skysight-inc/HackerNews huggingface dataset:
Drifbot is an open-source webapp software supply chain monitoring tool built on GitHub Actions. It uses a headless Chrome browser to visit your site as it records and analyzes 3rd party connections your site is making as well as potentially malicious JavaScript behaviors.

It looks for things like heavily obfuscated JavaScript (often used by malicious actors or aggressive ad networks). It also uses Esprima to generate and analyze an Abstract Syntax Tree (AST) of each JavaScript source file. It walks the AST looking for suspicious function calls like `eval` that might show up in malicious scripts.

If you're into appsec, or just curious about webapp software supply chain risks, you might find it interesting.
> This is generally not possible at twice the cost.
We get better at automation constantly. Thinking that just because today our technology sucks it will stay this way, is not reasonable in my opinion.

> When it is possible to automate a job away, it is desirable.
Yes, it reduces the cost (of the workforce). However, this change comes with a nontrivial social cost and a problem, what to do with the people that are not able to do more advanced stuff.
Sure, but how are you going to achieve that? I'd like an entirely different constitutional order (a federalized wikiocracy, in a nutshell) but that would require either a wholesale redrafting or recission of the Constitution.

Look at the current situation where there is a 50-50 tie in the Senate, but existing rules create a 60 vote threshold for most legislation. There are a whole lot of issues that I'd like to see reform on, but right now the votes are not there for either party to do so.
Lol, no. Germany is a real place. So is China. Bad luck for us that urls are just a bit to old to be assumed utf8.
> Are people doing office work for $7.25 in Houston?

In that it's in an office building, yes. But it's not office work like sitting at a desk.
For me, here's a common thread going through everything that's happened to Basecamp in the last several days and in laser focus today.

Today 1/3rd of the employees left Basecamp.

Also today: DHH is back to tweeting and fighting with Apple like nothing of note happened and it's just another day.

The original situation that sparked everything was brought about largely by dismissive and irresponsible leadership that disrespected and devalued the feelings of the other people the leader served.

Today's reaction is more of the same. To project to the public - whether pretending or legitimate - that 1/3rd of the company leaving barely registers with you? It's that same devaluing and disrespect, just shown off in a different form.
It looks like you obtain it in 1995.
Sounds like he has matured. He isn’t the first and won’t be the last to become more professional as he gets older. If that’s not what is going on here then I hope at least to show an alternative way a policy such as this could be interpreted.
I wonder if discussing removing racial segregation from workplaces back in the 60s or 70s or whenever was considered a "very liberal or even leftist"? Sometimes there's just a right side to be on.

I've never had a discussion about abortion or guns-rights or whatever in the general workplace - maybe I've had social conversations amongst work friends - but really the "political" conversations I've had at work are mostly focus on building diverse teams to build better products or calling out and addressing bad behaviour.
I totally understand Namecheap's response here apart from not visiting the website, which seems lazy even if they have a high volume of reports. Let's examine how a typical phishing campaign works:

1. Fraudster buys a "phish kit" - a crappy PHP script with a skinned login page that emails them credentials

2. Fraudster finds one or more compromised websites (read: small WordPress blogs) and sticks the phish kit there on some new page

3. Fraudster spams a bunch of people with a link to the phish kit

Most of their responses will probably be collected within 24 hours. Most webmasters of exploited sites don't pay attention or have a clue how to remediate issues. This means that it's standard practice to also send phishing reports to registrars and hosting companies in addition to contacting the site's owner and reporting to unified blacklists.

Some phish kits block certain IP ranges to make them harder to detect (e.g. a PayPal phish kit might block PayPal's corp IP range).
I've often thought about building a house from waterproof materials with floor drains and just hosing the whole thing down. You'd have to move furniture but getting to use a pressure washer is its own reward, I think.
Sorry to say, but that's simplistic thinking. And going too far in the other direction as we're seeing today is a recipe for chaos. Society becomes overly brittle, and the smallest hit will shatter it.
Then we should also give minors the right to vote, form unions etc.

What you propose is exploitation, since you get to decide their rights and btw you also decided that their labor is worth less, but they have no say in all of these.
> Notarization is clearly part of a defense in depth strategy for macOS.

The issues being called out here is that it comes at too high of a cost to both develops and users compared to the benefits it provides.
There was never any assertion that not participating is immoral, but that it is itself choice.
Agile isn't really agile. Cloud computing isn't really in clouds. Personal computers aren't that personal. Serverless isn't really serverless. Who cares.
The fix is simple, don't allow access to clocks or timing information in anything other than the microkernel that runs the OS.
Registering the domain in July 1995 is a good start!

https://whois.gandi.net/en/results?search=josh.com
It’s a shortage when the jobs paying 50% over minimum aren’t being filled.

