skysight-inc/HackerNews huggingface dataset:
Replace "apps" with "software" or "text/video content" or whatever you want to make it clearer the concerns here. We shouldn't cheer the banning of any of this kind of software. We should denounce the excuse of national security concerns lest the next software or content ban you might regret the executive precedent given.
Five Eyes includes US, CA, UK, NZ and AU. Does it mean that German or French social networks are not allowed in the US? Conversely, should Italy or Russia ban US social networks?

There are no absolute friends and absolute enemies. China was a good commercial partner of the US until a few years ago. Italy has been spied for decades by the CIA. The US wiretapped Germany's PM. Israel was caught installing spy mobile phone cells around the White House.

Or is threatening the economic and technological supremacy of the US by competing on the global markets already a way of not siding with the US?
I'm very capable of finding exploits in what can only be described as terrible living conditions and I've done so while being categorically incapable of finding food anywhere. That's not the environment I live in today (and I'm happy about it), but it really doesn't require a nice warm home with a stable internet connection to find some glaring holes in an application.
I think there is a question to be asked if Constitutional rights apply to foreign entities like companies that are actively working against the US. At the level of nation states, one has to take care that they are holding themselves to their own standard so tightly that other countries who don't do the same take advantage of it. There isn't any greater power to enforce justice and as such many concepts of fairness don't work the same.

Otherwise you end up with companies that will oppose the US because it doesn't ruin their business but which will cave to other countries because it will. An "every body else is doing it" argument works a bit differently when there is no higher power to appeal to.
Couldn't the EU leverage the TikTok ordeal to make a similar case to force US-based social networks to divest ownership and restrict data hosting to locations outside of Five Eyes access? Given the revelations around espionage towards NATO allies it doesn't sound unreasonable.
If Apple didn't want scan every binary submitted for notarization then they didn't need to introduce the notarization. They already had the means to revoke malicious binaries after-the-fact by revoking the corresponding developer certificate. The main difference with notarization is that it forces binaries to be submitted to Apple early for inspection in comparison with signing using developer certificate which happens locally.
Touchbar is the most stupid and user hostile feature on MBP (getting rid of replaceable battery being the most hostile).
That could be a yellow flag in either direction - a less knowledgeable person might be overly confident, or the less knowledgeable person might be unsure.
Cool. :smile:
Slack paid a researcher next to nothing for uncovering a critical security bug
Show HN: Application Security Testing for Modern Engineering Teams
This is simply wrong. The fact that it is impossible for you to believe otherwise should inform you that you do indeed live inside a bubble.
Does your example assume the asset will grow in value? Wealth taxes get big as they compound, but that also shows the compounding value of assets.
Absolutely support this point of view. Play stupid games, win stupid prizes.
This could explain some of the “details” better.

“Backend” is a Django application - but not mentioned in the README, for example.

Also, what AWS services are being utilized? The Serverless stuff deploys to Lambda... that can be inferred, but the rest of it?
80% of doctors (especially cheap ones like the lawyers mentioned above) would fail to get optimal results in complex scenarios like presented above, just like the lawyers.
Thanks for that link.

I’ve read so many of these, and it all comes down to a trade off which they decide goes a particular way but I don’t feel convinced by their reasoning. It still seems like, in cases where the appearance has to be pixel perfect you can either: add a few lines of accessibility code to a .button (which is consistently described every where I look), or add many many more lines of css reset code, which is quite opaque. The article you linked says that to reset the style... you end up applying -webkit-appearance:button. Whereas I thought the style reset would include removing that? Other sources online say that’s warranted.

There is a choice to be made, and the sort of “semantic-fundamentalism” preaching I see in these articles seems to be used as a way to avoid truly weighing up the options. They treat guidelines as laws and try to justify it from there. For me: it depends.
Yes and no. Read "realtime" not like "realtime computing" but like a marketing keyword introduced by firebase which means something like live-replication. https://firebase.google.com/docs/database?hl=en
So immutable records only makes business sense in databases too small to benefit from immutable records (where you can just version the entire database, for a "few hundred megs")?

