skysight-inc/HackerNews huggingface dataset:
The local fallback file is updated each time new secrets are fetched. It is possible for your Doppler secrets to change between your last successful fetch and your next unsuccessful fetch, and in that scenario you wouldn't be operating off the latest secrets. We don't see the fallback file as an excuse for availability; our service needs to be up.

The fallback file is encrypted using AES-GCM with a key derived from the auth token and other metadata using PBKDF2. It is theoretically possible for an ex-employee to store the fallback file and retain a copy of the auth token and other metadata, even after the token has been revoked. In this case, they could construct the key using their privileged information. However, this attack would require active malfeasance by an authorized party during the period in which they're still authorized. It would be easier for the bad actor to store the raw secrets (by logging process.env, for example) than storing the encrypted file. To really solve this issue, the secrets would need to be time-bound and dynamic. Dynamic secrets are on our roadmap, but the issue you point out is a really hard problem. (And if you'd like to help, we're hiring![0])

[0] https://doppler.com/careers
This might work in the customer's favor though as the rep might offer concessions to try and get back on good terms
Fair enough. I hope that was indeed the case. I also think that Google lawyer went into legal technicalities with merger doctrine, etc. (which I don't understand) without trying to provide real life analogies (with all their caveats) which some justices tried to do instead.

One analogy that comes to my mind is that the steering wheel, gas and brake pedals, hand brake, etc. are like APIs of a car and are implemented differently in a gas car vs. an electric car. It makes sense for an electric car company to stick to that API rather than replace the steering wheel with a joystick or buttons and have all drivers learn this new method to drive a new car. It would've made more intuitive sense
We've been converting our code from Typescript to Ocaml/ReasonML. The genType project from the Reason team makes it possible to gradually integrate the ReasonML codebase into our existing Typescript project because it generates fully typed Typescript code and not just plain JS. And best of all, if something is hard to do in Ocaml/ReasonML we can actually just use a nodejs package.
The only people who could think that are people who do not have to deal with people different to them in their daily life at all. Having three shades of skin tone on software developers that all went to Stanford does not count for your difference quota.

Money is money, and the money of a jew, nazi, gay, christian, muslim or pedophile are all equally good. Anyone rejecting money because they don't agree with where it comes from is either lying or about to be eaten alive by someone who doesn't.

There is a reason why everyone in China is trying to escape to our system, while they have invented personal money - in the form of your social score.
> an investment not directly tied to product (their core competency).

Heavily disagree, the only reason I would renew my mac in the next 6 month is because the ARM chip, and I will as soon as it comes out.
Don't have much to add, but want to say thanks for sharing those blog posts, they were interesting reads.

The slack CTO's comment about choosing RDBMS because 'familiarity' is interesting. IMO it's a gamble. I've seen it happen with my company when being a latecomer to containerization.

When it came to picking a container management tool, it was a tossup between k8s, Nomad, or just saying to hell with and running those containers ourselves on EC2 instances. Having run our stack on bare metal for year = we were really pretty good at it. There was a surprising amount of automation that could be ported over.

Eventually we picked k8s, and coincidentally, our usage grew more in 6 months than it had in the last 2ish years. So all in all, the gamble paid off.

... but I like to think there's another world where we picked the 'its familiar option' and things still worked out. If our traffic hadn't grown the way it did, we would never have felt the pain of having to manually scale out our systems - or basically write an in-house version of Kubernetes.

So in that sense, I'd guess that maybe some teams have the bad habit of playing the same side of the coin everytime. It may be prudent to stay conservative when picking a Datastore, maybe it's would be smart to pick a risky technology for your app servers? (and vice-versa)
Yes counterweight is a great way to put it. I don't at all know how to implement this idea, but I feel strong if we don't figure that out, with the best minds we can find, we are doomed. Imagine Trump but more religious, with more power, more aggressive, more grandiose, more ties to dictators. We've seen proof positive the system is vulnerable to single loose cannon. We need to at least attempt to improve the system. To not do that is total negligence.
> but they would only need a very weak link to some foreign agent to allow wide scale surveillance. Hell, a Canadian protester would fulfill the criteria.

