skysight-inc/HackerNews huggingface dataset:
Of course not. Just for law enforcement and targeted ads.

It is funny how some companies talk about "internal secrets" yet they are more than happy to run a cloud or conferencing system from Google or Microsoft.
I think what it means is that if I break your car and you sue me to get the money back from me, I can pay you in bitcoin and you'll have to accept it, i.e. cannot claim that I haven't repayed you for the damage. In all countries were Bitcoin is not an official currency (so pretty much everywhere) you could claim that even though I payed you in Bitcoin, it doesn't settle the debt and you reject the payment and ask me to pay you in an official currency.
I haven't seen a form with a clear button in 20 years.
Suez Canal blocked briefly as container ship runs aground
Yup. This bears repeating. Desktop got conquered by web tech because OS vendors had no moat around third-party software. Smartphone OSes managed to create app stores before web technologies got to the point of competing with native, so mobile OS vendors have both leverage and strong business incentive to keep apps native to their platform.
> "To understand how data is encrypted at rest with the LunaSec Tokenizer, you can check out How LunaSec Tokens are encrypted."

It seems to me that all you're doing is providing encryption-at-rest-as-a-service. Why shouldn't your clients simply skip the middle-man and encrypt the data at rest themselves (entirely avoiding the traffic and costs incurred with using your services)?

Moreover, why should clients trust you with their sensitive customer content, encryption not withstanding? What are your encryption-at-rest practices and how can you guarantee they are future-proof?

And finally - your API is going to be a major single-point-of-failure for your clients. If you're down, they're down. How do you intend to mitigate that?

The whole thing is full of really strange and dubious promises, like this one:

> "In the LunaSec Token crypto system, information for looking up a ciphertext and encryption key given a token is deterministically generated using the token itself. A signed S3 URL configured to use AWS's Server Side Encryption is used for when uploading and downloading the ciphertext from S3."

What if an attacker figures out how the decryption key is "deterministically" derived? This attack vector would be devastating for you actually - since you can't just change the derivation algorithm on a whim: you would need to re-encrypt the original customer content AND somehow fix the mappings between the old tokens your client keeps in their database, and the new ones you'd have to generate post changing the algorithm. This is an attack that brings down your whole concept.

Then, there's issues like idempotency. Imagine a user accessing a control panel where they can set their "Display Name" to whatever they like. With your current design, it looks like you'll be generating new records for each such change. Isn't that wasteful? What happens to the old data?

Also, what happens if your clients lose their tokens somehow? Does the data stay in your possession forever?

Lots of big holes in this plot. I suggest you guys to get a serious security audit done as early as possible (by a reputable company) before proceeding with building this product. Some of this just reads like nonsense at the moment. CISOs (your main customers) can smell this stuff from miles away.

Good luck.
Especially since current practice when it comes to dementia is waiting till the patient forgets how to swollow food and then let him/her starve to death.
Ok, but please don't fulminate on HN. It's not what this site is for; we want curious conversation here.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
Contagion is the spreading of some property from one entity to another by come form of contact.

For instance "floating-point contagion" in computing which refers to a situation when an exact number and inexact number are combined together in on operation, and the exact number is first coerced to inexact. E.g. 0.5 + 1 is carried out as 0.5 + 1.0: the integer 1 value becomes 1.0.
trees burn, if you pump carbon into some rock formation 2km underground its not coming back for a long long long time, if ever.
I agree that its forced, with 100 years of hindsight.

ATT though, political-religious stuff was a major deal. Irish republicanism succeeded by delineating dividers across all the major lines. Republican-Monarchist, Nationalist-Unionist, Gaelic-English, Catholic-Protestant, Class, etc.

Not everyone fit into all or even most categories, just like there were always upper class socialists... but that was still the way lines were drawn.

