skysight-inc/HackerNews huggingface dataset:
> I'd like to understand more of the problems we're facing so I can participate in the discussions.

There are two very different contexts for "discussions about security" in large enterprises.

1. discussing security with management / C-whatever

You need to discuss risk. You must show that there are some things which are important , and other less important. This is not an easy discussion because it requires experience and the ability to say "if this is hacked, never mind" and at the same time fight like your life depended on it to have the small XSS on your corporate site fixed. Not because it is insecure but because it does not look good in newspapers.

You also need to discuss awareness. First for them, then for the rest of the company. Because the weak link today is John in accounting who will open the enlarge your penis email end download the attached binary.

→ it is difficult to find good resources to learn about these things. Of course there are zillions of books about the subject, usually written by people who have never actually ran the security of a company. At best they were "consultants" who had great ideas, which were unfortunately in another galaxy realism-wise.

I would say the best would be to have the opportunity to work with a good CISO and watch him or her belly dance to make their point with management. If they are good you will quickly understand what is important and what is not.

2. discussing with technical teams

You can expect a competency ratio of 1:4. That is 1 person who knows what they are talking about for 4 others who are either neck deep in technical problems and need to solve these problems, or the ones who learned security as part of their general systems/networking curriculum.

The best way to integrate such a team is to become a jack of all trades a master of all trades as well. In technical teams, raw technical knowledge counts a lot - especially in technology companies. You get credibility points exponentially when you help to solve a hard technical issue. Best is to look around authentication, machine to machine traffic (and how to secure it) and application security.

→ best is to try it out yourself at home. You can run a docker server on a home server and start a few containers. Play with authentication, automated TLS, reverse proxies and filtering, logging.

Large enterprise security, technically speaking, is either the same as small enterprise security (multiplied by n servers and services), or really specific (peering, centralized authentication, ...). The first you learn at home, the second you learn by reading about that very specific subject on Internet.
Disclosure: Affiliate link to secret promo.
Yes, not the OP but Beef Bourguignon is a beef stew braised in red wine, often red Burgundy, and beef stock, generally flavoured with carrots, onions, garlic, and a bouquet garni, and garnished with pearl onions, mushrooms, and bacon.
Money Stuff: It’s a Good Time to Raise Vaccine Money
It’s not just a privacy issue. Before Facebook and Google, the newspapers and publishers of the world sold their own advertising and at a reasonable price.

Now that they rely on Google and Facebook, their ad revenues have collapsed. By taking back their own destiny in terms of advertising, they can make more revenue.

I consider it a win-win.
Maybe premium is the wrong word. Levis and Huffy were never designer brands, they were the standard in quality. Like Tide Detergent, Heinz Ketchup or Coca Cola, they were brand to beat.

The pattern seems to happen many brands over time that sell out or fail. You see it across markets with brands like Packard Bell, Kodak, Polaroid, Martha Stewart, Kate Spade, RCA, etc.

50 years ago if you had a Zenith or RCA TV it was a sign of quality, 10 years ago you'd be mocked. Before the turn of the century Philips was known for consumer electronics and even made videogame consoles, now they make lightbulbs.
But /etc/sysctl.conf is deterministic.
Dokuwiki is fast and bloat free and works great on mobile browsers since 2012. I've been running it on the same single board computer since 2013 (good luck running Wordpress or Nextcloud on that hardware!).
Install is super easy - linux-apache-php and no DB so it runs everywhere - and it hardly needs maintenance(all I do is upgrade every now and then when a new version is released).
It's theme/template may be dull but it's simple, clean and not outdated yet. Moreover it's a wiki, not a blog so... who cares? Content is all that matters!

That said I like choice be it for themes or wiki apps!
Use with Windows Package Manager Community repo

https://github.com/microsoft/winget-pkgs
The flip side is that Evernote had a human-aligned business model and as a result never made enough money to compete with Microsoft OneNote.
This might be a good selling point for the higher levels of Uber service: You're getting a full-time, professional driver who's been thoroughly vetted. It's not just some random person with an app.
Clojure is a Lisp so it doesn't count.
> Yes. Is Notion a Confluence competitor?