I don't understand what FAANG has to do with this. Medium or large non-tech companies commonly have business critical databases in the hundreds of gig range.

Acting like medium to large databases aren't common in business is just outright odd. The argument also doesn't address what I asked (business case for this vis-a-vis cost).
I’m one of the founders of StackHawk. We set out on a mission to build a developer-centric application security tool. Today we are launching into GA and we’d love for you to check us out.

Application security testing today largely does not serve today’s engineering teams. Scanners test production applications and assume that a security team is leading the scans. We’ve seen automation in CI/CD advance so many other parts of software engineering, but application security has lagged. StackHawk is a developer tool and puts AppSec into the hands of engineering teams.

Here are a few key highlights:
+ Best-in-Class Scanner. We’re built on the open source ZAP project (https://zaproxy.org), the most frequently used application security scanner out there.
+ Supports Modern Tech. GraphQL, single page apps, REST APIs. You name it, we scan it. And we make pipeline automation easy.
+ Built for Engineering Teams. Yaml config, Docker based scanner, command line focus, engineering tooling integrations. We build this for you.

Take a look at https://stackhawk.com or shoot us a note at hello@stackhawk.com!
Those news about Apple approving malware are so wrong: the notarization is not an approval, it's more like a registration.

It would be news if it was on the App Store, which has a review.
Admiral Grace Hopper Explains the Nanosecond (1983) [video]
my first reaction , was oh god, please dont! considering how worst siri is, i dont want that.. but after reading other comments like native ad tracking etc etc it could be just fine.

But google pays Apple in billions to keep its search as default, what could be the key motivation for Apple to build its own engine? its a highly saturated market and we have Duck Duck Go for privacy based , bing for alternative and heck, even wolfram alpha for computational! what Apple can improve?
It's astonishing that the developer community is fine with requiring open source projects to pay $99/yr for notarization to run on macOS. Malware authors will happily pay the developer account fees, as seen here, while open source projects are seriously hindered.

It should be possible to verify developers and distribute open source apps without a cost on macOS.
Seconded. Ycombinator is fine here, in my not-lawyer opinion -- as far as I've noticed (as someone who blocks first party cookies by default with uMatrix), they set only a single cookie, when you log in. I checked just now and it has only two pieces of data: your username, and what looks like a signature for validating it.
Don't be naive, you know what I'm talking about.

Do you think the USA and it's allies allowed Soviet companies to run amok during the Cold War?

What we're watching unfold now is way more complicated, and will be way more protracted, than the Cold War was.
Those are good points, especially the second one. I still speculate that the motive is more trade than security however.
Yes, that's why this thread is talking about lawyers being unethical in helping people break the law and escape justice.
Wuzz – Interactive CLI tool for HTTP inspection
Which is not possible
Scotland:
https://archangelsonline.com/

UK:
Give Beauhurst a call:
https://www.beauhurst.com/

Another source might be to talk to people at accelerators/incubators. Scotland: https://www.thisiscodebase.com/
> I think that free world should ban every company that comply with china censorship

"I think the 'free' world should ban software and/or content". Condemn maybe, but it is scary to see such non-free actions encouraged against digital content.
> that's clearly a national security threat and different from wanting data profiles on everyone.

What's the threat model here? Certainly ousting LGBT people is scummy, but I'm not sure I understand how it jeopardizes the security of the nation.

You could argue that the ability to blackmail government officials compromises national security, but lots of things in that "data profile" could be used for blackmail. I don't see a reason to break this issue out separately.
> here we are talking about not being put in jail because you say publicly that tibet should be free

Expel Spain from the EU. Economic blockade. Whatever it takes. At least the UK held a referendum on Scotland. Fake promises and all but we can't jail dissidents just because they try to form a separate country in today's world.
Paralyzed legislature is why there's no laws.

