skysight-inc/HackerNews huggingface dataset:
Hm not sure I understand how google secret manager relates to berglas to be honest, thought those two were separate apis...

As for berglas itself, we also use it and have been very happy with it. Since you put just the names of your secrets into the ENV files, not the secrets themselves, they can be easily stored in version control, passed around in chat and you can just do whatever you want with them. Instead of:

ENV_PASS=my-secret-pass

You do:

ENV_PASS=berglas://bucket/secret-id

And it will be decrypted at the last possible moment - e.g. when the system starts. Or even later if you need to, if you use the apis provided.

Funny enough we had implemented the almost the same approach with AWS SSM apis ourselves (https://github.com/ovotech/ssm-env-secrets). But I think it should be possible to use berglas in AWS directly without issue.
We use Debezium and Kafka, it's been really nice.
you should check one-belt-one-road again. it haven't bring any fruits that China is hoping for.

China is aging. while India have plenty of young cheap labors. its only natural for companies want India's labors and market.
For those in the comments suggesting to use another system to store credentials instead of ENV:

Do you need a password to access that system? Why not?
You seem to assume that the people who control physics funding are a bunch of schmucks who're just shoveling money at string theorists. This is very far from the truth.

If you want to understand something about high energy physics funding, a good starting place is the DoE's HEP budget.
https://science.osti.gov/-/media/budget/pdf/sc-budget-reques...

Headline numbers:

* FY 2021 request: $818M

* amount going to all theory /computation: $122M

* amount going to 'Theory': $30M

That theory funding is going to be split among people working on a wide variety of topics, from phenomenology to cosmology to strings. (In fact, the word 'string' doesn't even appear in the document.) In budgetary terms, string theory is a complete sideshow. It gets a lot of media attention, but most string theorists are earning their salary by teaching, rather than from grants. Likewise, very very few string theory grad students are being paid from grant money.

I think your worries about string theorists leading the physics community astray are rather overblown. If it was going to happen, it would have happened twenty years ago, when string theory was at the apex of its prestige. What you generally saw was that places like Rutgers would go from having half a dozen theorists out of a department of 60 physicists to having a dozen theorists out of a department of 66. But the real physicists weren't corrupted or crowded out. They just went right on doing science.
This is definitely a problem limited to certain generations but my .codes domain doesn't get registered as a link in Snapchat.
Microsoft Flight Simulator will launch on August 18th on PC
Workoholic doesn't mean 'unhappy', yes, but how does procrastination not mean 'not working'? In this context, it litterally means 'postponing the work'.
Major Bug in Glibc Is Killing Applications with a Memory Limit
That's also been my experience. To be fair, most of today's search engines suck really bad. No exact match, no special symbols, no wildcards, etc. The power user had better tools at their disposal back in 1999.
>But Linux is also the least popular of the operating systems with only 8% of the total laptop/desktop market.

That sounds very high, I thought it was still ~1-2%?

Shouldn't Firefox block GA by default now since they enabled enhanced tracking protection by default? I'm surprised the number for Firefox is so low.
Not sure if it's still like this, but I got in on KMS early on and I think you could only store Google generated keys. However, I needed to be able to store API keys, passwords, etc... So I used the KMS generated keys to encrypt GCS files who themselves contained the API key, passwords, etc... that needed storing.
It's also accessed that way in Ruby. ENV['MY_VAR']
Fedora on my primary desktop. I've got Linux Mint on an old laptop. Personal servers are a mix of CentOS and FreeBSD 11, mostly because I wanted to mess around with BSD.

> Why did you choose them?

I'm a certified Red Hat guy, so Fedora and CentOS were easy picks. Fedora also has good support for Steam/Linux gaming, and it has packages that are fresh. Occasionally too fresh, and I've definitely had an update break stuff

FreeBSD, as mentioned above, was mostly on a lark, or chance to learn the system. Stable, solid back-end system tho.

