skysight-inc/HackerNews huggingface dataset:
> Modern society has come to rely so heavily on mobile apps that any phone manufacturer must ensure that such a healthy ecosystem exists as table stakes for anyone to buy their phones.

I don't think this is true. It may be an unfortunate end. I'm actually intending to move to a flip phone since...
> To me, asking you not to look at certain information is effectively the same as putting a password on it, then having you break it.

To me, they are not effectively the same at all. I see there being two different types of "authorization" at play. One is a mechanical authorization built into the computer systems (a password, for example). The other is a policy authorization, built into how I convey to you what is "allowed" on the system. They seem fundamentally different to me.

To 6 justices on the Supreme Court, they are not effectively the same thing either. To 3 justices, they are. The ambiguity of English is definitely annoying when we get into the nitty-gritty of laws!

> A more analogous example to the case at hand would be an employee at Google/Humana/Tinder selling your private details to a third party. This ruling means that such activity is perfectly legal, even if the terms of their employment state the opposite.

That's simply not what this ruling holds. That would be an accurate summary of this ruling if and only if the CFAA were the only law that exists in the United States Code!

"Legal" is also an ambiguous word in this context. Such an activity may break other laws, or it may not. I'm not familiar with what other criminal liability may attach to such behavior. But that activity almost certainly would be a civil violation. I would potentially be able to sue Google/Humana/Tinder (though there's a chance their privacy policy already gives them the option to sell my information). And Google/Humana/Tinder could certainly sue the rogue employee for damages caused by such a sale.

If Google/Humana/Tinder wanted to go further to protect themselves from bad-acting employees, they could use actual access controls (instead of mere policy) to restrict the ability for employees to access such data and only give access to employees who need such access. While it's certainly not the thing a Supreme Court ruling should hinge on, it's a nice added bonus that this gives a further incentive for companies to implement actual least access control rather than just making it a policy.
As a counter point, we had major issues with just paying for it via CircleCI. Excessive downtimes, a UI so slow it was nearly unusable, etc. We decided at the time we couldn't bet our company on it and we moved to Jenkins. We have far more control, build time and build costs are lower, uptime is better (All of this at the expense of initial dev time and maintenance of course). Generally we are a SaaS company, but paying for a solution just doesn't always work when you get larger and when there are limited options out there.
Middle class are the richer cohort of working class but they are still poor. We have a capitalist system. Unless you don’t have to trade time for money (ie are wealthy) you are poor. You might have a nice lifestyle but you have zero flexibility and options.
But this is all very consistent. Most people noticed many years ago that the people who most loudly claim to be fighting racism are always huge racists themselves. This is so common, and so obvious, the only reason it's attracting attention at all is because somewhat unusually it's Jews who are the target today, instead of white men. If the same quote about war had been made with white men instead of Jews nobody at Google would have cared. And arguably they don't care at all because the guy is not fired, just re-assigned, which tells you everything you need to know about what that company has become.

And it's not really surprising that the target are Jews. In America this doesn't seem to be the case so much, but in Europe when the left engage in racism, it's always against their own countryfolk or Jews. Diversity programs, however they started, long ago became a left wing movement.

Frankly it's a lot more shocking when someone working in diversity does not turn out to be racist or sexist. Those are very rare people indeed. Oddly, I vaguely recalled the Google head of diversity making some sensible comments some years ago, but I don't recognize this name. It seems he's actually just "a" head of diversity, not "the" head.
This is the opposite of what I understand: anode positive, cathode negative.

Google (and multiple other sources) confirm my understanding:

an·ode /ˈanōd/ the positively charged electrode by which the electrons leave a device.
cath·ode /ˈkaTHˌōd/ the negatively charged electrode by which electrons enter an electrical device.
Show HN: Rescuezilla v2.2 (disk cloning and imaging tool)
> At first child pipelines couldn't access artifacts from the parent job

Why would you use the tool like this? Make jobs / blocks that generate artifacts, and then chain them together into a workflow so there isn't hierarchical issues.

Now, maybe I am working in a simplistic world, but: the only time I have parent / child relationships is when a repo or service is built and another pipeline is invoked to run integration tests or deployments. What situations have lead you to needing to pass artifacts between pipelines and not job stages?

> When a job you "needs" doesn't exist, instead of having a sane behavior ... the pipeline errors

You and I may work in very different worlds, but I personally would be quite offended if a dependency graph workflow executor saw a node with an explicitly specified dependency missing and proceeded to NOT error.
Did you read the whole blog post? Right after that paragraph he talks about the dichotomy between his inner emotional struggle and his explicit thoughts.

