skysight-inc/HackerNews huggingface dataset:
Can someone explain the implications of this point of the Polyform license? (It seems perhaps AGPL-like but 'product' could be very broad)

Noncompete

Any purpose is a permitted purpose, except for providing any product that competes with the software or any product the licensor or any of its affiliates provides using the software.
Exactly. The language design of Python means that the addition of cleanup code is an API change. The language design of C++ means that the addition of cleanup code is not an API change.
My guess is the most common attacker is someone sitting on a computer in a different country/continent. So:

1) Getting a mobile phone number seems much more difficult than getting an email. It provides some amount of country verification: If a service runs for let's say Danish people, then they can expect the phone number to be a +45.

2) taking over someone's email seems much more easy than taking over someone's phone, since many people reuse same password everywhere, then if you already have the password of the service requesting the OTP, good chance is that you also have the email password. The email address is not hard to find if attacker has password to the first email too. Hoping for security by obscurity (i.e. the 2nd email is now a "secret") isn't great.

3) physical security: without sophisticated attack, SMS can only be received on the actual user mobile phone, even if a phone with no passphrase. "If the phone is stolen" isn't a realistic scenario against a scammer on another continent.

Also from a theoritical point of view: it's a completely different communication channel, so if someone has somehow taken over the first channel (via some malware running on the email client/computer), then they still need to take over second channel.
So for instance, if a USPS snail mail wasn't so slow (or you don't need the OTP code right away), even if really insecure, it'd be better than 2nd email, as it follows same benefits as SMS.
I think you just claimed that you are a follower and easier influenced.
AWS's horrible documentation and user experience is the primary reason I prefer using Google Cloud Platform instead. :-)
Could be a security researcher.
The brain is just another organ, and also vulnerable to inflammation and immune effects. And it can in turn cause or worsen them too in the rest of the body. Medicine truly must stop making psychiatric diagnoses without looking for systemic causes, and vice versa. And I think good doctors understand this. However, like any profession, there are plenty of not so good doctors who lazily throw people away with vague anxiety or pain syndrome diagnoses.
> Binary obfuscation techniques to evade signature detection are a dime a dozen.

Fully encrypted programs that can perform and can run on an untrusted platform are not. I think you may have a little more reading to do.
> But... how do you execute it then?

You still end up with executable code - i think the key thing is you get it to a form where you can't tell the difference between your function (after obfuscation) and any other function that gives the same output for same input (after obfuscation). So you could still try giving it every possible input, to figure out what it does, but if it takes at least a couple 64 bit integers you're going to be spending the rest of your life doing that.
Got to love people who don't know how to communicate. I imagine these are the type of people getting jobs.
>No they don't. Stores buy their stock. They can choose to stock other brands or to make their own products, but they invariably have to purchase what they sell.

This is incorrect. I wish people would stop repeating this in this thread. Some stores purchase their stock. But the really big players do not operate like that.

When you go into Target and go to the cracker aisle, Target has not actually purchased all of the cookies and crackers that you see on the shelf. Target effectively rents out shelf space to Nabisco, who then comes in and puts their items on the shelf (or will pay Target to take the product and put it on the shelf for them). The pricing agreement can get quite complicated and depends on the amount of shelf space, location in the store, and can also depend on number of items eventually sold... but the takeaway is that Target does not just outright buy boxes of Oreos and then try to resell them. If the Oreos don't sell (say perhaps because the customers opted to buy the Target brand sandwich cookies instead), Target isn't out any money, because they still got their shelf rental fees from Nabisco.

Going even further, Target also engages in the same type of activity Amazon does with their analytics (including sales volume, margins, customer profiles etc) and use that information to decide who gets to rent how much shelf space and where. Target et al spend incredible amounts of money optimizing this stuff, which isn't far off from what Amazon does.