Linux Mint was mostly because it was laptop and I wanted the drivers to work.

> What problems do you face with them and what changes would you like them do make?

Honestly Fedora is fine as a daily driver these days. Steam works well, and most games work fine with Proton; the handful that don't aren't really the fault of the OS.

Mint has some issues with security and their repos, which makes me nervous, but from a technical standpoint it's fine.
Do you mean that the entire system is compromised or just that individual sites are? Because it sounds like you are painting with a very broad brush here.
Signal spent months and years designing a system for backups that had no opt-in or opt-out feature. They deployed it over a period of months, ignoring a lot of vocal criticism from people who said "this is fine, but why aren't you letting me opt out?"

Finally, at the 11th hour, they hacked in an opt-out feature. Note that the opt-out feature doesn't even stop data from going to Signal's servers -- preventing this upload appears to be technically infeasible! Rather, the hack is to send the data anyway, but encrypt it under a random key.

It does not bode well for Signal's security engineering and design philosophy that "don't upload data to a server, even when users understand and accept the consequences of that" is not something Signal even considered supporting, and their design is completely incompatible with the idea.

If you want to think of this article as a post-mortem on a thing that went wrong at Signal, that's fine with me. Claiming that it shouldn't be written is just silly.
Not dyslexic, but I understand the symptoms fairly well after doing a couple research papers on it. In order to do a good simulation, I think there would need to be an eye movement sensor involved, so that when the eyes bounced back to a word to re-read it, corrected text could be swapped in. Do you think that would make a better sim?
You can write tests and then the functions: https://www.youtube.com/watch?v=CNFr7zIfyeM

and you can interactively fix failing tests: https://peertube.video/videos/watch/c0c82209-feaa-444d-962f-...
This is not Docker related.

If an application spawns a sub-process, that sub-process will inherit all environment variables. Which might be fine or might not be, e.g. if the spawned application is user controlled.

Also tools such as Airbrake or Sentry often send all your ENV variables to the error collection server, effectively exposing your secret values. Most such tools offer to filter variables, but that's in my experience almost always not done pro-actively.

The only thing that's Docker related in that post is that it does offer a turn-key solution for Docker-based projects.
The solution's principle can be applied to other projects though, i.e. secrets should be read from a config file (or something like Vault).
You are confusing opinions with evidence and facts. Obviously you acquire knowledge by reading papers where people are doing research and experiments and presenting evidence, analytics and all the facts from which you can make your own conclusions.
I can't swipe forward / back using the touchpad on your site. Looks like this rule that you set on the html element is causing it:

overscroll-behavior-x: none;
>Mike Moloney runs FilterGrade, a marketplace for custom filters photographers use to edit their work. He gets most of his traffic from articles on his website, such as lens reviews and camera-related top 10 lists. Recently, he noticed Google pulling photos and text straight off the site and showing it at the top of search results. There’s a link to Moloney’s company at the bottom of the section, but clicking on any of the photos brings the searcher to another Google page full of shopping ads for film stock. None of these ads are related to, or benefit, FilterGrade -- unless Moloney chooses to pay Google for placement.

Directly from the article and the type of sketchy shit google has been doing recently where it basically scrapes/steals content from websites and displays directly in the search engine.
Reference counting is a form of garbage collection, but with closures you often end up with circular dependencies, which is what RC can't handle.
Ubuntu since 4.10 and linux since the late 1990s. Why? because I am a bit lazy and it is still pretty close to debian. On the server its a mixture of ubuntu and debian.

I don't like snaps and windows10 vms should be automated and better integrated (like windows has done to linux). I don't like that they have removed findutils. I do like that thinkpad bios updates is now integrated.

Mostly I think the OS should get out of our way. I might move over to debian as they seem to producing newer packages now.
This is interesting, particularly the all-in-one nature of it.

