skysight-inc/HackerNews huggingface dataset:
Then, what is the value of making the software secure if the hardware isn't?

The hardware issue is terrifying. And the worst part, it seems not possible to fix it without trowing away decades of performance enhancements. This epic screw-up of epic dimensions from computer architecture guys won't go away that easy.
I'm currently learning both Docker Swarm and Kubernetes (at the same time) and I'm a bit overwhelmed by Kubernetes (VS Code's extension and Kube's documentation helps with that). I just want use the Azure Kube Service to deploy my Rails app...

I'm also trying to learn Docker Swarm mode and both the community and documentation are not as nearly comprehensive as Kubernetes'. And Docker's official documentation and tutorial has me provisioning 3 nodes on a cloud provider instead of just booting up a swarm on my local machine.

And then I see any # of combinations of Docker Swarm with tools like Terraform or Pulumi. It's just all so overwhelming.

I think I'm going to keep banging my head with Kube and its super verbose manifests until I finally get it.
I saw this in the news today. No idea if it's what happened, but it sounds like law enforcement runs infrastructure used by organized crime.

https://www.engadget.com/fbi-encrypted-chat-app-anom-crimina...

And this is on HN:

https://www.npr.org/sections/money/2012/11/20/165590860/epis...
My point was to highlight really how big and sprawling the AutoCAD ecosystem really is and how meaningless a statement like FreeCAD can compete with AutoCAD is without specifying both context and domain.

With that in mind, yes, FreeCAD doesn't have those features, but they exist in other open source applications.

I really wish that was true. It would make my life much better.

I think what you are really comparing at this point is FreeCAD, the application, to Autodesk, the brand.

I'm intentionally not. Because if I where I would also be talking about Navis, Infraworks, Revit, 3DS and so on.

And just to be clear I greatly dislike AutoCAD and if I never had to use it again it would no doubt improve my quality of life.
> PG gets held to a higher standard than anything else on here.

He's unbelievably wealthy and created HN. That gives him an outsize influence that doesn't come from the merit of his ideas. Critique is a useful counterbalance to that effect so that his ideas get a level of weight more appropriate to their worth.
If you do a memory dump on a hypervisor you can get all the memory of the VMs on that server including keys as they are being used.
Congrats to the talented people at Hashicorp.

I love Terraform and have used it for years (before 0.12 I think). The workflow, meaningful diffs and reproducible 'infrastructure-as-code' gave a user experience that really was a massive step up to what I was used to (basically cloud console and scripts in CI).

In fact the Terraform workflow / philosophy inspired some of the design of an OSS 'data-as-code' tool (https://www.getsynth.com/) that we're building a company around. We wanted to use HCL instead of JSON for our config to start off with, but the Rust HCL parsers when we started the project weren't really robust so we settled.

Anyway, congratulations Hashicorp!
Take a full dose. Go outside to take a walk. Get arrested. Now you have bigger problems to think about than improving your mood and focus.
In some romance languages "having hunger" is literally how one expresses that someone is hungry...
The most plausible theory I've heard is that the attackers used a BTC tumbler that was a honeypot controlled by feds.

But who knows, maybe the FBI has a quantum computer we don't know about.
Meh; the situation was pointed out to people like you at the time. All the drawing of parallels with events in history, all the calls for reason and rationality and all the highlighting of holes in logic didn't do anything to stop the problem.

Your words now will make as much impact on the people you hope it will as they would have had at the time on you.
Explore Verifiable Health Records
Guessing that it is malware or wallet vulnerability . I don't think it was server being siezed
Location: Bordeaux, France
Remote: Yes
Willing to relocate: No
Technologies: JS, TS, React, NodeJS, learning Go & Rust
Résumé/CV: https://docs.google.com/document/d/1otmja3ErHzzbEIzwBL4i6UbJh_fMv2X49JOlnQQ6Wig/edit?usp=sharing
GitHub: https://github.com/kvalium
Email: julien.monchany@gmail.com

Looking for full remote job, senior full stack web dev or rust / go backend dev position.
Oh totally, I've wondered the exact same thing. I started messing around with that on leerly, and there are a couple articles with a feature called Storybook, where images appear as the user is speaking, to help build the association between the foreign word/sound with an image, rather than the associated word in your target language.

I have no idea if it's effective, I just think it'd be cool to see how it helps with learning grammar. I def want to experiment more with it, but it takes a fair amount of time to add images to all the articles.
More likely typical law enforcement methods than technical: they seized equipment with key, accessed an account where the key was transmitted (like email or a phone), wire-tapped an insecure channel, or strong-armed a defendant into revealing it.

ie, a $5 wrench
Same (hate it, love it, use it every day). I can't believe you left out the the stilted looping syntax.
"a Frankenstein's monster created by mating civil libertarianism with austerity."

