skysight-inc/HackerNews huggingface dataset:
But they could do nothing about it because of the arms length principle, putting things under government control shortens the chain of responsibility.

This measure might be too little to really matter but the fact is that when you don't have an market(and for passenger rail you kind of don't) outsourcing operations to for-profit organisations provide nothing but a venue to funnel cash out of the system to private shareholders.

When there is an functioning market that is not tied to an government backed/guaranteed service it does make sense to subcontract work to private enterprise, but unless the government contracts represent a relatively minor portion of the subcontractors revenue and the subcontractor don't have more then say 20% market share, there is no functioning market, so all you end up with is an mercantilist structure of public risk and private profits if you still insist on pushing the task to private enterprise.
They are a “boutique” kind-of company. A boutique should excel in niche products (and they did until Hey). Hey was announced as a product to disrupt email and fix the email management problem. That’s not a niche product but a general purpose solution. What they announced (and they did it GREAT) did not match with the product features IMHO.
How many boot camp web devs are currently being churned out who don't know the first thing about the 1000 ways their service could be attacked?
To put that 60k people number in perspective, FBI has 35k employees including administrative support staff.
If there are no changes to permissions, I'm pretty okay with this.

I know there can be hidden changes in privacy and I don't treat my like in 2021 with an expectation of privacy.

My bigger deal is that I'd like deterministic builds on fdroid.

If that was easier to do, by using a standard environment (VM?) my trust would be through the roof.

Also shout out to fdroid, bromite, and new pipe. Living the high life.
> It’s Easy to Switch

Why would you list this along with the negative points? It implies that vendor lock-in is a reason not to switch providers. Surely this should be the expected norm and not something to call-out as a reason for leaving a service - doing so encourages product builders to avoid such an important facility.
I saw a video about this a few months ago, might be useful for those that prefer an audio/visual description: https://youtu.be/suIAo0EYwOE
I believe this. Most of the "security" people i run into don't know jack. Incompetence is ripe and this sector will only grow.

Last external IT audit I had to explain to the auditors what a password manager was. They'd never heard of it.
Shameless plug: I recently built this.

https://github.com/three-consulting/ohut

It is SIMPLE for sure, essentially just an app for syncing files in real time between a bunch of users. If this could work for you, great! If not, I'd be glad to hear your feedback.
Or you can just use Qubes OS.
Shader-Based Antialiased, Dashed, Stroked Polylines (2013)
Shouldn't that be reason enough to get rid of it for something that's not trying to become worthless and rob you of your purchasing power?

It's pushing endless/pointless consumerism. People will spend money on things they need, they will also spend money on things they want, but this is pushing them to spend money for the sake of spending it.
>> Using it assumes the execution environment keeps all file descriptor values within FD_SETSIZE.
>
>That’s what the rlimit is for. If you call a program that uses select with 1025 open FD you get what you deserve.

I thought that FD_SETSIZE was a compile-time constant that limited what values for file descriptors could be passed to select.

IOW, it doesn't matter if you have only two files open; if one of them has an fd with a value of 1026, then select will do the wrong thing.
As a web developer, I might have billed 3x more hours thanks to IE 6. :P

I hated it but it made me a lot of money for many years, mostly thanks to governments requiring IE 6 support. LOL
They should have sold a suitcase for moving it around. Would’ve made it the first portable non-portable desktop.
That's debatable

League of Legends is a premier e-sport more so because of marketing than game design or engineering. In fact, their game client remains worse than dota 2's in every way.
It's actually pretty hard to take them seriously considering their client is still such a buggy mess after about 10 years.

While the viewership of casual Valorant is greater than CS-GO, it's also not "rapidly rising" - https://sullygnome.com/game/Valorant/365/summary

And the esport viewership of CS-GO is much larger compared to Valorant.

And while Teamfight Tactics was an success, Legends of Runeterra wasn't. So they are 3/4... which is still pretty good - but can also be explained by good marketing and IP handling. Similar to the new Activision-Blizzard.
Gmail's basic HTML view is a blessing.
I have explained my “boutique” point of view in a different answer. Hey should be the product to leave the “boutique” tag and it is not working.
Isn't it better to assume every major company is than to blindly assume good actors?

The only ones I company I can't imagine is doing this is Google. They have an Awful reputation. Their Fruit counterpart, Nintendo, Samsung, and more are suspiciously positive at anti consumer news.
Maybe that was his intention: Raising awareness for the energy-consumption of the bitcoin-network by pulling a PR-stunt like this.
Seems like the solution being offered up in the article is more bootcamp.

> An eight-week online course could help someone land an entry-level job as a "pen tester," a network security engineer or an incident response analyst, Moore said. Those jobs pay between $60,000 to $90,000 a year, she added
And thereby banging rocks against each other into eternity.

