skysight-inc/HackerNews huggingface dataset:
I think most can agree the OS should sandbox apps appropriately, and allow access via permissions and such. But like most things, it can be taken too far. The fact is you can't buy a console or iPhone of the shelf and easily (or legally) run your software on it without special permission from Apple or Sony etc.

The distinction is video game consoles are not general purpose. Just like nobody is going to write an essay on an Pinball machine, nobody will (ordinarily) do so on a console. If a game developer need to follow special rules to get into the console market, that's par for the course.

In contrast, on Windows/Linux/Mac/Android I can run whatever software I damn well like without talking to Microsoft/Canonical/Google/etc. It is truly 'general purpose'. There is no required gatekeeper for these systems (as much as they are try to make themselves one). iOS stands in contrast to these - it is not 'general purpose' if I can't run whatever. If Apple decides some software is not allowed on the store that is not 'general purpose'. That is something else - gatekeeping. So when they advertise 'general purpose' that is only true until they decide they don't like something. And they can change their rules anytime they want.

To the 30% thing, every retail store has markups they don't advertise and that's perfectly fine. If Apple or a retailer wants to charge me for access to their store, I'm happy to pay.

But when they force a change to a product and company in arbitrary ways to suite their whims that's pretty concerning because it's a sign they are abusing their power in a very historically been-done-before way. Think about it - 50-100% of a target market is controlled by them. You can do whatever you want - why not charge 50%? 70%? There is no competition - it's literally whatever the highest is you think your PR department can get away with. Not sure how you feel about anti-trust, but sure feels like abuse to me.
And surely after 80 years of improvements in technology, materials, process, etc we have the ability to build in less time AND have no deaths?

I don’t think this follows. MRI machines save lives. MRI machines did not exist a century ago. MRI machines have made healthcare more expensive, not less.

I think the same could apply to buildings with new materials and construction methods.
Thank you! But I don't see anything in there that isn't normal attempted cybercrime. What Steve Gibson dubbed "Internet Background Radiation", the continual poking for vulnerabilities.
Been using Fastmail for years. Not one glitch, love em’
Reading articles and seeing situations like this really makes me question whether public agencies, as a rule, should be allowed to use debt to finance projects.

I'll begin by saying I have no aversion to debt whatsoever as a private individual or for an incorporated business. I own several rental properties, I'm probably more indebted than most.

The thing about debt in general though, is that it makes the bad decisions a lot worse. And I think when you design a political system, you have to think about both the best outcomes possible, as well as the worst. Bad things happen. People make mistakes. Calculation errors occur. I'd gladly take a bargain where I could trade 5% of the upside for 50% of the downside.

What I've realized is that most municipal governments are run by people of fairly average intelligence and drive. There just isn't a lot of incentive to kick the apple cart. They want to go home at 5, they're going to see the owner of the construction company whose project they dump on in the grocery store, etc. This is actually a feature, I don't really want too much innovation in how my government does things, I'd rather go with the tried and true for things like road design and water pipes, than something like the BART where they used a novel track gauge, and we're still paying for it 30 years later.

I just think avoiding municipal debt can curtail some of the worst outcomes. It forces cities to save up for maintenance and really make hard choices about what gets maintained and what doesn't, and it also prevents can-kicking to later generations. You might not get a high-speed rail project, or a major bridge, without debt, but I wonder whether we'll ever get high-speed rail in California at all, after spending billions of dollars already [1] on it without anyone having taken a single trip.