People have this old rusty view of brick & mortar stores, but the reality is that they've been masters of this stuff far longer than Amazon has even been around. Amazon championed bringing these practices to the online space and became the most obvious juggernaut, but that doesn't mean these other companies are angels.
A middling language with exceptional documentation can sometimes be more effective than an exceptional language with spotty documentation. The friction of acquiring sufficient context to get up and running with a language is a huge part of any technical task IMO.
Oh this is very nice, thanks for linking.
That's great. But my coworker has an Android phone ...
Despite all the comments here stating the opposite, steam has been a home run for me on linux. It worked flawlessly on all my machines and it continues to do so.
I hate that WWDC videos have essentially replaced docs. Videos have to be shallow, and code on slides has to be short. This medium is fine to sell an idea, and to give a high-level overview of how it works, but there's no way to include as much information as written documentation would.

Here's a TED talk on Thorium reactors. Why aren't you running them yet?
Hah the nightmare to get CallKit working. The only thing you could do is take a working example application and step by step wrap your application around it.

Because taking your existing VoIP application and inserting CallKit behavior breaks in so many mysterious and undocumented ways that I really had to tell a client it wasn't going to happen with his existing application within the allocated budget.

Just to get the fancy Apple call screen!

And of course only FaceTime can take video calls straight into video from the lock screen, so you have to explain after it works why nobody can see each other.
Iodide Retrospective
Fully encrypted programs can do things without the end user having any way of verifying that they're not backdoored or behaving otherwise maliciously.

(As a reminder, I'm not saying that FHE is inherently harmful. I take issue with their marketing spin on FHE as the "Crowl Jewel" is all. The motivations for companies to develop FHE are almost always in line with DRM, which is strictly speaking adverse to user freedom.)
It sounds like you just don't like IDEs.
Let me remind you of why we're all still talking about Boeing.

Not once, but TWICE, software taking readings from faulty sensors caused the airplane to nosedive into the ground, killing every single person on board, with the pilots powerless to take over.

It happened once, Boeing and the U.S. government reassured everyone that it wasn't going to happen again, then it happened again.

When nations around the world began to issue emergency orders to ground the 737 MAX, the U.S. was the last to do so.

The leaked emails from Boeing indicate clearly that this was not a freak accident, but a product of a corporate culture of irresponsibility and recklessness at Boeing reaching mind-boggling proportions. [0] Here are some quotes from said emails:

"This airplane is designed by clowns who in turn are supervised by monkeys."

"We'll probably have to go to other regulators around the world to Jedi-mind trick them into accepting the FSB findings, but that shouldn't be too hard."

"Would you put your family on a Max simulator trained aircraft? I wouldn't."

"I still haven't been forgiven by God for the covering up I did last year."

> What do people propose? Shut down Boeing?

No. What I propose is what I'm doing; I don't fly on Boeing planes anymore. If I see a flight change to a Boeing plane, I call the airline and demand to be switched to a different flight. It worked once, and I plan to keep doing it.

> Want carriers to just scrap their 737 MAX tails? Right now? That's the same thing as just declaring bankruptcy. The investment in a commercial aircraft takes years of steady use to pay off, and no one in the industry is in a financial position to take that hit.

I don't care what carriers have to do. At this point, I would consider it justice to see Boeing go bankrupt. And I really don't care if every airline that runs Boeing planes goes bankrupt. Companies come and go. Money is made and lost. But human lives cannot be returned and corruption like this can't be allowed to continue.

But that won't happen. What will happen is that the government will continue to bail out all the above, indefinitely. But if enough customers begin showing concern over Boeing, the airlines will purchase their planes less and less, and we can expect things to get better, either with Boeing's demise or its reform.

----

[0]: https://www.businessinsider.com/outrageous-messages-from-boe...
Thank you for the explanation. I was just trying to understand the news I heard on the radio this morning regarding the Covid vaccine.

I was trying to see if there was some analogy that could be made between software and biology to better understand how the process works, that is why I mentioned unit tests and technical debt.
Ledger Phishing Scam Targets Crypto Hardware Wallet Users – Kraken Blog
He usually prefer the subtitle:

A cryptographic master tool called indistinguishability obfuscation has for years seemed too good to be true. Three researchers have figured out that it can work.

