skysight-inc/HackerNews huggingface dataset:
some1 with the right access to the kms service could change a key policy to allow access to a bad guy. in theory. bcuz some1 has to have access to key policies since customers lock themselves out of their keys all the time.

but no 1 can export the private key itself. and key policy changes are vry heavily audited by aws (and can be by the customer, too). this is all proven by the 3rd party audits aws receives
Yes, this! This is one of the stupid-simple reasons I love traveling in Japan.
I used to work like that but CSS Grid is actually amazing. Highly recommended.
I had the exact same thoughts upon reading this article, having spent quite a bit of time in Japan. Businesses are liberally sprinkled all over residential neighborhoods, from bars, cafes and grocers to home electronics and repair shops. The density (and corresponding walkability) of Japanese cities is a big factor that supports this kind of development. The armchair economist in me wants to theorize that this might be a contributing factor in Japan’s exceptionally low unemployment rate: the ease of starting a micro business from your doorstep.
> they are terrible for people with disabilities

Get better self-checkouts. The ones that try to simulate how a traditional checkout works are stupid, the same way a mechanical messenger pigeon would be stupid but email is pretty good.

A friend of mine has several serious problems. He much prefers the self-checkout. No human interactions, which means no need to try to figure out what the other person thought they were communicating.

It was much better during the worst of lockdown too. I go in, I pick up items I want, I scan them and place them in my backpack, I go to the checkout, I hold the same device I used to scan items near the checkout, it acknowledges that I agreed to pay for the items I scanned, I put the backpack onto my back and I walk out of the store. Minimal contact, no human interaction, very low risk. Nice.
My initial assumption was the same, especially with the type of claims this topic has elicited in the past. That being said, the individual making the claim (Eric Davis) seems reputable[0] enough to not risk his career/stature for a buck. He has a PhD in astrophysics and more than a handful of publications and citations in the field. Given the magnitude of the claim, I'd say skepticism is still warranted though.

[0] https://www.researchgate.net/profile/Eric_Davis6
Thanks for the input. I'm working on adding print functionality as we speak - let you know when it's up.
I think it's possible, but usually non-cost-effective because it has to be done on a 1:1 basis and therefore doesn't scale well. For example: I can intensively audit a developer's code for a couple weeks (in real time) and usually get a good feel for the blend of skill/time/effort being invested. But it's so time intensive for me to do that, that it's reserved for extreme situations.
By tracking actually delivery data and displaying some aggregated statistics on the product page?
Hmm.. I may or may not speak French. Thanks for the idea.
> I think tech workers that believe that remote is more productive really fail to grasp the enormous company incentive to have all workers remote if it were so, as it would be cheaper tax-wise, operational wise, legal wise, etc.

Would it be? Seems like, at a minimum, various employer liabilities that exist when an employee is working independently of whether or not it is at the employer’s location become less controlled in remote work, which potentially works strongly against that.

Also, the argument you make, even in the best case, fails to grasp the difference between “is” and “has always been” and the magnitude of impact of cultural inertia in favor of what has worked well in the past.
We need more attorneys. Attorney saves the day.
I don't think this is the kind of result anyone wants. Even if you do get a ruling that ignores license agreements and says first sale applies to infinetely copiable and distributable content - it'll give every monetary incentive from the copyright overlords to bankroll Congress into further archaic laws. There's every good argument to be made that digital is not the same as physical, and thatll result in more terrible laws.
Forward slashes work on Windows systems for most [1] paths. You can write `include_bytes!("foo/bar.txt")` in Rust and be very confident it'll compile correctly for most of your users.

[1]: "Most" because they don't work for namespaced paths, by design. But note that the number of times you'll encounter those is limited, the Rust standard library doesn't handle them correctly in general, and a lot of other non-Rust software breaks when given them.
I am so ready for law suits to tear down Section 230 and similar legal shields. Web sites should not have unique legal protections just to show outrageous ad content only to plead ignorance when publishing content is the revenue stream. They should be held liable for all content expressed on their platforms like any other publisher.

https://en.m.wikipedia.org/wiki/Section_230_of_the_Communica...
The point I’m trying to get across is that the default viewpoint of many knowledgeable developers I know is ‘Of course AWS can’t see inside my EC2 instance because X’ — where X is some magical technology that doesn't exist.

I don’t want to devolve into audit logs and permissions and multi user key signing and wether they actually do or not.

The statement that ‘they can’t’ is 100% false, full stop. That’s all I’m trying to get across.
Is there a legit case for doing it as an exercise for the experience (shaking out bugs, making discoveries by having 2 discrete development platforms), or as a strategic card, so they “have options”? I don’t know how the costs scale - whether it’s <2, ~2, or >2, and at what cost any (potential) benefits are simply cost prohibitive. Anybody have insight into this business, esp with something approaching a major player like Apple?
I disagree, one amazing aspect of Go is the static binary that can easily be distributed. I embed templates and other text files in my binaries and it makes the installation so simple and without extra dependencies or steps. Even though I'm a huge proponent of containers I don't think it is needed for things like CLI tools.
Yeah, they switched to Intel and went "Hey, you can run windows on it in VM or in bootcamp, maybe even play some games!". Then iPhone came along and propped the sales of macs.

