit from having SQL-level expressiveness. For that I'd like to use something like HTSQL[1] — it's a language with GraphQL like grammar which compiles to SQL. HTSQL is quite dated (been around for more than 10 years but isn't popular sadly) but the concept is sound and its original authors are now working on its successor — QueryCombinators[2].

Now back to GraphQL, I actually think that the right way to define GraphQL endpoints which query databases is by mapping database types to GraphQL types using a language like HTSQL. We have that approach implemented here[3] We found it being A. much more flexible than doing automatic DB schema to GraphQL reflection and B. much more easy than writing resolvers manually. Of course on app startups those declaratively defined queries are checked against database schema so we won't have failures at runtime.

[1]: http://htsql.org

[2]: https://querycombinators.org

[3]: https://github.com/prometheusresearch/baseline-codebase/blob...
Imagine you bought a house from someone, went bankrupt and foreclosed, then heard from someone else that the previous owner had hardwood placed over a solid gold living room floor.
Stand up. Sitting all day just isn't natural, no matter what. Learn to do your desk-work from a standing position, barefoot, no shoes, and with a lot of little movements and stretching from time to time. And the workout ideas already mentioned are also great - build up your core. This is the way.
My biggest concern is data leaking, via web hooks, from other platforms into ours.

Most of our clients use Stripe for payments on our platform. They are connected via Stripe Connect. However a handful of them use other services from other providers as well also with Stripe Connect.

We are seeing web hook events not just for our own platform but also the other platforms too which obviously includes details about the transaction but also often with personally identifiable information such as name, email, address, telephone number.

Your support team acknowledged that they are aware of the issue. The response was:

"Because of how the design of the connected accounts are, any events from that connected account will be sent to all Platforms that the account is connected to. We do understand and see how this is a potential security/safety issue, and we have made note of this to our Connect team.

While we do not have any current plans to adjust this, we are going to discuss things with our Connect team to see if there is a way to we can make this better for our users."

I personally consider this a massive data leak because potentially sensitive information about customers is being shared to companies who have no right to access that information.

I really hope you can look into this.

Regards, Will
It's not the money itself that matters, it's the social proof. Since I personally have no brand, and nobody knows who I am, they won't take a chance on me. Even with lots of money, nobody is going to join a startup or give you the time of day. Admittedly you can do some marketing to change this, but that's not my area of expertise and not something I'm good at (I'm a technical person and a good natural leader).

It doesn't really matter that I've done well on my own, or that I've been privileged enough to work at a few successful companies. You need either a lot of Twitter followers or a big name VC backing you before anyone will take you seriously.
Clearview AI’s Entire Source Code Exposed in Security Error
I didn't see proving harm by COVID19 as a requirement for applying for the loan. The loan is to minimize unemployment claims. Without the loan I would've been looking to make proactive staff cuts immediately despite not being dramatically impacted by COVID19. With the loan I feel comfortable keeping my workforce employed. My understanding is the requirement to not pay back the loan is that you keep 75% of your staff employed but we will see what the SBA and banks require as part of their loan forgiveness criteria.

Another thing to note here is that despite not being harmed directly by COVID19 we are all suffering the indirect harm. Consumers are broke, supply chains are disrupted, air freight cost is sky high, etc.
That is amazing, well done. I think it deserves more discussion so hopefully I can start some.

I've dabbled in Haskell and Lisp but really just touched the surface.

My question is how hard was it to do macros with Haskell where I assume it needs to produce code that is strongly typed. If you write a macro that produces a typing error, does it just crash, or return a Err from a Either Program Err? But then you have something that could "crash", because what do you do with that Err. It would be probably impossible to type check a macro in general at compile time (as in the first compilation, not compilations done at runtime), since it has unlimited potential inputs.

Other question is how doe this compare to Racket? Did you use Racket to build this?
I had the issue that my charger was overheating so much it would stop charging entirely. Had to ask the IT guy for a 2nd charger so I can swap between the two to make sure my laptop wouldnt lose its charge. My former employer had us all with Macbook Pros even though due to the nature of our work we couldnt do jack while outside of the office. Still unsure why they didnt just buy us iMacs.
I bought a GoPro Hero 8 a month ago, and for what it is, it works well enough. But I've been really disappointed in GoPro's attitude towards openness. They've locked down the USB port, WiFi and the OS pretty much completely.