Reduced to 80 characters it is:

12345678901234567890123456789012345678901234567890123456789012345678901234567890

Three researchers have figured out how indistinguishability obfuscation can work
Fair point! I've never seriously considered living in the bay area so I don't know the full cost of living. Appreciate the context.
Or even, from Python 3.8:

with (ctx_mgr := foo() if bar else nullcontext()):
...
> .NET 6.0 will use the same approach, with net6.0, and will add net6.0-ios and net6.0-android

Huge endeavor and launch! Looks like mobile app development will be the same with Xamarin
> Zoom lied and failed to meet those requirements.

did it? non-e2e is not the same as non-encrypted.

> They literally, knowingly and plainly misrepresented their product

Where has that been proven? as the parent pointed out, there is a wide gulf between misunderstanding and knowingly misrepresenting.

> People at Zoom should be getting jail sentences.

this is precisely why i lean against the anti-zoom sentiment. jail sentences - seriously?! what is the maximum possible harm zoom could have caused? they were wrong and they deserve to be punished, but lets keep things in perspective.
the highlights are great. 2 lowlights:
- HttpClient/WebRequest ReadWriteTimeout is silently ignored which can result in infinitely hung sockets when doing synchronous network i/o
- System.Speech is unsupported
If they wouldn't haven given an interview, or otherwise indicated that they want the world to know, it's nobodies business which nationality they are, or that they are husband and wife. It's simple as that.
The Current Hiring Process Is Broken. How to Deal with It?
Are you talking about two-way sync? Currently, if I share a password with my wife, she can see it. If the password needs to be updated, I will update the password in the app, which will update the password on her app too. But I believe you want my wife to be able to update it too? Yea, we can maybe add that if that will help!
(crdb eng here) I'll shamelessly call out that distributed backup/restore, which was previously in our enterprise offering, was moved into the free one. Internally a large part of that decisions was driven by the "suggestions" made here on HN, so keep 'em coming.
Perhaps my impression of the state of agricultural yields [0] and fealty payments is incorrect, but I don't think most peasants had enough food to be considered well nourished by today's standards. Sure some grew their own food, but the labor was much more involved than today and they didn't get to keep all of the food.

[0] - https://en.wikipedia.org/wiki/Agriculture_in_the_Middle_Ages...
Visual Studio is as objectively as possible not a bad IDE. If you have unlimited budget and are only doing C# and DotNet, only benefit of VS Code is start up performance. Of course for just about anything else VS Code is as good as Visual Studio.

Can't speak to how prod ready this is, would never use a major upgrade like this in production within the first 6 months of it's release. Bless those who have the way but that's madness to me.
Just take them off the stream for god's sake.

Why is this so complicated?
i would call both of those the same thing, and neither of them are cryptography.
The founder had the guts to tell the investors that there’s a deal on the table, but he’s not going to do it unless the VCs walk away from the investment.

It wasn’t a growth story, so from that point of view it was dead money for the VCs anyway. But why would they agree to the founder’s payout at their expense?

Either the VCs are very impressed with this founder and plan to participate in his next company, or they’re fed up and just wanted to be rid of him.
BlueConic | https://www.blueconic.com | multiple positions | ONSITE in Boston, MA / Nijmegen, NL (depending on the position) and REMOTE for some positions

BlueConic is the market-leading customer data platform, which gives marketers the power to liberate their data and use it to improve marketing outcomes. Our clients use BlueConic to unify individual-level data and then use that single view across channels. Our SaaS platform is the solution for challenges marketers haven’t been able to solve for years. We’re headquartered in Boston and our development team works from the Netherlands. With more than 300 brands currently using the platform, our work is experienced by millions.