However, of late, I've taken to hand-writing HTML and CSS for some small static sites I manage. I still use Hugo and Sass for my personal site, though.
- Is it possible for the generated static site to be HTML+CSS only (no JavaScript)?

- How optimal/minified is the generated code?

- FYI, if you have third party cookies blocked, logging in with GitHub will fail (the login popup opens then immediately closes with no error indication). While failure might be expected, it would be nice to give the user a hint on what might have gone wrong.
I'm curious to learn more, but I wish to opt-out from 3rd party trackers beforehand - there doesn't appear to be any method to do this, so am I (and any other Europeans in the same boat) entirely unwelcome on your site?

Or am I missing the feature (I did try and look)?
What issues arise by aliasing &str and &String to the same (&str) implementation? Does any code actually rely on &String pointing at the String itself rather than the bytes of the string?

Perhaps its more strange/broken to special case &String that it is to have the (imo) warty &str.
I think linux on the desktop would be been better story.

My point is without Microsoft we wouldn't be where we are today. We'd be lagging far behind. Apple being the only competition, would probably still be selling Apple 2.
> not checked into the source code repository

Or checked-in, for easy distribution, just encrypted:

https://github.com/sobolevn/git-secret
There is secret manager is AWS and gcp.
Ask HN: Azure customers, why do you host with Azure over AWS or GCP?
Additionally:
- What OS do you run?
- Do you have a meaningful server-less component of infrastructure?
- Do you containerize your hosted services?
- How big is your company (& does the company host exclusively one provider or give flexibility?)

Context: don't work for any of the Cloud Providers. mostly curious as an AWS cloud customer.
Perhaps the author wrote the article on their MAC.
There are generally two types of architects: white collar and blue collar.

White collar architects are artists, and spend their time designing. Then they hand their sketches to structural engineers and say "Figure out how to build this." These are generally the folks architecture magazines write about.

Blue collar architects are more engineers and tradespeople, and see success as a building that fits the purposes of the client, in budget, in a pleasing way. They're more likely to repurpose a historical form, if it's well suited for the request at hand.

One of the central features of architecture meta is that white collars think blue collars lack creativity and intelligence, and blue collars think white collars are pompous pricks.
https://12factor.net/

Config is the third commandment. IMO it also makes it super easy to swap configs for different environments.
Totally agree. Science is about knowledge of experimentally verifiable, repeatable and objective facts. Beliefs are neither objective nor verifiable.

I never went to India. I never went into Space. I never saw a human or a blood cell in a microscope. Still I know India exists, that Earth is not flat and that vaccines work. This is because I've been taught so many different facts and theories that all fit nicely together in a way I understand and that I can verify myself, and that are continuously and regularly confirmed by all the echoes I received from reality.

As for scientific mistakes, this is very well incorporated in the scientific process, new theories and facts replacing previous ones. However, as science progresses in a domain, new theories and facts are usually less and less groundbreaking than the previous ones. If you think Earth is a sphere, you're wrong, but much more right if you'd think it's flat.
It's not "much work" but it is a lot of extra risk, because after you empty someone's credit card they'll quickly find out and alert the bank, which will alert the authorities, while skimming can go undetected much easier.
> Wearing a mask (for the most of us not working in healthcare) prevents you from spreading the disease. It's not for protecting yourself, but for protecting others.

How does the mask know in which direction it is providing protection?
> the people who make civilization possible.

People like you?
Sometimes the discussion here is more interesting than the article. If there's something uninformed, then it's totally fine to politely call them out on it.

It can also be interesting to see discussions deviate from the exact topic of the article. I enjoy reading personal anecdotes and related information (with sources).

How could you even enforce reading the article before commenting? People could have skimmed it, misinterpreted it, intentionally disagree with it.

