skysight-inc/HackerNews huggingface dataset:
tl;dr: PEBKAC

The less glib answer is that while best practices have gotten better, companies aren't necessarily better at following them (your company or your vendors). Additionally, on average people have not gotten all that smarter (while scammers have become more sophisticated).

Its all about defense in depth. Plan for compromise, trade off the costs (nothing is free).

At a technical level there are basic things like: separating dev from production, requiring 2FA across the board, strong passwords, certs, separation of privileges, up to date software, secret management, etc that form strong defenses.

Another way to approach this is to pose scenarios and understand defenses:

* What information could an employee give away that would then lead to a compromise? How do you stop it? Password to a phisher? Check in credentials to github? Wire money to a fake vendor/wrong account?

* If X was compromised, what is the impact? What would it take to recover? Where X is: dev box, production box, customer facing service, etc.

Two insidious scenarios that happen way too often:

* Latest malware distributed via legitimate sites (ad networks, sharepoint, dropbox, etc) -- Hard to prevent beyond up to date systems and content filtering. If paranoid, all browsing through VMs or other forms isolated environments. It won't stop compromise, but it will restrict scope.

* BEC -- Attacker studies your company. They impersonate an employee or partner (down to linkedin profiles) and convince someone to wire money. Or worse -- account compromise of a trusted partner. The attacker then uses this partners' account to hijack an email thread or send a 'normal' request like: "Our account has changed, future payments goto account YYYY."

Which brings us to vendors. Can a vendors' weak security break your company? Is it a good idea that your Microsoft Office 365 account allows unlimited password attempts (at least MS used to by default)?
> All mammals rape

2. John does not rape.

3. Therefore, John is not a mammal.
Sony is an electronics engineering company, and it really shows. The quality, forethought and care put into creating this product is part of their tradition. Microsoft, while doing wonderful things to make software more accessible is not an engineering company, and that shows too.

I only hope Microsoft has tested their cooling solution better than the 360 era. I don't want another RRoD situation.
What you mean it's all about the money? Come on there is more than that. Everyone started at stripe should have known the implications of their options.
No, that doesn't feature sufficient creativity.
Kaiser Permanente's Norcal and Socal plans this year have monthly premiums that are half of that, including dental.
Tracking stock trading by U.S. Representatives
Because all of the copyright Trolls are waiting for the court to rule API's are copyrightable.

Although it would be HILARIOUS if Amazon Sues Oracle on day one after the ruling for their copying of the S3 API.

That said there are ALL KINDS of interop code that is at risk with the ruling, only people with their heads in the sand and do not understand the industry at all believe that nothing negative will come about if this ruling stands
That is the most convoluted interpretation of offering COBRA, and is almost certainly incorrect. You're referring to the fact that an employer can technically terminate COBRA by ending all health insurance plans. But Coinbase would have to stop offering any health insurance to all their current employees for this to occur. If that happens (I'm virtually certain it won't), there would be an actual employee riot/exodus and the tech media would be all over that story.
Power consumption will probably curb that frequency hike above 5GHz.
This is awesome! The interface looks great, it is the UX I want. It boggles my mind why the major cloud providers who have parameter/secret management don't optimize their UX for the 90% use case of "I have an app, it runs in multiple environments, I want to vary the config by environment, and expose the config as environment variables, all with a simple and easy to audit interface".

On the feature request front, I'd like to be able to vary the config by location (e.g., region, but could be zone, rack, etc.). It is common to have a production app deployed to multiple regions (as Doppler itself does), and it is likely that 80% of the config will be the same between regions, but there may be region specific settings.

Which leads to the next thing I want, a hierarchy of config precedence: app default -> app+env -> app+env+location. So that the common settings don't need to be duplicated. Right now my guess is that to use Doppler with multiple regions I'd create environments like "prod-us-central1" and "prod-us-east1", but then 80% of the config will be the same between them.