Technologies we use:

* Frontend (TypeScript, JavaScript, React, Dojo)
* Backend (Java, Node, Cassandra, Solr, Docker)
* AI / Machine Learning (Apache Spark, Python, Jupyter notebooks)
* DevOps (AWS)
* iOS (Swift)
* Android (Java

We’re currently hiring for:

* Back-End Developer (Nijmegen, NL) - https://grnh.se/dbb136012us

* Customer Success Manager (Boston, MA) - https://grnh.se/c7dac6cc2us

* Customer Success Manager (Nijmegen, NL) - https://grnh.se/e07f30a92us

* Director, Sales Engineering (Boston, MA or Remote (US Eastern Time Zone)) - https://grnh.se/49c9169f2us

* Full-Stack Javascript Developer (Nijmegen, NL) - https://grnh.se/abb5679c2us

* Pre-Sales Engineer (Boston, MA or Remote (US)) - https://grnh.se/2ce03e3d2us

* Product Owner (Nijmegen, NL) - https://grnh.se/a9549b792us

* QA Engineer (Nijmegen, NL) - https://grnh.se/eab154042us

* Senior Project Manager (Boston, MA) - https://grnh.se/e2ea23c92us

* Solutions Architect (Boston, MA or Remote (US)) - https://grnh.se/9c9037de2us

* System Administrator (Nijmegen, NL) - https://grnh.se/3185b77c2us

* UX Lead (Nijmegen, NL) - https://grnh.se/07afc3dc2us

* VP, People (Boston, MA) - https://grnh.se/eb5d11ee2us

My email in bio for questions.
COVID-19 is like WebMD.

The more you look at it the more symptoms you think you have. It’s simply impossible to reconcile the number of people who have been diagnosed with it and have zero symptoms with the number of people who have been diagnosed with it and somehow have dozens of symptoms ranging from heart failure to brain damage to hair loss, smell loss, vision problems; the whole thing reeks of absolute bullshit.

I think what they[1] have done is figured out a way to tie a label, namely COVID-19, to any ailment that anyone already has, in order to scare people to death.

Am I being careful, in case my assumptions are incorrect? Yes. Careful for myself and people I know and for strangers. However, I do not have to believe in this anti-scientific religion, and neither do you, in order to be a good person. I think we are far enough along now and have enough data that you have to be pretty gullible to believe COVID-19 is all the things they[1] claim it is.

P.S., no successful mRNA vaccine on the schedule, despite dozens of years of research, but somehow we created a 90% successful mRNA vaccine in six months? I’ve got a bridge to sell you, if you believe this.

1. just they...
A counterexample I'd offer is that upon being treated charitably those employees could then be incentivised to use that windfall to pursue their own ideas, seeing the success of their founder benefactor and being empowered with a financial cushion they would not have otherwise had.

They might then go on to create something of massive value which the world never would have had if they simply did not have the financial means to do so.

Remembering the "charity" they received in helping build the business that enabled them to succeed as founders they then pass that same "charity" on to their own employees upon a successful exit, kickstarting a cycle of innovation that spreads much farther.

There's an argument that "that's not the way the world is" but the world is as compassionate or dispassionate as we make it. Personally I'd like to see it move towards a point where taking everything just because you can isn't viewed as acceptable.
I don't think Steve would have allowed this to happen. Developers are way too important part of the whole "where the money comes from?" question. He would have noticed the complaints before anyone wrote a blog about it.

iOS docs were great back in 2011.
Studies have repeatedly shown that maximum readability is at fixed widths capped to a maximum line length (in both inches and words). Obviously a screenshot does not convey PPI and you could be viewing it on a 60" display or on a 22" screen, but you get the point.
Providing no links to anything except for other articles by the same publisher seems to be par for the journalism course these days.
Remember how they banned a weed that grows by itself in all kinds of places?
I'd love to start recommending hardware keys as a go-to over TOTP but I often find that the cost is not great (taking mostly the Yubikey and Titan into consideration). Especially for people that aren't all that bothered with securing accounts in the first place, they see it as an unnecessary cost.

Same for companies a lot of the time.

Are there any cheaper, but still reliable hardware keys nowadays?
Buffett's 5/25 Rule – How to increase focus and avoid burnout
You need a driving license specifically, or just some form of photo ID?
This isn't an apple thing. Its industry wide. Much of the good documentation that exists is stuff that was written 20+ years ago by actual technical writers and is still being maintained.

