skysight-inc/HackerNews huggingface dataset:
When a startup I work for was borderline manipulated into onboarding onto the Carta platform [0], I did some brief security review.

I noticed they’re loading third party JS with at least one postMessage handler with a wildcard origin. They were also sending the current page title (which can include things like company or investor name) to this provider. It appeared they were also using a version of Knockout.js that is 2+ years old. [1]

This did not inspire a lot of confidence. The linked blog post at least takes security seriously, but it’s clear they’re patching over a lot of legacy cruft.

There’s a hell of a lot of sensitive data on Carta, which I’m sure they’re already selling to their “partners” anyway, but IMO it’s only a matter of time before they (or one of their “partners”) are hacked and a whole bunch of companies suffer from information breach.

IMO the main reason they haven’t been hacked yet is simply because you need to pay $2k just to get access to their questionably secure app.

[0] Your lawyer tells you that you need a 409a and Carta is the best. But if you only want the 409A, and don’t want to get growth hacked onto Carta’s platform, you’re out of luck. They won’t do the 409A for you unless you complete the full onboarding process, which includes appointing Carta as your company’s transfer agent, and uploading the email addresses of your investors and allowing Carta to spam them with tasks like re-signing legal documents that you issued off-platform.

[1] This is not a technical analysis and I’m just going by what I remember from watching my local chrome dev tools. Don’t @ me.
Bookmarked. Looks like a great project. A bit off topic but semi related as this requires 3D printed parts. What’s a HN recommended 3d printer?
All the “rich people tax” articles have an idiotic tone as if they’ve found a smoking gun of …. something

They really prey on ignorance
Not any more they don't, fta: “Right after we introduced Storage Pod 1.0 to the world, we had to make a decision as to whether or not to make and sell Storage Pods in addition to our cloud-based services. We did make and sell a few Storage Pods—we needed the money—but we eventually chose software.”
> the Native Indian population would prefer something other than money.

https://en.wikipedia.org/wiki/James_Bay_and_Northern_Quebec_...

> My own perception is that corruption within the bands is rife, with chiefs and their family/friends benefiting from the rent-seeking and pretty much everyone else in the band losing out.

Look far north. The village doesn't have clean water, but the local chief has two hummers and brand new ATVs on the front lawn. Guess where your tax money went...
> Satisfying, but not exactly must watch tv.

What's in your head could be though. That's my pet theory on the movie Hackers, what we're seeing on the computer screens isn't what's actually there, it's the characters' mental constructs visualized.
they did at one point, fta: “Right after we introduced Storage Pod 1.0 to the world, we had to make a decision as to whether or not to make and sell Storage Pods in addition to our cloud-based services. We did make and sell a few Storage Pods—we needed the money—but we eventually chose software.”
FWIW, most of the OnePlus line is officially supported by LineageOS. Not giving OnePlus a pass but I really only care about the hardware, reasonable repair costs if it breaks, and the ability to run my own builds without showstopper bugs.

The most annoying bug I had from Android 10 to 11 (worked in 9) was the loss of ability to use my bluetooth keyboard adapter with the phone on both OOS and LOS (affected both the 6T and 8T). LineageOS appears to have fixed it this month by syncing up with the current Qualcomm driver trees.
In the future I would expect Intermediaries will be smart contracts that lend your crypto on your behalf. Distributed reputational systems take care of the trust aspect. This could cost less than existing traditional lending systems.
I've always wondered how feasible it would be if an indie developer (or maybe even a big studio) could just put out a Linux build of their game and just say "we're not going to support this outside of these very specific constraints - or even at all - we'll fix issues with our Linux build if we can reproduce those issues in the environment we developed the game in... but that's it."

Then the Linux community gets another game. Does it not work on K.I.S.S Linux running sowm as a window manager and an entire custom userspace? Probably not. Does it work using the latest Ubuntu version? Probably.

But the notion that developers have to support every possible Linux configuration out there just seems toxic to the Linux game development effort as a whole.
Sure, and on Mac too, but it's not easy and rarely done.