[1] https://www.govtech.com/fs/transportation/California-High-Sp...
GitHub got a lot of fire in their ... after acquisition. I was stunned how fast GitLab overtook GitHub feature-wise, but looks like now they're at least trying to compete.
One thing I've found helpful when Debian systems are causing problems is (1) ignore the config churn and (2) just attach GDB to edit raw memory, to make a process stop doing whatever it is that it's doing. It shouldn't be necessary but sadly in a world where engineering practices "evolve" this rapidly that's usually easier.
The official Github repo of Go+ is hosted on a PaaS company called Qiniu's team repo with their founder & CEO as the top contributor[1][2]. He is a Golang enthusiast[3] and my guess is that this is probably his favorite pet project ;)

[1]: https://github.com/qiniu/goplus/graphs/contributors

[2]: https://github.com/xushiwei

[3]: https://twitter.com/xushiwei
Also, it looks like the perl linter only triggers against .pl files and not .pm files
You would hope the ACSC has been working furiously behind the scenes before anything got announced.

There's nothing sophisticated whatsoever about these attacks, it's quite strange to make a vague political announcement where everyone jumps to their own conclusions.
Can you give more details? I don't think I've ever heard of M4 before.
The Aus Government has a good guide called the "Essential Eight" for reducing risk. It's a good starting point for businesses, and is pretty much universal advice, not just applicable to government departments: https://www.cyber.gov.au/publications/essential-eight-explai...

My take on the E8: https://blog.congruentlabs.co/essential-eight-essentially/
> I'm not even sure a US-based VPN provider is safe.

Oh, I am sure that it is not safe, thanks to the PATRIOT Act. Even if they were not storing any metadata, VPN providers can be compelled to 1) share all data about their subscribers, which will include you, then 2) silently wiretap and decrypt everything. US courts will rubber-stamp, as they've consistently done in the past, and "that's all, folks".

Sadly it's not like you'll be much safer elsewhere: as soon as you step outside of the US, one of the strongest cybersec agencies on the planet (NSA) will have free reign on your traffic. But you can resist the legal attack (in some countries) and at least try to make it challenging on a technical level.

I hope Mozilla want to bring some innovation to the table that will make VPNs somehow more resistant to legal attack (not just in the US) but I doubt it.
Oh cool! Honestly must have slipped my mind, but it makes sense since you can install some if not all packages via pip
Thinking about it more - I noticed the WebKit Bugzilla ticket mentions a problem with integrating Qt's date-picker for other Webkit platforms - and I noticed that Apple's date-picker in Cocoa is a bit... old-fashioned, I wonder if Apple's just dragging their feet until they modernize their date-picker in macOS?

It's kinda mean to do that though - if that is the case then they're deliberately holding back the web, increasing web-development time, and worsening accessibility (so many inaccessible JavaScript date-picker components!) just so that they can avoid "looking bad".
I doing almost the same. Spit out regular html made by templating on the server side and spice it a little with vue. Is so little that I could change vue anytime.
I really want to love Prettier, but I never want to spend the hours googling etc. on how to setup the frickin config files! Especially as someone who works on a wide variety of languages/file types, I really want to find a drop in formatter that works well enough in all situations.
Seriously, which one of you is doing this?
The cheating way is probably to do this
https://www.blackhat.com/docs/us-17/thursday/us-17-Domas-Bre... (page ~71) i.e. shift across an instruction boundary.
Do you think something like this might happen?
When I bought my first e-reader, I loaded it with free PDFs of old book scans from the internet archive that I searched for keywords of interest (science, machining, novels, etc). Since the works out of copyright are all a hundred years old or more, I ended up reading through volumes and volumes of old books about blacksmithing, precision metalwork, life in the countryside, and all sorts of other things.

One thing I was struck by (for the PDF versions) was that the typesetting were sometimes absolutely gorgeous, and often used fonts I'd never seen before.
Keen: Connect your favorite things (from Area 120 and PAIR at Google)
Free-thinkers resisting the New Normal
These rules are arbitrary and incoherent.

But, if Hey adds custom domain support (which they're planning to do anyway), does that make it a business app, and therefore acceptable?
I am not fond of this cost-based argument - you hear this one (longer commute times priced at hourly wage) and similar ones.

But no company pays me for my commute time. If I take an extra hour commute I don't get that 15 bucks. And that commute time does not go onto GDP either. It's hard to argue the economy lost the time I was doing nothing productive.

