skysight-inc/HackerNews huggingface dataset:
Update from Fastmail on the Australian policing law and privacy
Thanks for reaching out to us about the recent bill in Australia. We love that our customers care about their digital rights and want to find out more about how companies are looking after their information.

The police can't intercept, access or modify your messages without us receiving a warrant, and we take our duty of care seriously. Fastmail responds to well formed warrants only and challenges requests for access that are inappropriate, either in scope (not adequately targeted), or depth (asking for information that seems out of proportion to what's being investigated). We will continue to do so, for any legislation that applies to us both now and in the future.

The new bill still doesn't allow 'trawling' for suspicious data: they can't request access to a wide variety of accounts hoping they'll come across something of interest. They need to have a particular account under suspicion and something that gives them grounds for that suspicion, and the offence in question needs to be suitably severe to be worth the intrusion.

Where we are permitted under a warrant, we will notify the accountholder of the access request, and due to our existing measures to help customers stay aware of any hackers compromising their account, police can't also enter your account without leaving evidence you can see.

What this means for you: Fastmail remains a privacy-first provider. We will comply with our legislated duties, while taking care to ensure that we do not act unless compelled by law and that all legislated preconditions have been properly satisfied. Your data remains under your control and you can rest comfortably knowing that your account won't get caught up in a surveillance net.
This is incredible.

I remember in the early days of the web getting a copy of the Anarchist Cookbook. One idea was to glue the phosphorus material from a match stick to the spinning portion of a floppy disk. Of course that was a n00b level hack.

We've come a long way since then...
I don’t want a honest and nuanced conversation on whether Holocaust was ok or whether rape is good. This is way past any point for a nuanced conversation.
This really, really resonates with me. I've been trying to address my own feelings of burnout, and I think this is a big part of it.

Frankly, it's been a while since I had a win. I think I'm gonna try to set myself up for a small success, and see how that goes. Thanks for this.
This topic was the right to tax, not all rights

> Rights are fundamentally inalienable

even so, that is like just your opinion, more accurately a set of beliefs, decided by people, that have been in vogue in western culture for quite some time. But still ultimately this is socially constructed, not an objective fact about the universe.
Scope and lifetime are two different things, but they're related in the case of automatic (local) variables.

Scope is the region of program text in which an identifier is visible.

Lifetime is the duration during program execution in which an object (stored in memory) exists.

If you define a local variable, the scope of its identifier extends from its declaration to the end of the enclosing block; its lifetime is the execution of the enclosing block.

If you allocate an object on the heap by calling `malloc()`, its lifetime ends when its deallocated by calling `free()`.

An object defined at file scope or with the `static` keyword has a lifetime that's the entire execution of the program.

In either case, if you have a pointer to the object, that pointer becomes invalid when the object it points to reaches the end of its lifetime. (And C doesn't make it particularly difficult to cause problems by trying to access an object that no longer exists.)
ok you're astonished. but you also haven't moved the conversation forward at all. you're just talking down on the field, "I understand everything about this topic and people's reactions to this topic, and I am disappointed in all of you."

turns out it takes a lot more effort to actually make an impact, and comment sections are typically full of low effort gut reflexes. It doesn't help that every comment section starts over, progress is harder this way.
Has Flutter really become that popular and awesome? I feel I'm still seeing a lot more of React Native or Electron and other JS based front-ends in the wild, for which ClojureScript is best suited. I'm not sure I'm convinced Flutter will be able to break through those even with Google behind it.
It would be funny if the DoD is attached to waterfall still.

The entire organizing principle of modern US warfare is as fast and adaptive a battlefield loop as possible for: get information -> adapt strategy -> deliver orders.

I believe it goes back to Napoleon, who basically conquered all of Europe using those principles and superior organization.
The idea that he could fix Air Force IT in 6 months if empowered seems absolutely ridiculous given the size of the organization. What do you think the US gov needs to change to get better at it?
I don’t think that’s quite so cut and dry. Sure the OP can easily ignore union politics. But I’ve seen unions defending toxic people with seniority. Good luck if the union is going to bat for someone that’s been taken to HR multiple times.
How can you be sure to know what is it what you don't want if you want to have a conversation?
> email someone with the colliding image embedded in the MIME document. Set height and width equal to zero or one pixel.

(I think) the complaint is: how is that different from just using CSAM images, no collision required?
Well from experience in the UK M&P (managerial and professional union) unions you right.

They are not into old school craft union practices.
Someone on Reddit recently explained PoW vs PoS:

Besides POW there are other ways to delegate control in a decentralized system. Actually, for a smaller network, POW is not a good consensus mechanism at all, because it is not prohibitively expensive to dominate the hashpower of a small network. Many altcoins have been successfully attacked like this. So how to decide who controls the network?