Atheism was, IMO, the least populist pillar of that era's communism. I think you can make that argument anywhere, including Russia.
Nakivo Backup and Replication for Microsoft 365 data
NAKIVO Backup & Replication provides incremental Microsoft 365 data backup for Exchange Online, OneDrive for Business and SharePoint Online. Use the backups for point-in-time restores of individual emails, folders, files, contacts, calendar items, document libraries, lists, list items and sites with just a few clicks. The backup and recovery features for Microsoft 365 ensure smooth ransomware recovery if data gets encrypted and a timely response to compliance and e-discovery requests.
Shopify helps people achieve independence by making it easier to start, run, and grow a business. We’re in the business of building useful products that help merchants everywhere. We touch all aspects of business creation—from an online store builder to retail hardware to fulfillment. Bring your big ideas and we’ll make them even bigger.

Check out our open roles: Software Engineering Manager (Remote, Europe)- https://smrtr.io/6zxDg
Engineering Program Manager - Data - https://smrtr.io/6s6Fs
Engineering Program Manager, Treasury - https://smrtr.io/6zxFh
Senior Plus Security Analyst, Trust - https://smrtr.io/6zxFB
Security Engineering Program Manager, Trust - https://smrtr.io/6zxFN
Out of topic, I use oidc provider (keycloak). I fetch the public key from oidc provider then verify the bearer token with it. Then use the permissions field to authorize users based on their permission. Does my approach correct / suffice?
Common on industrial stamping presses also. Operator loads metal sheet, then needs to activate the press with two physical buttons, separated with enough distance that it can only be done with two hands.
> people who support the notion of death

Isn't that a bit like supporting the notion that there is a sky above us?

Perhaps you are referring to people who reject the notion that death is to be avoided in all circumstances, whatever the consequences.
The point is that this makes HTTPS effectively NOT "built to last". The underlying layers keep changing and therefore requires changes to clients.

Compare HTTP. Or even IPv4, which still works to this day, with the same software & hardware combination.
I think once we figure out depression, assisted suicide will become uncontroversial. If you understand what dying means (end of everything you have and will ever have) and don't have depression, but you want to die then we should let you make that decission. You must have good reasons.
The societies that dominate others through violence need an even more advanced moral system around killing than those that don't. "Killing is wrong" is enough to get some basic internal stability around, but to start pillaging your neighbors you need a moral code with loopholes.
Unfortunately this tool only does static analysis on your SQL. I prefer tools like sqlx (the Rust one), which gets types by running your queries against an actual database. It feels more bulletproof and futureproof than the approach that sqlc is taking.
Just short the positive side to ground to discharge them.

Note: do NOT do this with thin wires and large capacitors / arrays of capacitors, or you may get a hot copper shower.
I had always thought that weapons in space directed toward the earth were illegal under the Outer Space Treaty, it seems this is only partially true --- no weapons of mass-destruction, but anything else is fine [1].

[1]: https://en.m.wikipedia.org/wiki/Outer_Space_Treaty
That is quite the assertion... Care to try installing "up-to-date TLS" on a EPOC32 device?
The linked sources don't say the four "came to me before you", as above, but rather "came before you". So it's a joke about the fickleness of dream interpretations. That is, a dream of driving a four horse chariot is taken by one interpreter as bestowing the speed of horses on the dreamer, while the next interpreter says oh no, it's a dream about having four in front of you!
Both GCC and clang warn about unused parameters, but only when you run them with -Wextra.
I am looking forward to the memes.

On a more serious note, I hope it is resolved ASAP.

EDIT:
Looks like it has been resolved
https://www.thenationalnews.com/mena/egypt/2021/09/09/breaki...
I am not sure I can agree to this as an answer.

It feels to reductionistic, humans are complex system and often none rational.

Certainly religions provide utility to the followers, but I wouldn't equate wealth of a country as direct correlation to religiosity.

There are wealthy countries (US, gulf counties) that are largely religious, and smaller poorer (czech rep) countries predominately atheistic.

I think religion is more of an entertainment then meaning of life. in poorer counties there is less things to be occupied with. Thats where you have the festivals and celebrations. Contrast catholics in EU vs South America.