And if we really want to take it to the extreme, if it costs the country 15 bucks each hour people are not paid to work, but could have been doing something useful, Avengers Endgame must have cost the country more than it made in ticket sales. Thanos' final revenge:-)
Do you feel SASS companies are also unethical because the marginal cost of a customer is 0?

And then the publishers also have to pay MS for DLC. I think MS still charges for delivering patches through MS Live. They might have dropped it.
Apple gave me the Hey treatment back in 2014
Basecamp knew what they were doing here - there's no way they can be in the wrong by the community, which comes off as disingenuous to me. They either:

1) win, and are seen as "David beating Goliath" , or

2) lose, and Apple comes off as the bad guy trying to fleece a private company.

(They could also lose because they weren't clear on the actual policies, a la the "malice vs. incompetence" rule of thumb. However Basecamp and its team have been in the game long enough to know what to expect with the App Store. I don't KNOW that, but that's my analysis here.)

My argument around this goes back to market share: iOS owns, at best, 25% of the global market share for mobile operating systems [1]. Android is 3x that.

If you don't like the platform policies, they're a minor share of the market - you don't _have_ to use them.

"But $s3r3nity, that is where the paying users are!"

Yes, and the spend per person for lamborghini owners probably is much much higher than Prius owners, even though the latter vastly outnumber the former. That doesn't mean the former needs to support any company that wants to make a carplay / carOS service.

[1] https://gs.statcounter.com/os-market-share/mobile/worldwide

EDIT: grammar / spelling
They couldn't block it even taking down half of all websites, including Github.

At the same time government officials kept using it, including those in charge of blocking it.

It was an "old man yells at cloud" travesty from the beginning.
Spoiler: they don't.
Offline use already works great, unlike in any SPA I've ever used.

1) Load the page.

2) The page is now fully loaded and ready for reading without any need for further network requests.

For even more offline use, try printing it! HN threads work superbly when printed, again unlike most modern sites.
Agree it seems short sighted of Apple to me

Windows Phone largely failed because developers had abandoned the platform and "There is no app developed for that" ended up being common
I would switch ALL my paid for services to Mozilla in a heart beat if they would just hire a damn UI guy/girl.
Density matters.

How many people need that road, i.e. how many people live on these 0.3 miles of road? It's not a through route, so it does not benefit much more people than that. How many people live on 0.3 miles of city streets lined with multi-story buildings? That makes all the difference in how the math works out.
From the Australian Signals Directorate advisory:

> The title ‘Copy-paste compromises’ is derived from the actor’s heavy use of proof-of-concept exploit code, web shells and other tools copied almost identically from open source.

Surely adequate can fit into defending against common open source toolkits?
The flattening field projected by the Silmarils disappeared with them.
I think people jumping to conclusions is by design. In the context of the trade spat that is going on between Aus and China, "We're not saying it's China, but it's China"
Serializable Isolation for Snapshot Databases (2009) [pdf]
Meh, everyone knows the real gangsta are in Caledonia.
If consciousness is non-local or non-mechanical then it has a lot of very weird rules about physical and chemical things that can be done to brains to alter it.
It's DHH. Simultaneously love and hate the guy. He knew he was breaking the rules.. knew there would be a big dust-up over it he could fan into a bunch of free press for his launch. Knowing how to work media like this is what separates people like him from people like us.
Highly recommend the Sound Escapes podcast by birdnote. It takes you to multiple locations where you can (among other sounds) listen to the bird calls.