I think this is the type of company that would really benefit from an excited and engaged hacker community. The GoPro could be a camera-centric IoT device, used for a ton of things from webcams to 3D imaging to a bunch more. But there's no support at all for developers.

It seems like they were going in that direction early on, then changed their strategy and killed their SDK and dev program. It's too bad. This will definitely be my last GoPro as a result.
> mirrors

Indeed it is a problem. I hope we will soon solve it.

> instead of bash

Totally agreed bash needs to go. I was thinking lua for sake of also supporting Windows.
If I understand correctly, research about the death rate is based on people who were tested positive (any source that's based on the general population?). This, depending on the region, could mean people with severe symptoms or non-randomly-selected test takers only. This adds much uncertainty to the estimated overall infection numbers.
On my old Galaxy Nexus running CyanogenMod, quick charging had to be explicitly activated. I still think that off-by-default is the most sane configuration, as I've rarely needed it.
We did the same, but only about a month of food, and I ordered TP on Amazon when I started seeing shortages in other countries. (I have a respiratory condition)
It's good that they're picky about which WebRTC implementation they use. I've found that Google's tree isn't necessarily the best sort of thing for streaming video games. I think Parsec's R&D into the situation is a good fit for the use case.
When I was looking into it the "GraphQL" name was kinda misleading. It's not particularly graph-oriented, and not even especially good at representing graphs in general. Tree-oriented, a bit, I guess, which is a kind of graph. Maybe that's what they're going for.
M4.2xl and C5.xl are the most common.
Interesting, seems similar to Firebase's Firestore NoSQL database. In that you can create a complex query and receive real-time updates on each query.
This reasoning seems like it needs data. Do we have any proof that Coronavirus immunity is similar across different viruses? Why should we expect that things that have the same name have the same immune response? This is a pretty cavalier take when lives are at stake.
No, Nvidia Optimus is still an unsolved problem in Linux. Vegas run fine tho.
> Not sure a bout bike stores

Open and doing roaring business from what I can tell. Took my mountain bike to get serviced and my mechanic said he’s far busier than he anticipated and it’d be over a week before he could even get to my bike.
> I could see a barn find in bad shape suffering a lot more than that.

Yeah well, in between being a bottom feeder and looking for fun, machines usually come to me as project pieces rather than usable tools. :) I'd never opted to restore any of these rust buckets if I'd depend on them to do woodworking for a living; that said, the purpose of a hobby is to occupy my mind and give me a challenge that is rarely encountered in my day job anymore. So, the rustier, the better. :)

> I've somehow become a Delta man for the stationary tools, probably because of the ubiquity of their old stuff.

I can definitely relate to that, W-T makes a minority of my resto projects. Most of them are Delta as well, as I'm looking to build myself a fully equipped vintage woodworking shop. I'm almost there in fact, as several projects are nearing the assembly stage: a '64 Unisaw, a '52 HD Shaper (going in tandem with the Unisaw), a '54 14" bandsaw, a '60 combo sander, a mid-50s LD shaper, and a '42 6" jointer that I got for free in a total rust-bucket condition. That one was a challenge in itself, especially the motor.

It's just Walker-Turner machines are so beautiful, they're special. Next up after the lathe is a 1939 16" bandsaw, the final quest machine that I acquired last fall. I'll have to fight scope creep real hard on that one...

> My 14" band saw is (I think) pre-war, but the original buyer didn't spring for the cast art-deco base :-(

Ye shall seek and ye shall find, if you want to. :) Besides trawling your local Craigslist (that's where I find my projects), sign up on http://www.owwm.org and post an ad in BOYD forum. Cast iron bases do come up for sale somewhat regularly. Beware that even looking at that website is very dangerous, slippery slope ahoy. ;)

> Do you have pictures or a build thread on this project? I'd love to see it.