— UC San Diego sociologist Neil Gong

They manage to name the two contingents that are out of power and have nothing to do with the crisis, libertarians and advocates of austerity, while leaving aside those who created the situation: progressives.
Bain Capital and Crosspoint Capital Partners Buy ExtraHop Networks
KYC?
https://youtu.be/8pBPZMUcsh0
They never sell, they borrow over that invested money and pay 3% (interest) instead of 37% (income tax)
This is probably true but only in the sense that someone designing and building something slightly larger than human scale objects is an architect period. Some of this magazine's readers will be shocked by this because to them architect is a professional stance or practice (aka a cabal of sorts who enforce a certain aesthetic standard emanating from cosmopolitan universities, galleries, and where ever).

Design and architecture are activities and so is engineering. When someone performs the activity to some sort of recognisable standard then it is what it is. In sum, yes, of course he is an architect and its completely unsurprising and not worthy of mention!
I don't understand. If I've proved the absence of runtime errors in some code, in addition to classical tests, are you saying that the software is not less likely to crash? Yes, there can be errors everywhere but I don't get this complete rejection of Formal verification tools as 'just a debugging tool'.
There's more freedom of speech than other western countries, there's a greater ability to bear arms than other countries...
The issue with any paid approach is that surrounding area will begin dumping the local homeless there. Thats where they can "get the help they need" without the locality they are from paying for it. This is a hard problem that looks like it needs a federal solution.
I find it offensive when people bring up mental illness and drugs as the cause of homelessness in areas where housing is so expensive. Like - are we expecting people who have been on the streets for a year to be able to get off drugs and instantly walk into a job making 45k a year?

Trailer parks get made fun of but they often cost only a few hundred dollars a month so a person can be in and out of work there to either save or as a stop-gap if they are running out of money. There is no option in California for those with no savings and whose problems have caused them to be out of work for awhile - other than rely on the generosity of others and the state.
I don't think you're actually arguing the opposite point -- I think you're worrying, with some justification, about what I suggested in my last couple of sentences ("a new OS that will replace both macOS and iPadOS, and at that point, all bets may be off").

My suspicion is that the computing industry as a whole is inching toward an everything-in-the-cloud, ubiquitous computing model, and the vast majority of users will see this shift as a net benefit, not a net negative. I'm not convinced that simply projecting what we have now forward a few years is what that will look like, though.
I’m open to alternatives, though I have felt that the response to this involved the highest level cyber warfare capabilities of the United States.

https://news.ycombinator.com/item?id=27156073

I would not be surprised to find out the US has this capability.
they don't :(
They are more than welcome to do it if I break any law but I have to say you I'm not. By the way they can seize funds from your or my bank account as well there is nothing special about "crypto" coins they are not outside the law code is not law.
So: absent proof don't say anything.
It doesn't just apply to walks in nature:

you, without drugs > you, with drugs

each person discovers this in their own time & experience, and each current user justifies his choice vehemently until after they decide to quit.
Well ... https://www.smbc-comics.com/?id=2540
I think we can improve access to experimental and unapproved drugs while still protecting consumers from malicious marketing of these drugs or sabotaging the current drug approval process.
I'm not sure I follow exactly what you're missing. `${aws_instance.example.x}` as a string value creates the same dependency as it would via HCL when used with JSON.
I think this is more a case of "What actually happend": https://xkcd.com/538/
Hm, is it possible to define a range for "crazy high interest"? As the debtor, I'd be willing to pay up to the difference in long-term and short-term capital gains (~15%). I guess where I'm going with this is: I don't understand why the average person ever pays short-term capital gains tax.
Criminal gangs that authorities don't know about are the ones that don't do significant activities.

Any criminal activities needs customers and so communicate about its activities.
Seems unlikely that the FBI sitting on a way to break ECDSA would use it to recover $2 million. Much more likely that there was a tumbler or exchange that they were able to link to the attacker and use to seize funds. Maybe they even have backdoors in some popular crypto wallets.
I'm cool with that as long as its greater than 20 miles from my house, says everyone.
That's not a tax loophole though. You still have to pay back the loan with interest. And it has to be paid with cash from somewhere. People like Bezos do this primarily to retain their equity because it's worth more than money to them. It's their ownership stake. For others, they are just betting the assets will appreciate more than the cost of the interest. It's income optimization not tax avoidance.