No sparks...
You mentioned the fast UI, but I've found the actual sending+delivery to be very quick as well. I use Fastmail for a variety of alerts and support communications and it's just outstanding.
Rethinking “Batch” in BatchNorm
To me this sounds bizarre, like trying to greet every person you pass by in a city. I see dozens, if not hundreds of people in the office every day, if I said hi to everyone it would be really strange.
That's a very niche app. Niche in the sense of "how many people are going to pay $180 a year for an email client?"[0] $99 a year for Hey.com is steep for most of the population. I honestly can't imagine someone paying double that for something most people get for free.

[0] It does a lot more than email, and for that reason may be worth $180 a year, but you present it as an alternative for email.
While this is probably true for boot camp web devs, it is also a very real problem for recent college grads who learn about fancy algorithms in their CS degrees, but have no idea what angles of attack exist.
> In the end of the day it will be Apple disrupting x86 on servers.

Apple made it happen on the client, but Amazon is making it happen on the server. The people who want to run their own DCs or hardware will end up part of the niche left on x86. I don't see Apple doing anything in the server space beyond providing minis like they do now.
> which wasn't even the case, they just padded the schedule

Well, if I'm a company using rail for freight or a worker depending on the rail to get to work, it already is a massive improvement if I can at least rely on the train being where it should be at the announced time. Improving the schedule for faster travel or shorter intervals is another thing, but predictability alone makes my life easier.
I'm guessing in America the word "Chinese" will become a swear word soon.
Automatic security updates, yes. Automatic feature updates, no.
>the status of the Geneva Conventions—were a soldier operating under false identity to be captured by an enemy

This is not too problematic. Geneva convention and Hauge regulations are clear. They don't get the protection of Geneva conventions like troops normally are. They are spies or saboteurs.

In Russia KGB and now FSB have always been a military service. Captured KGB/FSB officers (in civilian clothing) are not treated as captured military.
He posted again later clarifying which systems and configuration were vulnerable:

https://twitter.com/aionescu/status/1393955460517040129

> * AMD Zen "Summit Ridge" Stepping B1. That is Ryzen's 1xxx series.

> * AMD Zen2 "Matisse", "XT" series only. That is Ryzen's 3xxx series.

Other info at:

https://twitter.com/aionescu/status/1394039410300051456
https://twitter.com/aionescu/status/1394359314102427650
https://twitter.com/aionescu/status/1394359317038452738

Regardless, the vulnerability is in the driver, not the CPU / microcode. Also in the WHQL process that signed such a 'fake' driver. Until the signature is revoked, it might be possible for an attacker to manually install the signed driver on other system configurations too.
Because they can't read and are missing a module.
The US government's official numbers for 2019 [1] only show 131k jobs for "information security analysts" and they project 171k by 2029. The total for computer, network and database administrators is only around 500k.

[1] https://www.bls.gov/emp/tables/emp-by-detailed-occupation.ht...
From the screenshots they post it looks like they're missing a powershell module that's not built-in.

I tried to install the NtObjectManager module, but Bitdefender blocked it as Gen:Variant.Ursu.903319
The implication is that many companies have the problems which Riot are notorious for. They are just better at hiding them from public view.
> That would open you up to being fingerprinted by the server, right?

I actually don't think it makes this worse, if the client is coded carefully. At least, it's not clearly worse.

SSH public key authentication has a back-and-forth, the client proposes public keys for which it claims it knows the corresponding private key, and the server can choose to say "Yeah, that'll work, prove you know that one".

Filippo's fingerprinting trick (whoami.filippo.io) takes all the GitHub public keys and considers whether your SSH client claimed it can authenticate as them. But I believe it doesn't actually test that your claim was true, so it would actually be fooled if your client says it can authenticate as somebody else...

So this would be a bit different from that, but again a carefully configured client just won't admit to knowing how to do Security Key authentication to talk to some server it has never heard of, and the server needs to make a reasonable stab at guessing your ID, I think OpenSSH isn't going to allow a remote server to say "Here are 100MB of FIDO IDs, are any of these yours?"

The lack of scope restriction isn't ideal, but it feels like a parallel to the way TOFU was more or less enough for SSH in practice whereas the Web really needed the Web PKI. Normal people can probably list the SSH servers they connect to, but you connect to huge numbers of HTTPS servers in normal web use.
As far as I've gleamed from the various resignation posts from volunteer freenode staff there's no official agreement between freenode LTD and the other server donors. All the donors have various more-or-less verbal agreements with various of the freenode staff. The assumption seems to be that these donors will move with the staff to libera.chat, though personally I'd expect some donors to go one way and others the other.

