skysight-inc/HackerNews huggingface dataset:
I disagree. The GDPR and CCPA only have teeth against corporations. You will lose some money but nobody is going to jail over a GDPR violation. The investors will be sad but they aren't even really responsible, the employees who built the data-systems are.

At the same time, you can ruin someone's life through a data-breach. Imagine you are on one of these dating apps and your boss takes a gander at the leaks and fires you because of your private life. Or worse, some bigots show up at your house and burn a cross in your yard.

So how do we fix a situation where the person responsible for securing your data has no skin in the game? Put their head on the block. Other engineering disciplines hold the PE liable for mistakes because they recognize the stakes involved. I think that assigning liability is absolutely appropriate for building systems with PII.

Product certifications would be great too, although that would be done by a PE so you'd kill two birds with one stone by licensing Data Engineers.
> No normal parent has said anything even remotely like that in the last 30 years.

You haven't been exposed to a very broad range of parents. I've seen parents who very tightly control which toys, clothes, and grooming choices their kids make because they don't align with the parent's gender expectations. It's frustratingly common in the US.
Does that typically cover healthcare costs as well?
Latency was still a huge issue with the HP Halo. I remember a specific meeting where they talked about upgrading the audio codec which didn't seem to address things much. It was kind of a running joke that any applause or laughter would and with a huge, noticable lag between locations.
Jails? Hypervisor? :D :D This post is a joke right?

Just for anyone else: jails had NEVER had anything to do with hypervisor, it is a kernel level isolation, actually far more complete than cgroups.
Did you read the `Racial patterns` section and look at the data from the FBI?
Jointly Predicting Job Performance, Personality, Cognitive Ability, & Well-Being
Even if they weren't bringing in Biff more often with black founders than white founders, if the pool from which they select Biff is overwhelmingly white men, the effect is still that black founders get pushed aside in favor of white men.

Even if their selection process for Biff was completely gender / race blind, as long as the primary qualification for Biff is "has previously been CEO" then the next generation of companies will continue to inherit the previous generation of companies' demographics.
The difference is hundreds of years of slavery and institutional discrimination specifically target toward blacks and all the accompanying cultural baggage. Part of that baggage is a deeply ingrained suggestion that black people are intellectually inferior but innately athletic.

That isn't to say that other ethnic groups don't deal with racism too. But it's different. An African American executive in a suit may be mistaken for being a waiter, but he's unlikely to be asked where he's "really from" like an Asian American.
I genuinely love that DHH still has the guts to make a stand like this even though he mostly loves on Apple products and has even been given pre-release goodies to try out directly from Apple.

This is how you don’t become a sell-out! Don’t lower your standards just because someone gives you pretty things.

Great example for all of us
There are plenty of stories on the internet of this happening to white CEOs as well. The skills to go from start-up to series A are very different from series B to IPO.

Now that's not to say race wasn't an issue in this particular case. I don't know.
Also: it has serious manufacturability issues, and it can only be administered by IV.

It’s entirely plausible that giving remdesivir to COVID-19 patients when they first show symptoms would make a big difference, but it’s impractical.
See, the problem is you made an app for it. why?

doesnt ios have a mail app ?

why would you want to lock yourself inside an app store anyway
The article tries to make it sound like the failure is a lack of prioritization and if they just focused correctly the problem could have been avoided, but I do not see why anybody would assume they would be able to protect their systems even if they tried.

How well protected do you think cyber-weapons designed to surveil countries, disable infrastructure, and destabilize governments should be? How capable and well-funded should the attacker need to be before gaining access to cyber-weapons designed to kill economies and people? $1B, $10B? A team of 1,000, 10,000?

Does anyone know of any system or organization in existence that would even be willing to claim they can stop a team of 1000 dedicated hackers working full-time for 10 years funded with $1B let alone put it in writing? What is the highest you have heard? Is it even in the general ballpark?

