skysight-inc/HackerNews huggingface dataset:
> Why would they need to leave the "boutique" tag?

I don’t know why. But the purpose of the marketing campaign of Hey sent that message.

I’m a big fan of non VC backed or boutique like companies (I have built and sold some of them), and it’s dangerous to send the wrong message to the market. I think that is what happened with Hey.
> Witness SELinux, which most people disable because the rules (invariably written by people other than the authors of the programs) are too brittle and prone to breaking functionality.

This is a recurring criticism from BSD fans, but unfortunately I think it mostly reminds us that humans are lazy and isn't a reflection of an actual problem. This machine, which does a bunch of stuff, turns out to have had SELinux in enforcing mode for many years, I wasn't sure actually so I had to go check when I began this rant, but yup, it was enabled when I installed whatever Fedora was current when my last PC's power supply gave up, maybe 2015 or so? I think if you could just disable pledge, you'd see "fixes" that do that too, for the same reason.

It's true that "disable SELinux" is a common "fix" proposed for problems, but it is also true that "disable certificate validation" is a common "fix" (even today people will copy-paste a "disable all validation" configuration into their app in hopes it'll solve some unrelated issue), and I'm quite sure if I poke around in Rust forums I'll find the same sort of person recommending just sticking everything inside an Unsafe block to "fix" a problem too... Just in case it feels like I'm sticking the boot into our industry here, this happens even in safety critical environments, it's just that they have more fail-safes than we do, so here's a story about a non-IT lazy "fix":

Railway signaller signs on for his night shift, the mechanical box he works in has had some work done that day, but is signed off as OK. Some time later that evening, he gets a call, driver is sat at a Danger signal for some time. He tries to release the signal to Clear, but it won't release. -Sigh- he figures those maintenance idiots have just fouled up the interlocks, but the rulebook is clear about how to override this, so he gives a rote speech, something along the lines of "Pass this signal at caution, prepared to stop at any obstruction, and obey all further signals". Next signal, the same happens. Same drill, "Pass this signal at caution... blah blah blah". Next signal the same. Wow, those clowns working on the box have really messed it up. And then two drivers call him. Because they are now face-to-face.

There had been a physical points failure (something actually broke, wore out, etc.), and the reason all those signals wouldn't release is that the interlock makes that release conditional on the "Points locked" status ahead, which if the signaller had looked was now reading "Failed". But he didn't look, because humans are lazy, and so instead of passing harmlessly on the opposite track the train being "cautioned through" was actually sent towards its sister instead. Fortunately the "fail safe" instruction to proceed only at caution averted catastrophe by giving the driver enough time to brake once he realised the problem.
Google customer support is actually Hacker News. People post their problems here so that hopefully some Google insider will see it and deal with it.
iServer with 64 cores and 128 GiB DDR4 for only $ 399,999.95

iServer with 64 cores and 256 GiB DDR4 for only $ 699,999.95
Ask HN: Favorite purchases of last two years?
I've abandoned all faith in reviews online. But the HN crew can give good advice and are extremely unlikely to shill garbage. Consumer Reports is great for finding which manufacturer/model to buy. But what product or service did you buy that you found really useful/entertaining?

I'll start: I caved and bought a robovac. Wow, unlike many techno-gadgets, this one really delivers. Real utility, not just taking up space. Low maintenance, runs while I sleep, and the floor is just cleaner.
Webtool – Most relevant and flexible code editor for web designers
It is the same people who worked for the franchises working under government control - it is the senior management who go but the actual doers are the same.
They were already expensive, but this year they spiked further. There is also a very large price difference between Alpha/Beta/Unlimited/Revised.
You fools AMP just evolved in to Page Experience wake the fuck up
Divinity: Original Sin 2 – Definitive Edition; Released for iPad and iPad Pro
Page Experience is the new AMP
It's an inevitable part of the way IT Audit is structured. Standards are necessarily abstract from specific systems (so don't always apply well) and updating standards is a slow process.

The auditors themselves are often tasked with reviewing a massively disparate group of systems, so there's no way they could be come subject matter experts in each one.

So the result is a checklist approach, especially as most compliance tasks are pass/fail.
Yes, train fares are based on demand, same as plane and coach fares. Same as they are in Europe (The Paris-Dijon journey in a months time is between €31 and €71 depending on what time you choose)

For walk up fares, Edinburgh to Montrose is 100 miles each way, an "off peak" return (so any time after 0930) is £34 if you limit yourself to LNER trains or 17p/mile, or £41 return for a choice of LNER or Scotrail trains. If you want to travel before 0930 on whatever train turns up next, it's £48.60 or 24p/mile.