Another thing that can be nice is to have a canonical value, and have multiple apps point to that value instead of having their own copy of the value. For example if you have a "production DB host" you can set that once, and multiple apps can point their DB_HOST or DATABASE_HOST at the "production DB host" canonical value. That way when the "production DB host" changes, it only needs to be changed in one place.
The video was fuzzy for me but I’m pretty sure it had around five bent pins when he flipped it over to show us.
Ask HN: Demotivated, broke, but no crisis. How to light a fire under my butt?
I feel like I'm in a somewhat odd predicament with motivation here. Like a lot of people today, I've been on the job search most of this year due to not having a job. But this current trend for me started a few years ago, well before Covid hit.

My career started by working contract after contract for a few years, then jobs dried up around 5 years ago. No longer able to support myself I moved in back with one of my parents. Meanwhile I continued to search for jobs including full-time ones. Considering all this, though, I think I am stuck in a job search "trance". Even though I barely have enough money for myself, with only small contract gigs (and ineligible for unemployment insurance) I am living comfortably with my family. I have no obligation to pay rent because the place is so cheap. My parents only care that I run errands for them. Job searching doesn't get brought up often unless I mention something about it.

My parents don't come from a lot of money- far from it. I grew up in a low-income household and paid my way through college with loans and Pell grands. My parents just managed to do a good job saving enough for retirement after their steady careers. So that's what I'm dealing with.

As for me, I continue working on different projects to keep my work skills relevant. I participate in networking events and get mock interviews. But seems like I'm not pushing myself hard enough. The comfort of a free roof over my head is working against me without me realizing it for so long.

Being supported by my parents and my lukewarm opportunities appear to go hand in hand. So how do I boost this motivation when I have this warm, comfortable safety net? Seems like I have to really go cold turkey and live like a bum on the street or inside my car, but is that too drastic? Being homeless might actually look worse to employers as well.
I think you're both right - yes, the harder-steel-in-the-middle is what gets called 'san mai' (though smiths all over the world have forge-welded harder steel to softer iron for tools and in knives for a long time), and the parent was describing a knife with decorative 'damascus' patterns on the outer layers of a harder steel center. I have a similar Shun [1] I got from Williams-Sonoma years ago, which slices onions as usual, but looks good doing it.

1: https://shun.kaiusa.com/
And yet we campaign for these private companies to censor things on our behalf, such as russian fake news. If a government is meant to represent a people, would a governments pressure on a private company be the same?
It's interesting that the difference between that and Apple is that since Apple controls the OS, nobody else can make a Mac.

Unfortunately for Dell, anyone can make a PC.
Are they? They're useful to individual slaveowners with enough capital they can have the slaves work. But what about for the working class? People in the U.S. today remark that immigrants willing to work for lower wages than locals drives down wages. A population forced to work at zero wage (or rather, at the cost to the slaveowner of keeping them alive and captive) would surely do the same.

It doesn't seem clear to me at all that, if I were the spirit of democracy/the hypothetical purely benevolent
(to specifically the people I consider of my country/nation/tribe, to the possible detriment of all others)
emperor of wherever, that on balance introducing slavery and slaves into my country would be a net boon on average.

Even ignoring the material aspects, it seems like americans had to contort their worldviews quite a bit to justify slavery to themselves, given their otherwise stated moral beliefs (that were useful to maintaining society). Something would have to give a pretty decisive advantage to justify that required cognitive dissonance, and I don't think 'enriching some already-rich landowners a bit more' is useful enough.

I mean, look at america. Are the descendants of the ethnic groups in the us at the time of slavery on average better off for slavery having existed? Now?

Plus it's wrong to inflict such horror on your fellow man etc etc, and there's a pretty huge difference between not letting people in and abducting them into your country and whipping them.
They are already able to index mobile apps fine though.
iOS engineer?, what's that?

Did you pass the Fundamentals of Engineering test?, are you a member in order of you local association of engineers? do you have an official engineer seal?