https://www.birdnote.org/blog/2019/07/sound-escapes
I haven’t even adopted the more modern JAMStack type techniques yet, and now this guy is saying those are old?! I still consider those closer to the holy grail; clients scale indefinitely, servers you still have to pay for.
Ex-Uber exec wants to build a private city for Silicon Valley techies
Outrageous compensation packages. Last figure I read, they've already poached 20% of Taiwan's semi engineers over the years. That's before recent initiatives to compensate foreign workers 3x-5x salary. They're flying in Korean specialists on daytrips to accommodate their desires to still live in Korea, building churches on campuses etc. Basically what western companies did in the 90s to entice foreign specialists to work in China, a lot of cash and allure of royal treatment i.e. specifically because they won't be equals. Work in a nice tier1 city for 5-10 years and retire or naturalize / work in the west. Semi engineers are project paperclip tier assets in the coming years, they're get work and fast-track citizenship considerations regardless of their past affiliations and most likely, because of it.
*idk about that last part; it's a dumb anecdote. the auto-formatting i'm salty about is prettier. ones that are manually invoked and either 0 config or highly configurable (like eslint) seem sensible. use an auto-formatting hook in your text-editor if you want; i just don't like the absolutism of it being hard-baked into everyone's workflow and a tool with limited non-zero config.
I'm with you on this. I wasn't taking offense at the word "again," simply stating that trying to claim American democracy was ever "great" was historical revisionism.

It didn't become "great" when black people got the vote, either. People in power tried their damnedest to keep them disenfranchised.

It didn't become "great" when women got the vote. We've still gone on to commit mass atrocities, some of which took place on our own soil (internment of the Japanese, for instance).

It wasn't suddenly "great" after landmark civil rights legislation and Johnson's Great Society programs passed. We still shot peaceful protesters at Kent State, and began a hopeless War on Drugs.

And, it's not great now. Public support has essentially zero impact on whether any law or regulation is enacted: https://act.represent.us/sign/the-problem

That's what I was getting at.
Make that "there won't be any iOS developers left" and you're closer to the truth.
My theory is that there was no "money in it" back then.

;-)
> The purpose of linters on a team - so I've been told - is so that no one has to argue about formatting anymore.

Code formatting is just one feature a linter may have (e.g. shellcheck[1] and pyflakes[2] are definitely linters but don't have code formatting checks).

I disable all the formatting checks in my linters because if I want to enforce a formatting standard, a code reformatter is probably a better way to do it.

1: https://www.shellcheck.net/

2: https://pypi.org/project/pyflakes/
This is a xomolete misinterpretation of today's economic and resource situation. The real tragedy is that all this is a conpletely unneccesary wanton destruction. Thrre is no coke, it serves no purpose.

Pick amy product on a supermarket shelf or on Amazon, and you wil find that raw materials account for maybe 20% of its final price tops. They are called commodities for a reason, and its production of those raw materials that does the lions share of pollution. You could replace all manufacturing with a combonation of nuclear power and reneables, and youd hardly change the price of the final product.
I think we as a developer community should be using this momentum as much as we can. It's just economics: being able to publish apps on the app store and not having to take a 30% revenue hit would change the calculus for many indie and small shop developers. 30% can push many hobby apps into full time ventures for people. How many better apps and happier developers would we get if this were the case?

I'm glad that DHH has a loud voice, but Basecamp has a lot of developers and I'm sure that when push comes to shove, someone will fold. I doubt it will apply to everyone, though. It would even be easy for Apple to grant an exception and let Hey continue (much easier than changing the policy for everyone).

Is there any reason why we, as a community, shouldn't push as hard as we can here?
>A great keyboard (seems to be fixed now)

The "fixed now" part is the replacement of the Butterfly keyboard across Apple's laptop (and even the iPad docks!) lineup
OTOH nuclear weapons decay and we're rapidly losing the tacit knowledge required to make new ones (at least here in the US). If the Test Ban stays in place and is enforced, it may only be a few more decades until we as a species would have to do another Manhattan Project to rebuild them. This takes about 4 years of concerted effort within military and industry, and the only shortcut is the tacit knowledge that nuclear weapons designers can pass on. Maybe WW3 will actually be an "aw hell no" response to some country trying to develop nukes after they're we've lost them.
Western governments need to close the chinks in their armour
From https://staykeen.com/about

> Keen is a new way to curate, collaborate and expand your interests [1]. Keen is an experiment from Area 120[2] and PAIR[3] at Google.