Yes. I don't know why you're getting such convoluted answers from others.
I just got to that point of needing more than 16GB and needing to upgrade also.
"Flowers" is one of the most ad-heavy queries out there. When I worked at Yahoo it was commonly used as the example to show or test some ad displays. Even on Google now you see only ad content above the fold.
Very interested in using this for a mobile mmo I'm developing.
Is there a discord or somewhere I could follow development?

I'm curious about how well tilemaps scale in your engine when it comes to huge maps.
>Google has annoyed me for ten years but I'm close to claiming they must have scammed a bunch of dating sites (or maybe just one company with a lot of fronts?)

I seem to remember an article a long time ago that pulled back the curtain on a lot of these niche dating sites. Apparently it's all basically just a single backend with a whole bunch of different front ends and they just use attributes to decide which niches you could potentially fall it. It has the effect of having lots of niches for people to sign up for, but a bigger user base in each one since they're basically pulling names out of a common dating pool.

The example in the article was that there was one site specifically for dating farmers and one sight specifically for dating within some specific religious denomination. But if you identified your religion in the farmer ones people in the religious one would see your profile too and vice versa. And, of course, the whole thing was just lousy with bots and scammers.

I read this article ages ago though. At least 6 or 7 years. I'd be surprised if that dynamic was still working.
No, I'm sorry, most of our users are hobbyists with projects that we're not aware of the state of for the most part.

We hope to improve the engine to better serve the indie and hobbyist gamedev community with tools that aren't available elsewhere and if we hear about any projects one would like to showcase, we'd be happy to feature them!
havent tried this - but is your iked(8) cert file the full chain or just the leaf?

if just leaf, maybe try with full?

also haven't tried, but looks like the built in acme-client(1) can be configured to save the full chain if you're using that for the cert issuing stuff (acme-client.conf(5))
Yes. Here are some excerpts from the (very minimally descriptive) page:

> Write better. Think more clearly. Get organized.

Totally useless in terms of explaining what the product is.

>A simple, beautiful writing experience,
with 30+ types of content to add.

Great, so I can... write things in it? What are these 30 types of content? It doesn't even give examples.

> Turn your tribal knowledge into easy-to-find answers.

How does it do this? No explanation given.

> Kanban boards, tables, lists, and more.

"and more"? And more what? This is what I'm trying to get information on.

> Lightweight and flexible.

Flexible how? This phrase is meaningless to me.

This is one of the more marketing speak ridden websites I've encountered.

If someone made a post on HN asking people to compare and contrast, say, AWS vs Azure, would your response be "just go read the AWS website duh"?

Take a look at the other comments in this thread and ask yourself if the Notion website conveys even half of the insight that the other commenters have provided. Those comments are the entire point of HN, not "just go read the website".
I'm not that familiar with the details. My understanding is that neovim at least mostly supports the vim language, but also offers other APIs (not clear about whether these APIs are extensions of the VIM language or altogether different) that allow developers to work around common VIM issues. My crude impression is that developers actively prefer to interface with the new APIs, and many packages aren't even backwards compatible with VIM.
Tracking scripts / cookies are only loaded if you click "Yes", otherwise they are not loaded at all.
Ask HN: Using Interview Scorecards for software candidates
I am not convinced of the validity of using scorecards to interview candidates. I understand it attempts to put quantitative aspects to subjective interviewing, but scoring is subjective so the foundation of this system seems flawed. My concern is the consequence of relying on the "data" and unable to convince the team that the highest rated candidate is actually not the best choice.

