skysight-inc/HackerNews huggingface dataset:
APIs being copyrightable doesn't actually harm implementations of APIs that fall under fair use. (Fair use exemptions specifically apply to copyrighted things.) Interoperability is fair use. And things like something being non-commercial, such as a lot of open source software, is a major factor in determining whether or not usage is fair. Things like WINE or NES emulators or the like would fall very comfortably into fair use.

It's nowhere near as world-ending as Google's public policy team would like you to believe. But given that Android is not fair use (it's not interoperable, they just wanted to glom on the popularity of the platform), it sucks for Google.
Portability, philosophy, style. I find that designing within constraints can lead to interesting solutions, and this project has focused on embracing and leveraging the command line interface itself.
I receive this post's stimulus, condense my individual thoughts into a new stimulus, and output it as a post for future readers. Sometimes I receive stimuli from those readers (votes, responses) and the cycle feeds back on itself, usually attenuating until the conversation fades out but occasionally amplifying in intensity until the conversation fails spectacularly (ban, rage-quit, Godwin's law, etc). We're the neurons in this society's brain.

On karma points (roughly how aligned is the individual's signaling with the group's signaling), it's useful to the individual for calibrating their (outputted) opinions to better align with the group's. That was a critical piece of surviving as a social creatures.
It’s always dangerous to try to read the tea leaves based on what questions the Justices ask. We really don’t know yet what they’re going to do. Anyone who says otherwise is mostly just guessing.
Because everyone agrees that the law against driving under influence should stay?
This sounds like the opposite of what you meant to say. When you are forging the document and claiming the document is from the FBI, you are fully t acting as an FBI agent.
I don't understand what you're asking for here.

I did an experiment with units of measure years ago in Rust: https://github.com/coder543/metric

To me, it felt ergonomic, and it was absolutely compile-time type safe to the extent you would expect. It worked just fine. I know of quite a few other libraries that do the same thing with their own unique approaches, so there are many flavors of this that all work on stable Rust.

If you're asking for something like this to be built into the standard library... that's very unlikely to happen in the foreseeable future.
If you don't publish packages anywhere, wouldn't that mean that if you update some library with a breaking change, you have to update all call sites?

Maybe the fix for that is to never make breaking changes, but that has drawbacks as well...
https://en.wikipedia.org/wiki/GURPS_Cyberpunk
> The guys (different owners) just got a great deal on the lease for the first two years, and they will just need to make employee expenses.

its a TRAP, He most likely signed usual 10 year $20-40K/m for a 2000ft hole in the wall with foot traffic NY lease. Super enticing amount of free months is there to lure you in. The trap is he probably personally guaranteed (house mortgage?) the lease, not the restaurant business running the place.

https://www.youtube.com/watch?v=LW1-FicJMAc
Where are the expert witnesses in this case?? Do we really expect judges in their 60s and 70s to understand basics of coding in order to come to the right conclusion??

I put myself in their shoes, if I had never looked at a line of code I couldn't even start to imagine what an API vs real code is. I'd probably think it's some made up concept that Google is using to save money and circumvent the law.
> Things that change together, go together.

Yes!

> if you have 10 micro services which are accessed by 1 frontend, it may be a little bit messy

I see another differentiator here. If I have a typed API interface (both endpoints and payloads), and I publish a (generated) client library for the frontend, then that frontend will only use the new API version if it is also upgraded to use the new client lib. Here I think multiple repos are more suitable because the pieces of code can improve independently.

In case the API is not typed/versioned, the case for a monorepo is much more important: the change to the API on the BE should come along with the change in the FE.