My impression is that this is exactly why DHS wrote the Intelligence Report "The Syrian Conflict and its Nexus to US-based Antifascist Movements": https://www.voltairenet.org/IMG/pdf/471292844-The-Syrian-Con...

The idea seems to be to gin up a facially plausible but totally spurious connection from Antifa to PKK via the YPG, to claim that YPG is a "foreign power" (ridiculous, but might be technically true under 50 U.S.C. § 1801(a)(5)), or that it's somehow the same organization as the PKK (false) in order to justify a counterintelligence investigation of protestors.
5 years ago amd was a $2 stock and xilinx was a 50 dollar stock. Now amd is a 80 dollar stock and Xilinxis ~100 dollar stock. Xilinx market cap was 5x of amd. Even today xilinx generates more free cash than amd. Its kind of crazy how fast company values can change.
https://nymag.com/intelligencer/2017/08/family-man-accused-o...

> Jerry Drake Varnell, who allegedly followed far-right anti-government groups and told the FBI he “wanted to start the next revolution,” is “a paranoid schizophrenic

> He has no job, no money, no vehicle, and no driver’s license, due to the fact that he is schizophrenic and we; his parents do everything we can possible to keep him safe and functional. The mental health system has consistently failed us

> He has attended college and just enrolled in welding school. His medications allow him to be somewhat functional but he will never be completely functional in life

The FBI is a despicable political actor. They set up muslims during the war on terror in the same way. Never once did they catch a real terrorist plot. It was all political theater.

You're right, its not so much about critical thinking as it is pattern recognition.
> An example could be climate change. If Coinbase is doing nothing to make energy more green (even if that's just writing amicus briefs or blog posts), then they are effectively saying, "The way things are is fine."

You think every single company that isn't writing amicus briefs or blog posts about climate change is taking a political stance against fighting climate change?
Well i wouldn't be too concerned about climate change if i were you. United Nations Agenda 2030 is already in full force were likely to have dealt with those issues by then as a result of incentives given to participating business leaders like Ben Geortzel, Bill Gates and Elon Musk. But you do make a good point about about what we do about the next Trump-like president whether on the left or the right. Im not picking sides here theyre both full of shit imo but i do worry about a single person or group obtaining a monopoly on information and scientific discourse. Thats bad and will lead to a very dark future if we dont address it soon. Even if we do and we screw this up the damage could result in a butterfly effect that will be utterly devastaing to humanity in a decade or two.
As a machine, it would be patentable if the machine was made of something other than abstract concepts.
Thanks! We don't have any specifically curated lists yet. We've talked about it a lot though.

There is a mega list of articles that other people have saved here: https://waldenpond.press/2020/08/30/popularity.html

There are also some really good curated lists out there, e.g. https://tetw.org/ to plug the gap for now
portipsguzzardo…

I didn't know english back then, so I memorized the letters in sequence.
Amazing I can still remember it, even the rhythmic sound I came up with to help me memorize, 25 years later.

So many hours spent in this game. I loved it. And I loved ResEdit just as much.
The primary advantage of SPAs is the increased interactivity of the UI. Instant navigation is nice, but that's an implementation detail: an SPA could just as easily lazily load that data, and must chew up memory on the client and then deal with synchronization complexity with the back end if it doesn't.

It's a trade off, of course. SPAs are a reversion to the classic client-server setup, and there are advantages and disadvantages to both that and the newer web model.

One is that you still need to hydrate and format that HTML somehow

htmx expects HTML back from the server, there isn't any hydration or client side templating (unless you want that)

Second, you have to take on all the rendering load instead of just passing thru some JSON-formatted DB results,

Formatting database data into a JSON string is not significantly less CPU intensive than formatting it into an HTML string, and both are a round-off error when compared with the expense of connecting to the data store.

Final gripe...