Have you seen the comment sections on the rest of the internet? Youtube, Twitter, Reddit.... I think we're relatively informed here
A hacked Gmail account and an empty new account both have commercial value, but with very different applications. For the quoted price (~$150), a hacked real email account would have to be full of personal information useful for identity theft type fraud, or able be used to gain further control of other accounts that support password reset by email. An empty new account ("PVA", phone-verified account) is good only for spamming, registering fake accounts with services that require an email address, etc., with typical pricing in the tens of cents. PVAs are closer to commodities, while the pricing for a hacked real account would vary a lot with the victim (child vs. college student vs. investment banker vs. careless cryptocurrency enthusiast vs. ...).

Of course nothing stops an anonymous seller from defrauding an anonymous buyer in a one-off transaction. But sellers operate under some kind of semi-stable pseudonym, so they do care about their reputations. They might also be selling on a market where some third party would look at the goods provided and adjudicate a dispute.
It depends on your use case and internal infrastructure support. A lot of start-ups start on "cloud" when they have unpredictable needs and little immediate cash for kit & sys-admins (to manage more than the bare servers: backups and monitoring and other tasks that a cloud arrangement will offer the basics of at least, will need to be managed by you or a paid 3rd party on your kit). Later when things have settled they can move to more static kit and make a saving in cost at the expense of the flexibility (that they no longer need). Or they go hybrid if their product & architecture allows it: own kit for the static work, spreading load out to the cloud if a temporary boost of CPU/GPU/similar power is needed (this works best for loosely-coupled compute-intensive workloads, which may be the case here depending on exactly what they are trying to get out of ML and what methods & datasets are involved).
It not even about animals like dogs, cats, ..., chickens that are enslaved by humans in exactly same way as people where and in some places are, it is not even about human trafficking or education. Only imagine if all this companies that backed a change would setup/double a fund to promote minority kids STEM education and/or legal support fund for police abuse, instead we get slave is offensive word.
I manged to get some training engagements because someone in the company read the book and liked it.

So, it can surely help you sell other services. However, this Twitter thread aimed to point out that a book can also make good money, not just be an exposure mechanism.
The furry art in it makes it difficult to take the article seriously. I'm not sure why people inject stuff like this into an otherwise serious opinion piece.
Seems like it should be right up your alley. Here's a gif of what content editors see: https://imgur.com/7W9zcW9

So there's a simplified toolbar (no dev stuff) but they can still add page sections and components from the component library. And when they edit components they only see the fields. You'll be able to control which stuff they have access to in the future.
The world has plenty of room for a few Gehrys, just as it has need for art. Practicality can take second seat to art; this isn't necessarily a bad thing.
Note that, due to "researcher degrees of freedom", statistical tests are a lot more effective at stopping you from fooling yourself than they are at stopping you from fooling others. Preregistration helps with the latter problem, but there's ultimately no substitute for actually replicating the results.
The mess that requires legitimate services to pierce through firewalls.

https://www.tldp.org/HOWTO/Firewall-Piercing/x58.html
>And the same applies in the other direction. In the absence of knowledge, you can't meaningfully disagree with the experts, but occasionally there are enough warning signs that you can meaningfully choose to be skeptical. (For example, a lack of rigor in the field.)

You have put is well. Medicine is one such field which generally lacks rigor in my opinion, this is largely true of both mainstream and alternative medicine.
Danes to sort trash into ten types under new green deal
Yes, I'm using it in production and we're transitioning from our existing over entirely to it.

Running with official helm charts in AWS managed kubernetes and using EBS.

Currently passing about 20k/s in and 20k/s out.

Got any specific questions just let me know.
Remote Workers Collective – Inspiring stories from experience remote workers
Why is it that Linux is always playing catch-ups with device drivers, KDE, GNOME, wayland to be on par with Windows or Mac equivalent? Cause there are lack of resources, how many people want to invest their time for nothing in return? Very less.
That seems nice, but won't you be pwned the day that GCS accidentally loses your files, or your entire Google account gets locked because its algorithm mistakes it as a bot? The danger of that sounds greater than the possibility that your environment variables get leaked.
I'm impressed by how thoughtful the design and implementation is. Good work! I look forward to seeing this grow.

