skysight-inc/HackerNews huggingface dataset:
SOC2 is an industry signal that you are committed to security, and it is table stakes for an enterprise SaaS vendor (deals >$100k). It is not relevant if you are actually committed - it's the signaling that counts. The fact that you got large customers without it means you are either lucky, sold based on prior warm relationships, or the client was negligent bordering on incompetent. Either way, congratulations - it's a good problem to have as long as you charge accordingly.

First, some wrong answers:

1. "Here is the AWS SOC2 report". Your cloud provider is just a vendor, and sending your vendors' boilerplate is unrelated to your security posture. Saying this will signal that you don't know what SOC2 is, or what they are asking for, and everything you say after this will fall on deaf ears.

2. "We don't have this as we focus on innovation and speed". For infosec people, this is the same as an aspiring F1 racer saying they never got a driving license for those reasons.

3. "We are small, and we don't need this for our operations". This is also a signal: there is no documented knowledge, repeatable processes, backups, worker redundancy, risk management, or any operational planning. "Now, can we have your data?"

If you accept SOC2 as a necessary evil in your new life, you'll need to set aside ~$30k and 100 hours over the next six months to get a Type 2 (there is no "certificate" for SOC2, that's not a thing). The absolute minimum would be four months, and for first-timers, it might take 8-10 months.

But we're talking about a signal here - to show that you take security seriously. One right answer could be something like this - "At StartupCo, we are deeply committed to information security. Our customers trust us with sensitive data because we designed our ISMS based on the industry's best practices and recommendations from CIS and NIST. Our infrastructure is designed around on the principle of the least privilege at every level - firewall rules, network permissions, server configuration (based on CIS Level 2 benchmarks), IT user accounts, and even our internal Wi-Fi routers. We encrypt all data at rest with AES-128, and in motion with TLS. All data access, including admin access, is logged off-site, and our IDS/IPS systems automatically report any unexpected activity. Next on our ISMS priority list is to engage external auditors to obtain 3rd party attestations, starting with SOC2. In our current schedule, we plan to receive the Type1 report in Q1, followed by Type2 in Q3".

Assuming your operations are sound and everything you claim is true, this will give the big company a clear signal that you understand security. You are committed to this. You have a clear pathway to external validation, and they have plausible deniability.

As much as startups boast about scaling, Enterprises do things "at scale" by default. The only way that works if you have clear rules, and your people follow those rules. "Require SOC2" one of those rules. It's not a bug; it's a feature that discloses which players understand the game. Play by their rules, get paid.
Pb-jelly – A Protobuf code generation framework for Rust, developed at Dropbox
> Indeed, the power goes to the person who can successfully manipulate the most people.

Perfect the enemy of good, etc, etc. What I solved is the problem of relying on a potentially authoritarian government which is what was brought up, rather than all possible problems. What I suggest would be better, not perfect.

> I for one don't have time in my life to be an expert on running an economy, creating an immigration policy, balancing the environmental and societal needs etc.

That's the point of liquid democracy. You delegate but reserve the right to override your delegate if needed.
THIS is what someone should be posting in that bug report, and require Mr. Biebl to explain why he is contradicting TC expectations.
>> This sounds promising, something closer to OSX would give apple competition for devs like myself that want a linux based system and a fluffy "it-just-works" gui

No, don't. That seems to be what they want. It's not about running linux apps on Windows. It's about blending the two so that even Linux apps are dependent on Microsft APIs and such. What is the point of bringing native DX12 to linux if not that? BTW they floated that a while back and the kernel folks said no.

It's the "extend" phase they are in now. Once they extend linux and you jump on with that gui, then the work to extinguish the other options, or just dont care because they get to take in money for every user of MS/linux hybrid.

This is painfully obvious and a bunch of people on here are saying "STFU" unless you have proof of their intentions, which is a stupid argument given the history and current efforts to "extend".
Scientists try to predict Covid-19’s long-term trajectory. Here’s why they can’t
No celebrity is ever faded. Elvis with a stripped down act, think Bruce Springsteen as song writer, with the studio improvements of the 80s, think the Wilburys and MTV, would have been a sight to behold. It would have likely smoothed over some really rough times back then. Got rid of all this cynicism. It's easy to bounce back. Two months, that's about all it takes.

It's wrong to think death sells. You can do the same thing making something. A lot of the publicity is bought because you no longer have to pay the guy.

And they don't die because of the culmination of a bad life. Everyone makes bad decisions, and in the spotlight they are amplified. Usually they get clean, then feel good, and someone from the old days ODs them. The world lost Morrison in Paris and Hendrix as the "H" in ELP the same way. As you get older you get fragile quick. No longer growing.