This will make anyone able to do it.
> governments willing to take more of our money, spend less of theirs

One way to fix this is to vote for people who believe everyone (including corporations) should pay their fair share of taxes, rather than just the middle class, aka the overtaxed 90%.
Completely agreed. I've been bootstrapping a new project with a colleague I've known for years. We worked together in the same office for a long time, know how each other work exceptionally well. We started this project up during the quarantine, while living a few time zones apart. It was going quite slowly, until we could finally meet up (vaccines!). We worked through issues we had been going back and forth over for weeks in less than two hours, and had time to head to a bar for an early happy hour.

In person can truly make a difference. You're all subject to the same distractions, can keep each other on task, and pound through collective decisions in a way even a video chat can never facilitate well.
Intel Core Processors and Intel Bridge Technology Unleash Windows 11 Experience
Of course people are going to do silly things, but you can't protect people from stupidity.

>And also that this problem definitely won’t get worse as more and more of these devices are built on platforms that want to require you to sign in with a cloud service…

Which is why it's so important that not giving network access to medical machines becomes standard practice.
This seems backwards to me. Sure, apps should be at the mercy of they system when they want to use system-level features (interacting with other apps, accessing mic/camera, etc). But why should an application get to dictate which system features a user can invoke (taking a screenshot)?
TPM hardware requirements. it's related to security so again
Maybe Google licensed them some of the stack in return for telemetry on desktop users as well. Non-Chrome usage of desktops is a space Google can't get much data from and one they'd really want to access.
I don't like it either, but I think it's the lesser evil. Consider the fact that you don't even need DNS to put something on the internet; ergo, removing a DNS entry only increases the friction to accessing the resource. I think the approach the MPAA is taking is indeed to just make it harder for the 20%, and probably have a realistic understanding that they'll never get to 0 and approach a low asymptote, and have to be satisfied with that.

Or, to put it another way, the MPAA is attacking discovery not hosting. Which I think is pretty smart - its good bang for the buck. The people who have legit binaries to share can do so pretty easily (e.g. torrent a linux distro). It would step over the line if they tried to, I don't know, outlaw the bittorrent protocol. But taking down freemoviesXXX.com doesn't exactly raise my hackles.
Windows 11 Gets Support for Running Android Apps
> In a survey by Future Forum, a research group at Slack, Black office workers were more likely than white workers to say they preferred remote work, because it reduced the need for code-switching (changing behavior in different contexts) and increased their sense of belonging at work.

On the flip side, people used to talk about how people without spacious houses were disadvantaged by zoom because they didn't have dedicated home office space. These comments were typically paired with observations that minorities were disproportionally affected in this way.
It is a stretch to connect anonymized data collection that can't be used to ID anyone to the Holocaust.
Smells like you are forced to login with a Microsoft account and can't do a local account
What's Photon?
I shipped a tiny game on Steam developed entirely in GNU/Linux with Windows/MacOS/Linux builds all produced from within GNU/Linux without virtualization of other OSes.

MINGW covered the Windows build, clang/osxcross for the MacOS build, and plain old gcc for Linux. It's all oldschool autotools+pkg-config dances for the cross-compilation. Plain C and SDL2+OpenGL under the hood, no engine.

It's nice being able to do it all from my preferred GNU/Linux environment, and I was able to at least smoke test the windows builds successfully via WINE. The main shortcoming currently is there's no MacOS WINE-equivalent that's mature enough to run a graphical GPU-accelerated video game AFAIK.
Not surprised. Youtube has been known to sell likes/dislikes for years. "Trending" videos for Pop Music will be minutes old yet have thousands of likes and views. The views and like/disklike ratio are about as useful as comments or Twitter followers.
"Go compare the gun violence rates in the US with any country that actually regulates guns."
It doesn't have to scale. Sometimes it just makes it easier for a few stakeholders to get through something more easily and quickly.
The repayment terms are not set in stone though, the govt can change it at any time. Also if you want to leave the uk and live somewhere else you are in for a world of hurt.
Most dangerous jobs in the United States
Many people feel Facebook is, collectively, a strongly net negative on society as a whole.