What price do you think you should be paying? In 2019 Scotrail carried 1.8 billion passenger miles got £482.8m subsidy - a 27p per mile subsidy. The company made a £11m loss too.

How much should the tax payer subsidise your Edinburgh-Montrose journey? 35p/mile/ 45p/mile?
This right here.

For programs that do not require access to an X11 display, you could also work around the problem of not really trusting the code to not do anything that isn't in your best interest by using `sudo` (or `su` or `setpriv` or ...) to change to an unprivileged account.

Or by having the (non-script) executable file have the SUID bit set, and owned by an unprivileged account on the system.
Because after Ansible 2.9 they made a huge change in how module resolution works and put most of the modules in a separate repository to be versioned independently.
We have a deal if I define how much a lot of money is
GTA 5 Player Beats Game Without Taking Any Damage
I worked my bum off for 10 years. Saw that it had no effect on my career prospects and then gave up. Wiser employees gave up way before then. I've not seen a single promotion out of development in nearly 20 years in the industry. It's a simple fact at least in the UK, that one does not progress out of software development. Senior/lead developer is easy but after that there is no progression. Development manager roles are hard to come by and require growing into the role. Moving sideways into project manager or scrum master roles is generally very difficult to engineer as well. The simple fact is that engineers are seen as line workers. Line workers are not managers and are not suited to the role.
Western Union and Iris Team Up to Offer Global Payroll Services
Nationalisation is not a panacea.

In France for instance, SNCF runs the non-TGV railway with inefficency and carelessness on a "it's our railway and we decide how you can use it" basis, and the regional governments are chomping at the bit to be able to award the contracts for subsided services to someone other than the state monopoly.
Also, if you are running a business, say a restaurant, please prefix your PDF (for example) downloads with the name of your establishment. "golden-chopstick-menu.pdf" is much better than "menu.pdf (1)"

Of course, filesystems are a quaint relic from the dinosaur age and a far more humane model would be an object soup with spatially-driven nomenclature. :-) Ahh, naming...
There’s been a massive push for people to enter jobs in cyber sec in the UK too. Our intelligence services offer pretty huge bursaries for university students on the condition they’ll go into security on graduation. Really seems like there’s an imbalance wrt supply and demand currently.
I guess they mean it's problematic for their soldiers. For the people capturing them, it makes things a lot easier as you write.
Having an incentive to make profit doesn’t create incentives to improve efficiency and service. A private companies incentives are the profits, and anything else is just in order to serve those.
Two reasons for me! The first is the moral one, which I would not necessarily prescribe to anyone here.

The other is just business: a third of the company left so far. Among those people are the individuals who built the trix editor, Action Mailbox, and Hey's k8s setup. I fully expect more bugs, and more time to resolve those bugs. Make no mistake, a third of a company leaving is not resizing or business as usual - this will have downstream effects on the product.
The timeframe for changes is so long that this has zero chances of affecting any politician's career
This seems like the most relevant anecdote in this thread. When I talk to friends about how they interview, it’s never about skills. Some say they’re not actually hiring, but they interview experts for free advice. If they are desperate, they hire for exact experience. I don’t know who out there is hiring new grads at giant salaries for Leetcode skills, but I think they’re mostly looking for impressionable followers.
Left leaning folks will generally not support shoplifting/theft, however many will often qualify with "oh, but at least it's a large corporation, it's not right but they will survive", which is what I think the parent was referring to.
A very profitable deal for a blind man
Durov criticises Apple for choosing profits over freedoms
For me, it's not the fact it exists that is shocking. It's the fact that it exists outside of any oversight and apparently without any consideration of US or foreign law.

I know the US has played fast and loose with the Geneva Conventions for a long time now. But the more the US flaunts internal laws and norms on war, the more likely aggressors are going to put them aside and we're back to the savagery of World War I -- except now we have deadlier conventional and biological/chemical weapons.
Late at night, if one of the regional trains is late to a local hub, the local trains wait for it to arrive so you're not stuck getting home.

In general though, I'm so used to the trains being on time, I start tutting if it's even a minute late
>No, they mean there is a greater lack of engineers compared to other occupations requiring similar levels of education and therefore we should put more effort into educating and importing engineers.

Importing engineers is just poaching engineers from other countries. It's the same thing.

Educating engineers is a matter of compensation. Given a high enough salary people will get the necessary degree. The only other thing you can do is cut education quality and just let more people pass.
Why would they when ads pay for it? Why would you not pay for premium if you don't want ads since you're consuming the video?
I'm convinced sales forecasters don't actually understand how software ecosystems work.