Also religion can be seen as a stop gap solution to education. It provides answers to questions - knowledge (though of varying quality). The higher education the lower interest in religion, for one the science + critical thinking exposes errors and fallacies in religious texts. So religion as a source of knowledge looses appeal in educated populations.
Extended duration walking for personal, social, and transcendent purposes
As I understand it, as someone who is also not in electronics, the cross at the top of the other capacitors you can see is designed as a pressure release, it’s a deliberate weakness in the structure of the capacitor so that if it fails, that’s where it will burst. So it’s very likely that if a cap fails, that’s where any swelling will be visible. You can see the cross is distorted/swollen on the failed cap.
You can try multiple variations at the same time. A research team could test roughly 200 variants per week to get this number and be able to test each variant for the entire week.
Too many people treat every dollar as if they were equal to each other in value when they obviously are not. Your last dollar is a lot more valuable than your hundredth, which is more valuable than your thousandth, which is more valuable than your millionth. That's the point of insurance, spending your less valuable dollars.
> making sure the choice is free and informed - not being "encouraged" by other family members

How would you do this?

One way or the other, I think you would end up attempting to create a metric for QoL. Some people, for example, might want death after losing their limbs, or their sight - a difficult life, but not a painful one, some people are born without these facilities and manage to live fruitful lives. If you allow death for those cases, why not evaluate regular suicides the same way?
18 out of your 19 activities are solo-activities.

Who needs social interaction, you should rather be asking.
I don't experience ads with my TV. I don't understand why this is an often repeated point. I've had three so far (due to moving countries), and never experienced this "tons and tons of ads" thing I see people complain about. It's always just been a UI and some apps.

Regarding data collection, who cares? Just get a pi hole if you really care about that.

Also you are describing a fault that can occur with a dumb tv.

EDIT: okay. I found this https://external-preview.redd.it/DcKcaASCdFkfM-eK5pOiu6DIOZb...

I have a samsung TV and I do not see this. Perhaps this is a region thing. I've lived in The Netherlands and the UK and not experienced this.
I'd say it's at least borderline. If you start off with a quasi-insult like "Do you know what AIDS is?", you're already posting in the flamewar style. Please don't do that on HN. It's enough to provide correct information respectfully.
I was surprised to read in the article that the code quality was good, unless they some how pulled off a major refactor since LibreSSL basically called the code a mess.

If I recall, the claim was that OpenSSL prioritized issues paid for by companies, and the alot was left to rot. I'm curious if your friend saw the same things?
The kingdoms Protozoa and Chromista include some former algae that have also motile 'spermatozoan like' forms in its lifecycle. The were plants before, but in some parts of this lifecycle they act like microscopic animals.
Saga’s auto linking looks very useful. The buzzy “tools for thought” (Roam, mem.ai) seem to be missing this. Am I understanding this right?
Not to diminish from the great work of the EHT, but keep in mind what "picture" means here and also in the context of their original work:

https://news.ycombinator.com/item?id=28000578
Bodily autonomy means you shouldn't be forced to do something with your body, not allowed to do everything with it.
Isn’t the iPhone warranty just one year in the USA?
Of course the revenue is sunk into other things, they're trying to invest as much as possible, and so they're looking for additional funding to grow.
A few weeks ago I realized OWASP has a top 10 for API security as well. The first version was published in 2019. There are enough differences in API security versus application security to warrant a separate list. However, that project is very light in terms of Docs: https://owasp.org/www-project-api-security/
I'm wondering how's possible that the keys are device based keys. Everytime I switch phone I can just do a copy of the messages and Whatsapp will import them without issues.

The question would be whether that archive also contains the key then and that the keys are not saved in the WhatsApp servers
Same reason Rust people use a package manager made in Rust, JS people use a package manager made in JS and Java people use a package manager made in Java, because it's close to the context you're already in and if you need to extend/modify/remove something for your own use/for the community, you already know how to do it.