And it isn't about privacy of the citizenry. Its about sticking it to China. The US executive hasn't and doesn't care about what happens to the citizens, just about reelection.
Which ones - we're a pretty lean startup so if you've found some errors, I'd like to know.
Are you seriously telling people who are starving to "get a [conventional or not] job"? I'm struggling to understand your point of view, this is almost a caricature.
According to Wikipedia [https://en.wikipedia.org/wiki/GC376], it seems this had already been suggested months ago, as early as February 5th [https://chemistry-europe.onlinelibrary.wiley.com/doi/full/10...].

What's new? And also, how come this hasn't already been tested?
> The prosecution's job is to seek the the most punishment possible

This is absolutely false and is also unconstitutional.
National Security Law Lectures
In practice companies are more likely to upstream non-gpl not less. With GPL they decide to use it without allowing any change, or they don't use it at all. With more liberal licenses they upstream anything that isn't core value because the cost of maintaining a fork is higher the more they are different.

GPL advocates try to claim otherwise of course.
This link let's you dive into many many sources of finance, some of which may be suitable:
https://www.mygov.scot/funding-advice-search/
I can't speak for them, but as a private pilot who has become friends with lots of folks who are not career airline pilots, I can tell you that the delusion among that group of folks is quite high that things like this aren't coming for their jobs -- and fast.

The self-flying use case is, at least from a technical standpoint, far more straightforward than self driving, and the cost incentives are pretty huge. Not to mention the fact that some of this tech has already made its way into private aircraft, with Garmin already having a production system in place where non-pilot passengers can simply push a button on an aircraft and it will completely autonomously find a suitable airport to divert to, communicate with ATC, and land -- even taking adverse weather into account.

There is also a lot of regulatory and tech work at the FAA to also try to ulitize drone-like systems to help operate aircraft. The reality is that the vast majority of time that a pilot is in a flight it is quite low-intensity work (if there is any work to do at all). The thought here is that remote pilots could control the machine (or assist a single pilot in the cockpit) during critical phases of flight. The advatange here, of course, is that a remote pilot could do many such flights over a short period of time, whereas the one on board is stuck to the one flight even in moments where he/she has absolutely nothing to do.

Whichever way you slice it, if you think there is some argument for fully or partially autonomous driving, all of those arguments are orders of magnitude more compelling in flying. Timing, of course, is the real question mark.
In the replies we have many many solutions to this problem:

- Conda
- Pipenv
- Pip itself
- Poetry

Which is quite symptomatic.
Formally Verified Trades in Financial Market
Teardown of DJI drone reveals secrets of its competitive pricing
> Michael Fogus (blogger, Closure book author, and all around language nerd) wrote a fascinating article called "fleunpunkt lisps" (forgive spelling)

Was it "Fluchtpunkt Lisp" (https://www.goodreads.com/book/show/45838440-fluchtpunkt-lis...)? I tried searching for it, but this is probably the closest I've seen.
Looks amazing. I always loved how Rx composes with IO on the client side, this looks like the missing half. I hope it survives.

For people who are soon to be choosing a stack for their projects, please be careful. In 2015, we adopted RethinkDB which had very similar ambitions as RxDB and was open source. Unfortunately, RethinkDB is now abandoned (kinda). Many promising subscribe-able databases are still experimental. If you are thinking long-term, you may want to consider more boring options.
Wouldn't I call the latter "encryption"?

Nothing stopping you encrypting a steganographic message. Denying message existence isn't going to be possible in a system that also compresses data and leaks file size - the latter rules out having null states (all RF communication?) or large blocks of zeros (most, if not all, storage?).

You could do something to avoid that, by doing a LOT of padding with random bits - but again, that's back to encryption, isn't it? Except encryption is something you can apply in the real world, where constant broadcast is usually impractical.
Should.

