skysight-inc/HackerNews huggingface dataset:
I think you misunderstand the roadblock. Especially for any higher security like FedRAMP it is up to the FedRAMP certified holder to vet and have a very solid understanding of that remote service or system they are using at a moderate to deep level. Most sec people will do enough research to know if the service provider are at least an immediate no or not, but even if they are same-or-better FedRAMP level you still need to document them in your SSP (a system security plan for your whole org from HR to Engineering). This also doesn't prevent the situation that you then need to do a deep dive with this other organization to find out how FedRAMP their FedRAMP program like this, because more often than not organizations hide a lot of skeletons on what features/services are actually FedRAMP and what are features they intend to have FedRAMP 6-10 months from now.

Then you have to keep on them forever, and stay apprised of features people would like you to use but aren't FedRAMP appropriate yet or do not have appropriate controls. I think you would be surprised how many SaaS providers really don't meet the muster under scrutiny, or your engineering teams are trying to use features that just haven't been brought into compliance yet. For example, the number of times I have had to use https://aws.amazon.com/compliance/services-in-scope/ (click the FedRAMP tab) as a hammer is extremely high. Then you get on the phone with AWS and you find out that only a certain subset of the service that meets their FedRAMP do not provide adequate controls for your usage of the service. There's a lot of defer to vendor and defer to user games being played by both sides and you have to go line by line and figure out who is responsible for what. More often than not the service's people that are catering to the customer are not appropriately educated too, so there's layers of escalations by a security team just to get someone who can answer security questions accurately.

So no, a security person can only see from most organizations that you tried to attest to some of these random certifications, but that doesn't mean I have an accurate map of how I'm supposed to meet my compliance goals with your stuff.

(This is not aimed at any one provider in particular, just my personal feelings on where this 'internal roadblock' argument falls apart).
In practice this has not worked (Argentina) just as often as it did (China).

Ricardo's theory is generally sound, but leaves out intangibles which don't necessarily come for free.
But it is kind of a moot point, because you can update the flatpak stuff. I run dnf update -y to update the packages on my fedora laptop and flatpak update -y to update my flatpaks. It updates signal and the fedora platform libraries (security updates anyone?).
Two ex-Apple execs have raised $30m to build the next iPhone
That's an odd question. I absolutely value having almost everything built from source and the control I get from that through use-flags.

That doesn't mean I enjoy compiling some incarnation of webkit every few weeks for multiple hours on a laptop, in particular if it's just for a single application (in this case: Nextcloud client). Same for 32bit stuff, I have absolutely zero use for these libraries outside of closed-source games, so I'd rather have them just work than full control over them.
It reminds me of WeWork and Regus. On the one hand you have companies that have a corporate structure that resembles Lost's Dharma Initiative and on the other you have a company that actually makes money, yet for some reason investors seem to be infatuated with the former. Makes no sense to me.
I believe it is historians who fear their livelihoods will be affected.
Because California houses aren't worth any more than Iowa houses, and you don't really need to insure land very much. All the value is the land.

And the land mostly has high values because of low property taxes combined with Prop 13, artificially low interest rates, and the difference between capital gains and income taxes.
It's wilfull. They havecto live ib denial, or they don't have a job.

I know someone who started a job at a tobacco company. He went from 'of course they cause cancer, you're an idiot if you smoke' to 'everybody dies from something, it's not that bad, the media are against us, it's inconclusive'.

He still won't smoke, though.
The order of message ingress can still be meaningful even if device clocks are skew or jump due to rebooting, reimaging, network time sync, frequency drift, etc.

A hard logical order arises from interactions. E.g. if the device receives a message, does something locally, goes through a clock change, and then sends a message dependent on one it fetched earlier, that's a logical order with out-of-order clock.

Or if a device gets a message, processes, sends something to another device, that one processes too then sends another message back to the original source, there's a logical order but with three different clocks. Even if the clocks are synchronised, there will be some drift and the messages may be processed fast enough that the drift puts their timestamps out of order.
Slavishly? Eh? The comments also constantly remind how few talented people get lost in the haystack because of the noise. They are stating the reality.

> have some goddamn pride

We have seen how much damage pride has brought. If you still want to see

1) people without science knowledge claiming religious rituals have scientific reasons

2) people who don't know what linguistics is claiming Sanskrit is the first language

3) people without any knowledge of medicine heralding superiority of Ayurveda

Continue with your godamn pride.
Exactly! I think this could turn out to be a bigger story than it seems, if ICE grabs more power.
I appreciate this is a partial answer, but by those standards the US is also similarly behind. For example, still commonly use checks and they are nowhere near transitioning to the metric system.
They imposed capital controls while capitulating to german demands.
I thought "!:q " was what you typed to quit vi.
The big innovation I see here is that it's a listicle with no number in the title. The number in the title may be a barrier to clicks.