From a stack perspective, you can't really go it alone anymore. The total necessary software universe is too large to rebuild on a reasonable timescale, and too expensive to rebuild by oneself.

IBM is about the smallest scale that can do this -- and even they're leveraging decades of effort.
Why are you blindly upgrading? The only safe way to use Ansible in production or on a team is to pin the version everyone uses because even minor releases can break playbooks and change behavior.
this is pretty good comedy I recommend everyone to read and enjoy some good laughters
I can virtually guarantee that out of any 10 people that are buying these cards, 9.9 of them have never played an actual game. Hell, I remember only playing one or two games with the cards as a kid back in the late 90s, and then the rest of the time was flexing your collection/haggling with other kids for trades.
As a developer who used to work in cyber security that feeling is mutual on both sides. Unfortunately they are typically both right.
I think you could describe that as contested as well.
And perhaps just harder to decipher for us because it's a different flavor of bull then we are used to, and has been passed through a translation layer
I remember thinking circa 2009 that every company was going to eventually need a dedicated cyber security department or pay for equivalent services, and that investing in a portfolio of stocks that can provide software and services would be a windfall. I made a paper portfolio on Yahoo! Finance. Unfortunately it doesn't really track performance properly, but seems like I made a good call. I selected dedicated security vendors like Fortinet (+800%) as well as enterprise software vendors (MSFT +800%) and IT consultancy firms (Accenture +400%). I don't really have any convictions as strong in today's environment, although cyber security probably has a lot further to go.
There are a few bespoke consulting firms that actually try to improve their clients security beyond checklist whack-a-mole and automated scanning. Annoyingly bunch of charlatan firms pretend to do this, but just toss an intern with a scanner at the customer and/or double book their staff so they don’t have time to think beyond the basics. This lets them always underbid the firms that do honest work.

The problem is that its hard to measure if someone had deep thoughts about the security of a system vs checked a box as it can take years before you notice they did nothing (eg: hired another firm the next time that found a pile of issues).

Disclaimer: I work for one of the rare non-checklist/scanner firms.
I also question whether outsourcing is cheaper too. Once you add in all the overhead in managing the contracts and contractors, plus the profit for the companies, I struggle to see how this is a better deal for government (and by extension the taxpayer).
Back when I worked in an office the 3 people around me had them and I never heard anything. So sealed enough that whether they were listening to music or on a call I couldn’t hear anything above ambient office noise from approx 5ft away.
its called reality: where people exchange their assets (time,labour) for other assets (food, cars, houses) to benefit from comparative advantages in an almost free market.
IMO, one of the problems with things like the OSCP is that they don't really mirror how real pentesting works.

I've never heard of a pentest that's done as a 24 hour thing where someone is watching you through a webcam and you can't collaborate with people, and then the report is written up the next day. Also (last time I looked at it anyway) it quite a few topics that whilst interesting again don't mirror day-to-day pentesting, and restrictions on using things like Metasploit are just weird.
It's not high at all, people just vastly undervalue content while spending much more on coffee and drinks without thinking.

There are Youtube originals but you're mainly paying for the delivery of content. Premium comes with a few extra features on mobile too.

Also you can use picture-in-picture on iphones/ipad by using the website. Play a video in fullscreen, tap to view the controls, then tap the PIP icon.
I hope this decision leads to better value railway journeys for regular people.

I love taking the train places, for me when I’m going on holiday the journey is part of it, I find rail travel to be low stress and relaxing. The trip from St Pancras to Amsterdam (4hours) was very calm.

I hope that one outcome of this change is that other people rediscover leisure travel by rail.

That said the anorak in me will miss all the different liveries for each of the companies
epoll.
I'm completely lost with Linux sandboxing and security tools , AFAIK there is

- cgroups

- cgroupsV2

- namespaces

- AppArmor

- SELinux

- LSM

- seccomp

- seccomp-bpf

- eBPF (I know it's not a security thing per se, but it's a building block for sandboxes)

- and now landlock.

Could anyone here give me an ELI5 about which one does what? (also which one you're supposed to use together, and which are competitors to each others)

Or maybe give me some pointer to a good introduction to these?
The Case Against Bitcoin
The diameter of an atom is between 0.1 to 0.5 nanometers. Does it mean when the researchers build a 0.1nm scale we can't expect to have any more improvements in chip production?
How am I supposed to verify any of this? I'm not inclined to believe any news article on faith alone.
Why didn't you use Southern?