I don't usually take pics of the resto projects... I guess I'm just lazy. If you're into vintage tool porn, check out the OWWM community I linked above, and its sister site http://vintagemachinery.org. Lots of drool inducing pics there, I really cannot add anything that hasn't been done already. :)

> The paint job is not what anybody would call flawless, but at least it isn't coming off :-D

That's usually enough for many cases... If a machine doesn't have a sentimental value, why, just refurbing it to acceptable mechanical condition is par for the course. That's what I did with my current set of machines; no offense to Grizzly but their utilitarian cabinet saw aestetics do not really justify the amount of work that goes into stripping and repainting. A vintage Unisaw, on the other hand... I had to learn how to do cabinet scale electrolysis derusting, some basic metalworking, spray painting techniques, not to mention mechanical and electrical challenges. Heaps of fun! :)

Checked out your website... Wow. I have a long, long way ahead to that kind of woodworking projects. ;)
I’d be surprised if the risk wasn’t seriously mitigated by hiding that option in an obscure enough menu, or a command-line tool.
Credit where credit due - that's better than most private companies I've heard about. Even so, that's a low bar to clear. Ideally, my employer shouldn't even have a say in my decision to sell or hold my equity once I've earned it. That's a different topic.

Just to be clear, I've never worked at Stripe and have no personal bone to pick. I just think it's a shame that all this wealth generation is happening, and not only is the public frozen out of the growth, many of the talented people who made it happen are _also_ frozen out as well.
IANAL, but couldn't you incorporate a wholly-owned US subsidiary using something like Stripe Atlas to handle USD payments and reduce your fees?

By the way, my company has the opposite problem. Our Stripe account is registered in the UK and even though we process payments for Australian customers in AUD their local banks still charge them an extortionate "foreign transaction fee". This means that we had to open a separate Stripe account registered in Australia just to avoid that.
The coronavirus situation has certainly altered capital markets but outside of that your comment doesn't conform to the data. There was more capital deployed in the last several years, at all levels, then we've ever seen.
Start regularly attending yoga classes. This has improved my posture significantly over the past year. I personally enjoy power yoga classes that are more strength focused but all yoga will help with posture.
Thanks for the feedback :)

We are an API for cross-border payments. Our customers are international payroll providers, credit card companies, neo-banks, and other types of companies who need to process X-border payments in their application.

If you were an e-commerce store, we could certainly help you re-patriate funds via our web app, but that’s not our focus.

Are you having issues re-patriating funds? Happy to help in anyway I can!
There’s a few utility functions that come to mind. Git hooks, for example.
Well, there is the question, are there 4900HS laptops with Vega or just with their builtin graphics available?
GPG4Win has a GUI for keys and an Outlook plugin .. went smoothly for me. I have had enough of command line interface in my Micro VAX days)
Maybe that's a more productive way for you to work. For those who aren't HTML/CSS purists, we have Gatsby and absolutely no reason not to use React and all its productivity benefits in any and every web project we want, including landing pages. I'm ranking SEO pages and driving paid traffic just fine.
I thought the nearest one, only 4 light years away, Proxima Centauri b is quite habitable, with water and such. Best and nearest. Easier for a trip than 300.
It's much more complicated than a simple slow <--> fast continuum.

Elixir is pretty slow for simple singlethreaded CPU bound tasks.

It's incredibly good at multiprocessing, which is really useful in the websphere since your workload is much more likely to resemble thousands of simultaneous communications that need to not block each other rather than calculating a 13042345235223452 digit prime number.
That's the one I enjoyed, too.
Our grocer (HEB in Texas) requires you to have paid for your order to book the slot. My wife went to the store 2 days ago and was able to buy TP without any issues, but until recently, even a pickup slot wouldn't guarantee you any of the products you reserved.
Things like branch prediction, caches, instruction pipelining? Not really. People want the algorithm, not a difficult to translate implementation.
I wish I could say that was my experience.
Risk of Getting Sick from Covid-19 May Lie in Your Genes
I used Postgrest with React for a few projects awhile back. It was... okay. The problem is without having much of an ecosystem around it means there’s no established best practices and you have to kind of guess how to organize things. I ended up with a jumbled mess of SQL functions that never really jived. Maybe I didn’t give it the shot it deserved but Rails feels incredibly simpler.
There is a lot of discussion concerning COVID-19 over at LessWrong that might fit your bill: https://www.lesswrong.com/tag/coronavirus
They do but break the functionality of the base install too