If you answer no the above questions, please stop calling yourself engineer
How much of this happen to be is accidental? For me it looks like a pattern. Especially if they are divided by the same lines. Let's wait and see until the final decision though.
Waiting for the battery tech to give 1hr+ fly time.
Trump’s antibody treatment tested using cells originally from an abortion
The BBC is vocally critical of imperialism[0], at least on a surface level. I always considered their opinion pieces centre-left (e.g. "bootlicking apologists" rather than "hidebound reactionaries") even when I was on the far left running around with wannabe revolutionary socialists.

When it comes to that, the WSJ news section is arguably closer to centre-right than AP or Reuters. I think there are a microcosm of tiny complexities within the categories.

[0] e.g. https://www.bbc.co.uk/bitesize/guides/zgh9ycw/revision/3
If you think it's high, you should short it.
Ask HN: How to generate a series of cryptographically provable pseudonyms
I'm wondering how best one could (starting with a chosen pseudonym) generate reasonable new pseudonyms, such that one can prove that one is the owner of all subsequent pseudonyms merely by generating another one which can be shown to be a correct part of the sequence but without anyone else being able to do so.

When I say "reasonable pseudonyms" I mean first and second name combinations which can be read and remembered reasonably and which could be taken for a human person.

An example of the purpose of such a system would be for someone to publish a series of writings all apparently by different authors, but which they could later incontrovertibly show to be the work of the same person.

I know nothing about cryptography.
Don't all cameras essentially have facial and vehicle recognition if you amass the data for central processing?

I don't think it is that notable, from a privacy standpoint, that the cameras themselves perform the processing. The whole point of these city-wide camera systems is to perform complicated analysis, far more insidious than mere facial or license plate recognition, on a larger, centralized backend.
That has happened to me.
Do what? I would have been surprised if this wasn't the case. Websites see every keystroke you make while their targeted. People should realize that. If they don't, they're in for some rude surprises.
Let's take your proposal further and let's say we have 20 different languages (some even with non English characters), runtimes, compilers, build systems, UI guidelines, etc will uniform distribution across the world. So even if you want to publish a software for your home country you'll only be able to reach 5% of population with any single tool chain.

Are you willing to learn all those 20 different language/runtime/tool chains?
It Took FB More Than a Year to Remove a Troll Farm
But this isn't supposed to be about us not liking how the internet has evolved over the last 15 years.

It's about HTTP/3.
UX Fail – Adding tracking to PayPal sale after it's no longer in recent activity
> Apple doesn't let you make a free app that references a paid service outside the App Store

Counter examples: Audible. Amazon. Netflix.

The contract nuance is more subtle than what you described. Iirc the app can’t directly link to the payment system on the website, but Audible (for example) has an intermediate currency (“points”) which can be transacted in-app. Real world currency transactions must be made on the website, outside of the app. Without the website account and transactions, the app is pretty useless.

The Netflix app is perhaps marginally more useful without logging in and Amazon is marginally more useful than that.
To me it's not related, the SDK is under the apache licence but it's just an implementation of the API, the API itself is not defined or under the copyright of that SDK.
Will this cast a shadow over Java adoption in general? Yes, I know it's about APIs but still.
My least favorite part of the arguments was when the US government representative used the existence of open source licenses that explicitly allow copying declarations to claim that it's not commonly believed that such rights don't exist.

"There is a prevalent practice of licensed copying of declarations and often that is done through what is called open-source licensing"
...(6 minutes later)
"sometimes, often the license terms don't include the payment of money, they simply include a requirement like whatever improvements you make have to be given back to the programming community. Have to be made known to other potential programmers. But the copyright holders authority to impose and enforce those licenses obviously depends on the proposition that the code is copyrightable to begin with. And so those licenses would be a pointless gesture otherwise and the very fact that they are offered with such frequency tends to dispel the idea that there is a common understanding in the relevant community that this material is not copyrightable at all."
It is in that a lot of people rely on apple to secure their data and it's good for them to know they should add an extra layer of encryption for anything critical.
Isn't part of the beauty of app sandboxing in android how it leverages the concept of users in *nix OS? IRC, each app is considered a user to the OS.