Yes, an irony of my life is that I had to learn a lot of javascript in order to avoid writing much javascript.
It's not hard to have an automated system that tracks if a candidate that's been interacted with has been ghosted. If the candidate has been previously contacted then require communication with the candidate for any archiving or other rejection. Hell, require communication even if you reject them without ever talking to them. Sending an automated email tied to the HR system candidate status isn't expensive or hard. You can then reprimand the recruiter or their manager as appropriate if they don't do this or try to get around it
Maybe I'm missing something here, but what I read is:

"...unless they are in accordance with procedures established by the head of the Intelligence Community element concerned or the head of a department containing such element and approved by the Attorney General, after consultation with the Director"

So you need to get:

1. A department head to come up with a procedure for carrying out the unconsented physical searches.

2. AG Barr to sign off on it.

That sounds like something you could do in, like, 20 minutes if you knew the right phone numbers to dial.
I generally agree with that.

When the same protest in the same place every single night turns to violence 100 nights in a row though, and when the violent people deliberately use peaceful protests as a smokescreen for their behavior, it does start to get suspicious why a peaceful protester would show up for that kind of thing night after night.
Jumping from DNS records to massive efforts to undermine/impersonate/subvert parts of the FBI is quite a leap.

I'm sure the OP's LA FBI contact appreciated the laugh they had when their local Dwight Schrute called them to complain about the web hosting of the "private" part of a public-private partnership.
15 years ago if you told me Nokia would get 30% of your cable TV, newspaper, file storage, music, book, software and video gaming spending I would have laughed.

Yet this is the reality we find ourselves in today.
If we had more testing capacity what would that change? What would it allow us to do that we aren't doing now?

Japan did very little testing and has a relatively low death rate so far.
What is the best way to use DDG like Google with minimum friction and good search results (I rarely get relevant answers if I do a pure DDG search)?

Also, what is DDG? It has its own crawlers (DuckDuckBot) like Google and Bing have (assuming Bing has, haven't read on it)? Or DDG (or DuckDuckBot) just filters/parses results from Google et al?
Except for the remote code execution.
Seems like you've discovered the philosophy of Accelerationism!

Sometimes it does feel that embracing awful system is the best way to topple it.
It's a pretty common analogy. I got it from https://youtu.be/rhFK5_Nx9xY?t=238
How about something like this, but which only searches sites/orgs that https://mediabiasfactcheck.com/ rates the factual reporting as "high" or higher on, regardless of bias (or perhaps incorporating no bias)

Hmmm, I could probably create a custom google search page for that, eh?
Lol, Facebook removed some fake accounts!?! It rained today too!

How is this still news? I mean I understand it is important for Facebook public relations to provide this information but it seems every second day we hear about another group of accounts being banned. I'm starting to think there might be full time positions at some of these news outlets for writing aricles about the Facebook and Twitter bans. Or is the real story about Turning Point, with just enough Iran to make it non partisan?

I removed myself from Facebook after my account was accessed by an ex, maybe I should write a story.
Our best estimate of IFR is closer to 0.6%.

https://www.cdc.gov/coronavirus/2019-ncov/hcp/planning-scena...
"why is this gate here, let's rip it out!"

I've worked a lot of places where there was consumer grade and enterprise grade. Sometimes the distinction was more on the marketing side of the scale sometimes less so.

But the enterprise customers always got WAY better service. If you're running a business chaos is your enemy and it is costly.
Show HN: An LLVM front end for my university's teaching programming language
No stance means just that. Redefining terms and imposing a will is the overtly irrelevant and aggressive political posturing that these policies are trying to avoid.
Hi HN! I am a senior at the University of Waterloo. In my sophomore year, I had to take an introductory compiler course where we created a compiler for the WLP4 language almost from scratch. WLP4 is a subset of C++. I worked on this side-project not only to better understand the LLVM framework but also to brush up my compiler theory knowledge. I learnt about the Earley parsing algorithm while working on this project and I have used the same inside the project. It is still a WIP since I want to add tests as well as debug information support. I'd love to hear your thoughts and feedback!
To literally change the government would be a ten year project at least. I'm just raising it create discussion. I just think when Trump leaves office people are going to rapidly forget how bad it was. And another Trump (potentially Trump Jr) is just one election away from winning.