I myself would never use Hyper, but I can see why people would. If there was a comfortable terminal in/for/with Clojure, I'd at least try it.
Preferably connect it to ground through a resistor.
> a policy that submissions use the contents of <title> tag verbatim where possible.

What does "where possible" mean? That would be a very different rule depending on how you define that.

There can be a lot of junk in title tags that we want to strip out, even apart from the (significant) question of linkbait.

How we handle titles on HN is a lot more consistent than people think it is - mostly what people do is notice a few things they do or don't like (probably don't!) and then quickly overgeneralize from that. This is just how humans are with data; it will always be that way and I've stopped trying to fight it.

It's tempting to apply technical solutions to avoid accusations of inconsistency, but that's generally not a good idea - you end up needing to make exceptions some of the time anyway, and then you're back to square zero - and meanwhile, a simple technical solution doesn't handle any nuances, and nuances matter.

Here's a past comment about title moderation if anyone is interested: https://news.ycombinator.com/item?id=20429573.
Low ESR only matters for PWM filtering capacitors, such as those found in monitor backlight drivers and some switching power supplies’ secondary circuits.

It is not necessary to use such capacitors on the primary side, i.e. when the large capacitor nearest to the mains input dies, just replace it with a normal electrolytic capacitor that matches or exceeds the original’s voltage rating and closely matches its capacity.
Makes sense, Go can't compile SQL and vice versa.
If I'm not missing anything it seems to have about the same features as NewPipe, which additionally supports downloading video/audio for later consumption. Any particular reason to switch?
I'm also happily surprised about the nice discussions on this branch of the discussion!
I may be misunderstanding what you're saying, but many modern cars I've driven will still allow themselves to be started in gear.

It happened to me quite frequently until I built up the muscle memory for always starting with the clutch in, and occasionally still does if I forget (I drive a lot of hire cars).
Thanks, this is good context!

> Plugging that equivalent number into a Cocomo calculator, it says "20 years of 800+ programmers".

Of course, it's been 50+ years, but I doubt Bank of New York had 300+ programmers working for them all those years?

It would make sense if copy-paste were a lot of it.

Which makes me think if you did want (or more likely have no choice and need) to make some serious changes to the codebase, some kind of automated assist could be very helpful. I wonder what the state of COBOL tooling is. I wonder if it's going to get better as the technical debt comes due in a hard way.
> the justification of abortion is bodily autonomy

then why do so many pro-choicers also hate vaxxers? And please don't say "that's different, it affects other people!"
> Whats Nginx. Is that AWS.

Nah, it's Kubernetes
A real shame JSON HyperSchema is on Hiatus -- it was a really nice entrant in the space.
Based on just this article, it looks like it needs a complete table definition to work with. Unless it queries the database for the definitive schema, but that would mean you need a database up and running at compile time.
There's an important distinction between "privileged" and "unprivileged" Workflow Runs, and the context within which a Workflow is executed.

Let's imagine there's a repository containing a Workflow (on the branch) that listens to the `push` event and then outputs the value of `secrets.API_KEY`:

* A collaborator pushes: Workflow Run is privileged -> the value of `secrets.API_KEY` is output

* A non-collaborator pushes: Workflow Run is unprivileged -> no value is output

The `pull_request_target` event type comes into play when you need a privileged Workflow Run to execute when a non-collaborator performs an action. For security, `pull_request_target` events are only triggered against a Workflow on the primary repository branch, a non-collaborator cannot sneak a `pull_request_target` into their Pull Request. Essentially, `pull_request_target` in a Workflow on your main branch is "listening" for Pull Requests.

There is no risk using `pull_request_target` if you do not execute any code from the Pull Request within a privileged Workflow. If you execute code from the Pull Request within a privileged Workflow, then you're definitely exposed to a lot of serious problems.