And that's the only thing I got out of the article.
Not theoretical, just temporary. And they are not truly achieving the alchemists' dream of transmutation, just changing the behavior of the material.

It sounds like practical applications are still more or less theoretical, though.
All these old school automakers should learn from Tesla.

On how to violate all sorts of laws and get away with it, that is.
RFC8915: Network Time Security for the Network Time Protocol
In one of my first jobs, I came up with a novel idea to automate a big chunk of work, during the early days of ML. We A/B tested it and it increased the company’s revenue by like a third while decreasing costs (and this wasn’t a tiny company). It took a whole team a few months to implement the idea, as it involved a few different skill sets.

To your point, who deserved to capture the value here? Well there was an A/B test to clearly show what caused the boost, and a simple trail from my research (done on my own initiative) to the team's implementation to the revenue, so we at least knew that this group of people was collectively responsible. Nobody got raises, bonuses, or anything. If we had captured that value it would have had to multiply our comp many times over. So why should I have ever gone above and beyond in the first place? Meanwhile my manager repeatedly complained to me that I only worked 9-5.

This early experience was formative in my workplace opinions. Go figure.
Actually, it's not exactly exposing the partition underneath. The ordering key is the only unit a user has to deal with: think user ID or database row primary key. Throughput is limited to 1MB/s per ordering key, but the number of ordering keys is limited only by what can be represented in a 1KB string. One can have millions of keys if desired and they don't need to be known in advance.

The system scales automatically as needed, so there is no need to think in terms of partitions or worry about repartitioning when load increases. Order is preserved through this scaling without the user having to do anything.

Disclaimer: I work on Cloud Pub/Sub and am the primary engineer on the ordering feature.
That kinda what I was hoping for, that would have been more interesting, to me.
it blows my mind that a company, let alone a tech company with a product to license, that targets the IC isn't super profitable. then again, when i was a contractor in the IC all i ever heard was that the product sucked.
You'll never know if your "no" answers were a false negative though. Rich people say no to a lot of things because they get a lot of opportunities and there's only so much time to spend.

If you have a lot less opportunities and far more time while starting near the bottom, a false negative can be a more significant miss for you.
Your feed usually is captured , it is no different than a hangout or zoom recording. Many providers actually use zoom .

Face detection is detection of a human face in a feed, not a specific face recognition. Usually such detection is used in negative sense, i.e. lack of face in the feed would prompt for human review.

Local context is not feasible, you need to store the feed remotely for compliance in case of dispute etc, it same as video call or a support call that is recorded.
The dude was a legendary briber.

Generally he was thought to be trustworthy if you cut a deal -- no matter how corrupt and shady the deal was -- but absolutely willing to bribe, coerce, threaten, and completely willing ignore regulations and rules.
If you are developing stuff as a hobby, new features are still the reward.
High School is a time waster. It's designed to waste as much time as possible so that parents don't have to pay for child care. At the same time it's putting kids into extreme stress situations. Sitting in a classroom for hour long stretches, overcrowding, bullying, authoritarian discipline and arbitrary rules. 5 hours of lectures per day, 5 days a week with a vaguely humiliating hour of physical education which involves stripping in front of other people.

If the kid is ready for college, then do it!
It’s not just about having the right certifications and controls. Any approved app has to be worked into the system, included in audits, reviewed periodically, and so on.

It becomes overhead for the teams involved in maintaining security and compliance. The cost of that overhead is likely several orders of magnitude higher than Trello’s relatively simple monthly fee.

If the whole company goes in on Trello, that’s one thing, but jumping through the hoops to get and maintain approval for a small number of people just isn’t worth it. That’s why the behemoth, everything-to-everyone tools dominate at heavily regulated companies.
> I can understand your post, but I don't quite buy the TCP thing. I don't think anyone is using TCP for ordering, they're using it because they don't want their packet dropped.

Think of (almost) any modern protocol built on top of TCP, and you'll see that ordering is critical. (http, smtp, telnet/ssh, etc.)
Are you proud over your code?
I have a SaaS which is going relatively well, having many enterprises as customers. Quite a few of them say my shit is better than all competitive solutions.

However, when I look at my code I feel like it's a house of cards. It all looks and works good from the outside(sort of), but when I look at both the frontend and backend it looks like a mess.

I have zero tests and push to production without any validation whatsoever.

I don't know if it's the whole thing with building a spa with a rest api which feels like it is not supposed to be like it should, using serializers and stuff everywhere to validate data multiple times and could still break with the change of a parameter.

I think I am quite a good coder, but as soon as a codebase grows, it gets bad.

What is your reflection on your code?
My co-founder and I built Volley after listening to the How I Built This podcast (among others) and realized the value of asynchronous communication in Q&A style interviews. We thought having the ability to listen to questions, and respond at your convenience after giving your response adequate thought was incredibly valuable.