Thus typing/versioning (on specific barriers) helps with breaking up a code base (along those barriers).
In that sense, I agree. I mainly wanted to highlight that there are "Damascus"-style products that are more than regular steel with laser etched patterns.
You'll find, if you talk to people that do this work professionally, that bugs where you can tell yourself a story about the millions of dollars you could make are not uncommon, and that the rack rate for generating those bugs doesn't scale with their hypothetical value. I've done multiple projects for FIX gateways at exchanges. Those are fun stories to tell yourself! But those projects weren't even especially lucrative.
The arguments they have against Apple apply to all game consoles, so I assume those will be opened up to arbitrary software with no payments to the console manufacturers.
But the question was why one would report salary rather than total comp. I provided a potential answer to that question.
What's Your Story?
There's really 2 options here. One, Apple doesn't employ a pen-testing team currently, which would be nuts, or, two, the pen-testing team couldn't find these bugs, or they'd already be found.
I just want to say that you NAILED a UX issue I see with Hackernews comments, at least for me - when I am reading through the comments on a HN post, I often find myself several layers deep into a conversation that I realize I am not interested in any more. Either some facet of the topic, or maybe a side conversation (like the one we having now about HackerDaily). I want to "jump out" of this conversation and back to the "main topic", but I have to scroll up until I get to root of this topic and click the collapse sign (-) next to the parent to easily get to the next conversation tree. However, I may be pages and pages down from where this conversation started and have to page up and up and up. Alternatively, I can page down and down and down to try to find where this topic ends. Neither works very well.

But what you do is provide a line of minus signs (-) at the top left that grows and shrinks with the tree and at any time I can click one of these to collapse a parent post! This is great! Being a UX aficionado I am tickled that you have not only seen the same pain, but found an elegant solution for it. Well done!
Honeybees become better at pollinating crops after scent training
While I agree with your overall point, and I also think that hyperloop deployment is unrealistic, I think part of the idea of the concept of hyperloop is to make high speed rail fast enough for the expansive sizes of America.

If you took a 300km/hr train from Orlando to New York City, you’d still be competing poorly with a $100 Spirit Airlines flight.

That’s almost 6 hours on the train compared to a 2 hour flight.

Even in China where they’ve got the best high speed rail system in the world, most of the major cities are concentrated on one cost with huge populations and you still have Chinese travelers choosing low cost airlines for many longer trips (air travel in China was exploding before Covid).

I think what America needs to do is not to focus on long distance rail (which is what the current Amtrak CEO is doing) and to expand intercity high speed rail lines between major cities. There should be high speed rail linking relatively close regions that have clusters of cities.

(And of course, all of this is a great argument for making airline tickets pay more for their climate externalities - trains should be more attractive to consumers on price because they’re the lowest carbon form of transport)
Yes. I'd say "word to the wise", but I think very few people reading this thread buy pentest time in such large blocks: past a month and you start getting into steep discounts.

(This was not several months of full time work, but rather several months of part time work; but I'm stipulating the former condition.)
OP complains about being drawn to post comments to harvest karma. IIRC, 10 years ago, the comment karma was displayed next to the comment itself.

This was removed because it was generating positive vote feedback loops (reinforcing both upvotes and downvotes).

I'm not suggesting simple technical fixes can be enough to remove the objections such as OP -- rather, that both a continuous oversight of technical stuff, and granular moderation, seem to be needed.
>Oracle, for example, re-implemented Amazon's S3 API so that customers who built software for Amazon's cloud platform could easily switch to Oracle's rival cloud platform.

So if Oracle wins here, they will get fuxxed by Amazon?
We were waiting to see how long it took someone to notice that :) That key has already been rolled and instantly redeployed via our Heroku integration, but nice catch!
> To re-implement Java, Google needed to copy the names and argument types of functions like java.lang.Math.max.