Stores and restaurants are thinly staffed around here. Even the ones with signs out saying they’ll pay a premium.
American companies offered me 3x the pay of what Canadian companies did.

Moving was obvious? Somehow, amazon manages to stay in business.

This is just owners not wanting to reduce their share of the revenues
Political deals with social and governmental public policy. Company bathroom policy is not political. If the company wants to solicit policy debate for a specific bathroom policy then it’s leadership can. The CEO could also issue a unilateral decision with no debate.
It does punish them because minimum wage isn't indexed to inflation.
Any amount of violence is too much, and just deligitimizes the protests and gives fodder to political commentators who aim to do so. Of course you would ask your people to help keep the peace. It doesn't mean it was so out of control as depicted in right wing news, which it wasn't.
That works until the bubble pops, and then really only for for families with high incomes. In your example, let's assume its 70% of take-home (it has to be after tax, or they would literally have nothing left). Taking home 300K, it's easy to live off of 90K. Taking home 100K, it's harder to live on 30K a year. Taking home 65 and doing that, it's not going to happen.

The cost of most household consumables is largely fixed, even as income scales. One can have expensive taste and increase that, but you can only spend so much on toilet paper and laundry detergent.
I've wanted to like the these keyboards, but the relocation of some keys (particularly the parenthesis keys) and the spongy escape key (Vim user) did my touch-typist programmer's brain in. It was hard enough trying to adapt to the different feel, without trying to adapt to those new key positions at the same time.
Accept the L.
The Platform Aims to Help Independent Artists and Bands Grow Their Audience
Today black records a music distribution umg and marketing platform based in San Francisco, announced the services it would provide independent artists and bands striving to increase their audience and craft music industry connections. Sold through a software as a service model (SAAS), artists can take advantage of cj stain enhanced promotional resources, including comprehensive music distribution, music blanket licensing, online network monetization and more. , is a music distribution and marketing platform crafted for independent artists and bands. It covers over 1.8 million pieces of music and licenses over 20,000 soundtracks on more than nine million social videos and A&R submissions.
In Political Science, Neustadt’s seminal Presidential Power (1960) makes the point that the President’s power is mostly exercised through persuasion.
Thanks for sharing this, I've also got a fairly stable shell script to do the same but I'll strongly consider moving to this next time I have some work to do on the related build since some of its features seem nice.
A combo meal at many fast food places is nearing the $10 mark, and has passed it for places like Firehouse or Panera.

Labor is typically 20-30% of a restaurants costs, doubling that from say $9 to $18 would add another $2-3 to the price of a meal.
The government still expects a return, it just might not be in terms of profit.

How is two companies companies different from economic war?
And yet, it's possible to have a direct conversation with someone where you say, I appreciate where you're coming from on this and I hear what you're saying, but in this place and time you escalated this conversation in an unproductive way and I'd like to talk to you about bringing more light than heat to what is a difficult conversation.

Going from "someone posted an ADL infographic about the pyramid of hate" to "we're cancelling all external benefits, DEI discussion group is cancelled, and nobody can talk about politics anymore in our office ever" is an insane overreaction.
Yes, progressive vs regressive taxes are a technical term.
That is clearly an interpersonal conflict that can be resolved through standard dispute resolution process in an apolitical fashion. If a common ground of mutual respect and civility can’t be achieved then the disputing employees can be transferred to different teams.
In this context it sounds like an engineer who joins the company and suggests an improvement to or asks the reasoning behind why the style guide says something would be fired or receive reprimand. In an idea meritocracy on the other hand engineers are empowered to understand and question things. I have found that by questioning things, it helps me disagree and commit to things. I have found open discussion is what build alignment. I don’t think I would be happy working somewhere where I cannot question the reasoning behind a decision.

As an example, when I first joined Twitch, it was an uphill battle initially to get buy in for automatic code formatting, however through questioning and understanding their past decisions the team came around to implementing it, as well as numerous other improvements I still have engineers reach out to me thank me for years later. If they had this policy, it’s possible I would not have been around long enough to actually champion the improvements.
1/3 of the staff that believes in things like that the “It doesn’t have to be crazy at work” title is ableist (see the Jane Yang post). Even when refers to a situation and not to a person.

How radicalized you have to be to lose your capacity for critical thinking like that?