It is absurd to assume that the failure to solve the problem is just a lack of prioritization if no one even claims to be able to solve it and it is meaningless to propose that they should adopt policies that do not even claim to be able to protect against the actual threat model let alone have evidence of such protection. They either need to find someone who will make the extraordinary claim that they can provide an actual defense and have the extraordinary evidence to back up that extraordinary claim or they MUST NOT deploy such systems since they can not be protected.
This is where the type system debate breaks down.

What you point out is a developer error. Mixing variable types in a dynamically typed language is, like generics, a code smell.

Using a dynamically typed language is all about not having to babysit the compiler, its not about playing dumb about types.

If you design your functions in a way that that function will never receive an array, you dont have to test for it. And if some idiot tries one day, it should error very loudly that something is wrong.

Too many abuse dynamic typing to the point they feel safer offloading this headwork to a compiler.

That is, they get the compiler to make sure nobody will ever send an array into that function that takes a string.

All generics do is bring back the lack of typesafety and all the manual typechecking that comes with muddying generalizing the parameter typeset.

I actually dont hate generics, they are super powerful, but I question every usage as suspicious.

I also wish people would remember human brains arent all the same. We have different ways of thinking about problems. Some people need to have a compiler to busy work, some people need to do busy work while they think.

I just wish people shitting on dynamic typed languages would remember they came to solve the mess and monotomy that arose from typesafety.

Someone mentioned they felt go was going backwards from rust, i think both languages are massive steps backward from python.
Maybe they could add the option to buy within the app, but charge the user the 30% markup too. And let the user know they can purchase outside the app for a discount.

Kind of like paying cash instead of card at a restaurant.

Edit: Interesting replies. But selling physical goods is an exception to the Apple tax. Maybe they can sell you a magic coin for $1 and ship it to you and that magic coin also coincidentally authorizes you to use the app...
Defunding would move those roles from public jobs to private jobs.

In the end the only the rich would have protection. Probably not the best path. For an example see the private police in London. They answer to no one.
Ask HN: Free resources for a dev to learn sales?
Want to expand the skillset and as a dev the skill I'm lacking the most is sales.
This is a fantastic piece of work.

Have you considered the ability to 'share' a spotify playlist & the users are given a random playlist from the global list each time they load?

That isn't to say I didn't enjoy the playlist you've provided!
There are plenty of statues and a mausoleum for Leland Sr. on campus.
And you're welcome to think that. YMMV.
C++ templates are not expanded before type checking. Template instantiation is type driven. In fact you can even conditionally expand a template on whether an arbitrary expression typechecks. You wouldn't be able to do it if templates were a different phase.

Only early extremely non conforming compilers had macro-like template expansion.

Edit: although calling templates type level macros wouldn't be completely wrong.

Edit2: a better definition is that templates are type level functions: they take compile time values, types and other type functions and return values, types and type level functions.
I'm skeptical of any American "Libertarian" especially when it comes to race. Sowell is a class-reductionist, which would make him a terrible pick for this topic.
That’s probably more common now more than ever.
Even utility CSS like Tailwind is gaining popularity...
Except deaths resulting from your examples are generally not state-sponsored and then covered up by the very same people that are supposed to protect us.
Hacker News Got Us Spear Phished
Maybe there shouldn't be publicly accessible AWS buckets. Or, if you create one, you have to specify some public domain type license to make it clear that's your intent.
The ink cartridge is a good, persuasive analogy.
I’ve used Python and Go (and JS to a lesser extent) extensively and Go has been consistently faster to iterate with, much better performance, much less headache with build/deploy/dependency issues, much better for teamwork (less pedantry in code review, docs don’t get out of date as easily, types keep people from doing as much pointless magic, etc). Note that the performance point is hard to overstate since with Python it means you run into performance issues far sooner and your options for optimizing are in a much different complexity ballpark which completely eats any iteration velocity gains that you might have had from Python in the first place (in case it was ever a question).
The potshot upthread wasn't about "giving the WHO any authority" though, it was taking an unrelated subject (corticosteroids for covid), digging an out-of-context statement, and trying to smear the WHO.