Any find success in this? Alternatives? If do use scorecards, things one should now? Most resources online are from HR and not the software team perspective.
> Many popular languages today predate modern asynchronous computing. This makes async-as-default impossible because it's an afterthought

Here's a rough sketch of how this can be achieved for a language that already has event loops -

Transpile the following -

void main() {
Future<int> xFuture = async doSomething()
int x = doSomething()

assert(await xFuture == x);
}

Into -

Future<void> main() async {
Future<int> xFuture = (() async => await doSomething())();
int x = await doSomething();

assert(await xFuture == x);
}

Now people can keep using a pre-existing `doSomething()` (that's either async or sync) and its compatible with our new caller based async statement.

BTW that transpiler output is runnable dart code actually works.

I know this has tons of edge cases that this simple example doesn't capture, but it's definitely "possible".
It is already public.

Which is why I think the NDA (or my reading of it) is way too wide.
Whitelisting Multiple IPs with Nginx Ingress Kubernetes
GM says it is 'almost there' on million-mile electric vehicle battery
Julia is lisp in drag so it doesn't really count, but I'll give you the point.
They can monetize similarly to NerdWallet and the like. YC can benefit even if they don't since a lot of the products they recommend are from YC companies (can create a conflict of interest though).
I feel personally attacked :p
I'd also recommend Gitbook. They've improved their search features recently and I'd say they're on a similar level to Notion.

We used it for our company wiki. Wanted to use Notion but for 500 users the Notion quote came out 15x more expensive so it was a no-brainer!
Full title: Florida scientist was fired for 'refusing to manipulate' COVID-19 data, she said
this is the only thing that stops me from using Notion, too. just downloaded it and it looks like it would change my life... except i don't own the data.

right now i'm trying out Outline [1] which has an option for self hosting.

[1] https://github.com/outline/outline
“...This means that the case will Follow the Sun by default, to provide 24/7 support”

I love the concept of “Follow the Sun” to describe 24/7 support - I don’t think I’ve heard it described that way. I wonder how much we’d have to spend to get that tier of service?
I'm curious as to how you propose we avoid this situation in the future.
> but I don't see how that's prudent or politically palatable.

It is prudent because it prevents this moral hazard that reduces efficiency and increases systemic risks. Yes, there will be short term turmoil as companies and their operations are restructured. But it is a long-term imperative. Companies must be allowed to die.

It is politically palatable because rich capitalists are getting bailed out with an unlimited backstop while mom n' pop got a measly $1200 one-off payment.
He might have been exaggerating the performance of his friend's "invention", but you can track the sun during the day, stars at night, and possibly other celestial bodies during the day with sensitive enough instruments. If you can calculate the angles between local gravity, the height of the sun, and you know what time it is, there is a lot of location information there, especially if you track changes over time and not just instantaneous.

I think all you need is two celestial bodies and local gravity to get a fix on your location.
You might not like that the clock shows you to be in "Mortal Peril" when you travel over 75mph. :)
If you just block and free-ride, more power to you (this is within the rights of users, by law and by design of the web standards). However, many Brave users want to support creators by contributing regularly, and a lot of these users prefer to earn tokens they can give back rather than to self-fund their wallets.

Browsers today, without strong tracking protection, are passive servants of ad-tech implemented via JavaScript. Average users don't know how to block. Most users don't subscribe widely at risk of overpaying (cross-subsidizing, the publishers call it). Brave's model not only cuts out ad-tech intermediaries, leaving only the browser in the middle — we then let users opt in (with blind signature cryptography so our servers can't link ids or transactions, and via an Ethereum ERC20 token, BAT) to support creators directly yet anonymously.

We will add more over time to support creators, including things like patreon and superchats mediated in the browser (client side and user first), with privacy and pseudonymity as well as anonymity (the default).
Massachusetts (where I live) just retroactively restated their case and death data by test/death date vs. reporting date so it more closely aligns to when a person was experiencing sickness or death. I find it far more useful now. The curve is now smoother, and you can see just how lumpy reporting timing was making daily releases of numbers. It has the knock on effect of making the numbers for the last seven or so days liable to change every day, but it’s still a better picture of what’s going on. This should be the norm.
I am not a Republican nor a Democrat supporter, anyone can see the level of partisanship over this is nauseating.