Does anyone know what they mean when they say that Apps will be sandboxed? It can't be similar if the phone is running a desktop OS masquerading as mobile OS.
Say Goodbye to Your Local Coffee Shop in America’s Cafe Shakeup
> I don't think it can be understated ...

I'm sure you meant "overstated".
3990X has 256mb of L3.
Microsoft's 'app store principles to promote choice' take a jab at Apple
Learn kana by reading the names of Pokémon
The creative arts existed long before copyright was a thing
Suicide Spike in Japan Shows Mental Health Toll of Covid-19
Having read multiple perspectives, some pro-Google and some pro-Oracle, I cannot reconcile this sort of argument with the Baker v. Selden precedent. [1]

Perhaps my understanding of APIs is different because I'm an engineer and not a lawyer, but how is this not an open and shut case?

The cookbook analogy is not applicable for the same reason one could not apply it in Baker, accounting methods are not of themselves copyrightable creative works. (They may be patentable, but I believe patentability is NOT at issue here.)

Selecting and arranging recipes requires creativity. I do not believe API code of a math library is in any way the same level, having designed hundreds of APIs and several SDKs myself. Perhaps creating a specification upon which the API design based upon is, but that leads right back to Baker. What am I missing here?

[1] https://en.wikipedia.org/wiki/Baker_v._Selden

Edit: And if you think about it, an API code is really just a set of templated forms for conveyance of data between systems. In this sense it is really no different from the accounting ledger templates in Baker.

Second edit: It would be worthwhile to enlighten the judges on the early history of computer programs and their ties to recipes which should make the cookbook analogy and its potential misapplication here even more obvious.

Third edit: Another line of enquiry would be to discuss differences between API contracts and APIs. They are not the same, though often confused, even by practicing software engineers.
This is definitely a pain point for me, interested to check it out.
1. ∀ Species ∈ Mammal, ∃ at least 1 member of Species that rapes

2. John does not rape

3. ∴ John is not the raping member of a Species of Mammals

Pardon any misuse of symbols, it's been a while.
> Providing the best high-end chips is insufficient to remain competitive long-term

Reason Alpha SPARC and POWER failed was they did not support the de facto standard X86 instruction-set, I believe. So the fastest most power efficient chip is not enough unless it can also run the most common software
World's best hacking team? That's highly unlikely. If they were wise though, they saved a few to sell to CIA/NSA/FBI who may be contacting them soon for said exploits thanks to articles like these. I doubt they showed the best cards in their magic deck.
You might find this interesting

> A conversation with Laurent Mazare about how your choice of programming language interacts with the kind of work you do, and in particular about the tradeoffs between Python and OCaml when doing machine learning and data analysis. Ron and Laurent discuss the tradeoffs between working in a text editor and a Jupyter Notebook, the importance of visualization and interactivity, how tools and practices vary between language ecosystems, and how language features like borrow-checking in Rust and ref-counting in Swift and Python can make machine learning easier.

https://signalsandthreads.com/python-ocaml-and-machine-learn...
For sure, this is definitely an element.
The fact that both OS X and iOS do this copying is specifically called out in the amicus brief signed by Steve Wozniak.
I'm not trying to be snarky here, but are you using 'ducking' as a verb for using duckduckgo? I ask because that makes sense in context, but I naturally assume that word to be a more polite version of 'fucking' because that's how I'm used to seeing it being used. Is ducking something people say?
https://www.itwire.com/security/infosec-researchers-slam-ex-...