AKA the windows API/etc documentation, linux man pages, etc.

The vast majority of modern documentation is worthless autogenerated garbage when it exists. It lacks good examples, meaningful overviews and functional diagrams. In many cases its woefully out of date because someone rejiggered an API and didn't bother to even update the inline documentation.

One of the better examples of recent documentation is the core rust docs/books. Even then because the rapid release cycles no one publishes an updated "Learn Rust" book for every release, complete with boxes explaining what has changed since the last release. And god help you if you dig to far into the library ecosystem.

I think this is caused by one single problem. Documentation isn't sexy and no one is paying technical writers to do the grunt work anymore. Opensource is a large part of this problem, but the commercial guys have discovered they can save a few hundred thousand a year by simply not having a documentation team, and it doesn't appear to affect them much. A couple youtube tutorials and they are done.

You can see this in the evolution of software, etc. In the 1970's you got large paper manuals which covered every technical aspect of the machine/software. The users were expected to use their brains. Then in the 1980's it all transitioned to "user documentation" which was more focused on manuals that explain how to use the product, by removing the how it works part. Then in the 1990's it started moving to digital copies on disk, and the product came with a 3-4 page manual explaining how to bootstrap enough to read the rest of the docs. In the 2000's it all moved online and became more "marketing" than users guides. In the 2010's they stopped even that. Now you get a phone/software/computer your lucky to even get a piece of paper that tells you how to turn it on, charge it, or install it. Even ms doesn't publish a complete guide to all the magic swipes and keystrokes that are supported by their new shell.
They said: "I got them to try Jitsi once, which simply didn't work."
Capital One continues to only make SMS available for 2FA. I had to close my account(s) with them last year when they refused to allow me to use my wife's phone for this purpose (since I don't have one). Their loss, not mine.
Good documentation is one of those things whose presence is felt only when it’s absent
> By 1880 we had cleared the Indian, and with him, the buffallo, from the Great Plains, and established the last frontiers... A half million square miles of natural range...
Minimize read-write MySQL downtime
I know nothing about the whole topic but could you explain:

Why does any of those programs contain the password anyway if it is not needed for achieving the goal?

If it is not needed, flow analysis, tree shaking and const evaluation could get rid of it.

If it is needed, how would the program not containing it achieve the goal?
A fantastic milestone for the Isovalent/Cilium team. From being the pioneer of leading the eBPF revolution in the industry to building an outstanding open-source community around Cilium, the team has every element to success.
Kudos to everyone involved in building such an amazing product!!!
If you are going to diss the journalist, you should back it up with specific examples.
I have an older model brother, but it requires no drivers on Linux. You just set it up as a generic postscript compatible printer in CUPS.
Ah ok, thanks for the response! I've seen a lot of value in automatically generated docs from inline code. Perhaps that's a key baseline strategy for improvement.

Add then padding that with the long-form guides with concepts and examples.
Because it probably wasn't a seller, but a fake return.

Something that Amazon is at fault for and can happen to any item, so while it is an issue, it's not really on any particular seller or item

Fwiw I've never had a negative review removed after hundreds of reviews. But I'm very strict about framing issues in terms of them item.

For example, I recently got a shattered ceramic cup.Amazon had padded the contents of the outer box, but the inner box the actual cup came in had no padding whatsoever... paper thin with no clearances.

There was never a hope that thing would ever have reached me in one piece, regardless of what Amazon did to package it and so I framed the negative review like that.

It's something that a prototypical instance of the item would share as a shortcoming. Amazon can't fix it, only the manufacturer boxing it can
Good progress. Too bad many games still come out using DX12 today instead of Vulkan, so such translation is needed.

MS is still its old '90s lock-in self when it comes to gaming and Vulkan adoption. So efforts like this is a great way to break that lock-in and it helps to gradually increase Linux gaming user base which eventually will help break the catch 22 deadlock of publishers ignoring Linux.