Now there are people tightly locked into Apple ecosystem that doesn't exist anywhere else. Saying it as someone who left that eco-system not that long ago and boy do I miss it.

Now is a good time to switch to their silicon.
Maybe repo sponsorships/bounties would help. There could be a basic maintenance bounty that could be chipped into, it could build up over time and then occasionally any of the repo contributors could jump in and tackle a bunch of PRs and issues all at once and pick up the pool of cash.
"There's thousands of people that have the ability to drain your bank account right now"

Do you have some data to back that up?

Sounds implausible
Suburbs are literally rooted in racism.

That sounds hyperbolic, but the first suburb in post-war US was a planned whites-only community to escape the city. (Levittown)

---

With that said, yes, the US purposefully planned blocks of cities to be dedicated to one purpose. This promotes car culture which, surprise surprise, car and oil companies were big into lobbying to shut down mixed use and public transit, and continue to be.

Mixed use areas are typically either big cities, have pre-war origins where it has basically always been mixed use or typically both.
Open source does not currently allow for what you are trying to achieve. Consider Fair Code: https://faircode.io/
I've found that it is typical for people who run these small types of businesses also live in the neighborhood, or close by.

Another improvement is that people who both live and work in the community have time for more community engagement, but it their children's schools, local government, or local volunteer efforts.

Local businesses improve the community.
We'll have to agree to disagree on what we consider fairly reasonable to call "limited".
I was on a business call with someone from AWS on a different topic, and it was pretty darn clear they opened up some sort of Account page that discussed our (limited) AWS usage, and were trying to infer a bunch about our business from that. It doesn't even really matter how deep that data goes - even just month-over-month billing #'s or something like compute/bandwidth consumption is super telling.

We mostly only do CI type stuff there, so that didn't work so well for them, but if most of our revenue & operational use was through AWS, you bet I'd be worried about what they could infer.
FB employees launched very strong virtual protest in recent times. Some had even skipped dessert after their meals. I do not know what further moral courage one can show beyond this.
You last posted posted here just eleven days ago, so that clearly wasn't a very binding oath.

But welcome back I guess.
Not true in my case, I joined a company during corona and started out remotely. I've been working there for 2 months and had the opportunity to go to the office for the last 2 weeks. What I've noticed between the first 6 weeks and the last 2 weeks is that there wasn't a difference in productivity.

There was a difference in amount of time wasted though. Going to the office is in my case much more wasteful, mostly due to travel time (90 minutes per day).
Nothing here but a signup form. No explanation of how insurance companies would be convinced to provide such a service. No terms and conditions about what they'll do with the e-mail address that are being collected.
A time scheme in which sunrise is always at same time (skewing the clock by a few seconds or minutes every day at three a.m.) is likely a boon to human health. Smart watches and Alexa/Siri take care of time zone calculations. The fact that two dimensional time zones skew a bit more at the poles is a silly reason to dismiss the idea. The poles are weird for a bunch of other reasons and no time works there.
If the USA can’t convert to metric, despite passing laws to that affect, my belief that the world will adopt a new calendar system is less than non-existent.
FWIW, this is actually quantifiable. We contract with a firm that tests employees' response to spear phishing about once a quarter with varying degrees of "difficulty". Part of an overall scheme that also identifies people who blindly click on things for, uh, further email education.
If you want to support the author and purchase the whole kit, here it is https://tinypilotkvm.com/

(Edit: No affiliation. Just happy to see something like this for hacking :) )
I remember the reason behind skipping table for layouts was to help browsers render the page progressively.

Tables - instead - needed the whole chunk to be rendered. i believe this reason is still valid!
It’s only going to get worse. Imagine your boss calling you and telling you to provide him some info: https://www.wsj.com/articles/fraudsters-use-ai-to-mimic-ceos...
Both Buran and Shuttle have wings to be able to return significant mass from orbit and soft land with it.

Think snagging enemy’s secret sattelite from orbit and bringing it back for research.
Just be careful that assertions aren’t used in place of proper bounds checking.
It's very easy to avoid being spear phished: do not trust any unsolicited message over any medium. Email/text/phone message/popup window purporting to be from your registrar with an urgent call to action? Ignore said call and contact them directly via known good number, email address, URL, etc.

EDIT: Voice mimicry scam? Verify via known channel before taking action.
> having one or two days per year which are part of no month is stupid

There are some valid points in there but this kind of thing is not productive. No need to be rude.
And yet, we wouldn't have formed a nation at all without that compromise. Still, it's hard to know if the founders made the right decision.