If there are "copying" examples like this in the case, I am surprised it wasn't thrown out way earlier.
Those are employee contributions, in their capacity as private citizens, not contributions made by the company. Don't forget to count company PAC contributions, often made to both sides.
Sorry, but this is not an accurate summary of the state of the law. Whether Android's implementation of Java was fair use is one of the questions the Supreme Court is considering. Google was absolutely trying to achieve interoperability with Java, so if Google loses it would make it more difficult for others to claim fair use. Fair use is complicated so others might succeed where Google failed, but a loss for Google would be bad news for interoperability generally.
do you have other device in which you used to login?
if yes,try to verify through that system, google do fingerprint all your recently used devices and may allow you to login.
other option is wait for your device repair or swap the sim in other device.
>> If APIs become copyrightable, what happens to any open source software the implements a proprietary API?

That has implications for language implementations too. Who would own the standard library for any given language? What about programs that call API functions? Are they derivative works too?

An API is necessarily functional first and foremost. It would cause chaos and some weird dystopian future if Oracle wins.
I would note that today's VW Golf has better horsepower and a higher top speed than the first Ferrari.
>Learning of a Mimic Odor within Beehives Improves Pollination Service Efficiency in a Commercial Crop

https://www.cell.com/current-biology/fulltext/S0960-9822(20)...
In North America, unfortunately, the market is much smaller. Here's a list of all the EVs available in the States right now: https://www.autoweek.com/news/green-cars/g32129877/all-elect...

I think the list for Canada is even smaller, though I am not sure.

Here's hoping some more of those come to the States soon.
I saw one question from Gorsuch quoted in reports about the arguments that bothered me: "What do we do about the fact that the other competitors, Apple, Microsoft ... have, in fact, been able to come up with phones that work just fine without engaging in this kind of copying?"

macOS and iOS (and indeed Apple itself) would not exist as we know them today, if at all, without very liberal cross pollination of APIs. In a parallel universe where APIs are copyrighted to the extent that Oracle wants, GNU would not exist. Konqueror and Safari could not use Microsoft's XMLHttpRequest(). The list goes on and on.
I don't think it's reasonable for every person to run their own web crawlers.
I have little faith in something being cool preventing people from being up in arms about infrastructure builds in their backyard.
Dokku can run against a Kubernetes cluster: https://github.com/dokku/dokku-scheduler-kubernetes
The Quest for a Quantum Internet
I agree with you: It's a numbers game. There is a cost associated with driving up good reviews for a (bad) product. A website such as this has to cause higher costs for fake reviews than what they can reap via it.

However, at some point the whole review process might become unusable for legitimate users, resulting in too few reviews, rendering the whole endeavour futile.

E.g. if a shitty product earns a seller 20US$, and they expect to sell exactly 100 more over a site like this, then they can easily invest 1000 US$ into trying to make their product seem good, even if it isn't.

Thinking of this, by that reasoning a non-negligible part of the high cost of good quality products might also stem from the fact that advertising genuinely good quality must be expensive like hell (I guess).
I think I would focus a bit more on answering why this philosophy makes your product better than the proven secrets managers out there. I’m looking at products and comparing you against the established enterprise proven players. What really sets you apart from a product / use case standpoint.
In my experience no amount of reading or watching videos can really give you a sense of how deep learning works, what it’s good and bad at, and how it both does and doesn’t feel like magic. The only thing that works is coding something up in Torch or similar and trying it out.
Vault is definitely much more of a beast, but it also does a lot more, such as dynamic credentials. For just storing static secret/env vars this seems like a simpler solution.
Hang on, I think you've missed something. They are not completely independent, because if they pick different doors, that forces the host to pick the last door. Removing the host's freedom to choose a non-winning door (and effectively help the player) changes the math. Having two players with the ability to choose different doors (but still 3 doors and the host must choose the third) makes it a different game with different dynamics. It doesn't work the same because it's not the same game.
Who knows. Does Amazon implement any of Oracle's APIs? This ruling is about to make the software patent mess look like a walk in the park.
Super happy user of EnvKey here - I'd be interested to hear what sets Doppler apart.
I guess this is what happens when a single company has a monopoly over the search engine market. This couldn't have happened if law enforcement had to request information from say, hundreds of search engines in order to carry out keyword warrants.
To be consistent I think it should be "fag packet maths".
> DDG doesn't record search information in the first place.