Try Volley, give feedback, ask for features :)
It's implausible that we'd ever not be able to feed ourselves without farm subsidies. About half of our wheat is exported. Even if somehow we dropped more than 50% without farm subsidies, we have enough money that we could import from other countries; even if we faced a global ban on exporting food to the United States, it would not be difficult to begin using more land and labor to grow crops within the span of two years.
ACR == Automatic Content Recognition

"ACR is a technology that (with device-owner permission) reads pixels on a smart, internet-connected device screen as it delivers content to a . . . consumer—on a second by second basis. A recent Forbes article explains that the data is then shared with the manufacturer’s tracking software, matching them to a database that keeps track of local broadcasts and other [TV or video] content sources."

https://www.admonsters.com/automated-content-recognition-acr...
Springer Nature | Java/Kotlin Developer, .NET Developer | Lisbon, Portugal | Full-time, Onsite + WFH | https://sndigital.springernature.com/

At SN Digital we maintain and deliver millions of articles used by researchers, scientists and students around the globe. We offer a non-hierarchical environment where everyone can contribute meaningfully to the direction of the products and the department. We believe in continuously delivering high quality solutions to our customers, and empowering teams to do this. You'll be able to see your work go live, usually immediately, to millions of visitors around the globe. All our software is built iteratively. XP and Kanban heavily influence our flavour of agile and if something isn't working, we change it.

We're looking for:

- Java / Kotlin developers (permanent)

Contact: andre.breforth@springernature.com

- .NET developers (permanent)
- Software Developer Manager (permanent)

Contact: greg.goorwitch@springernature.com
I think one thing to watch out for is revenue vs profits. So while it might be more revenue, the ad system needs infrastructure, developers, troubleshooting, sales department, etc, etc.

So I'd be really curious how this equates to the profit on the TV, and how much those costs can be amortized between the install base vs actual revenue per user.

At previous company (wireless telco), while not the same thing, we had the intercepting DNS that everyone hates, for typo'd queries redirect to our own search page. I asked one time how much we make in the ad revenue on that, and the basic napkin math was that we were probably losing money. Just the amount of time, complaints, maintenance, keeping it running, etc burned hundreds of hours a year. But it was buried in other budgets so the company thought they were making money.

Even then I don't know how they justified it, it was peanuts compared to mainline revenue.
:gasp: Romulus???
A dual track (where you run an auction to both private and public buyers and simultaneously file an S-1 to IPO) maximizes the value to the seller. This sort of disproves the premise.
And also strong guarantees that if there are any loses, the central bank will devalue the dollar and socialize them.
> With the "total addressable market of people using collaboration tools," having "skyrocketed," according to Pryor ("it just kind of exploded," he laughed), it's not surprising to see Microsoft (and others) looking to roll their tanks onto Trello's lawns.

The availability and quality of collaboration tools have skyrocketed. What Microsoft really wants to do is find ways to force users to use their atrocious enterprise tools that are 20 years out of date in terms of user experience. (I've used Planner, it's free to me as part of Office 365, and I don't see how anyone can call it a Trello clone.)
Using an old 3rd party Java PPA is as foolish as it gets, as there is an official OpenJDK PPA that supports all the JDK versions for many Ubuntu releases. I'm also skeptical of the statistic you mention, since Canonical doesn't publish rankings, and download stats need to be retrieved via API on an individual repository basis.

Relying on extremely incompetent users to make a general point is a strawman, not to talk about defining PPAs as "random people", as many software products have official repositories or affiliations (I take you don't use PPAs).

If one likes to scream about administrative privileges to get attention, they're forgetting that any Linux user is giving root access to thousands of packages. So the point is really the web of trust.

If we talk about the past and present, there has been no malicious attacks (or in number so small, that it's hard to find reports). So much for the "worst of the worst".

If we talk about the future, there's no reason why a web of trust can't be built. "To reiterate", lots of PPAs are official, including the OpenJDK one, so if the PPAs approach happened to get traction, it'd be really a matter of software authors to build their own or to appoint somebody to do.

This is really the concept of maintainers and their network, it's applying to the distro you're using, and it's nothing fundamentally different.
I was expecting this to link to Jim Blinn's very similarly named pair of excellent books on 3D graphics fundamentals. I wonder if this title is an homage to this (older) work.
Easier to do that if software requirements don't keep growing. If people were satisfied with lower resolution photos and videos, lower-quality graphics in mobile games, etc, etc, they'd find it much harder to release newer models and have such great sales numbers.
And sadly, you need to trade your freedom for your privacy with AppleTV. I have a shield so that I can sideload apps like NewPipe and Kodi.

I wish AppleTV would allow side-loading apps. That would be the best of both worlds.
Apple is probably legally in the right here, since the recycler violated their contract.