If it were simply a place to keep in touch with family and friends, and to find local business, etc, I think it’d be a fantastic resource and a net positive.

Unfortunately it has instead contributed to the devolution of a common understanding of truth, a common set of values, in favor of the outrage machine, mostly pushed by Facebook’s algorithms.

So not only is it destructive, Facebook has actively encouraged that destruction.

So, many people feel it’s not actually okay to like Facebook, any more than it’s ok to like the proliferation of drug dealers on street corners.
Perspective (2015)
I updated my post. This provision appears to date to at least 1995.

(IANAL so again I could be misreading something.)
Backblaze has usually sourced their own hard drives, and I suspect they still are/will. (The post didn't seem to indicate otherwise.)

Every year they post a summary of what models they're working with and how they perform, which is usually good reading. This is last year's: https://www.backblaze.com/blog/backblaze-hard-drive-stats-fo....
obviously cosmic rays
Your advice is spot on. For me it was 100 pages. It was decades ago, but I still remember being puzzled, feeling like I didn’t know what was happening, but being pulled along by the unique quality of the prose. 100 pages in, the lightbulb went on. It’s as if the book teaches you how to read it.
Powershell + ChocolateyGet (+ DSC if you want) does a pretty good job already. Apart from specialized software it's been years I had to install via tedious hunt for link + download + execute + go through wizards or similar. That being said, the meat of it is 3rd party so not having package management builtin is a valid complaint. Then again, if you think about what that would take: non-trivial.
Could 11 solve some of my Windows gripes? (experienced on Win 10 Pro and LTSC, not on a domain so no group policy applied) Unfortunately I doubt it:

For me, window focus handling has gotten noticeably worse in the past couple of years. A window will pop up, I'll start typing, the keypresses won't go into the window, then I'll hit alt+tab twice to switch away and then back, and then the keypresses will magically start landing. Anybody else notice this?

The lack of a proper inode-based filesystem means I'm frequently having to terminate processes during builds because something is holding open a file that needs to be replaced. It's 2021. Linux and MacOS don't have this problem, when will this finally get solved?

My laptop sometimes turns into a jet engine because one of many aggressive background processes goes nuts for a short period. Which one varies -- it could be Compatibility Telemetry (tried turning it off, didn't stay off), Superfetch, search indexing, etc. Especially frustrating when I'm on battery.

Suspend doesn't always stay suspended. Too many times I've pulled a hot laptop out of a backpack. I've tried all the Internet-suggested fixes to no avail, so I had to give up on suspend.

The start menu at some point became non-deterministic, so I can't use muscle memory to open things without looking. For example when I hit the start menu and type "bash", half the time "Git Bash" is the highlighted option, half the time it's WSL's bash.

The start menu has been corrupted by Cortana. Sometimes figuratively, where it doesn't immediately respond to keypresses because it's apparently trying to load something and finally stutters open. Sometimes literally, where text search stops working for local apps and the only fix is to reinstall Windows. (Tried all of the internet-suggested fixes, tried an experienced Windows IT guy, etc.)

The installer's lack of flexibility and compatibility is horrible. Not a problem if you only ever get Windows on a new PC, but for those of us who re/install things, it's horrible. Even Debian's text installer is more flexible and reliable than what MS gives us. Now when I install Windows on a dual boot system I keep Linux on a separate device and remove the Linux device before installing Windows, just so Windows won't put its EFI config on the wrong drive (yep, that happened).

Don't get me started on the user hostile telemetry, how awful the event viewer is when you're trying to figure out what's going wrong, rebooting despite me telling it not to, the unwanted game installs (on Pro!) just so the App Store group can claim some success story, etc. And I've got more but it's almost too easy...
^tptacek speaks wisdom here. If you have a client giving you a hard time about your time units, that's probably a client who will be more trouble than they are worth. When I was still doing consulting, I got to a point where I steered every client toward monthly retainer billing because I was tired of the ones who wanted to count every hour rather than focus on outcomes.
I would say “not very well known”. That’s why there’s such a furor now. The extent of the deaths was quite well known to anyone who read the reporting on the residential schools and the truth and reconciliation commission.