> We leverage the Google Search index, combined with user feedback to provide personalized recommendations that improve over time and help you expand your interests.

[1] https://staykeen.com/keen/8ckkvxQoTw73Psbf1P1k

[2] https://area120.google.com/

[3] https://research.google/teams/brain/pair/
You can't really compare a cost which returns zero profit versus one that turns a profit.

There is nearly an unlimited supply of money for projects that are guaranteed to return a profit - especially today with the bond market desperately searching for yields.

...so the moment asian chip factories become untenable - we will have fabe here in the US overnight. As an example, Israel built its own Intel fabs in under 3 years.
Is the price really the blocker? How much does it cost? I looked at the indie edition and it seemed affordable. They also have a free edition: https://www.sidefx.com/buy/#houdini-free.
The mitigations are hilarious too:

- Update

- Use 2fa
But you don't have any kind right to force either Apple or Google to distribute your services. You can choose to enter into a business relationship with them or you can choose to not do so.

You neither have a right to force Netflix to distribute a film you've made and you don't have a right to force a supermarket to sell the vegetables you might grow in your garden.
Configuration in a .NET core console application – My notes
I have used the .net core console application template a couple of times to create production apps. It requires us to wire up configuration, logging, Di and a bunch of other features manually.
The company you pay for the retainer gets the retainer. For example a place I worked had a retainer with Verizon. Every month we paid Verizon ~$500/hr for X number of hours. If we didn't need those hours for incident response we could use them for penetration testing or consulting to improve our detection tools, etc. But when something bad happened, we had already pre-paid for their consultant to come visit and help us.

The real benefit to this situation is you get to avoid haggling over price and waiting for a quote from the sales guy and running it past your legal department. All that enterprise sales nonsense is already done so when you pick up the phone it's all business with no negotiation.
Can someone explain to me the WSL acornym? Isn't WSL really a Linux subsystem for Windows? tiny pet peeve
Hey already has a "for work" page up on their site: https://hey.com/work/. I think they're trying to play this card as much as they can, but I'm not sure it'll work.
I don’t think you’re arguing in good faith. There are obviously numerous activities that take place via wilderness access. Given my chosen username on here I’m quite familiar with the concept. Implying that Instagram photos are the goal is a strawman, and not even a good one. My hope was to suggest that the world is a complex place and nuance is warranted.
A quote from the PM "“We know it is a sophisticated, state-based cyber actor because of the scale and nature of the targeting and the tradecraft used".

I didn't see open source toolkit mentioned in the article.
That's why giving the government even more money never works: it's not theirs, so a third of a mile of a road nobody uses costs $1.5M, and it will get built anyway. Because why the fuck not. An illustrative example was when after the recession the federal government allocated a shitload of federal funds for infrastructure. A busy local road which _did not need repair_ ended up getting torn down and re-paved several times to use the funds over the course of a couple of years. Why? Nobody asked the question why or did the math. There were roads immediately adjacent which did need repair, those still have potholes. Where I live it costs about $1M to install traffic lights on a simple intersection. A local hospital (which I don't even use because it's out of network with my insurance) is raising hundreds of millions of dollars for "renovations" through levies (which are, thankfully, voted down repeatedly). If I were to vote in favor, they'd still charge me hundreds of thousands of dollars if I get cancer and end up getting treated there. Same with "cancer awareness" campaigns. Dude, you're charging an arm, a leg, and a first-born already, why do you need even more money for "awareness"?
I agree. ...but in a crunch, during a global political crisis, you don't just setup a chip fab overnight. It'll take 3 years, minimum to get the first batch out.
You want to involve a court of law in order to bring costs down? You've just massively increased the project budget and timeline without solving anything.
Why don't cities/counties in-source repetitive maintenance and construction tasks? I'd expect that a county has sufficient need to build roads that a small construction crew + equipment could be kept on staff for road work.
Is this like a succinct data structure? Can the compressed data be used in place without uncompression?