That's not entirely true. DDG saves user searches. They don't save identifying information (IP, UA, etc.) along with the user search.

The below is directly from their privacy policy [0]:

"We also save searches, but again, not in a personally identifiable way, as we do not store IP addresses or unique User agent strings. We use aggregate, non-personal search data to improve things like misspellings."

[0] https://duckduckgo.com/privacy
>Interoperability is fair use.

That seems incompatible with the text of Section 107, which includes the amount copied as a factor for determining fair use. The more compatible your implementation is, the more you have to copy, so the logical end of this reasoning is that Android's implementation of Java would be fair use if it had copied all of the API, not just a subset.
1. That would probably be considered fair use.

2. The amount of money Oracle would get back (and going forwards) in licensing fees for Android would probably dwarf most financial prospects from any API reimplementations that might be at risk.
Yeah in this type of architecture there is some sort of join required. Interestingly, @maycotte talking about the Molecula feature store – it serves real-time and historical features in the same storage layer. Significant performance gains with that approach.
nice article - great data!
JUstinmind 9 is finally available
Thank you recommendations, I will give them a listen.

You sound like an excellent teacher, and you're of course spot-on about how powerful piano is for composing. I always felt that when I tried to compose from string instruments (banjo or guitar mostly) there were just certain left-hand positions that were so awkward to transition between or hold for long periods, that they weren't worth exploring, even if I liked the sound. It's been really fun to sort of be able to run wild with the keyboard, it feels like experimenting is easier so I get more experiments in.

There was one other big thing that surprised me, as someone who was formerly turned off by experiencing the whole "room full of 8-year olds with the cheapest casios learning from one teacher and a workbook"-style of piano instruction. I grew up with one of those cheap digital keyboards with the light up keys and gazillion sounds, and it was never more than a novelty. It wasn't until I went to a friend's house last year and they showed me their piano (a big old yamaha upright they got second-hand) when I realized that the tactile feel from properly weighted keys is amazing.

I ended up getting an alesis with weighted keys, 16 voices, and pretty much no bells and whistles - but the experience of playing it is just night and day compared to the stuff I had been exposed to before that.
"Information that travels faster than the speed of light."

Nope, unless there has been an absolute revolution in physics that I certainly would have heard about.
> Where are the expert witnesses in this case??

In the trial court.
Yes, because it is worth in pentesting services 180k USD, no more no less. I mean, you can pay around 360k in London or SV rates and 180k in European for _similar_ skills people.

Calc based on 3 months, 5 people, 600USD/md rate.

EDIT as I can't reply to tpaceck below: no, those 2000usd/day rates do not exists in projects in size of 300MD like here. In general they do not exist for big projects.

Yes, I agree, you have rates around 1200 in high cost countries, yet as I wrote earlier, you can have similar/the same skill level at 600 usd/md if you're willing to work with guys not from HCC.

As to the skills I'm talking this level: https://research.securitum.com/mutation-xss-via-mathml-mutat...
The trains are also more comfortable than [coach] plane seats by a long mile, and you don't have to deal with TSA either. Showing up at the station the minute the train rolls out is/was very feasible, unlike with flying. When I lived in Philly I used Amtrak every chance I got, whether I was going north to NY, south to DC, or west to Harrisburg. It was great. Very comfortable and low stress. And I could generally get tickets on short notice for a price affordable to a student.
Proportionality, legitimacy, process and oversight.

If the FBI thinks someone is making a nuclear bomb in some postal code, there should be a process for helping to sort that out, because the risks are existential.

For other things, it's more tricky.

For smaller issues it shouldn't be in the toolbox.
Yeah, I would use argparse if I had to support something like that.