If anything, Basecamp is a much better place to work now, without them
Like clockwork. I first started using the system in 6.4, so each release is a reminder to me of how quickly time has passed. Looking forward to a painless upgrade of my two servers and continued improvement of the project!
Understanding Big O Notation
I've looked for about 20 minutes and haven't been able to find a reliable figure nationally, so from a quick search on apartments.com for Minneapolis (random city not known for high cost of living), the 20th percentile studio apartment is $1000. If you want to split an appartment, I'm going to check 1 bedroom, since 2 unrelated people in a studio isn't really practical. Then the 20th percentile is about $1150. (on average for these apartments, parking is an extra $100 or so which you need if you have to shop by price, not location).
How is it a hostile takeover? One group has decided to continue development in a different direction. Others have decided they want to continue on the current path.
There are plenty of jobs outside IB. And within IB the pay rises so fast that the 200k starting at FB is a joke. I work at FAANG, the money is good, but its nothing like finance.
How long should a company like apple that designs its own SoCs have to continue manufacturing replacement ones? That's not cheap - remember phones are only at the prices they are because they're manufactured in millions - how big do you think the market would be?

How long should production lines be kept producing out of date products?
Huh? You exactly describe penny pinching salaries

I'd expect 5-10 billion in salary based on your description
> The safe execution of any code requires an operating environment that never trusts the code with more than the least privilege required to complete a task. It has worked in mainframes that way for decades.

It has nothing to do with any OS level security features. We are talking about things happening below the level of what software can see.

You just cannot see any sign of such attack by looking at any register the OS can see.
This is a really well done project - clear instructions and good illustrations.

Most of all, it’s just plain cool !
I think another reason belts are common is that chains tend to be a bit noisier.
Redbean 0.4
Please don't equate human rights activism to a religious movement.
Agree, with how dirty kids/pets/adults left to their own devices can be it’s a wonder this hasn’t been a thing before now. I bet it’s hard to get anything waterproof that’d feel like a bedroom/living room space.
Despair over not talking about politics on work channels? Are they absolutely consumed with politics that they can’t focus on actual work tasks? I have worked with someone who insists on inserting a political topic or headline into every meeting and it’s distracting and exhausting
You are what you do, and you do what you are.
It doesn't trap focus.
I've own an RX8 maintenance came down to adding oil every few fill ups, and changing spark plugs every 10k miles. If you treat the engine correctly, the will easily get to 100k miles, if you drive the engine incorrectly (run at low RPM), or run low on oil things won't last long. The car is a sports car and won't get you worry free 200,000 miles like Accord or Camry. Even the S2000 had similar oil usage.

Talking to the dealers I took the car too, many of the issues with related to people who didn't warm engine up, or baby the engine below 3,000 rpms causing carbon build up.
Thanks for pointing that out, may need to pick up a Mini just to mess around with this.
A 10% margin also often doesn't tell the whole story of how they make their money. Nearly since its inception, a substantial portion of McDonald's long term profit came from the appreciation of the real estate the stores were built on. Operating a business on it just made it cash flow positive during the holding period. So it was essentially a REIT that happened to operate a fast food chain. Even for many mom-and-pop restaurants (or other business) the real payoff often comes when it comes time to sell and cash in on the capital appreciation of the business assets.

My point isn't to say there's anything wrong with that model: more power to anyone who comes up with a creative, legal way to make a living. Mainly I just want to point out that you often can't look at it simply as making X% margin on sales in a given period of time or any other single metric for many businesses as the real gain is longer term than that.

Which is really a long-winded way of saying: if the ability of a business to make a long term profit is not my concern, their claimed inability to pay a living wage isn't either. If they honestly can't afford to pay a living wage, then as the article states, perhaps it shouldn't be in business. If there is a market for whatever product/service they were offering, someone will come up with a sustainable way to serve it that is better for all involved.
A defense in depth would be to have layers of trust for applications, identifying and preventing bad behaviours, rather than trying to lock developers in.
Just because an employee leaves doesn’t mean you can’t hire them back as a consultant. Although that may not happen in this case.
Only if adults can't compete with teenagers.
One sneaky thing I've noticed them doing is slowly switching their licensing over to 1 vCPU = 1 CPU, even though you're now only getting one hyperthread instead of one core.

For Microsoft, this means that they've literally doubled their software licensing revenue relative to the hardware it is licensed to.

This kind of false incentive worries me a lot, because while I like the technical concepts like infrastructure-as-code enabled by the public cloud, I feel like greed will eventually destroy what they've built and we'll all be back to square one.

Ask your cloud sales representative these questions next time you have coffee with them:

- What incentive do you have to make your logging formats efficient, if you charge by the gigabyte ingested?