Plenty of people are going hungry and missing housing payments, we have a depression era economic crisis. Still people eat up whatever liberal/conservative spin and lies from the station that meets their fancy.

Should we really be hating each other during a massive economic crisis? People we have never met who are struggling to get food and housing? Either for workers protesting or workers passionately endorsing authoritarian measures and fear.

We should be united, and we are being so easily manipulated.
I think that technically, Google and Facebook aren't to blame for these ads. They can slap as many labels on their users as they want, but it's up to the advertiser (at least on facebook) whether they want to target based on those categories and interests, or if they just use the default 18-35 (male) targeting that they think will work better. One of the reasons I started blocking ads on youtube was the unskippable horror movie ads; I can imagine that it would be hard to narrow down "interest in horror movies" from your internet data, so they just target everyone, no matter how much I adjusted my advertising interests.
We actually have a sidenote that mentions that GA can be used for event-based tracking, but we've decided to skip over it in v1 of the guide because it's missing some critical analytics functionality. We're focused on the big three event-based analytics tools for now, but are going to add more info on tools that can be used for event-based analytics, but aren't primarily designed for that purpose, e.g. Pendo, GA, etc.
Why password peppering in Devise library for Rails is not secure
Another interesting class of dual-use technology are fast power switching elements. And both modern SMPSs and Class D audio amplifiers are worryingly near to what would have to be considered a “munition”.
Coronavirus: Security flaws found in UK NHS contact-tracing app
Years ago when I had to switch from Linux to Mac for work, the different keyboard shortcuts for simple things like copy, paste, word left, move selection with cursor, etc. killed me. There are ways to change some of them, but Electron apps and various websites have hard coded emulations of the defaults.

My coworkers simply refused to empathize with my frustration, but it's seriously like having a malfunctioning limb when a neurally deeply learned technology starts failing you.

Imagine a nightmare where when you try to open your hand and it closes, you try to move your arm outward and it smacks you in the face, you try to look down and your eyes instead flail randomly, and your legs are moving in slow motion while the monster is hunting you down.
The digital divide is widening across Africa during the Covid-19 pandemic
Exactly. I cannot understand how this can’t be the user’s choice.
HN discussion on that article: https://news.ycombinator.com/item?id=19728132
Notion's just a tool, like a pen and a pad. If you decide to use it for nothing but busy work, that's an option I suppose. But I get a lot of real work done using Notion.
I meant in math.

BTW, pedantry: -2 * -2 = 4 too
To s_y_n_t_a_x: Yes, we do have a discord at https://discord.com/invite/Gbj4jnv, and maps scale by visibility. The engine allows you to seam together maps which can be streamed and loaded and unloaded in real-time.

Planimeter uses the tech for its MMO flagship project.
hmm so complain and then say pypy is 7 times faster(and 4 times faster than nodejs)
I haven’t had Facebook for a few years now but taking a look at the advertising section is what finally made me delete my account. One of my interests, according to Facebook, was pants. This was especially odd because I wear dresses and skirts far more often than I wear pants.

Some time later I was in my closet and still pondering how Facebook could possibly be so wrong as to think I was interested in pants of all things. On a whim, I decided to count my pants. And you know what? I had a lot of pants. Triple digits. Way more pants than I realized I had and way more pants than any one person could possibly need. It turns out, I _was_ pretty interested in pants.

Facebook, without ever having seen my closet, had a better understanding of my wardrobe than I did.
Russia's Media Regulator Asks Google to Block Article Questioning Covid Deaths
He's not, but he's going to hire a developer who can develop this. The full donation will go to said developer.
Just that day, there was light outside the following day. We sheltered inside the house and brought the animals in, there was concern about the ash getting into lungs. I'm not sure there was anywhere else we could have gone. We also didn't know how much would fall.