But clearly a lot of people didn’t know that so these findings are a shock. Probably an instance of “one death is a tragedy, a million is a statistic”. Some countable number of graves has a more visceral effect than “disease was rampant in residential schools are up to 40% of children in attendance died”.
Unless they wanted to delist an entire country for some reason it's the TLD servers they would need to go after, not the root servers. And yes, they could attempt to go after the TLD itself and not just the ISP's caching recursive resolver. This is why distributed, censorship-resistant domain resolution is so important. The Internet may be distributed and capable of routing around censorship, but the current DNS system is relatively centralized and thus vulnerable to attack.
Also LISP in 1958. It's a great idea that will always be around.
Hm, but they also offer a DNS without the malware filter. Does that imply that they would not have to block "pirate" sites on the unfiltered resolver?
Sadly, I'll still be supporting IE11 on Windows 10 for the next decade. The bane of a massive company with old people that panic at opening chrome.
I said exactly that to myself when Windows 8 was out, quite happy since then:)
Sony BMG can talk a long walk off a short pier. They're blood-sucking, rent-seeking, cannibal vampires.

If people would watch it, they would pay homeless people to dance and fight each other in LA's canals during a storm, monetize it, advertise it on all platforms, and they would still sleep OK at night.
Did that happen? Even ProPublica does not claim it.
How to Use Notifications to Build a Game in 36 Hours
No offense intended, but people like you fed the troll. He obviously didn't believe a damn thing he wrote. You made him everything he became. Also, I would argue that every single person born into this world has made it a worse place. Where man stands, he leaves damage.
Here in Finland, you can get a sleeping compartment where the toilet transforms into a shower. They're quite practical...
To sustain diversity, investors must tune into their unconscious biases
"As an element, Oxygen is the epitome of simplicity, yet it’s also extraordinarily powerful. Oxygen is all around us."

Amazing, even when they are deprecating a product, they still need to promote some marketing fluff.. What's the point?

This makes me not like One+. They are on my smartphone sh*tlist now.
Seems like it would be a way to make such regulation work if so.
This is a great story. I laughed out loud twice. It’s probably more entertaining than you suspect.
For a video exposition of the "Full English" I recommend Danny's recent trip to Bolton which has become something of a viral hit.

https://www.youtube.com/watch?v=Z7YM7iYtFRY
Snapchat doesn't block you from screenshooting, but it notifies the other person if you do.
WebView2 is shipped/serviced by Windows (auto-updates with Edgmium at roughly the exact same pace as Chromium/Chrome), and it's a shared control with a single install which Windows can optimize memory usage/performance. As opposed to Electron packages its own Chromium, updates have to be shipped inside the application at the application's pace (including and especially security updates), and the install size and memory usage/performance is bloated for every Electron app bundling lots of the exact same Chromium DLLs and whatnot.
> "Police [in Japan] Arrest Three..."
Check your memory? It started with Obama.
Build v.s. buy is genuinely one of the harder problems in software engineering strategy.

You'll often hear people say "you should never, ever build something if you can buy a solution instead" (where buy also includes using an open source package) - but there are actually a bunch of other things to consider:

- Is the solution you're considering well maintained and likely to keep working? Open source projects sometimes stop being updated. Vendors go out of business.

- What's your escape strategy if the vendor DOES go out of business, or massively increases their pricing?

- Integrating with a vendor / package is often a non-trivial amount of development work. Have you considered this relative to building your own, custom solution?

- Do you have specific requirements that go beyond what's available off-the-shelf?

It's absolutely true that your engineering efforts should be spent on the things that make your organization unique: time spent on your customer's problems is more valuable than time spent reinventing a wheel.

But sometimes, the available wheels really aren't fit for your purposes.