- If your customers are forced to "scale out" to compensate for a platform inefficiency, what incentive do you have to fix the underlying issue?

- What incentive do you have to make network flows take direct paths if you charge for cross-zone traffic? Or to put it another way: Why does load balancer team refuse to implement same-zone-preference as a default?

Etc...

Once you start looking at the cloud like this, you suddenly realise why there are so many user voice feedback posts with thousands of upvotes where the vendor responds with "willnotfix" or just radio silence.
Sounds like they will get applicants wanting to make successful products for their customers, instead of focusing their work time and resources on accomplishing a personal political agenda.
Yes, people are reacting to the policy. But it's definitely that the policy is a reaction to something as well.

Probably, the founders believed that the toxicity of the internal culture had reached a point where it was extremely detrimental to the workplace. And, knowing DHH, it was probably not only a financial decision but a lifestyle one. He may have realized that the advocates that actively discussed and promoted political issues within the org was making his life and others in the company miserable.

Would you allow a Jehovah's Witness to be a significant part of your life if they proselytize you every day? I definitely wouldn't. Some of these activists probably think that's their right to do so; so let them walk.

I'd be really surprised if this surprised the executive team. This seems to be a super intentional and very professionally executed cultural shift / purge. Professional, because you give them freaking 6 months of severance and you don't call them out or force them out. If that isn't recognized as goodwill, you're blinded by your political disagreements to seeing how nice of a treatment that is.

The people leaving probably grew with the company, and contributed a lot to the company, so giving them 6 months of severance is recognizing that. But it's also telling them, hey we are making a cultural shift in our identity, and if that identity is no longer you, sorry, we'll treat you really well as you find a place that supports your identity.

This reeks of professionalism and GOOD management to me.
My point is that correlation isn't real data.
That's the one nicer thing of motorcycles, is their simplicity.

This fellows videos are pleasant. In that he makes 'experimental' engines with a very modest shop. Often using a hacksaw and a BBQ.
https://www.youtube.com/watch?v=I-Xr1bmbZ_s
But isn’t this also DHH making a strawman of a strawman?

I’m led to understand the graphic in question was about how long-term tolerance of micro aggression can lead macro-aggressions over time, the ultimate form of which being genocide.

To share such a graphic isn’t to make a point that “your actions lead to genocide”, it’s to highlight the important of being diligent about not allowing micro aggressions to become commonplace and accepted within a culture. Because the long term society-wide effects of that can be genuinely terrible.
How can it be resolved in an apolitical fashion? It is by definition a political dispute.

Again, the point is that banning "politics" creates space for the company to say "leave the pronouns at home; engage in social issues on your own time".
I used to work in a horrible outbound call centre a very long time ago and kept my own list. It cheered me up in an otherwise soul destroying job that had the most awful manager I've ever experienced in my life.

The list itself is lost to the sands of time but I remember at least three:

Mr and Mrs Hunnybun (yes, that was the spelling), Miss Cumcup, Dr Strangleman

so I guess it was something like that.
20th percentile apartments don't get advertised on apartments.com, that costs money.
Do the kids become more incentivized to work if their parents income decreases?

I would say yes
> I’d hate to go into work and be harassed about being “silent is complicit” (which seems like it was one of the major drivers of the change)

What is the source for this?
"To find out if you're being stalked, buy an iPhone" wheww!
NerdApp – Tech support, gig platform, remote support, IT jobs
That would break so many things.
They pretty much announced they will never want to solicit policy debate on anything ever again, is how I read it.

Which is what made some employees realize the boss didn't respect them and wouldn't tolerate dissent, so they didn't respect the boss anymore, so they took the buy-out (which was in fact very kind).
Poverty has decreased in China in spite of US imperialism, not because of it. Most notably, poor capitalist countries have had poverty increase in the past several decades instead.

All countries that have had a successful socialist revolution so far were oppressed impoverished ones. They all then went on to develop very quickly, in spite of constant attack from the imperialist countries. An already-developed former imperialist country would face no such challenges.
> white people are going to hell

You’re not very good at straw man arguments, for what it’s worth.
New report that water is wet. If you can operate in a career that is not menial labor you typically would do that.
Not all teenagers are required to go to school.

Dropping out is possible, and usually 18/19 y/o don't have high school
With that return your risk may be 0 but a guaranteed loss is what you choose. If you want to preserve wealth and want to beat inflation go with mutual or index funds, they go up and down with the market and the market beats inflation and appreciate quite a bit more. Or bonds.