The ash was very fine and got into everything. Rain fixed that problem but turns the ash into a material with the consistency of wet cement, which created other unanticipated problems. ProTip: shovel the ash off your roof before it rains!
with my adblocker turned off, here's what i see as a paying subscriber in canada:

front page: https://imgur.com/AgxUJX1

article: https://imgur.com/Np72LFU
Unfortunately, this causes file duplication (which is not that bad these days of endless storage) and unnecessary vulnerabilities when outdated vendored libraries are used by applications.

Linux distributions tend to keep shared libraries in their own packages and applications depend on them so that when you install an app, the packages with the libraries also get installed. And all packages in the distribution tend to use the same versions of those shared libraries.
My reaction was basically "this is emblematic of a whole lot of the problems seemingly endemic to our current politics, but at the same time, this also accurately represents what our politics has become, and there's real value in holding up the mirror."
As an example, how the "Win32" apps are to use these "new" UI features:

https://docs.microsoft.com/en-us/windows/apps/desktop/modern...

Desktop C++ users should use: "UWP XAML hosting API provided by the Windows 10 SDK (version 1903 and later)."
As someone that has used vue.js quite a bit in the past, I have to admit what you came up against is quite odd.
It is a very minimal framework.

He might just be that kind of JS dev that really likes to build a webpack castle.

You know, if you can drop in a url to a cdn-distributed version of a JS, you'll instead rebuild the whole thing in webpack, babel, and several other things just to be able to type "import".
This may be a silly question, but I can see no evidence that you upvoted the submission. If you think the question is potentially of interest, why did you not do so?
Anything where function call overhead is an issue and you don't have a native library escape hatch. Parsers written in Python are inherently slow. Especially so with parser combinators.
There are a (fairly small) number of use-cases where Chromium-like behaviour is needed (my 90% of the time browser is FF) but I don't want a browser that's reporting my every move back to Google. AFAIK Brave fits that need. And no, I've not opted in to their ad system since I hate ads anywhere and everywhere and want them all to die.
> Read this story about Warren Royal of Bobbleheads.com

Cool, are there any other stories about lottery winners I should read before I buy my scratch-offs?
Gremlin brings chaos engineering to Windows platform
That's just the Vultr home page. Where's the promo offer?
That brings up another point. Should the kernel standardize on unsigned scalars completely? How many legitimate use cases are there to use signed scalars in the kernel?
Notion is basically an app framework with a standardized UI surface and a couple of apps built in. So it’s not surprising that your friend is using it for almost anything the same way you can use Ruby on Rails to build anything.
He did, didn't he? Programming Windows 6th edition is Win8+, and I believe in this one (or another one) he delves into additional APIs like DirectWrite and whatnot.
Microsoft FUD is back!
I love using Notion, but I think the general discussion about it does not talk enough about how it's flexibility is also a problem many times.

1. Flexibility of blocks is a cognitive overhead for most folks in my team. They would rather prefer more constrained and opinionated approaches like Trello

2. Notion is currently a jack of all trades and master of none. We have tried to use it as a wiki, project tracker, issue tracker, CRM & spreadsheet. Though it's good to have one tool that can do many things, we quickly reach limits of what is possible automatically and have to spend a lot of time to manually maintain it

3. Convention over configuration creates problems for other team members to follow because conventions are not documented properly.

But I see a lot of potential of it becoming a platform. If they can incentivize 3rd parties to build over their platform and build trust, I think it's gonna be the next big thing. "One platform for all my data" with specialized tools to deal with different kinds of data. I can imagine tools like Tello, Jira, Hubspot, Google spreadsheets & draw.io running over it.
This is a red herring. Let's start with the suffering that we are purposely creating, in mass. The numbers of factory-farmed animals dying dwarfs anything else.
To the degree that it counts as 'production' Prolog, DFS-Tools -- a toolkit for Distributional Formal Semantics -- is actively used in a number of ongoing scientific projects:
https://github.com/hbrouwer/dfs-tools