That part is politics. Talk about what they actually did wrong, don't drag them in here where they aren't relevant.
The context was clearly conventional automobiles. Nothing going over ~30 mph will ever be economically competitive with wheel motors instead of inboard motors. The physics are such that this will forever be true. Any materials advancement will improve both technologies and wheel motors can never catch up.
That looks awesome, what a great idea. Then just have to turn man pages/help info into JSON..
Would it give me academic credibility to have written parallelizable conditionals without 'if' statements?
If you don't like javascript, DDG provides a no javascript version [0].

[0] https://www.duckduckgo.com/html
Yes, I doubt that it's WebRTC. Or at least, I recall similar vulnerabilities in video player code that predated WebRTC. There used to be a Metasploit leak-testing site (Metasploit Decloaking Engine) which checked for IP leaks via video, PDFs, etc. And it included an early version of the NIT that the FBI has used since ~2011.[0]

0) https://securityaffairs.co/wordpress/43442/cyber-crime/fbi-u...
i love the static!
I have about 35 Mac games on my Steam account. I avoid Steam like the plague because its interface is awful and the experience of using it is awful compared to most other software.

I love Apple Arcade's subscription model, but it's still coming up to speed. The offerings it has aren't great yet, but I suspect they will be with time. If Apple can improve its offerings on Arcade, I'll never look back. I don't need to play the latest FPS and I suspect other Mac users also don't fit that demographic. If Valve doesn't want to port Steam to an ARM-based macOS, I'll simply drop Steam. It's that easy because Steam offers very little of value for me, personally. I've heard from others that they feel the same, though I can't say how prevalent that feeling is among Mac gamers.
That exists, and it's already part of ISO: https://en.wikipedia.org/wiki/ISO/IEC_27001

It's toothless, though. Due to the nature of security moving so quickly, any certification or audit standard that actually prescribes specific security controls is inherently going to take so long to get approved by the standards organization that by the time it gets approved, it's already outdated.

The "fix" that has been attempted for this is to try and write security standards that are high level (read: vague) so that they have more "shelf life", but the result of that is that nearly anyone can pass the audit/certification because the requirements are so vague. See: NIST CSF, ISO 27001, HIPAA...
Not sure how important it is to emphasize IDE part, but it is lightweight for sure.

It's a capable editor. GTK based, which means on Windows the UX is not native. Still, it can be installed stand alone, GTK is packaged in.

It's not wise that they omitted including most of the plugins on Windows, as it kills its main selling point. Noone is going to bother to build plugins while on Windows. I hope it was just a recent packaging glitch, as MacOS version comes with all plugins built along, which you can enable on demand.

It's a nice altenative for quick exploratory work on some unknown codebases, as Geany extracts/indexes tags and allows one to jump to function defs, vars and such. However you need to have the relevant files already opened, otherwise you need to resort to Find in files to locate where function/ symbol is defined. This may be tedious in heavily structured projects. That's where an actual IDE excells.

But it works! It's a nice tool to have in a portable toolbox... However, looking through its GitHub pages looks like the developers are tired.

By the way, on Windows a nice lightweight alternative is `notepad2-mod`, also Scintilla based, needs no installation, native UI (a little bit too verbose menus).
How does this relate to whether or not you plan to mutate things? Wouldn't plain ole counting work for this, regardless of whether or not they're mutable, rather than what Rust does - allowing multiple readers and no writers, or zero readers and 1 writer?
Apple sued for allowing loot boxes in App Store
From personal experiences, take a work such as stock broker really increases sales skill.
can i create a drive?
Great job! Are the radio stations live?
As much as DHH can be a bit angry on Twitter, I think he has the resources and fervor to go to bat and give Apple hell for this.