But the idea is to guard against either party going nutso. Parties should be given the chance to steer the ship. But we shouldn't let them take apart the ship, and deny is there is water, something has to be out of bounds. Play is "freedom within constraints" there have to be constraints, reality should be a constraint.
People are already trying to do that to Krebs regularly. Numerous SWATing attempts, drugs sent to his house, etc
Really cool I thought it was just you had different datasets labeled for legibility
Personally, I've just come to terms HN is good for tech news. There's always some good people calling out any bullcrap in the comment sections which is wonderful, but when it comes to sharing opinions, it just feels like a karma battle. A similar reason why I ditched Reddit years ago.

I've often shared genuine questions and thoughts before on HN with other accounts and always found myself getting absolutely karma destroyed. It was very discouraging, so now I just really don't bother engaging anymore. This was my same issue on Reddit. I (shamefully) admit I find myself even reading discussions on 4chan where there is no point system, but I see the problems with that: mass trolling
Linux will be fine, people who used RHEL can just moved to cloud and/or Amazon linux or Canonical, whatever that suits them.

The changes could even be by the same people, I'm sure many from RH will not like IBM culture.
I don't know anything about Dart, though. I'm not keen on Flutter, for a number of reasons, namely some lower level things. The company I'm in took a long hard look at whether we'd do Flutter or native, and we went with native because it gave us more control and is more predictable.

Kotlin offers much of what Swift does, both try to adopt the same features as the other. It does pseudo-functional programming nicely, which is what a lot of people look for these days.

If you want to compare career paths for both, Dart/Flutter is still early and doesn't have enough data points. Kotlin's popularity grew at a similar rate early on, despite no MFAANG backing, and now Google is officially replacing their docs with it. The fact that Google pumps out so much recent effort into building up both native Android/Kotlin and Flutter/Dart means something, but on a gut feel they're investing more into Android/Kotlin/Jetpack.
For anyone still interested, the actual levels came out. They're much higher than predicted (as expected).

For NYC: (I II III IV) = (116,251 150,010 183,768 217,526)

https://www.flcdatacenter.com/OesQuickResults.aspx?code=15-1...

For SF: (I II III IV) = Not provided. Some notice seems to imply that any level must be >208k.

https://www.flcdatacenter.com/OesQuickResults.aspx?code=15-1...

For SEA: (I II III IV) = (139,880 167,918 195,936 223,974)

https://www.flcdatacenter.com/OesQuickResults.aspx?area=4266...
It's the same. The market is VR gaming. People who want to play VR games choose what headset to buy. Simple as that.

The TV/iPad comparison doesn't work. It's very common to have both a TV and an iPad, but I have yet to meet anyone who has both tethered and untethered VR headsets, and thinks of them as distinct.

The VR market is small and may differentiate in time, like how "mobile" has grown so it's common to have a phone and tablet and laptop. Bringing down the antitrust hammer today seems so premature.
Yes. They aren’t in the innovation business. They are in the Marketing (Watson), audit and share buyback business.
Taking the data from the linked table for say 35-44 year olds is 1,798 deaths out of ~43 million population bracket, excluding influenza cases. That’s a 99.9956% survival rate. Taking all covid-19 and influenza it’s still a 99.9903% survival rate.
Yeah, it's not easy, but I'd like to start with something like:

Just because something sounds right/wrong doesn't mean it is.
There isn't always an easy answer.
"I don't know" is preferable to "simple but wrong".
My point wasn't to assume the worst, but to point out that we don't know what the long term affects of even mild cases are, and there is a non-trivial amount of mild-and-worse cases.
Nobody ever got fired for buying IBM only works until someone does.