All in all it's a rather large mess where I'd trust the word of the volunteer staff over the word of Andrew Lee and friends.
From my perspective, they've got a perception problem to fix. I was keenly interested in cybersecurity for a while (enjoy playing wargames and CTFs, still considering going for my OSCP just for fun), but following people in the industry for a while, I got the impression you have (at least) three pitfalls to look out for:

1. Working in a corporation, where the job is just compliance checklist whack-a-mole.

2. Working in government, which can be good (Mudge has done good work there) but the common policy I've seen elsewhere seems to be to maintain an arsenal of open exploits, thus making everyone in the world _less_ safe in the name of... security...?

3. Working in contract pentesting... for clients who really only care about compliance checklist whack-a-mole.

There is a fourth option, which is research, like what Christopher Domas does, but opportunities for that which don't end up falling into the government trap seem few and far between (and even fewer if you've developed your skills outside an MS/PhD program).

That said, I am not an industry insider. This is only my impression as someone who was once interested in the field and decided to stick with software engineering after getting a bad taste from what I saw from the industry.
My guess is that they're trying to stop funding to go into the Hamas so yeah...
PDD is exclusively caters to mainland group buying. It's valuation is quite big though 160B USD
What I've read is that one has to distribute the portfolio across a risk spectrum. A big % to very low risk / low yield instruments (say, bonds), a medium % to blue chip stocks, a smaller % to more risky stocks, etc.

So, following that logic with cypto or lottery tickets, a very small % could be put in anything that has a high risk high reward.

When you say bother you mean effort but in theory you could outsource your potfolio so there's not more work by following one strategy or another.

Thus... are lottery tickets a good thing to have in the portfolio?

I'm quite curious if there is an answer to this from a statistics or investing point of view.
I'm sorry to hear about your accident! The Matias Half Keyboard https://matias.ca/halfkeyboard/ provides a one-handed keyboard that works very similarly to a conventional two-handed keyboard. It's a system that ought to be possible to replicate on a conventional board using AutoHotKey or on a custom-built board. I've never yet tried one myself though.
What do you mean with "everyday businesses"? I would not say that graph databases are niche...
The match is different for everyone, as is timeframe. If at 20 you put in 10000 per year for 10 years and nothing at 65 you will have more than someone who starting at 30 put in 10000 every year. However in the real world you start out after college with less income, student loans, and needing to get a place to live so few do this. That doesn't even get into inflation which is also a factor.
The older folks were not educated (less than 10% with college degree). The young people are much more (close to 30%). Besides, close to 40% pop lives in rural.
I do admire how Apple did the M1 release. There was a lot of publicity with developers, good performance and solid roll-out with availability in everything, and it seems to be picking up steam. It seems obvious to everyone they are fully committed and that if you spend the time getting your software ready for it, then you will have a market. I'm not even interested in the Apple ecosystem and I am familiar with the major developments.
> Switched to Fastmail in October of last year in an attempt to de-googlify myself.

What about @icloud.com? I moved to Apple from GMail.
Yeah but fds are guaranteed to be opened lowest available on first, so thats ok, you cant get fd=1026 without having 1026 open.

The Linux syscall does not have a fixed FD_SETSIZE so glibc could increase the size.
The government has multiple tools in its arsenal.

It can tax. It can regulate. It can grant or deny rights. It can criminalise.

Taxation will reduce overall amounts of advertising. Taxes raise costs. Quantities of price-elastic goods or activities decrease if taxed. Ergo: an advertising tax results in less advertising.

Individually targeted advertising is regulable through both practice and rights. Government can require or restrict technology. Government can give rights (of privacy, of control over personal information), or remove them (the ability of third parties to exchange, sell, or otherwise utilise personal information other than at the express direction of the subject of that information, say).

Government can criminalise violations.

Government can make claims for redress in the case of business disputes over personal information or targeted advertising null and void. This would make any substantial business activity predicated on these activities far more risky: contracts would have no legal standing, the contract itself would be evidence of criminal activity, and any significant retention or exchange of personal information directly or by derivative would be both outside any legal protection and criminal.
> news organizations have generally terrible performance and deserve to be punished for it in search rankings.

Most news on the internet is plagiarized off of a few original sources at best and then redistributed on various sites and portals.

This is a devastating problem for a democratic society. For example, local reporting in the United States has been eroded to the extreme. When a society does not have a commitment to factuality, people become more susceptible to fake news (propaganda), conspiracy theories (such as QAnon), and tend to become more uneducated. Yes, it is true, education can be very easily undone, including in highly intelligent, well-educated individuals.

Facts do not come naturally, nor do they come out of “progress”, such as technological progress. Factuality requires hard work and a lot of money, and it requires reporters on the ground, including in foreign places, such as in the case of foreign correspondents. Unfortunately, the use of foreign correspondents for American news services, physically on the ground in foreign lands, has almost been completely eliminated.

The lack of foreign correspondents means that when a crisis abroad occurs, Americans often have to fill in the gaps and infer what is going on. This allows bad actors to take control.