Sure.
Hey! I've written extensively about my experience building a Shopify app. Check it out, hope it helps :)

https://www.preetamnath.com/blog/building-your-first-micro-s...
Bloomberg Opportunities
Bloomberg LP | New York, NY (On Site) (and other locations) | Full-time | Senior Software Engineers

Please feel free to reach out and tell me about what you're looking for in terms of projects, technologies, stack. Email me Ana Doyle, at adoyle57@bloomberg.net

Here are a few of our current openings:

Senior Software Engineer - Communication Systems NYC - https://careers.bloomberg.com/job/detail/82735

Senior Software Engineer – Trade Order Management System (TOMS) NYC- https://careers.bloomberg.com/job/detail/83048

Senior Software Engineer - Equity - NYC
https://careers.bloomberg.com/job/detail/82030

Senior Software Engineer - Portfolio Analytics - LONDON https://careers.bloomberg.com/job/detail/83773?qe=Senior+Software+Engineer+-+Portfolio+Analytics

Senior Software Engineer - Network Modeling NYC- https://careers.bloomberg.com/job/detail/80264

Senior Full-stack Engineer - Jupyter Data Science Platform SAN FRANCISCO- https://careers.bloomberg.com/job/detail/84311
Yes that is true when you combine those 2 cities. Also known for their large interstate highway interchanges. In fact one of the newest is in North Dallas aptly named the "High Five" interchange.
Any professional in a competitive field fakes immense selective pressure to be unethical. It doesn't matter how honest one is, the system will select for the cheater. This goes for lawyers, bicyclists, tradespeople, anywhere where the client or victims of externalities can't verify the quality of the work and hold them accountable.
Stubbornness may be a pattern from a computer hardware company offering only a single button mouse for decades
Its really small, but for me its traffic lights. It's SOOOO much easier to be navigating and say, turn in two lights, instead of "turn in the next three streets". Especially on busy roads when you need to be in a certain lane to make that left or right hand turn.

Google maps added this to their desktop app [1] and maybe their iOS app, but apple has had this for years.

Also Apple maps offers saved places in an offline, non-synced way. Google requires access to all my location data to save places (like web bookmarks) and that's just too privacy invasive for me.

[1]: https://arstechnica.com/gadgets/2020/08/google-maps-starts-w...
The code samples make it super easy to follow. This is fantastic; thank you for sharing!
Sorry, what? Where is this hostility coming from? I’m not against accessibility.

The trade off here is between trying overcome default styles of buttons on every single platform (hard! But necessary for a game) versus treating a div as a button on every single platform (not as hard)

Please don’t simplify it to mean that by highlighting that this trade off exists I am uninterested in accessibility. You don’t know my journey.
I've seen articles stating that people are moving out of big cities since the pandemic started. I also saw an article that suggested a good number of Californians are moving to AZ, but I think this was more anecdotal.
My argument is that they together are big enough to stop any other legislation.
Lawyers that knowingly write such unenforceable legal intimidation should face some consequences.
You should read further in the article, it discusses just that, including an initiative to offshore medical scribing to India.
Nobody wants to hear from the guy who admits he doesn't know everything. They want the opinion from the guy who is still on mount stupid and knows just enough to think he know everything about the subject.

He sounds more confident.
They pay the costs of maintaining their fork. Thus there will be constant internal chatter of is the non-merged stuff really valuable enough considering the cost of maintenance. Sometimes yes, but sometimes no as well. So overall that is a long term win.
As a former EHR dev many of our costs come from these very same systems too. Procedures auto added to people just for walking into a building. Usually I tell people to review the bill make sure all the procedures were actually done. Many are skipped. Because they are not really needed but are still billed for.

My exp is before the big conglomerates. Doctors when I did this were crazy cheap on what they would spend money on. This has sort of moved over to the cost center now and the doctors are the ones who get shorted along with everyone else.

These systems also create a sense of not knowing what is going on. They create a system to disincentive people for looking at ways to make it better. Only the bean counters and shareholders look into that. So you end up with very strange cost cutting initiatives.