Morbid article especially after the tragic suicide of his grandson. The mature decision is to cheer for the success of others and never relish in failure. At some level we are all on the same team and another's demise is your own.
> This is not how labor laws work

Labor laws are irrelevant. They were grossly negligent in operating a vehicle, which is the domain of criminal, not labor, law.

Principal-agent aspects of criminal law may also provide liability for the employer, though apparently they haven't been charged. Which, to the extent they could be, is unfortunate because it is only employer liability, civil and/or criminal, that is likely to substantively effect the likelihood of recurrence, because while the individual is absolutely culpable, it's not the kind of behavior where individual criminal liability is likely to be an effective deterrent without better employer supervision, which won't happen unless she employer has a reason to pay for that cost.
From the NTSB report: "The vehicle operator’s prolonged visual distraction, a typical effect of automation complacency, led to her failure to detect the pedestrian in time to avoid the collision."

In other words, while this person should not have been doing what she was doing, we can expect it to happen again if we let self-driving vehicles on the road again. But, Uber (who can afford a much better lawyer than the driver) was found not to have committed a crime. I think they were at least as negligent as the driver, in this case.
Apple has always been an asshole. I was an original Macintosh beta tester - I had a Mac summer of'83, 6 months before their release. Yet, I have never shipped commercial Apple software. Their developer treatment has never been ethical, and I simply never put up with it.
Yeah her job was basically to do a quick time event lasting several hours. Absolutely setup to fail
No, it isn't. Housing prices as they are are a product of supply and demand. Such that, regulations are preventing the building density required to meet unceasing demand propelled by immigration.

Historically rate of taxes were not much different than they are now, whether for North America or the UK.
Catholics identify the 'machine elves' as demons
Best Chrome Extensions for SEO Content Writing
i think there's a lot of truth to that - but they do is so fantastically well

there are a LOT of pain points to deal with rolling out all that is included with the base netlify offering

hosting a static site is pretty easy - but configuring routing between cloudfront and s3 can be complicated so that the reequests don't always reference the root index.html

creating an autodeploy infrastructure can be challenging as well, tools like github actions might make that a little easier, but there are a lot of considerations there

it also makes these kinds of solutions more accessible to developers who might not have the understanding or interest to set up that kind of infrastructure. front end devs can build sites, connect, and go with little fuss
Possibly responsible for many of the reported differences between dmt (especially traditional oral varieties such as ayahuasca) and lsd or psilocybin. The latter are often used in recreational (and often irresponsible) settings, while dmt is often treated more seriously.

Even in a controlled test, expectations probably still play a meaningful role. Possible ethical issues with randomizing the active test.
Reinventing Virtualization with the AWS Nitro System
In short, It's basically weev all over again.
Based on what you revealed in this post - a small framing of the entire image I'm sure - I do not get the impression you value those things. Maybe meditate for a couple months on this topic instead of trying to decide your life based on a test which was probably based on a theory whose supporting evidence cannot be replicated.

Something that stands out to me is that you talk about connection and intimacy and such but never mention your relationships with your coworkers. The primary way people are discussed in this post is as means (especially as the distressed) to your ends (of being their hero). Maybe you should focus on improving your relationships.
Don't worry Google does not need your defense, they'll have plenty of very highly paid lawyers and lobbyists ready to do that.
It’s not much work. Internally at Google they have Idea integration. The challenge for open sourcing it may be that the plugin is also responsible for Google3 integration if I recall correctly.
God in the Loop: How a Causal Loop Could Shape Existence
I'm sure there will be some people who refuse to fly on 737 Max. Those people will have to track airlines and routes to avoid airlines that fly 737 Max and/or routes where 737 Max is used, but also they're going to need to be willing to turn around in the jetway when they get to the plane and it's not the one that's scheduled and accept that they just lit their ticket on fire, and will have to pay for a new one.

When Boeing starts shipping 737-8200 instead of 737 Max 8, then most people are going to be releaved that they're not on a Max, when they are.

Personally, I'd like to see what experts think about the fixes, and let other people try out the planes first, but this doesn't seem like an unfixable problem. The proposed fixes seem to me like they'll be effective even if I think other changes would be better. Although there was a lot of new scrutiny, there weren't many other issues uncovered.
They're basically a research and development firm. How many research teams do you know that are actually "profitable"? Money goes into research because it may pay dividends in a few decades, not because it's profitable in the first couple of decades.
But I bet you'll still get in a car to go to the airport.
I suspect some significant percentage of applicants may not have a disability, exactly, or always totally flub an interview in this way, but may do so often enough that it looks like the level of competence in the industry is much lower than it actually is, if one is taking one's personal experience with interviewees as an accurate measure of that. Add to this that assuredly some of the people confidently complaining about how 90% of their applicants can't write a for loop overlap with the ones generating complaints from applicants that some interviewers are themselves incompetent and asking broken questions (I guarantee you the people doing this think they're great interviewers and getting nothing but signal from their process, and they're probably also likely to exaggerate stories when relating them), then factor in a real tendency to take a 90% OK-to-good signal in interviews and practically forget it happened, taking the 10% bad as more accurate, and I think it's highly plausible the state of things isn't nearly as bad as some believe it is.