Proof of Stake (POS) is probably the most common alternative. In POS there is no electricity cost to mining, there is no hash puzzle to solve. Actually there is no mining and no miners, only validators. The users who own the most coins are allowed to validate the most blocks. To attack the network you have to buy 51% of the coins and the theory is that you wouldn’t want to attack your own asset once you own that much. The “staking” refers to the fact that the validator has to lock up some of his coins and promise not to use it while he remains a validator. If you own 3% of the total staked coins, you are given 3% of the blocks to validate. Because validating a block has a reward, this means you also get 3% of all new coins.

Part of the criticism of POS is that the rich will get richer and the poor will get poorer because the more coins you own, the more blocks you will validate and the more coins you will get as reward. This means you can stake even more coins and get even more rewards, and so on. This POS mechanism gradually consolidates most coins into only a few hands and leads to centralization. You could ask how is this different with POW. The miners with the most mining rigs validate the most blocks and gets the most rewards and accumulates more and more coins?

The truth is that most miners have to sell their Bitcoins. Mining is not a passive investment like POS because there are ongoing running costs. A miner must not only pay cold, hard cash for the electricity to make a block, but also invest in expensive equipment, maintenance, salaries and so on, put in actual work. Would you rather pay someone who can prove he did some work, or someone who can prove he is wealthy?

Source: https://www.reddit.com/r/Bitcoin/comments/pfryce/pow_vs_pos/...
Here's a link to an interview with Patrick Debois who is one of the two guys who came up with the concept of DevOps. https://blogs.oracle.com/javamagazine/how-dev-versus-ops-bec...

From Patrick Debois in the interview "Later, I saw a talk by Jean-Paul Sergent about developer (Dev) teams and operations (Ops) teams working together."

So no, breaking down the silos was baked in from the beginning.
The red states had several waves to prepare their responses, then a vaccine appeared. One would think these two factors would have guaranteed excellent response vs later COVID waves. Instead, they planted their heads in the sand, blew off the vaccine and are leading n America if not the world in cases. And deaths are rising quickly. They just threw it all away, “reasons”.
The vaccines (of all types) aren't somehow an alternate to our immune systems, they're a way to boost our immune systems' response. And yes, they do make the immune system significantly more effective in responding to COVID infection. Go read this: https://www.covid-datascience.com/post/israeli-data-how-can-...
The 10x Django Developer
create apis like is seconds
You don't even have to close them. Just remove merit-based admission, in the name of equity.

Then, because many students won't be able to keep up, the 'magnet' school will lower standards.
> are just advocating a cause GoDaddy disagrees with without actually violating a policy

For all we know they may not even disagree with it and can just see which way the wind is blowing. Which would be even worse, if true.
"So now the question is in what 15.x update do they just sneak it in."

It would be nice if the general public and the news therefore now picked up on the issue of opaque "automatic updates". To date, they have been trained to always every update without question.

Conventional wisdom: Never, ever question any particular automatic update. Don't think, just enable. All updates are created equal.

Assumptions: Every update is for users benefit. Software companies never operate out of self-interest. There are no trade-offs. Whats good for them is good for users and vice versa. Theres no reason for end users to trial updated versions of software ("A/B test") before deciding to use them "in production".

Thought experiment: User installs Software from Company to perform "Function #1". Company makes changes to Software, described as "Fixes and other changes." Software now performs Function #1 plus Function #2. User allows new software to be installed automatically. (Automatic updates enabled per "expert" advice.") When user downloaded and installed Software she based her desicion to use Software on its ability to perform Function #1; however, did she have any interest in Function #2. Did she agree to Function #2. Company says yes. Developers say yes. What does User say. The license agreeement places no limits on what might comprise Function #2. It could be anything. It could have no benefit whatsoever for User. Moreover, Company is under no oblgation to disclose Function #2 to User. With automatic updates, Company is free to keep changing Software. User originally chose Software for Function #1 but Software may look very different after many "automatic updates". Would she choose it again in its current state. Segue to discussion of "lock-in".
Where can I get a legit license for £30?
Speak for yourself. Sorry for being blunt, but you clearly know very little about burnout (good for you). If people say that they are burned out because of a bad manager, believe them instead of saying they don't know what they are talking about.

There are many reasons for burnout. Working on things that don't pay off is just one of them.
I think it depends on what curriculum your school's using; non-base-10 math is a punchline in Tom Lehrer's "New Math" [1]. Common Core might be getting rid of it?

As a side note, comparing the complaints in "New Math" (from 1965) to those offered about Common Core is educational :)

[1]: https://www.youtube.com/watch?v=UIKGV2cTgqA
> mansplaining

No need to be sexist.
Surprise: there's a whole bunch of different reality under your the convenient illusions of your "high level" programming language.