We could just go back on our agreement. After all, people in flyover country are just a minority with little economic power and very little representation. I doubt anyone that matters would care if they have what little power they do have reduced.
> contracted to work 40 hours/wk

That's not how salaried positions work in the US. If you work 60 hour weeks you don't get paid overtime (but if that helps you perform beyond your peers, you might get promoted faster).

What matters is performance, not hours.
> Instead of understanding the mind (and consequently the body) as a system and listening to whatever small traces your mind has left in its great attempt to solve really important problems for you, we just blind ourselves to faux goals that we may not even actually want.

Well, what might those problems be? What goals do we “really” want?

For most of humanity, the majority of humans have had little options to change their predicament. Our brains evolved for hunting/gathering in tribes. A few thousand years ago we learned agriculture and started settling down. Very recently, we’ve improved the lives for a majority of humanity enabling many people, for the first time in our evolutionary existence, a choice in how to live their life. And that choice is either extremely empowering or terrifyingly debilitating.

The self help industry has grown to serve this market. There’s definitely a lot of “positive mentality” stuff but we also have a lot of people that are benefiting hugely from getting help from mental health experts.
Not necessarily- exoplanets beyond our solar system really aren't going to be feasible to physically travel to until we can come up with something along the lines of faster-than-light travel. Given the lack of light pollution on Mars, I almost wonder if we wouldn't be better off doing all of our astrophysical study out there or in deep space anyway (assuming we have a steady supply of transit back and forth to transfer the data since streaming isn't likely to have good enough quality for a long time either).

Then again, I am also not a fan of putting more satellites into orbit either... mostly just struck by your comment as being not terribly odd to me.
Good lord. This is an announcement of a series of in-depth posts by a literary and historical periodical, not a listicle. There will be ten more posts where this came from:

https://annotated.laphamsquarterly.org/page/forgotten-best-s...

Many works by people of color and women have been suppressed or deliberately 'forgotten' by racist and sexist publishers and critics, far more than the white men whose demographic dwarfs the contributions of others regardless of quality. This makes those books worthy of special attention by historians even if they had not, as the post clearly states, already shown their merit by being best sellers on (as you request) their own merits.
It is my understanding that website owners (especially owners of small websites) rely on Section 230 in order to host user-submitted content (such as comments), as they cannot feasibly moderate all the content and they don't want to be held liable for anything inappropriate or illegal. Am I mistaken?
There comes a point where your pricing is so opaque and confusing that it's indistinguishable from lying.

Those people are jealous of AWS.
Which in turn is a riff on the "spam solutions" checklist: https://craphound.com/spamsolutions.txt
At my last company, the system that eventually became our Knowledge Graph started out as RDF. It seemed like a great fit, but we didn't really have much luck. There was an unnecessarily complicated process for schema definition and the SPARQL engine we chose (on top of PostgreSQL) wasn't ready for a production load (e.g. was not performant).

I really liked the concept and we borrowed the "triple" approach in our next iterations, but we really didn't get any benefit from using RDF.

Quite possible it was our fault.
How did we slip away so far from this being fairly obvious? Cities have worked well this way for hundreds of years.

Maybe the industrial revolution made cities too unpleasant? Were we too spoiled by the automobile industry and government roads? White flight from cities into the suburbs?
For small values of "classic".
In fact it is based on the older spam checklist:

https://craphound.com/spamsolutions.txt
That works until you lose your keychain :/
Newcomers to qntm.org are advised to browse around a bit. There's some great stuff here. Here's one:

https://qntm.org/responsibility
Don't they just pay a certain amount per "digital licence"/how many copies they can lend? For instance, my library has an X amount of "copies" of ebooks it can lend, I actually never use it because anything that interests me is always "out of stock" and you have to reserve the next available slot.
Stallman was right:

https://www.gnu.org/philosophy/who-does-that-server-really-s...
There's a difference though. The money you lost can be returned in the case of theft, which happens a lot. But Twitter cannot undo what happened here.

Also I don't think thousands of call center people typically have sole ability to directly overwrite bank and brokerage key data fields.
As the article notes, this is just the introductory note for an upcoming series of posts discussing forgotten bestsellers. If you come back in two weeks, when the series has run its course, you ought to find quite a few listed:

https://annotated.laphamsquarterly.org/page/forgotten-best-s...
Analog watches would all be rendered useless.
Well of course, who can afford the rent? It's not like a little four-employee computer repair shop can show up and fill the space.
Most things in Clojure can be found in other languages. However, Clojure has an especially stable and coherent design story, and is quite a bit better thought out than the other languages I've programmed in professionally. The pieces just work together really well, and there isn't a lot of "extra stuff" that only a die-hard specialist would know, or need to. (I currently work at a financial institution, not Nubank, that uses Clojure heavily.)