To be honest, the extent of my command line parsing is almost always just this:

try:
infile = sys.argv[1]
outfile = sys.argv[2]
except IndexError:
print(f"Usage: {sys.argv[0]} <infile> <outfile>")
This might shock you but the world is full of shades of grey
It depends on where you are. If you have a low enough case count and a well functioning health department that is doing contact tracing, then it's helpful to confirm that your kid is positive.

If you're in an area where neither of those things apply then, for a child a test isn't going to change anything. It's not going to change their treatment. If it's positive they'll tell you to isolate, but if it's negative, there's a high enough false negative rate, and there are enough cases that it's still very likely they have it, so you'll still want to treat it like they do.
Where do security researchers sell their investigation on the black market? Links?
From https://en.wikipedia.org/wiki/Back-of-the-envelope_calculati...: In British English, a similar idiom is "back of a fag packet".
Skin Tags Removal Cream
> since opening links in new tabs also defeats the whole premise

You should still have assets cached and not have to refetch them, but on most SPAs you are still having to get that pages content dynamically so in theory you're reducing load time.

Of course, you could just reduce the entire bundle size to be reasonable, statically render everything and save a whole bunch of complexity, but that wouldn't be very Web 4.0 of us.
Those websites may not be SPAs but they still contain big JS payloads.

Not sure about the others, but my guess is that if Github were created today, most of it would probably be an SPA.
I thought Goldstein gave a satisfactory answer here by making the analogy to the difference between English and French.
"unless you screw things up elsewhere, that's going to be less than 1ms of delay"

Are you using an iPhone?

In my experience SPA performance falls apart on cheaper Android devices, which are far more common among regular users but tend not to be in the pockets of developers, who spend way more money on their devices.
Apple has product security teams, in infra security team that covers a lot of this web attack surface, a large red team, researchers, and employs 3rd party firms to do sitewide tests.

Apple is also huge, and no huge company avoids vulnerabilities; staff as ambitiously as you want, but any disjoint group of competent testers attacking a new target is going to find a disjoint set of bugs.
You're welcome Dr. Zoidberg.
Yeah and I noticed a lot more ads on youtube.

I think they figured that they locked in people to their services and ecosystem, and now's the time to cash in on that and stock up on cash capital.
@samwcyo your website theme hides/disables the scroll bar
This decision doesn't change anything as long as software vendors use a permissive license.

The fear mongering about all sorts of cases in which might be affected (API, file formats) area under the assumption that the copyright holder has disallowed use which is the problem.

I suspect many will include provisions to allow it in their licenses otherwise the ecosystem for their products would shrink radically.
I guess I didn't search well enough! That link looks good!
It would be interesting to analyze Adobe's valuation over time to see how the market "anticipated" Adobe's growing into their scale.. in other words, maybe EV / Revenue multiples make sense if the end goal is achieving scale with 30-40% margins, even if it takes 20-30 years.
What if there were a reactor type which would require no, or much less shielding because all it emits is mostly hard ultraviolet light?

[0] https://en.wikipedia.org/wiki/Nuclear_lightbulb
Nitpicky typo alert on the pricing page:

> Doppler empowers engineers and their teams too quickly set up a secure way to store and manage their sensitive application secrets like API keys, database urls, certifications, etc... through a dashboard, API, and command line tool.

should be "to quickly".

Best of luck with the launch, I'll definitely try it out.
Trump’s antibody treatment was tested using cells derived from an abortion
Klean Kanteen had some drama because they weren't clear on what their liners were made of before they started telling people their products were safe.

Narrator: they weren't

They had to do a big mea culpa and then scramble to change their product line later in the game than they could have.

And then there was an organic food company (Muir) that dragged their feet on switching the liners for their canned tomatoes and sauces (you may recall that acids make the leaching worse) and pissed a lot of people right off.
If "md" means "billable day", a $600 billable day is extremely low for this kind of work; that's closer to what people pay for network pentesting. $1500-$2000 is closer to the market (before discount, assuming senior but not principal level delivery).