* An unprivileged Workflow Run should... build artifacts, execute tests, upload artifacts to the Workflow Run

* A privileged Workflow Run should... download artifacts from the unprivileged Workflow Run, publish artifacts to storage

> Has modifying the workflow on a 'PR branch' only worked for me because I've been the repo owner perhaps?

Every time you execute a Workflow as a repository owner, it is privileged and can do anything. For example, your Pull Request Workflow Run can access secrets (so you might think that _all_ Pull Requests can access secrets) but in reality, a Pull Request from a non-collaborator cannot.

Does that help clarify? The security model of GitHub Actions has changed over the last year, so it's not completely intuitive if your frame of reference is from before the changes. I highly recommend the GitHub Security blog articles, they're very illuminating.
They don't bleed to ground. Even if the power-chord is disconnected, there still is a circuit between the resistor and the capacitor, and this is where the current runs.
The Power of Email Personalisation
Sure. General boredom and tiredness arising from many years operating in what are heavily political environments, is just giving me itchy feet.

The other opportunity is with a startup, so quite different. Whilst i'm under no illusions regarding the politics, i'd be able to focus more on the tech and move more quickly with it vs where I am now. The base pay is surprisingly similar, albeit with no cash bonuses in the first year, but the equity on offer 'could' amount to something significant in a few years.

If offered, i'll probably jump. Should the startup crash and burn (quite likely) I'll have hopefully learnt some new skills and can always jump back into $(large_org) later on.

Feels like time to roll the dice...
Likely Gorm, I'm using that at the moment and it's eeehhhh.
Before I switched to software engineering, as a licensed CPA, my first job was as an External Auditor for the top 1 firm in my country (biggest in terms of market share and human resource share). It became apparent to me that, even though I and my colleagues, who were hired in roughly the same time frame as me, have the same job description, our experiences within the firm vastly differed.

I know this because I had 4 roommates who were working at the same firm, with the same job title, but under different Partners.

P.S. I guess this is one of the non-legal related reasons why companies don't give feedback, they'd like to avoid being featured in hackernews, I presume.

EDIT: I always forget driving my point home after crafting a lengthy comment.

My point is, I can almost guarantee that someone out there has the exact opposite of your experience w.r.t. the hiring process of twitter.
Last time OpenSSL was in the news for a bug that should generate a warning I took a cursory look at some of the code, it was stuffed with stuff that would generate similar warnings. So at that time I concluded that going through all the warnings would be a pretty big job, and that is likely why nobody did so. On the more speculative front, it might be that some maintainer is against taking whitespace patches, that would probably make anyone who tries give up pretty quickly.

I'm a bit skeptical of the claim "The code quality is excellent", if it was this would be a lone warning emitted by the compiler, and surely it would have been fixed then.
> good luck convincing any developer to develop something they have to test in multiple places with different engines

Ooh, this is such a good point! I am one such developer.
> the original punchline was along the lines of "take a good look at them" (i.e., implying that he's not the biological father).

That’s the punchline I expected when I was reading the joke. It makes much more sense and it is more stinging.
Assisted dying, where it is allowed, is universally conditioned on the subject having a diagnosed terminal condition. If your diagnosis isn't "death within 6 months", then you're stuck with tubes, wires and chemicals, or waiting for it to happen.

So I also hope that if I get an incurable and unpleasant condition, it's a terminal one.
I’m driving the 2013 Plug-in Prius (UK name for the Prime I think ?) with the 4.4kWh pack. I get 25% EV.

Maybe 20kWh would be enough to get it to 90%+ for most people ?

That, in my opinion, is pretty close to problem sorted in terms of decarbonisation of transport. Toyota could have had it in the bag by now.
"The cost of a bad hire is much higher than the cost of a missed good hire."

I see this all the time, but never anyone backing it up with studies.

I'm not calling you out specifically - but rather, I wonder, does anyone here have any comprehensive study on this topic that they can link?

(I'm asking, because this industry is littered with dubious claims that sooner or later become accepted as facts)
wisible!

Sowwy, couldn't wesist!