A few other high points:

- macro-based metaprogramming, familiar to any Lisp-er; macros are essentially functions which write code for you, which allow one to create extremely concise constructs to reduce repetition in code;

- functional programming: probably the hardest thing to get one's head around if coming from a more mainstream language, FP reduces mutable state to a minimum, eliminating one of the biggest source of programming defects and making programs significantly easier to reason about. Additional concurrency-safe state primitives in Clojure makes concurrency a trivial addition to many programs;

- hosted on the JVM, giving interoperability with Java libraries and significant ease of deployment compared to other dynamic languages (I recently went back to Python to roll out a small web service and was amazed at how much more painful the deployment/devops story was compared to our Clojure services).

These are some of the benefits we leverage; other people here more qualified than me have enumerated others. (Plus Datomic, whose philosophy aligns fully with Clojure, though I have yet to use it in production.)

On a personal note, one final attribute I appreciate is structural editing: as a Lisp, Clojure code is data, a feature which one's editor can make use of to allow operations that would be alien to non-Lispers, such as: absorbing nearby expressions or expelling them; splitting them; sorting and reordering; and writing your own automated refactorings without having to write parsers for the language in question. Treating code as data structures rather than strings of characters allows for speed in writing and refactoring code that is hard to give up once you get used to it.
I believe youre misunderstanding how KMS works and is exposed. You probably want to look at the concept of “kms grants.” Thoese regulate which principals, including service principals, can use CMK materials. The customer controls those grants. There are also substantial public docs, and more available on request, around the implementation, certification, and compliance of KMS infrastructure. If KMS is insufficient for your needs CloudHSM is availble for something even closer to “hosted HSM” than “key service.”

In short IAM controls everything, there is no “back door” or universal admin access, and KMS is used to perform sensitive operations NOT handing secrets to arbitrary (internal or external) consumers.
minimalist != that login screen
To both of you who replied: yes, I absolutely use these things in my own life. Before I say some of mine, it's important to allow these things to be mutable -- the "values" you, um, value, can change over the course of your life and that's okay. The best ones probably won't -- maybe you'll just shift in emphasis or priority -- but by really chewing on this topic regularly, it's possible to arrive at values that really truly speak to who you are at your deepest.

The point isn't the adverbs themselves; that's just a way of getting to what matters most to you. So the exercise is something like "fill in the blank: I want to live ____ly."

In my case, ones I "discovered" in myself fairly early were "candidly" and "compassionately" (or kindly - they're not exactly the same, I know, but for me they map onto very similar things). So in other words, two of my values, as ACT defines them, are candor and compassion.

The effect is great, because there's no goal-pressure or even goal-attainment. There's no day that'll come in which I'll "be candid"; instead, I'm free to "derive" goals from that value, e.g. "how can I work some candor into _____ thing I'm doing today?". This conversation with my siblings; this project at work; me sitting down to do my taxes. It's weird sometimes, and you can either dismiss it or use it as a kind of creative prompt: "at first glance, my values don't really apply to this activity, but what's a way to work them in?"

I can say more but I don't want to ramble.
People wanted their children to be separate from people of other socioeconomic classes (and races), and the way to do that in the US is to move to a school district they others can’t afford.
i dont think spear-phishing training is the solution here; especially given the possibility of collaborating insiders. Short social media usernames are bizarrely coveted and so there's an entire cottage industry based on illicitly commandeering accounts and these operations have used insiders working for cellular telephone companies who are paid to grease along processes like unauthorized SIM-swaps/porting.

For operations on accounts where illicit access can cause massive irreversible damage -- either by exfiltrating private information (emails, DMs/PMs, posts on locked accounts, etc) or by making a post that appears authorized (the more notable the victim the worse it gets) -- there has got to be some sort of two-man rule (https://en.wikipedia.org/wiki/Two-man_rule) integrated into the system that can't be bypassed by the people with authority to make changes to accounts. Otherwise any insider / careless spear-phishing victim will make the changes they want, and theres no reason the adversary will limit themselves to posting shoddily-executed (they used the same address instead of generating one per victim!) bitcoin scams.

Furthermore, i'd really like there a way for any user (not just bluechecks) to opt-in to some sort of feature where Twitter enforces more stringent requirements/documentation/delays for the email/phone-change / password-reset processes -- at the cost of accepting higher delays or maybe even monetary payment.

There's no reason i need such critical account procedures to happen on twitter (or my email accounts, for that matter) to happen in real-time, and i would happily give that up in order to require that such a procedure only happen after, like, a week of enforced, non-bypassable delay where they contact me with details of the change on all my phone-numbers and emails every day.
Bootcamp Satisfaction Statistics: What Jobs Can You Get After a Coding Bootcamp?
Trump Is Putting on a Show in Portland