Hardware is the reality. It's not very much like the Java or Python programming model. We shouldn't hide this from programmers.
> Developers are responsible for learning what kind of environment their application runs in, but ops is not responsible for having some clue about what they’re running?

I don't think it's as cut-and-dried as your question frames it, but I do think there are fundamental differences between the two positions that justify some of the tension there.

The problem is the difference between domain knowledge and general systems knowledge. The former varies wildly from org to org, team to team or even within individual teams. The latter is more consistent across wider applications and over longer timeframes.

Developers usually need a lot of domain knwoledge to do their job, which can leave less space for systems stuff. But the systems stuff they do learn tends to be more widely applicable.

Ops folk often service many teams where the domain knowledge differs between them. The best of them might be able to internalise all of those differences but it's a big ask. And there's rarely any crossover.

This difference is also why developers tend to have a slower ramp-up time than ops engineers do on joining a new team. It's just the nature of the work.

I say all this as someone from the developer side of the fence. I'm fortunate to have some years in the bank now that the systems stuff comes more easily. The domain stuff remains really hard.
It’s really not a compromise. They found a way to scan your photos for illegal stuff without during upload without compromising encryption. Meanwhile all the major competitors just openly inspect All your photos.

This is equivalent getting up set with Signal because it spell checks your text as you write it: “you are scanning what I write!!!!”
Why? Abortion is murder. Period. You are pro-murder? Good for you.
Rollerblades could have become more popular if all parks had pavement instead of gravel tracks.
I'm in the UK and at you wouldn't have any issue where I work(big AAA games publisher) - very very very few people want to be managers, so if someone expressed interest in managing they'd be given all training and support to make that happen, probably would get them promoted within a year or less. In fact I'd say that with some seniority under your belt you have to start actively avoiding management roles if you don't want them.
Just FYI, many other high-level experts on this space like Anthony Levandowski who actually worked with Sebastian Thrun after meeting him at the 2005 DARPA Grand Challenge. Said the same thing.

There's a reason why I asked if you could share your work. Because those two individuals are clearly at the top of their field. If your thesis is correct, then it's easily worth 100+M if not 1B+ USD in value.

It's easy to be hyper critical, compared to actually being in the trenches trying to solve these hard problems.

https://www.youtube.com/watch?v=fNgEG5rCav4&t=110
That data is available in the developer tools, under the Storage tab. Individual cookies can be viewed, edited, and deleted. Not very useful for the average user, but the option is there and I doubt the average user even knows what cookies are, except that they're something you constantly have to click "yes" to nowadays.
EDIT: there too many duplicate groups on FACEBOOK not Reddit.
Ah, got it. I read the screenshots as the "search" was also going away. I do have that 'single cookie' thing with another service where I have to delete one called TICKET_something, but I'll fumble through it I suppose, or use an extension.
> I'd only add that both approaches should exist, and that the package-people should (learn to?) provide a more portable variant of their software.

The great thing about portable applications is that you can still put them in a repo and use software to manage them, you just don't actually have to!
We have a fantastic QA team, and they test everything that goes to prod. Definitely slows things down (by about 1/3) but our user experience is significantly improved because of it. IMO a good QA/test team is critical to delivering an excellent user experience.
Yeah, it doesn't pass the smell test. I wouldn't be surprised if both piloting skill and advancement potential were requirements, though.

It's sort of like people who are both awesome software developers and good managers. Those qualities often do not overlap, but they do sometimes. If you can afford to be selective enough (which is rare), you can check both boxes for everyone you hire.
Woah.

Okay. Just got a few points with me Biden. Going to declassify anything else?

Knock-on question:
Is there a list somewhere of everything classified?

Seems like there should be (Presidential access thereto as the Public's chief executive would seem to demand at least the potential to have such a thing delivered to them for decisionmaking reasons), and if there weren't, it implies some classification authority is running around with some serious oomph in terms of being able to hide things...

God... Lot of weird questions popping up for me today.
Great post. An addendum: people still burnout even when the org is succeeding (shipping products, hitting liquidity, etc.).
Apple already tried the "critics don't understand our system!" deflection a while ago.

It's a deflection because critics' objections don't necessarily hinge on the technical implementation details of the system, they object to it based on its value proposition to the user, and on principle.

Once we move past the core of those objections, then yes, some critics also object to the system's technical implementation, and some of them are correct in their analysis and some are less so.
For a less articulated argument Terence McKenna also speculated that psilocybin is some kind of intelligent substance that came to earth via meteors and consciously played a role in humanity's self awareness.

https://en.wikipedia.org/wiki/Terence_McKenna#Psilocybin_pan...
Then really it's a failure of management at your company, not the limited vacation system.
I feel like it's picking up steam.