You can do the same thing with a HELOC. Otherwise you'd have to sell your house and pay cap gains then spend the net profit. I don't think a HELOC is tax dodge.
What about the point about taking out loans to avoid paying income tax, since money from a loan isn't income. Isn't that one of the major points?

I don't get how do they pay the loan off though, without paying taxes on the money used to pay off the loan. How does that work? Any loan I take out, I'd have to get income and then use my income to pay off the loan.
It's crazy to me how expensive it is to live in LA compared with how little i see new construction. The magnitude of the issue really crystalized in my mind when i was talking to a friend who lived in Tokyo, and he mentioned he was paying $900 a month for his flat. It's 40% of what I pay. Housing can't cost this much in cities that people are expected to occupy.
Anybody who buys in an "affordable" neighborhood - at least in CA - is making a lot more than their neighbors who've lived there for decades. If you're polite, you don't flaunt it.
I'm not so sure proof by counterexample is useful here. My point is that in most cases the people screaming at you seem like they're doing harm, but they can't actually do harm until somebody in a position of power in your life listens to them. [0]

I think you can mostly forgive the cowardly behavior of these authority figures up to about a year or so ago on the grounds that the social media mob sure feels like a real mob that can literally put tires around you and set you on fire. But we know now that that's a mistake. They can't do that. And so people in positions of power need to understand that in most cases they can actually just ignore the mob and nothing happens.

Every institution should have a "social media mob" procedure (i.e. what to do when a member of the organization becomes a target). If you plan to handle this in an ad hoc way, then you'll almost certainly make mistakes (because the ad hoc approach usually boils down to, "Ahhhhh! this feels bad! We have to do something! Quick, get rid of the person!") People should be thinking about how they'll handle it when it happens to one of their employees or members.

[0] I think I'd want to clarify that I actually agree that the braying mob does inflict its own kind of harm; it's merely that it's a harm I'd be willing to endure as a consequence of putting my ideas out there on a platform like Twitter, whereas nobody would be willing to endure getting kicked out of college or fired from their job just to have an argument on the internet. For example, my comment above is getting downvoted to hell. Feels bad! But it's several orders of magnitude removed from losing your job.
I wonder if there's a market for a trusted headhunter. When they send somebody over they vouch for certain skills at some level, and all you have to interview them for is "culture fit" and other intangibles. (And they're interviewing you, too.)

That "vouch" could take whatever form, including leetcode or whiteboard or just another dev. It would be roughly the same crap as in any other interview. It would probably be a little rougher, in fact, since the whole point is that the company is staking its rep on you, and its rep is its only real value. But at least you'd only have to do it once.
Most of the world is united against china. Every single neighbor of china hates them and hates them far more than they hate other foreigners. Vietnamese government is extremely friendly to america now because of the shaded rivalry with china.

China does have a sphere of influence but the total population of china + friends is well below 3 billion people and will continue to drop as a percentage of the world population.
You know being a millionaire today has a massively different meaning than 20 years ago.
Many years ago, when I was much younger, I had anger issues. I started to play sports (football, wrestling, track) and they vanished. I told myself I was always too worn out to be angry. Now, whenever I don't feel right, I can just go for a walk. I'm so out of shape today, a 30 minute walk can wear me out enough to get my head right.
I don't understand the duplication of alerting with Grafana/Alertmanager. Is it not better to keep all alert configuration central in prometheus alerting rules ?
They were literally paying people to take oil a few months ago

Brent was far higher than now from 2009-2014
If you keep your key secure, government can't seize your assets, as they can with a bank.
Like I said, this is anecdotal. I'm anything but a NIMBY, though. I want them to build homeless shelters in my neighborhood. We desperately need affordable housing.
Yeah the "follow the money" line from the FBI felt like a red herring. Yes you can follow the money through the addresses but it's not like they include routing numbers to tell you which bank manager to go convince to cooperate. Feels like Darkside got sloppy and left their private key unencrypted on their payment server which got seized/compromised.
Redesigning the macOS desktop experience (2018)
As others have pointed out in another post, you don't reveal that you've broken an important cryptographic algorithm over $2M.
More than that, consider what percentage of the worlds population can be imprisoned or executed for things we in the West would consider mundane activity.

The greatest moral failure of Silicon Valley and American tech was enabling human rights abuses on a massive scale by selling hardware and software to oppressive and ultimately illegitimate governments during the early days of the internet. The ship has sailed on that one now, perhaps, with the early assistance in building the Great Firewall of China for example.

There remains a moral obligation for American companies to build secure communication platforms for the internet. Instead they drift further, yielding to demands from governments to host data (which often never should have been stored) locally.