Of course people do not like to hear the facts. They are hard to listen to and believe in, but they are healthy, especially for a democratic and free society. Of course they are healthy for you as an individual.

The Financial Times has excellent reporting with foreign correspondents located in various countries across the world. The Financial Times also has great tech reporting. In the 8 years that I have been a subscriber, I have only found myself disappointed while reading one single article reporting on tech. Also, of course, I subscribe to local newspapers too.
> There are no tags, or labels, no other folders or any other buckets of organization.

There are labels: https://imgur.com/a/BPPrvoG
The quote you're referring to is, I believe, by Lee Atwater:

> It has become, for liberals and leftists enraged by the way Republicans never suffer the consequences for turning electoral politics into a cesspool, a kind of smoking gun. The late, legendarily brutal campaign consultant Lee Atwater explains how Republicans can win the vote of racists without sounding racist themselves:

> You start out in 1954 by saying, “Nigger, nigger, nigger.” By 1968 you can’t say “nigger”—that hurts you, backfires. So you say stuff like, uh, forced busing, states’ rights, and all that stuff, and you’re getting so abstract. Now, you’re talking about cutting taxes, and all these things you’re talking about are totally economic things and a byproduct of them is, blacks get hurt worse than whites.… “We want to cut this,” is much more abstract than even the busing thing, uh, and a hell of a lot more abstract than “Nigger, nigger.”

https://www.thenation.com/article/archive/exclusive-lee-atwa...
Show HN: Write UI tests in seconds, without typing a single line of code
The closest thing to security I learned in university was RSA and why we didn't need to worry unless quantum computing succeeded.
You made 2 great points. There's also a rumor Apple had to do things to hide the M1 from Intel. Could the added TB been a part of that? Hard to know.

I'm not a TB hater (more indifference), and I still think it's going away :)
What do you mean by "development state"? Open editor tabs? Don't most IDEs reopen your last workspace?
This isn't an excuse.

e.g. Imagine the argument was "Disposing of chemicals safely is a no-go at scale"

Businesses don't get to ignore negative externalities just because it's unprofitable
https://twitter.com/notionhq/status/1257455482031276033?lang...
My question was perhaps unclear. I'm fully aware other people have a different view, I haven't received yet the answer to "what exactly was wrong in what DHH did" - and not just in the 'maybe he could have handled this better' way, but in the 'so wrong that I want to avoid this company in the future' way.
The article doesn't mention they're software engineering interns, and she made less than some other jobs too: "I still made less than any of the executive assistants, or the receptionist. I was, in fact, the lowest-paid person in the building including the interns"

The way I read it, it implies that the receptionist got paid more than than the interns. Either way, she got paid less even than than receptionist, which is generally not exactly a high-paid job.

It's also not clear to me what exactly her job was by the way?

I don't know how things are in the US, but I've never seen interns being paid more than a token amount in Europe. You generally take on interns as a public service and to spot potential talent to hire, not because they're good/productive programmers. A good internship requires quite a lot of guidance from a senior developer.
>does not create incentives to improve efficiency and service.

I'm going to go out on a limb here, and guess you've never used the for-profit rail services of the UK then.

(I know this is quite snarky, but to elaborate, there is no incentive for the TOCs, because a operating a stretch of railway line doesn't have any competition. You don't need to be efficient or give good service because customers do not have an alternative choice of train they can use.)
Fair enough, but your "first I've heard of..." comment implied (to my mind) that you considered yourself aware enough of IRCs history that you not having heard of previous matters is significant.
Appreciated. HN is one of the few places this can be discussed without descent into abuse.
Not everyone sees their company as their group. Companies like to talk about how they treat their employees like family, but it's just a way to manipulate them into doing extra work. Once you see it for what it is, it's easy to start thinking of jobs as something you just do for a paycheck, not something you do because you care about what happens to the company.
This is me.

There's nothing more boring than those positions. (Or to me, unethical than working for the US government)

I'd much rather create something that benefits the world.

Maybe the partial solution is bug bounties? As much as I'd hate those positions, I actively poke around for holes in websites for fun. I love when I have to do business with a small poorly run website, seems you can always find something they don't want you to have access too. Most recently, no right click to save images, but chrome developer tools got me the high res version anyway!
I am sorry what else is Facebook???
Why the FBI can’t get your browsing history from Apple iCloud
Uspto issues patent number 11M
Quite a possibility he wants to Pivot to biotech industry.
https://twitter.com/ruima/status/1395213832411254793

Interestingly, PDD's founder Colin Huang also recently resign from PDD and want to research life science.
Nice podcast. Definitely made me want to check out APL. Again. (Disclaimer: I go through this phase every couple of years.)
This is a great product critique. I went through a similar thing with HEY — subscribed in curiosity (and awe of Jason's product demo skills, also the Twitter hype in part). I cancelled my subscription after 2 months because of similar reasons mentioned in this post and went back to Gmail.