When are you talking about? There was a lot of investment in the (laughably named) Thameslink 2000 program, which was put in place to dig the route out of the mess that the nationalised rail network had left it in by the 90s, it started in 2009 and is still undergoing improvements
There's probably a point where insurance requires it.
I wonder if MS will remove Webview and ship Webview2 by default now.
I think what's interesting is that having access to a good development platform (the M1 mac) might enable projects like Docker, Node or Linux to get up to speed on ARM earlier. The dev experience is really much better on a local machine than working through SSH on a server.
Yes at the end of the day your main job is it to either educate people about always the same security issues,

Fixing the same security issues,

Or singing of on procedures.
> If Facebook delete a video the author is not being punished because the author has no claim on money they haven't earned yet. It's just the end of a business relationship.

By that token, if your government decides to deport you, you are not being punished because you have no claim on citizenship you haven't lived yet. It's just the end of a citizenship relationship.

Hopefully you can see how that argument isn't helpful or useful. Would it be any more true if the Government delegated citizenship management to a corporation? Or three?

In an online-only world, where speech (and such livelihood being contingent on access) is controlled by companies, and nation states have no requirement to provide a different mechanism, it could be reasonably argued that a company giving everyone else a platform but denying you a platform has free-speech consequences.

The fact that it isn't managed that way, and that the law doesn't currently see it that way, doesn't change whether we should change our thinking as society changes.
Show HN: I made a simple page that converts between date and MJD
App developers’ misconfiguration of third party services leave over 100M exposed
Me too.

And the fact that even with premium, PiP on iOS is still deliberately broken on web & in their app.
The pentesting industry has a big problem with being a good "market for lemons".

It's very hard for customers to differentiate the good and bad companies, without having their own internal expertise, and even then you need to go down the line of getting named testers and speaking to each one.

Another problem is with how many/most pentest companies report, which is by exception. There's no requirement to state all the tests they did, just the results, so it's hard to tell the difference between "we've got a good system and they didn't find much" and "they didn't do good work and missed things"
Science drill ship sets depth record off Japan
As someone coming from a country (Italy) with nationalised railway I always found the trains in the UK to be pretty great.

Sure, you have a few delays but it's eons better than what I had in my country. I never understood why people were complaining about trains in the UK.

Italy added a private offering some time ago, which I personally never tried, but my friends back home always praise them for working - unlike Trenitalia.

It's sad the government imposed lockdown killed another industry - but I certainly won't rejoice for this nationalisation.
Next you're going to tell me all the mobile free-to-play games are clearly the best games ever because they're "popular".

Popularity and quality have a very tentative relationship at the best of times. When differences in barriers to entry and network effects come in, then quality has to at most just clear a watermark.

So I'd say it's probably more likely "not bad enough to lose popularity" than it is "so popular because it's so high-quality"
thats not a given, especially for low skill paying jobs
It might be something similar as it is in software development.

At the end of the day it is a job.

But when you part of the 1% of the good people you have your team and more leaway and potentially get called for the more critical and more interesting things.
What you've written here is a common sense that apparently isn't that common in many establishments. I have a feeling it did help a lot that you weren't from the industry,so you could see through a lot of bs.
Everything is more expensive in the UK - salaries are higher too, compared to Europe.
The mistake is that companies want a certain quality standard for as low a price as possible, which means their salary expectations don't match their quality standards but they put out press releases telling everyone that it's not the case.
The article actually explains this, with different options

> For travel today, bought at the station, immediate departure, outside the peaks...

And

> If travelling today in the business peak hours...

It acknowledges that finance bros travelling from Manchester to London for a 9AM meeting and traveling back on the 1630 will pay more. That doesn't affect most people

The summary makes it quite clear.

The big picture is that Britain has the most commercially aggressive fares in Europe, with the highest fares designed to get maximum revenue from business travel, and some of the lowest fares designed to get more revenue by filling more seats.

Basically a tax on last minute business travelers to subsidise leisure travelers and commuters.
I don't think this is a complex narrative. It's the reality of development:

The simplest case is just to pick the most central square, and then you could probably improve that by picking a standard square according the rule of thirds. Those are the naive algorithms - this choice of alternative algorithm is deliberate and isn't as naive or simplistic as you're claiming.

The algorithm is only considered useful because it appears to do better than that, on whatever examples that the developers tried (i.e. there was a business case for using it), and against other possible code.

Including, likely, pictures of their own selves. That's certainly what I would test it on, until it vaguely worked.

What 'awful lot of assumptions' do you think I am making? I don't imagine we are in disagreement about this.
I think it's just that buying an architecture license can reveal future product plans. "Trade secret" doesn't imply tax fraud.
A totally unrelated service that you have to pay for ( and more expensive than rivals) is not a positive.