The most disturbing trend I have seen over the last decade on hacker news is the shift from support of an open and free internet to an internet of control and censorship. I can only conclude that all is lost if the core engineers and hackers who build and design these systems can no longer explain why this is important but rather argue why the internet shouldn’t be secure.

There are many unintended implications to this, one being American intelligence agents can no longer operate safely abroad. Others include the withering of development in the protocols and standards from which the internet was born, a redirection of talent and resources to private companies and private networks which are constructed in a way to build monopolies and then extract rent from its users. Facebook could be built on the web, but nothing lasting could be built on Facebook.

That’s my rant.
http://stonetoss.com/comic/hodl-on-tight/

(This comic about price fluctuations has as much place on HN as this blurb piece about price fluctuations. At least it's more relevant than the XKCD.)
If they would have the bitcoin sent to a self-hosted wallet, the FBI probably never have known who received them, unless they cash them recklessly.
Impossible? Man, it's crazy how fast people forget things like good old fashioned <form> GETs and POSTs. It would obviously be a full page refresh, but other than that the same awful UX could still be implemented.
It can be cracked if the keypair generator process is faulty. Some wallets have been known to be vulnerable due to poor rng implementation
I think there is a material difference between buying a diamond and directly facilitating the activities of the drug cartels. In theory everyone buys things that are made by people in shitty conditions because there isn't much direct visibility on the front end as to what kind of nastiness happened elsewhere in the supply chain.

If you want that to change you have to make it illegal to do business with such folks not hope consumers fix it for you via the magic of the market.
Apple’s new ‘private relay’ feature to be withheld in China
If the population of California were to grow by 35% in the next 30 years but only 5% more housing units were built - do you posit the housing prices would get more expensive or less?

That is pretty much what has happened. It is clear building more lowers the average. Keep in mind that homeless people may not have even been in "affordable housing" five years ago! Imagine how much better financial situation someone who lost their job last year would be in this year if they had been paying $1000 rent instead of $1400 for five years. Sure they would have spent slightly more in other areas - but they also would have saved more on average and have more fallback.
You can already disable JS
Some educated guesses from ErgoBTC in this thread:
https://twitter.com/ErgoBTC/status/1402277984212557836
I'm curious where you get this consensus. It's not at all shared by everyone, especially with the huge strides SPARK and Frama-C have made.
Exactly, they are just delaying taxation. If their investments return less than loan interest, they will need to begin selling assets to pay the loans. If their equity compounds at a rate higher than the interest rate, then they can continue to defer until death where they can pass on to heirs and take advantage of basis step-up.

https://www.thebalance.com/how-the-stepped-up-basis-loophole...
I wish I did. A city that is so incompetent as to let this situation arise in the first place cannot be trusted to honestly & accurately account for the root cause of the problem. I want a good source for data that doesn't come in the form of a far-left/right propaganda piece. And if I am wrong I will be HAPPY as hell to be wrong.
Aurelio is a CBT application. CBT (Cognitive Behavioural therapy) is non-intrusive form of therapy, for depression and anxiety, without the need of any medication. And it has been proved that CBT is much more effective and efficient method of treatment with low relapse rates. I have built this app using the techniques from various books and research papers by Aaron Beck and other CBT practitioner. This is web only app and it only works on large screens(sorry mobile folks). This app directly uses various techniques described in CBT papers, like fear hierarchy for anxiety, behaviour activation for depression, thought records, and evidence based mood modulation.
> (up to something like $500k gain - over your cost basis which includes any capital improvement you made to the property)

In a lot of markets this absolutely hits the "moderately wealthy trying to leave the working class". Bay Area houses that went for $1.2M in 2009 now go for about $3M, for a gain of $1.8M. That's well over the $500K exclusion, even including capital improvements.

Few folks will shed a tear for people who own a $3M house simply by virtue of living in a hot area, but that's exactly who the OP is talking about.
it took 5 years to get that useful for_each for modules though

so I'd imagine some people waited long enough that they moved on to better tools.
I think you're extending "working class" to mean "people who live on wages instead of capital". But most people make an additional distinction inside wage earners between workers and professionals, i.e. mechanics, factory workers, nurses, assistants vs. doctors, lawyers, software engineers, managers, etc.

It's helpful in this little side discussion because policies that might affect people with (as GP says) any ability to make six figures in a year are pretty different than those that affect people without. The "works for a living" distinction isn't super relevant.
>Any reasons for why I should reevaluate?

That depends: are you cool with google reading your emails and selling the content to advertisers?