> More importantly, it helped me identify the boundary between my intellect and my emotions. Like most white people who are questioned, I am quick to say, “I don’t have problems with homosexuals, one of my best friends is a lesbian.” For me that is sincerely true. I have managed, however, to reconcile the differences of my mind and my heart to maintain what I think is and hope will continue to be a close personal friendship. Indeed, it is through the lasting nature of that friendship that my emotional core is changing. I changed my mind a long time ago.
Correct. I don't think anyone is claiming that NFTs solve the problem that someone could torture you until you transfer ownership to them.
CSS Text Shadow Effects
This is why I'm optimistic about WebAssembly, beyond time and investment, what prohibits it from achieve performance parity with native?
Shorter dwell time is like faster table turnover in a restaurant. More customers will be better, financially, than fewer who spend slightly more time. Maximize wallets-per-hour.
Twitter's new subscription service, 'Twitter Blue,' is now available
Would be better with AR glasses :-) but amazing work!
That's fraud and it's always been illegal.
Too bad many people see the word "Fuck" as being NSFW.
I've not used buildkite (we don't use git), but we're moderately happy with TeamCity. It's definitely not perfect, but it's orders of magnitude better than Jenkins.
The artist can sell numbered prints too.

What I'm saying is that NFT _itself_ does not embody any aspect of the creative process or context. With the exception of the fact the artists issued an NFT in the first place on such-and-such date, and that might mean something in the future when we look back on this topic.
Yeah, the whole point of the article is that gRPC v2 (and frankly v1 for that matter) are not “properly written” to do this.
That's what you get when you abolish negotiation. Helps the lowest common denominator, but hurts top talent.
> You wouldn't if Python 3 didn't exist either.

It does exist. Python 2 is dead. The transition was more painful than it perhaps needed to be, but is IMO a better language for it than 2.7, or 2.6.

PEP-3000 was 15 years ago.

Complaining for decades about mistakes, that they admit, with hindsight, won't change anything.
I am sorry, maybe I don't get it, but Biles landing was terrible! Looking at the historic footage of Yurchenko - she's been so graceful in her landings!
If it weren't for oil and the Suez canal, nobody would care about Israel's genocide either.

The area currently has geopolitical importance. Once global warming makes the canal less relevant, and renewables replace oil, Israel will get to wipe out the Palestinians in peace
The entire premise presented here becomes moot if the software connects to the internet for key verification which has been a viable option for decades now as OP well knows because their entire business is being that server (and the service looks very tempting tbh).

A system that requires keys to not only be algorithmically valid but also pre-registered at time of purchase with a central authority (buy online and we'll email you your key) makes key generators implausible, because you don't just need to generate something that matches the algorithm, you need to hit an exact target from a set of keys that happen to currently exist in a presumably secured central database of customer keys.

At that point the kind of key you use is completely irrelevant, because algorithmic generation of valid keys is meaningless when faced with pinpointing which of umpty gazillion key possibilities actually exist in a remote database before the server cuts off your access for spamming invalid keys or for providing a key that 10000 other people have also provided. You could concatenate a few calls to rand() for all it matters then.

Also, this comparison is flawed:

> "It's also worth mentioning that keygens are much more valuable to bad actors than cracks, because a keygen can be used on the real application, vs the bad actor having to distribute a modified, cracked version of the application."

You don't have to distribute the cracked application. You can distribute the binary patching tool which also can be used on the real application. (What does "real" mean here anyway?)

A keygen is only more valuable if applying the binary patch is harder than discovering the key algorithm across version updates. I guess this is where OS application certificates have to step in. Hurray for our code-signing gatekeeper overlords.
I think those of us who have been around for a while are starting to synthesize the idea of negative externalities. It's no longer good enough to say "Move fast and break things". It's "Hold on, what are you breaking and why?". It's not good enough to continue to live in the care free world that didn't pan out where Facebook just brought people together and hackers don't use bitcoin to extort utility companies..
wait what rules did they change for him?
"The CFAA is intended to target "hackers," not policy violations."

However, they also explicitly write that they're not addressing that distinction (footnote 8 on page 13, to my best ability to parse it). There's some semantic gap between "policy violations" and "improper motives".

"For present purposes, we need not address whether this inquiry turns only on technological (or “code-based”) limitations on access, or instead also looks to limits contained in contracts or policies. Cf. Brief for Orin Kerr as Amicus Curiae 7 (urging adoption of code-based approach)."

I discovered this nuance from Orin Kerr's twitter (the same one cited in this footnote); he says he's not confident he understands this footnote.

https://twitter.com/OrinKerr/status/1400461828807741455
It does make you think. In both cases you have to acknowledge that you're just giving an artist money, presumably because you just want to support them and their work. At least NFTs are usually tied to actual work of art they did and you (and everyone else) can admire that work and get some kind of enjoyment out of it. So I would have to say most NFTs are objectively more substantial than literally nothing.
The amount paid is directly proportional to your payroll cost, just like your income taxes. Both amounts are paid by the company directly to the IRS. The only real difference is that one amount is just put on your pay stub, one is not.