What's the idea behind calling it Primo?
Problem Set 6: The Meta-Circular Evaluator (1998)
Quite a lot of Ultimaker 3D printers in there, that wasn't the case a couple of years ago. And factory floors/production lines in general. Remains fascinating, and awkward.
I've been following https://github.com/adelsz/pgtyped for awhile. It should give you TS types from sql files (and even sql template literals) directly. Though I haven't used it in prod. Might be worth a look.
I mean anything encrypted needs to be decrypted, meaning you have to... have the key stored in an environment variable on the server?
I did't make 100k in one year. It took several years to get to this amount, but it didn't stop there either.
Yeah, I know, shocking.

I don't know Rust, I've just read the book before and played around with it a little. So using C or C++ would have been a more natural choice - but I like having an opportunity to add another tool to my belt. Compared to learning Go it's been a slog.
I like it, really neat idea!
Reaching 1K Subscribers in Two Weeks
That’s not what I said at all. I in fact said just the opposite. The process he took to promote himself so his book would sell is the same process it would take to promote himself as a consultant.

Also, consulting really involves only a few things:

- marketing yourself

- being able to listen to people and figure out their needs

- being a good communicator and being able to explain concepts well.

- being technical sound enough to solve the problem.

- being disciplined enough to be a consistent worker.

Most of which overlaps with being a successful technical author.
The example they use at the top of the article is in bash/shell, and seeing it written as in the article (as "ENV variables") is kinda like a code smell, indicating the author isn't really familiar with what they're criticizing. I think that's what GP is getting at, and it threw me as well - the article really only makes sense when looking at it from the perspective of the author not knowing how env vars are scoped.
Very nice description of the power of the Common Lisp REPL.

Did you have the pleasure (?) of working on any of the lisp machines?

I got into Common Lisp in the early 90's and even then, with GCL and CMUCL, it blew my mind at how much more productive I was compared to my years of C,C++ just due to the one fact that I was now freed from the edit, compile, run cycle, let alone all the other benefits.

It's truly a joy. I don't have a full grasp of why others don't make the deep dive. I suspect it just had too much a learning curve nowadays, with Emacs being almost a requirement, and developers, like most humans, don't like to slow down for a while while they learn before they speed up.
Please see:

1. https://lobste.rs/s/c7fpo6/why_aes_gcm_sucks#c_hjzdar

2. https://soatok.blog/about

3. https://soatok.blog/2020/07/09/a-word-on-anti-furry-sentimen...

etc.
It's also %ENV in Perl, and ENVIRON in AWK.
I think many of them (esp. Hacker Rank) start up a container to run your program. Presumably these are configured to prevent access to the network, external files, etc.

The AWS Lambda console has a code editor/runner that looks a lot like what Hacker Rank has, but you are running on the real Lambda system which has some characteristics of VMs and containers.
I think you refer to this: https://www.facebook.com/WHO/posts/2953744821337548

Also: "Wear a mask if you are coughing or sneezing"

They don't say "NOT to wear masks", as you said earlier. These are 2 different messages.
> You're assuming torrents are intended for copyright infringement

I think they're just assuming that you don't want everyone to know exactly what you're doing online at all times by exposing your IP to everyone and their brother that uploads a resource.
With this logic Signal is a "heuristic for bad cryptography" because it uses CBC. Although I admit that GNU does not have a great track record.
Support for hand-drawn diagrams with rough.js
Every server hosting your application. Things get trickier as systems scale.
I'm surprised at the amount of responses here that hate this article.

It's not without cause/justification. Any stack tracking software (PagerDuty, Rollbar, NewRelic...) gets huge amounts of secrets pumped out to them regularly because of things like this.

And the author is not wrong, the environment doesn't need the secret. The application does.

Sure, you may not like the proposed solutions, but there are plenty out there, he just named 2.