Tech interviews are remarkably scattershot in the form they take (outside well-known big companies), and are unusually anxiety-generating, even in the notoriously anxiety-filled field of interviews. Describe what one might (emphasis on might, part of the problem is that it's so often a surprise) expect in a tech interview process to some people outside the industry, and gauge their reactions. I definitely think it's likely they have even worse signal-to-noise ratio than is commonly thought.

[EDIT] Certainly I find it far less plausible that there's an absolute army of people out there, dwarfing the count of actually capable programmers, who are brilliant con-persons but too dumb to figure out that that skill itself is more valuable than programming, outside the top couple percent of programming jobs by comp, and apply it more directly to business roles that actively want it.
You mean airplane mode? I think most phones can selectively turn off the cellular, wifi, and bluetooth radios.
China and Airbus together probably can.

China already has a 737 MAX competitor - the COMAC C919.

People have been a bit wary of Chinese safety but Boeing kind of gifted them the benefit of the doubt on that front.
Email would get drowned with all the other apps with the same idea, which is exactly why Apple shouldn’t allow it.
Yes >_>.

Apparently the ML behind autocorrect or my fat fingers betray me once again after not checking back for 2 hours.
No, that’s no excuse. It would be like a cargo airliner dipping low to get signal (before in flight internet was available) for whatever reason. You don’t endanger the crew and ship, etc., out of convenience to you. It’s extremely irresponsible.
For those operating a pure standalone forum (and not using a social platform like Facebook or Reddit), Discourse has won: https://discourse.org/ , https://github.com/discourse/discourse

It’s available hosted or you can install it and/or pay someone to (https://meta.discourse.org/t/what-are-some-reputable-managed... and many others). The default user-facing experience is excellent.
That's not my experience. Plain old SIMD code ages fairly well - but if you port to a new arch, you will need to look at it again.

This isn't a question of precise instruction timing, it's a question of compilers being pretty bad at leveraging SIMD in general, even in 2020. Also, while I'm sure lots of projects have hand-tuned assembly, even higher level stuff like intrinsics help a lot, and need manual porting.
There are two competing theories: There exists another dimension that can only be accessed during hallucination, or people hallucinating hallucinate. One of these requires fewer assumptions.
The title of his post is schools should exclusively use free software.
You can really do that, sort of, for example:

https://github.com/libnoon/compress

The problem, of course, is that you have to decompress the file a large number of times. (The length of that number looks suspiciously similar to the length of the original file.)
Ask HN: Did you have 'imaginary friends' as a child?
"Laissez-les appeler avec un téléphone satellite" - Marie Antoinette
I had a feeling it might be a very off putting style for some people.

However, for me, I found it absolutely hilarious and very intelligent despite being obviously extremely... I'm not sure the right description. Young? Modern internet colloquial? Either way, it worked for me.
SpaceX is currently seeking permission to test Starlink on their own marine vessels:

https://old.reddit.com/r/Starlink/comments/itl1tk/spacex_ask...
Electronic Signature Laws Around the World: A Look at ESignature Laws by Country
I think we must reiterate to help you “get” it. One accident is a tragedy, a sign of imperfection, and we allow for accidents in most cases.

The difference between an accident and what happened here is that the issue was caused _deliberately_ by a series of bad choices, reflected in the fact it happened twice in exactly the same way. Yes, it took a lot of bad choices to get to the point of creating the issue, but that doesn’t really matter, and in fact, might only serve to further the point.

When a system allows for deliberate choices to cause an issue, the system needs to be addressed.

Anecdotally, I have never worked at a company where the management didn’t have an outsized say in how we broke apart our time between product development and stability.

I suspect this is endemic of a system that lacks accountability for people in managerial positions, and is probably even beyond the scope of the FAA, MCAS or Boeing.
That link has a very reasonable theory about the why "The design of the starfort did away with "dead zones," or areas in which an attacker cannot be brought under fire, by the use of triangular bastions which command all approaches."
The Future of .NET Standard
I don't believe it is following the high-level direction at all. It's completely counter to it.