It seems disingenuous to not consider it a part of the taxes paid based on your income (though it certainly sounds better to say that we only pay, say, 25%, instead of 40%).
> The kernel community has surprisingly few rules regarding the addition of new features like io_uring. ... there is nobody with a checklist making sure that all of the relevant boxes have been marked before a new subsystem can be merged.

This is such a stark difference from the big tech company I work at where there are checklists from the security, privacy, performance, and maintenance teams that have to be satisfied before features can be launched.
We run everything through TeamCity. Not going to claim its the best tool in the world but it's certainly the best I've used, and it's fairly straightforward to work with!
It's unclear to me whether you understood when you are being given potentially untrustworthy information by the server.

Some of the other designs you described try to have users verify the ephemeral end-to-end encryption keys. If Signal did that then obviously each call, text conversation, or whatever has new keys, trust doesn't continue from one to another. But Signal's long-term identity key relates everything together. The Safety Number is about ensuring you really have Bob's long-term identity key (and Bob has yours) rather than about this particular call, conversation, etc.
Wow, the emperor truly has no clothes.

I've said this many times -- I contend that the actual product, the creative output as it were, of much modern art isn't the thing itself, but what is said about it.

Nothing ugly (or invisible!) is self-evident, even to the most highly trained senses. They all require many words of explanation in their own little ways.

No one would go to a restaurant where each dish requires a paragraph of text to "appreciate" the taste and texture, and is unpalatable otherwise...
Not on iOS. The biggest issue are indeed native notifications which I don’t believe will ever happen (unless Apple is forced to by legislation). Web Bluetooth is also unlikely to happen. Storage is another issue that is heavily restricted on iOS and in my experience offline use is completely unreliable.
There is a lot of weirdness in the wording. They say it helps outside work...but that the app doesn't work except while working.
Not only that, there are other garbage collected languages like D, Nim and C# that offer the language features to do arenas without having to touch any C code.

There is still so much education to do.
There's an important distinction between levels of government and civil vs. criminal penalties here. From section a.4 of the holding:

"The relevant question, however, is not whether Van Buren exceeded his authorized access but whether he exceeded his authorized access as the CFAA defines that phrase."

The CFAA is a federal statute that governs unauthorized access to computer systems. When granting authorized access to computer systems, other organizations (whether states or police departments or private companies) are free to set their own policies, and they can enforce those policies with the mechanisms they have available to them, like terminating the offending officer or revoking his computer access (at which point further access would be a CFAA violation). But can they then use the language of the CFAA to criminalize violations of their own authorization policies? This holding says no - the CFAA covers the initial access to the computer system, and then violation of more granular access policy is a civil matter between the individual parties.

This is consistent with several other recent court positions. There was a recent case to criminalize ToU violations [1]; the court ruled that this is an overbroad reading of the CFAA and ToU violations were civil matters between parties. When Anthony Levandowski used Google's network to download self-driving car plans and sell them to Uber [2], he was prosecuted under "theft of trade secret" laws, not under the CFAA. It's also analogous to perpetual free speech battles, where the court has repeatedly ruled that private parties are free to restrict speech on their own property, and that the 1st amendment applies only to the government. In general liberal democracies seek to apply restrictions as narrowly as possible and have private parties work out contracts and consequences amongst themselves, only stepping in when there is no way to enforce such agreements without an outside power.

[1] https://arstechnica.com/tech-policy/2020/03/court-violating-...

[2] https://www.justice.gov/usao-ndca/pr/former-uber-executive-s...
Land in the US is slowly being returned to native American groups.
"The diameter of the pupil in normal conditions varies within the limits of 2.7-4.8 mm in the dark (22.5-40% of iris diameter), an average of 3.5 mm (approximately 29% of iris diameter). In newborns, pupils are physiologically narrowed (2.32±0.05 mm, that is 19-20% of iris diameter). From the second month, the pupils increase in size gradually an average of 64% up to the sixth month, and more by 8.6 % to the first year of age. This process takes place within the tenth to the eleventh years for a child. Between 10 to 14 years of age, the opposite dynamics are observed, which can be subdivided into three periods. During the first period (15 to 24 years), pupil dimensions are decreased considerably by 17-19%. In the course of the second period (25 to 50 years), narrowing is going less intensively (on average by 6-9% every five years). During the third period (50 to 80 years), the pupils are relatively narrow (2.63±0.06 mm – approximately 22 % of iris diameter) undergoing a smaller decrease in diameter, which is 3-4% every ten years.":

Source: https://pupilanalysis.com/pupillary-dimensions/
Looks like only in UK. Not available in the US.
But let’s say you called someone on the phone and lied to them to gain access to a computer system, you committed wire fraud doing so. It’s just a different crime because the thing you did wrong involves lying on the phone.
Can you expand more on how it would qualify as an "anti-pattern"? I agree it is slow, has issues with its built-in coverage and capabilities, and has an oldschool UI; but it is at its fundamental core a pipeline runner. It is a decent pipeline runner even, which when it comes down to it is the core of each other CI product [that I've seen].