I've written a few things in it and found fewer footguns than React Native.

Granted, it comes with its own set of idiosyncracies, breaking version changes, half baked community libraries and developer ecosystem, but that's par for the course.
My last job implemented an unlimited PTO policy. In 2020, I took about 7 days off, and worked at least 20 days on weekends. With the increased responsibilities, there just wasn’t any time that was good to leave… until I left for good. It was definitely a factor in my current burnout.

The funny thing was before the VCs bought the company, I had two weeks but in practice could ask the CTO for as much time as I wanted. But unlimited PTO functionally meant negative days off, because performance would decrease when you left. Setting a minimum PTO might help.
Aren't DNA vaccines more risky than RNA?

"... But with any health advancement comes potential risk. Gennaro says that with a DNA vaccine, there is always a risk it can cause a permanent change to the cell’s natural DNA sequence.

“Usually, there are ways in which DNA vaccines are made that try to minimize this risk, but it’s a potential risk,” she says. “Instead, if you inject mRNA, it cannot get integrated into the genetic material of a cell. It is also ready to be translated into protein.” "

From: https://www.verywellhealth.com/rna-vs-dna-vaccine-5082285
In my experience retailers are lying in a bed of their own making. They have had more than a decade to implement RFID based UPCs and have steadfastly resisted it at every turn because of the few pennies it adds in the supply chain. While not perfect RFID allows for much better security controls that the status quo. Instead they continue to underinvest in adequate technology skills and will just rely on shady third party, privacy destroying, false positive generating facial recognition.
It is impossible to monitor millions of websites, so I'm sure GoDaddy relies on people reporting the situation to them. Report dontdatehimgirl.com and see what happens. Post your results on here.
It sounds like a good change but it's worth thinking about how this changes what traceroute actually does. I wonder if any significant amount of network infrastructure will respond differently to getting a bunch of probes with different TTLs all at once?

(I've long since switched to MTR for most uses. It's different than traceroute in lots of ways and is noticeable.)
> Which is to say, the upstream and downstream didn't change how they do things at all, and somehow developers acting differently is supposed to convert everything to agile.

Sounds like my corner of the private sector.
Yeah, you don't go straight to director. Absolutely not externally for that matter.

First, you start out with "team lead" then work your way up after showing enthusiasm and reliability. Get the Fournier book, The Manager's Path.
There are plenty of protests happening around the world, whether you're aware of them or not. The 20th century has proven authoritarian regimes can take over almost every country except USA.

We don't have to go that far back to see how a crisis can unite a country. Take for example 9/11. The division came later but not during the incident itself, and that wasn't even threatening people's lives directly.
This is amazing. Video chat and a dance party.

After you enter, walk left and click on the moving flower thing to teleport to the dance floor.
"I'm disappointed to report that Linux needs a lot of improvement to be viable for most people."

Evergreen.
Also, most people don’t have great time management skills (myself included) so never really have any slack time.
That’s not at all close as an analogy.

So the alternative that everyone is happy with, is companies openly scan all your images as much as they want… but we are outraged at the company trying to improve the status quo on privacy… and we don’t want to talk about it. Just stop improving!
As far as I know 4chan people were trolling the media and they succeeded. The result is both funny and scary. The scary part is that random people's lives are harmed because of some innocent photo or gesture. This insanity stems not only from media but also the new culture. Hopefully when going back to normality we will not swing too much to the other side.
Nodding the head is probably the better way.
Can you use GeoIP to detect the location of the user and preload the site while the user is selecting the months? Is the API to get the weather data very expensive?

My guess is that most people get marry where they live, or in some touristic/special sites that you can also guess and cache/preload.
In the 80s, when I was 14 & 15, I worked in the kitchen at a Shakey's pizza. It was a 1/2 mile down the road from my high school and just across from the mall. After school I would walk to the mall and play arcade games at Aladdin's Castle until my shift started. Many of my friends had jobs at 14 and by 16 most of them did.

The first big purchase I made at 14 with my wages and some grandma money combined was a 1541 disk drive for my C64. I lived in a middle class suburb where most parents gave their kids used cars at 16, but the kids needed to cover insurance, gas and repairs which is why most of my friends worked.

My 14 year old daughter would love to have a job now. She is annoyed that the laws in our state are so restrictive for 14 and 15 year olds that no one will hire them except for summer jobs.
> I cannot think of any improvements, that can be made, without abondoning the basic concept

The concept of scanning for CSAM during the upload process, or the concept of making the user's device do it? Apple could do the former on their own servers and essentially nobody would be upset.
That is in fact what the air foce does. It uses a numerical rating based on a) an exam of pilot related skills. B) a general knowledge exam c) number of hours piloting you already have