But Apple seems very much in the wrong here on an ethical level. If the devices have resale value, then they should be resold, not destroyed! Reduce and Reuse are both higher priorities than Recycle.
Technically I agree, but I think in most cases, the alternative is the endpoints need to handle unordered messages correctly and that won't happen either.

So which is better: The queue does it, hiding subtle footguns because doing distributed systems reliably is hard; or the queue doesn't do it and the applications hanging off have failures more often (but not often enough for people to fix) because distributed systems reliability is still hard.
Or `echo !:q`
Here is a comparison between Flatpak, Snaps and Appimage.

Notice in the table regarding sandboxing. Someone is telling porky lies here.

https://www.fosslinux.com/42410/snap-vs-flatpak-vs-appimage-...
Firstly, I'm not saying not to try, certainly you should, hard to get a job without applying.

But I do not think its a fair expectation to say "most of them don't cause they don't want to spend the money on them or down right don't care about your past."

I've never seen anything that what would lead me to believe that "most" is accurate, and at best "some" would be closer to accurate.

Basic background checks aren't expensive, and take almost no time to complete, goodhire is an example where even small companies can get a background check done for $30-$50 per applicant.

Again, I'm not saying don't apply, but I don't think its a good idea to tell people "most don't care" because they are going to likely face an uphill battle, and that many people are going to hold a criminal history against them.

I do agree that being upfront about it, is the best choice, and
if I was to make a recommendation, it would be to seek expungement where possible, and stack your training, certifications, and references as much as possible to attempt to overcome the issue.
1) Tried this and it turns out there's a hyphen in between 'reload' and 'threads'.

2) This is excellent, has sped up my loading a lot. Thanks!
Thanks! I suspect OP either misinterpreted this study or just inventing things. I’ve followed this fairly closely and know of no study showing absence of longer run effects, or definite presence of them. It’s too early.

Also note for anyone reading the above study: they were hospitalized patients, with critical excluded. That would be “moderate” in the technical terms used to describe the virus.
Yeah pointing out what's wrong with a society which is focused on wrong metrics and gaming the system is wrong. And I have also pointed out it makes life harder for genuinely talented people.

You and your godamn pride.
No one has ever been able to tell me the difference between SIMT and 1980s style SIMD on the Connection Machine 5 (CM-5).

Researchers like Blelloch have been writing in SIMD-parallel style "parallel Lisp" or "C-Star" for decades before CUDA. https://www.cs.cmu.edu/~guyb/papers/Ble90.pdf
IT's not clear to me what the difference is. What exactly are they recycling, and how. I can personally see how refurb/debugging an old iPad might be harder then just replacing all the cheaper parts (caps, PCBs, cheaper ICs) and retesting more expensive components; especially at scale.

Also, even if they are melting them down and literally recasting them: ALU has pretty good recasting credentials.
Some interesting thoughts in the article.

I definitely agree with the necessity of having clearly defined and apparent spaces of privacy on social media platforms and this is actually something I am working on developing.

It’s funny they mention that content posted to a public space should possibly be color-coded in red, because this is exactly what we do on our platform. We have three shareability control options: On/Off the platform (public) – labeled in red, On the platform (can be shared with others, but only others that are on the platform) – labeled in white, Unshareable (truly private, only the people you sent the message/post to can view that content) – labeled in green.

The app is called Omnii and is focused on allowing people to own and control their data. The app is currently in Beta on the Google Play Store if anyone is interested :)

https://play.google.com/store/apps/details?id=com.twistedapp...
They show for me in the navigation bar. Usually they look like just an icon in the bar for service you might have installed - except you don't.
"OSS of $something-famous" - turns out there's no substance as to how it's actually the OSS version of GD.
Did Google create it? No.
Does it work with any Google service (including authentication and authorization)? I doubt.

An OSS Web drive, perhaps. The OSS GD? No.
I think of Mastodon more as a Twitter replacement than a FB replacement. But maybe that would be good enough.
> power users who think they know more than they do, who end up destroying their data through the API

That's their own fault IMO. Power users by virtue of their name shouldn't need babysitting.
I wonder what that contract said. "These devices are to be recycled in a way that creates the maximum amount of CO2"
> I don't which policy will make us closer to this sort of fairness, but that's the only bottom line that interests me.

It’s government policies that impact all businesses that get us closer to that fairness. Any single business that chooses to pay outsized amounts for their COGS, including labor, will get crushed in the larger market. There might be some like Costco and Apple that can afford to pay more, but they serve middle upper class customers and have a unique product.

For everyone else, people will choose to shop at the place that sells bread for 50 cents less.
Are apple still on the hook for warranty for those iProducts?
Trello is fantastic on the personal end, would love to have an AWS GovCloud offering. So many projects tired of using over-complicated JIRA and Github/Gitlab Issues are not enough... Alas we are stuck using Wekan as a shoddy drop-in for now.