Interestingly, while Apple is constantly touting its own privacy and anti ad features, this huge fee drives App developers to monetize through less scrupulous means to avoid paying the Apple tax. Generally, this mean apps that harvest data or show ads.

I’m not sure what the correct % is in this case, but 30% and 15% is large for a mobile email client.

For those that don’t know what Hey is, it’s a new email service launching with the @hey.com domain. There’s been a frenzy of invite swapping just to try to lock in the good 2, 3, and 4 character email prefixes. Also they are charging $999 a year for a 2 character email which is a good way to capture value.
ImagineRio – A digital atlas of social and urban evolution of Rio de Janeiro
VoIP apps? How is an email app any different? And Outlook for iOS has an Exchange client (and is aimed at people using Outlook online), but you can’t spin up Exchange in there. (I guess you could hook up Gmail to it too, but that’s not what they advertise it for).
In yet another sign of the big tech platforms having too much power, Google has chosen to demonetize ZeroHedge and The Federalist. Twitter recently reinstated ZeroHedge and admitted that its action to suspend ZeroHedge in January 2020 was a mistake.

Per this article, the reason The Federalist was demonetized was because "The Federalist published an article claiming the media had been lying about looting and violence during the protests". Personally I think this is a completely valid topic to write an article about. I've seen local politicians gaslight constituents by claiming "white supremacists" were engaging in rioting and looting when videos undeniably showed numerous non-whites participating, and often comprising the majority of the looters in some cities.

Regardless of where you stand on this topic, shouldn't this kind of discussion be totally valid to hold? Are people not allowed to criticize the BLM movement or the media or politicians unless it aligns with a progressive worldview? Should Google be in the business of responding to activist pressure at all, instead of just remaining a neutral carrier of information?
I remember when IRC clients and scripts didn't check the given port number (or ip address) when asked to initiate a DCC (Direct Client-to-Client) connection and you could exploit this by sending connection requests to a set of Microsoft's servers that were always up and running chargen with a hefty pipe behind it. If it was a chat the client would either lock up or get flooded off their dial-up connection. If it was a file transfer you could fill up a hard drive reasonably quickly since they were small back then. IRC used to be pretty rough and a lot of fun...
Part of the security premise of FreeBSD Jails is that jailed root cannot escape. So, jails are a lighter-weight container which satisfies that need. They can (and often do) look very similar to the host OS.

I think the gold standard here is hypervisors, and if you want to go that route, Bhyve is satisfactory for many workloads. But jails should be somewhat lighter overhead.
What are the tools to help orgs notice exfiltration?
This is awesome, Tanner! Thanks for writing it.

One thing I think may be missing from this post is examples on what "include design early and often" and "leverage design for more than UI" looks like.

Some examples–like how design artifacts (like service blueprints, context maps and personas) can help non-design team members contextualize their problem and get to actionable solutions earlier–have helped me in the past make the case for involving designers early and often.

I've often seen how centralized design orgs can get caught in the trap of only getting called when there's "there's some UX to wireframe". Getting ahead of this perception early on in establishing a company's software development culture can do wonders for cross-discipline collaboration!
Fair, I've actually seen both types of situations. I only complain after having some domain knowledge of the project and the language/tools. After sufficient understanding, I will make sure that the code that gets merged into master is highly readable. Simple > complicated. Always. Don't be ashamed to write simple code.
full course details here: http://philip.greenspun.com/teaching/ground-school/
If you're secret-sharing a symmetric key then you're dealing with computational security anyway, but you do get some notion of integrity for free. As you said, given a reconstructing set of shares you can tell whether all shares are correct, or whether they aren't (but you are not able to identify the bad share). However, if you have additional good shares (enough good shares to reconstruct), then you will be able to identify the bad shares.