So to hear it described as an "anti-pattern", when realistically it seems to BE the pattern - just poorly executed, is a bit unintuitive to me.
The problem for digital items that can be transferred between games isn’t really tracking ownership but interoperability and licensing.
Land is one thing everybody competes with eachother for, either through rent prices or through housing prices.

Everybody, not just the rich have been using land as an investment for decades. Many cities are priced out.

This land burden becomes a weight on businesses and people. Businesses that need to be located in a central area must pay high rents and high wages.

Declining birthrates absolutely make sense. We just don't have enough room for all of us, and it's clear in the prices.
Trans-Racialism, I assume they mean ala Rachel Dolezal.
Why the future doesn't need us Wired, April 2000
What's hilarious about these ring/nest/etc products is you can find competent competitors, right on amazon, for like 1/5 the price.
That's a fair point but nevertheless what the article meant by lack of need for cooling is twofold.

The ability for the aluminum ion battery pack to function in a wider temperature range potentially does away with a heating system that is otherwise needed to help li-ion battery packs to function better (or even avoid early degradation) from a cold start.

The implied lack of a need for a cooling system for the battery means the battery can function as a thermal mass, as you alluded, and a lower rate of circulation and total mass of coolant is necessary. That's on top of a simplified channel system that runs only through the motors, alternator, electronics that lie next to heat generating parts, etc.
To me I think it is the antithesis of a developer tool. ZSH auto complete works 99% of the time for everything. FIG, while cool, seems more like a capitalistic way to capture developers who like fancy new things, when the open source, free, tried and true works every time. Once again, I dont speak for all devs, and I am an AVID terminal user, so I like to keep things simple, free, and open. This product and why you created it and what you are going to do with it makes me cringe :(
> The biggest disparity between webapp and native used to be Notifications - but with Twilio, it appears trivial to make an arguably better notifications user flow through SMS and direct link to user content.

Oh god please no.

I can turn off app-level notifications. I don't want to have to deal with app-level texts instead.
I wonder how many insights your circles have missed because they are too sensitive to language.
> Using special characters makes it harder to manipulate by hand

I generally use CSV as an import/export format, and would like for software to at least support the option (even if CSV/TSV remains the default).
Money laundering at its finest!
Ask HN: Have you had trouble recruiting Clojure developers?
Secondary question: Have you had trouble bringing on devs that didn't want to learn a new language?

i.e. "I don't want to work in Clojure, thanks anyway."
I used to love browsing the app store looking for cool apps. Now I can't even trust searching for the app by name because sometimes a completely different app shows up, and then there is the case of appstore ads. It's a joke.
I'm definitely in favor of blaming Trump and Russia, because we certainly can't blame:

- tech companies for selling software and hardware riddled with security flaws

- the legal system for absolving said companies from any liability whatsoever

- customers who are unwilling to pay more for reliability, security, or recoverable backups

- those who pay the ransoms, ensuring steady income for criminal extortionists.
It wasn't malware to start it.

> computer software that is designed to damage the way a computer works

https://dictionary.cambridge.org/dictionary/english/malware
I have an entire universe in my hand I will sell it to you for £1000
They're clearly not the same because Damore said nothing anywhere near as offensive as this. He said, paraphrased, that there are fewer women in tech than men because they are less interested in it. He backed it up with a whole pile of research showing that this obviously true claim is true. And he pointed out that women are biologically different to men, so maybe that is part of the explanation, and even if it is, there's nothing wrong with not wanting to be a programmer (which is in a sense a tautology, it's a way of saying "women are different because they're women").

In particular he bent over backwards to carefully spell out that he was not claiming women are worse at programming than men, perhaps because he knew the dangerous liars he was picking a fight with would also lie about his words - which they did, immediately, across the entire media and with vigor. Damore also tried to keep these views inside the company.

Now this guy made very explicitly offensive comments broadcast to the whole world on his blog, which claims that all Jewish people are the same, that by implication they are morally inferior to people whose hearts are not filled with war, and that they should feel guilt and shame about this.

No comparison, indeed.