I've built when I should have bought, and I've bought when I should have built. Getting it right is hard! Often it doesn't become clear if you made the right decision until several years after you've made it.
That's not how activism works. No one will pay attention and writing White House online petitions doesn't do anything either.
Library of Congress Looks to AI to Help Users Sift Through Its Collection
> taking the native perspective into the education system
> Including traditional aboriginal health practises into the health care system

Thanks, but no thanks.

> People don't die on reserves because they're lazy drunks(as is often portrayed), they die because they don't trust the Canadian health care system

Interesting take. When a white person doesn't trust "official healthcare", they are bigots/antiwaxers/idiots/you name it. But if they belong to FN, it turns out to be a noble thing. All of a sudden, "we've been doing it for hundreds of years" trumps science.
shrug sure.
https://archive.ph/ytnax
Let's also not ignore the fact that the sixties scoop[1] was a thing as well and that children in indigenous households are more likely to be taken out of their families than other groups (except blacks who have it worse).

1. https://en.wikipedia.org/wiki/Sixties_Scoop
For reference Eric Barone, Stardew Valley dev, he made it exclusively for Windows with C#. When he was approached by Chucklefish, they said they'd handle porting it to other OS's and console for a cut.
What's wrong with WSL and F#?
Title is misleading as there is no next Backblaze storage pod, and there never will be, according to the article.
I was moved to experiment with Fish shell one day, and wanted to see how to set my prompt. Answer: you create a function named `fish_prompt` that uses regular shell commands like `echo` (and fish's own `set_color`) to imperatively build the prompt. Want to make a right-hand prompt for something like the current time? Write a function named `fish_right_prompt`. For example, here's mine:

function fish_right_prompt --description 'Write out the right prompt'
set_color 666666
date +'%Y-%m-%d %H:%M:%S'
set_color normal
end

I was sold. I'm never, ever going back to futzing around with a bunch of complex $PSx variables when I can just write a function that does the right thing.
Wikipedia's article on that trial (https://en.wikipedia.org/wiki/Obscenity_trial_of_Ulysses_in_...) suggests that Quinn both didn't like Ulysses and didn't like his clients, to say the least. The whole trial seems to have had numerous absurd elements: critics being asked to "speak in a language that the court can understand", a judge objecting to the offending passages being read out in front of a young woman—one of the two publishers—and insisting that she couldn't have understood what she published, and Quinn apparently blaming the incomprehensibility of Ulysses on Joyce's poor eyesight.
>Wonder why?

Well, clearly you haven't been paying attention to the absolute assault on free speech happening in India and the sheer number of journalists who have been killed in India, the number of people being illegally detained etc.

India is now listed as one of the most dangerous places in the world to be journalist - along with countries like Afghanistan, Iraq etc!
https://indianexpress.com/article/world/2020-dozens-of-journ...

India also leads the world in Internet shutdowns - with more shutdowns than the rest of the world combined!
https://www.accessnow.org/keepiton-report-india-shuts-down-i...

What about the number of people being arrested for just criticizing the Modi govt's criminally pathetic handling of the covid crisis which is estimated to have killed at least a million people?
https://indianexpress.com/article/india/anti-pm-posters-arre...
> The recommendations put forward by the government never go far enough, and frankly, the Indian Act is stain on our country.

The current party in power is pretty much responsible for residential schools. Apparently, their current leader thinks crying on camera will make people believe they changed.
A smartphone isn't a desktop OS. You're free to think it's juvenile, and I'm free to prefer a desktop OS that doesn't require an account like win10 or linux.
The rich have defunded their police, the IRS has no resources to go after complex schemes like these. But they consider it out of bounds when poor people demand the street harrasment police be defunded.
All my latest projects do have a `make verify` target. It's not much work, and it tests much more than 100% code coverage. I'm always surprised what kind of weird bugs it finds. Eg in my CTL (the STL in C) it found the 3way comparison problem, which was just recently added to the STL.
Are you saying all of Privacy Sandbox APIs are dead or just FLoC?