Dropping existing working support is deliberately and intentionally stopping alternatives from working. Refusing to consider help from others to maintain this support is deliberately and intentionally preventing alternatives from being supported.
> You don’t endanger the crew and ship, etc., out of convenience to you

The captain did it for the crew, not himself.
While it's great to get fulfillment out of your philanthropic activities, and it may incite you to do more; I hope you keep focus on the main goal: helping others.

A $3 donation (via Against Malaria Foudation) buys a bednet that protects about 2 people from malaria for 3-4 years. As a donor you don't get the satisfaction of meeting the individuals you help (though you can look at some photos). But is the fulfillment you seek important enough to donate to a charity that is a thousand times less efficient at converting dollars to benefits-for-others?

A good suggestion here is to "purchase your fuzzies separately". That is, give to the most cost-effective charities you can find, regardless of how fulfilling it feels. And then find the most fulfilling activity you can, and maximize that until you had your fill.
Popular messenger services are extremely insecure
How to hack your process memory
Hyper-V already is a bare metal (type 1) hypervisor. Admittedly it does use one (or more) of the guests, called the "parent partition", to handle some of the work for it. This change allows that parent partition to be Linux instead of Windows, but it does not make it any more of a bare metal hypervisor than it was before, unless you know something in addition to what the article says.
This only increases Linux's marketplace penetration as this allows Linux to be used in situations where previously on Windows could be used.

But Linux developers do not care about market penetration -- they simply want to create the best OS kernel. If this makes the kernel better, they will merge it.
One of my goto fizzbuzz-like variations is windowed mean - how would you implement a class with a method accepting and returning a number, such that the number returned is the mean of the last 100 numbers the method was called with.

Some people ask more clarifying questions than others, but in any case a few minutes gets spent on this, we have a laugh and move on with our lives.

Of the failing candidates, around one in three or so spend nearly the entire interview on this or fail to answer entirely because they can't get the maths right.

Is that a "math trick"? It doesn't feel too different to fizzbuzz. It's not complex. It relies on high school maths, and except for very junior positions, for a job where you are expected to solve much more complex problems every day without handholding, even if you can't remember how averages work so I have to hand you the math, not being able to reason through the problem from first principles seems like a pretty big red flag for your problem solving skills to me.

What do people think?
Marketing of cars has very little to do with facts, it's all about emotion. There are no pictures of the typical congestion, its all open roads with no other pesky road users. The models are all slim whereas most of their customers struggle to drag their fat backsides into the car. The kids are happy to sit in the back whilst the reality is they will be screaming "are we there yet" after five minutes of a long drive.

Modern marketing is all about emotion.
So, I've not read any of SSC, though obviously the news lately has made me aware of him.

But this? This is pure genius. Thank you for the link! So many laugh out loud moments. I particularly enjoyed '“I demand a better answer than that,” I demanded.'
That's a good point as well, but I wonder if this will change over time as DMT seems to become more known and talked about.
How come?

AJAX is about loading HTML from the backend to the client dynamically.

JAMStack is about pre-rendering HTML from dynamic content into static files.
From infinity converging onto me: a neon hued triangle. Three beams shoot from its vertices, which have sprouted eyes. The laser beams scan my body and enter into my soul through my eyes.

WHO ARE YOU

i'm... me?

WHO IS I?

i am... ?

Reality breaks down as colors rush over me. Intense joy suffuses my hitherto depressed existence. I return from the trip shivering and crying tears of joy.

Strong shit.

Years later, during a music show, I close the time loop by going out of body and becoming that triangle, letting my past self know everything will be okay, and life is worth it.

DMT... yeah.
Yeah "millennials" and "boomers" are turning into loose terms for "young" & "old". I'm Gen X and did not see many of these "boomer" benefits..
Code-the-Classics: Assets from Code the Classics
Is bottled water better? I remember a TV report long ago specifically saying it's worse in that regard.

Anyway, I've been drinking filtered tap for 15+ years all over the United States -- never had a problem and tastes great.
Yet in the UK the amount of tax paid by the 1% is the highest ever (34%), 42% of adults pay NO income tax.

And the tax take as a proportion of GDP is 34.4%, the highest EVER.

We are living in the most taxed time in history with the rich contributing the most ever. Not the impression you get from people complaining about it.

https://www.theguardian.com/business/2019/nov/13/richest-bri...
Ask HN: Is the Blockchain Hype Ended?
> with current electoral law they are unlikely to ever be dislodged.

Fortunately, the individual states are not prevented from implementing reforms like Ranked Choice Voting, which would allow new parties to form and gain a reputation in politics at least at the state level.

If a party repeated that success across multiple states, that could be used to pressure the largest two parties to support similar reforms, like making Congressional districts return multiple representatives (proportional to the vote within that district).
Creating a better code review process
You're lucky to have access to that