He doxxed notdan and gexcolo most recently on Twitter.
I'm wet
> "Whole" in the sense of "the whole is more than the sum of its parts" is not generally understood to imply the maximal possible scope in any given context. It's simply meant to meant to talk about how the identify an aggregation (of no particular scale) relates to the identities of its individual components.

Which is how I'm using it. An API that consists of two functions and one that consists of a billion functions have completely different scales but each whole unit has an API portion and an implementation portion. And the API portion is the recipe. It's a purely factual description of what the implementation is expected to do.

> Similarly, the API/not-API distinction is one that has to be made in contexts beyond just the relationship of function signatures to function implementations. Foo was declared as a public class, but was it meant for public consumption? Or is it intended for internal use, and was only declared public because, for practical reasons, it couldn't be declared package-private?

That doesn't affect whether the API parts of it are API parts, only whether the API is regarded as internal or not, which shouldn't be relevant to copyright. Internal APIs shouldn't be copyrightable either.

> The issue at hand really doesn't have anything at all to do with how programmers understand things.

It better, or you're in real trouble, because then all you have are meaningless zeros and ones.
If all current taxi, and taxi-like services died overnight, the barrier to entry into the industry would be a guy with a high school degree, a cellphone, a driver's license, a beat-up Prius, and a yellow paintjob for it.

Your cited risk is not realistic.

> The obvious part is, you might get used to it, only for it to be dropped.

> But also, they may run competitors out of business before dropping it, leaving you without any options.

It's a taxi. You call a number, or click a button on an app. A car arrives and drives you somewhere. The value delivered by the guy in the beat-up Prius, to me, is the exact same as Waymo. It's the most homogenized, commoditized industry in the world. Waymo could corner the entire market, and then go out of business, and the very next day, the streets would be full of independent taxis picking up passengers.
Andriod was First released in Sept 2008,

OpenJDK was first released May 2007...
What good is knowing how verbs work, if you don't know any of them? Vocabulary is the corner-stone of learning a language.

You can make yourself understood using simple sentences and botched grammar, if the key words in them are the right ones.

You can't even study grammar without vocabulary, because grammar study uses examples. Examples loaded with words you don't understand are poorly conducive to learning.

The best resources for Japanese grammar assume that you can read. You get some furigana over some of the kanji and that's it.
The Satisfaction of the Hand-Off
This is disgusting. I’d record every one of these sessions, take them to the school, and make it clear that either the problem is addressed or they’ll be defending that teaching philosophy to the press.

My dad is a college professor. Two of my closest friends are teachers. They never had any qualms about dealing with goof-offs, and they always handled situations firmly but respectfully. Threatening to tear up a test isn’t class discipline, it’s a loss of composure that suggests deeper personal problems.

We get the future generations we deserve. Raise them to believe mistreatment is normal, and, well, you reap what you sow.
Gavin Newsom did not play college baseball, admitted for baseball scholarship
Look at Mr. Big Shot Fancypants with the gold tier resource editor here.
Recently its been niche discords. I’ve had a bit of luck being able to find and converse with people behind some popular things.
There's open source and really open source, it seems. Just wondering if the ruling will put a bomb under the Java edifice? Maybe it will even pave the way for Kotlin to become the dominant JVM language. One can only dream.
The whole purpose of the "extracurricular" nonsense that is included in US college admissions is racial and ethnic screening. The original targets were the Jews but now it's the Asians.
That's what liberals say. Conservatives will say the opposite. Hence you need both or neither, or someone will be unhappy.
Covid is comparable to flu with a higher mortality rate. Don't make it bigger than it is. 99.95% of the people are doing perfectly fine. Genetics are thus pretty effective
The southern states had laws, somewhat compliant to federal law, that you could vote if your grandfather could vote. A way to keep those of African descent out.

Yale has policies to give slots to legacies, effectively the same thing.

Only this time the federal government and Justice department is what fights to keep the handful of those of African descent going to Yale.

It's what America means. It's what the flag stands for.