You could also use digital signatures on the shares to get integrity for individual shares.
Not sure what side effects you experienced with Dexamethasone, but I can speak about my experience with Prednisone, which is a drug in the same family (glucocorticoids [1]). I was prescribed Prednisone in order to fight off a severe allergic reaction to something that was never identified (this is not an unusual scenario). It worked wonders. I would say it's at 100 to 1000 more potent than benadryl. Now, once you get on Prednisone, you become dependent. You can't just quit cold turkey. You need to taper off. I didn't know that if you try to accelerate the tapering you might experience some surprises. I was just very enthusiastic to reduce my dose. I ended up with some excruciating joint pains in the Emergency Room (or A&E, as this was happening in London). After some MRI, they concluded I have nothing, gave me an ibuprofen and discharged me. This was not a fun experience (except for seeing how many drunk people visit the ER on a weekday night in London).

While modern medicine was not able to tell me what happened with me, I created this little mental model: Prednisone was keeping my immune system in check. Without enough of it, the immune system went haywire, and I was experiencing something akin to severe acute rheumatic arthritis. Once I upped my dose, this went away. I was then very disciplined with my tapering, and eventually, after 3 more months, I got off of Prednisone. Five days from now I'll be 2 years Prednisone free.

[1] https://en.wikipedia.org/wiki/Glucocorticoid
I usually come to Apple’s defense about their in app purchase requirements because you can subscribe outside of the app and still use it. There are at least a dozen apps that I have used that I have paid for outside of the store.

But this goes too far.

I have never heard mention of a carve out for “reader apps”. But I guess they meant apps that don’t allow you to create content. But that still feels arbitrary.

It’s politically stupid to go after DHH. He has a large following and has already been before congress for exactly this.
Baldwin said that the only way for a black American to know the racist or anti-racist stance of white America is by the state of their institutions. There is something to be said, from our perspective, for people simply exemplifying anti-racist behavior, because I can never know what's truly in your heart; I can only know you by what you do.

If you learn anti-racist behavior and perform it only to manipulate, eventually you're caught, with ramifications for your life or your legacy.

In any case, white America certainly needs to try to understand black America better, but also of great importance is that they begin to understand themselves better. Their history (e.g., "The Lost Cause" is a myth), their personal and communal psychology (e.g., white fragility and guilt), and their behavior (e.g., white flight and opportunity hoarding); and to square that with what they claim are their higher ideals.
We do use a combination of humans and computer vision, and some providers (especially of full tracking data) have wholly automated pipelines, but analysts all over the world are collecting stuff manually every day. Really depends what sort of stuff you want to collect - you can use something like SportsCode to match any sort of events to video segments, and if you're a coach or scout you'll know what performance indicators you think are most important. If you just want some sort of team performance metrics you could start collecting shot data (coordinates, defensive pressure, type of assist etc) and build a simple xG model. Nothing you can't do in a spreadsheet or even on paper.
For me, vim bindings makes editing and navigating text a breeze, and completely keyboard controlled. I still rely on my IDE for its well integrated debugger, refactoring capabilities, ctrl-click, etc.

While it may be possible to set this up with vim plugins, it's easier to just plug vim bindings into my IDE.
What if a teenager wants to open a bank as a side project, say Monzo/N26 like?
I've put it on IPFS too. https://ipfs.io/ipfs/Qmdg6io4ZbdRdW92yUjeL2DHhcdNF3jCF2XWwDs...

IDK what Beaker is exactly, but the nice thing about IPFS is that this hash is guaranteed to correspond to this commit: https://github.com/simonfrey/s4/commit/1d169cb33761b57569e52... - it can't be modified (by me or anyone else) in the future.
> Ubuntu is not bad but Kubuntu was an eye-opener for me in terms of usability and customizability.

KDE Neon here. Love it!
cwm is really amazing, it's unfortunate it's not more powerful. Does everything a floating WM should do and nothing more.
I agree, although my experience with Mypy has been miserable. I’m not sure the costs are less than the gains. Also there are other tradeoffs, like performance and artifact size (numpy and pandas alone are 100mb).
A Dome Bioshelter as a Village Component (1981) [pdf]