And that turning point is happening/happened.
HFT, probably.
I hope it's uBlock "Origin" and not just "uBlock".

"uBlock Origin" is the original and real deal. The other one is a scam.

https://github.com/gorhill/uBlock (mentioned multiple times in these threads)

Discussion about the two: https://news.ycombinator.com/item?id=14335190
I work at Stripe. From a quick browse through my inbox and Chrome tabs, I see multi-thousand word documents in: Google Docs, Dropbox, markdown in Git, internal wiki, _other_ internal wiki, email to mailing lists, custom software, and internal wiki pages generated from markdown in Git.

All of these tools have weird superpowers and limitations that prevent them from becoming a unified catalog. Google Docs can do live concurrent editing between 40 people but can't relax width limits (e.g. for code listings), and ${WIKI_SOFTWARE} can embed every document format in the world but can't require certain pages to be changed via code review.

There's another internal meta-tool that acts like a search engine across the various vendor platforms, so I can search for [network egress policy] and be assured of somewhat reasonable results.
I have created accounts that got immediately locked the same day. I have also had accounts that got locked about 2 months in.
It also covers your ability to use the console itself. It seems reasonably fair.

tl;dr The banned account can still play games in offline mode but can't re-download them since this is done through the XBox Live service. Other users of that XBox can do everything as normal including play and re-download games that were installed by the banned account.
https://archive.is/016vq
Somebody has to pay for the fact that a driver lost 90 minutes in a traffic jam because some idiot caused a traffic fatality and blocked everything up. Or does the driver have a right to kick you out of his cab when the ride becomes unprofitable?

The only question about payment is "Who?"

As much as you can fight it, at the end of the day the answer will always be "the end consumer." The only question is whether you pay it on every ride as an up front increase or whether you pay it on the unfortunate ride as an addition. Both are perfectly acceptable solutions and can even coexist in the market in different companies.

People have gotten spoiled by the fact that ridesharing was burning VC cash to subsidize exceptional cases. Once those costs all quit being subsidized, they're all going to materialize back to the end consumer.
From your link, the definition of foreign power includes:

"a foreign-based political organization, not substantially composed of United States persons"

And, a foreign agent can be:

"knowingly engages in sabotage or international terrorism, or activities that are in preparation therefor, for or on behalf of a foreign power"

That kind of language is so loose. A good legal team could easily claim something something something Antifa foreign influence burned down a Target to meet that legal definition.
> Is it just me or does anyone else feel over the decades they've been divesting some of the best (long term) building blocks?

IBM is old enough to understand the pitfalls of that approach.

In year zero it sounds great. Integration! Efficiency! And that works for a bit.

Then internal politics causes you to pass on opportunities that competitors take because taking them yourself would cannibalize sales in one of your other lines of business.

Then somebody else comes up with a better microprocessor than you, or better software, or lower cost manufacturing, and it's going to take your internal team five years to catch up. In the meantime all your systems are integrated with your in-house solution, so you can't switch, but the deficient in-house alternative makes you less competitive, so you lose all the customers who can switch easily.

Then you have to cut R&D because of the lost revenue and fall even further behind the competition, which leaves you in a death spiral where the most profitable strategy is to lock-in your existing customers and milk them as hard as possible as you circle the drain.

Or you can concentrate on doing one thing and doing it well, so that you don't risk sinking your entire operation as soon as you fail to execute flawlessly in any one of the six different major fields you've created an internal dependency on.
No, it’s literally the textbook definition of domestic terrorism. This is the reality on the ground. It is not a fox news narrative. The bullshit narrative going around is that they are abusing peaceful protesters. The fact that you attempt to minimize it by pretending it’s a garbage can on fire and that you pretend that police are opening fire on peaceful protesters is so far from reality I don’t know how anyone can still even pretend that is the case.
Nissan Leaf, too. It's not great, but is good enough that I'm not scared to look away for a moment to change stations.
maybe I should have said "TV politics"? I think assange/snowden/etc kinds of stories are more computer politics.