Then we added mega insurance into the mix. Which has seemed to found out it is just dandy to pass the bill onto everyone while the costs go up and up. They were supposed to keep a lid on the prices. But they didn't. I do not hold out any hope for a 'medicare for all' system doing any better. The insurance companies have a good incentive to do better. The gov not so much.
I haven't been able to figure it out either. My best guess is that the "integral and indispensable" was interpreted from the point of view of an employer, when it should have been interpreted from the point of view of the employee.

Amazon could eliminate the security check entirely with no adverse effects on the employee's work. From Amazon's point of view, it is easily dispensable. The employee's cannot opt out of the security check without being fired. From the employee's point of view, it is entirely indispensable.

Though not stated, I'd guess that there is also an unhealthy amount of efficient market hypothesis thrown in. If I assume that all markets are at equilibrium, then no company would have workers perform unnecessary work, because those workers would then choose to work somewhere that doesn't.

Edit: It may also be that the Court wanted to avoid extending existing law, and instead wanted to point out limitations in it for Congress to then amend. I'd have to read the transcripts in detail there, which I haven't done.
Great work! Email me.
>Are you saying that CPC gets to ban Google, Facebook, Twitter & a ton of other non-Chinese online companies but the US government does not get to ban Chinese online companies, even in the name of fairness both in terms of trade and information flow?

Yes I am.

My concerns center the precedent of banning software. If banning software to further the interests of national security is established as a precedent, it is reasonable to assume this will be weaponized against end-to-end encrypted messaging apps like Signal. This would erode a strong, hard fought for precedent that code is speech. The Bernstein v. Department of Justice decision ended Export Control of encryption on the basis of software as speech. [1] Courts affirmed this right again in a ruling against a California law banning the sale of violent video games to minors, as it infringed on the speech of video game companies. [2]

Since you brought up China's policies, they also happen to ban end-to-end encrypted apps as there is a strong precedent for doing so in the interests of national security. [3] These simply aren't policies worth emulating.

[1] https://www.eff.org/press/archives/2008/04/21-40

[2] https://www.law.cornell.edu/supct/html/08-1448.ZS.html

[3] https://www.nytimes.com/2017/09/25/business/china-whatsapp-b...
Smaller size reduces the penetration trauma. I wonder how they are going to reduce chronic tissue response?

Even if the surgery does not result bacterial infection, insertion injury and the pretense of a foreign object often leads to persistent low level inflammation.

There is so much basic research questions that simple engineering is not going to solve.
Fourteen Eyes
I find it interesting in the US that we hold lawyers to the high standard of no lying, while law enforcement officers are given more latitude, esp in interrogation situations.

Seeing it in TV shows and movies, which often have officers and detectives lying about knowledge, evidence, other witness statements, all to get info, I assumed that it was fictional. In many cases, though not all, it appears to be allowed within limits in real life. See, for example, https://www.google.com/amp/s/www.adamsluka.com/amp/can-the-p....

This doesn't mean all cops are liars, and they still shouldn't commit perjury, but it's an interesting comparison to me. I guess it's a reflection of the advocate/adversary approach that is often a part of the legal process.
Dunno about white truffle and sea urchin, but I can attest that using good, actual truffle oil on it can be an inexpensive way to REALLY add to the flavor of it.
Someone using KDevelop for PHP development? Is it good? Is it bad?
You're backwards. The topic is talking about how 65% of population is required to pass. If France and Germany have 33%, as you say, then every single other country combined is 67%. They would then have enough population to block legislation together in most cases
Yeah, with our implementation of golinks, we quickly discovered that people tend to forget golinks they set.
Is it go/docs or go/doc for example.

So, with our /go command in the browser extension, all the golinks are listed and the user can use the autocomplete to find they one they need.
Are we in the middle of a long peace–or on the brink of a major war (2018)
Slavery in the Americas and Caribean Islands is a European responsibility. The revisionism comes when we forget slavery was happening around the world. The Barbery white slaves taken from Europe rarely gets mentioned. Or the fact that slavery exists in the bible but rarely highlighted are examples of revisionism.