skysight-inc/HackerNews huggingface dataset:
Dealing with this issue now with some institutional clients. Authz as a service is the right way to go, and it's probably the most interesting topic in security, imo.

There is an emerging security architecure role I'm seeing that is basically application governance design, and I don't know whether it will go down the stack into a security dev/ops role using a highly expressive policy DSL, or up the stack into a kind of in-house technical counsel who specifies it to a provider, who in turn implements it as a service and is compensated for taking on risk for enterprise app authz decisions. e.g. is there the right level of risk to externalize it to a provider, or little enough to keep it buried in dev?

I worked on the design of some authN products (universe of UMA2, SAML, OATH, EMV, etc.) and did some early xacml design for a policy engine, and the enterprise market is just catching up to decade old federation technologies now, and that's just for IAM. If that trajectory is any clue, federated authorization as a service probably has a 7-10 year runway in front of it as well.

The article is so valuable because it articulates how inextricable business logic and authorization often are. Personally I think the main reason that's hard is because of poorly thought out abstractions in the business logic and unwinding these systems will only progress one enterprise architect funeral at a time.

If I were making a bet, for the above reason I would ask whether it may be reasonable to treat enterprises as a sales tarpit for something this important and cool, and focus on new companies with clear growth that will be huge in 10 years instead of waiting for one that's already big enough to want this to roll over.
I'm confused by "I/O heavy applications".

This is a reality: I can server thousands of concurrent connections using a single machine in a server program written in Go.

Can you do the same thing in Python or Ruby? No.

Something to be noted: when your host language is slow (like Python) you almost have no choice but to make your application I/O heavy.

What do I mean?

Your application needs feature X.

Your choices:

- Implement X in your codebase.

- Run a separate program XY that sort of does X, host it on the same or a different machine, and let your actual program talk to XY over a socket connection.

When I write in Go, I just implement X in my program. No I/O, just regular code.

When you write in Python, this option is out the window, so you have no choice but to run XY and talk to it over a socket.

An easy to understand example is a cache. In Go I can just cache things in memory. In your python project you have to use Redis.

So it looks to you like the problem domain is inherenty I/O heavy.

Yes there's a lot of I/O involved, but that's mostly:

- TCP connections from clients (HTTP)

- Saving data to permanent storage

Another thing you can do when you write in Go vs Python is you can move computations from the database server to your own code.

See, there's this thing that happens in Python code where, because your host language is slow, you lean heavily on your (Postgres?) database to pull up the heavy weight. So what happens? Your database becomes a bottle neck. A lot of the heavy computations that you push to your database can be performed a lot faster in your own code base .... if only you weren't hosting yourself in a slow language.

This is not some theoretical bullshit. I've seen this manifest in real world applications.
Yup, we've tried a lot of different tools in combination. All of them have their own trade-offs and extraction errors.

This system uses GROBID and some extraction techniques of our own. We're working on a GROBID replacement too, which should help us make things better.
It's like the difference between seeing a video of a person and meeting that person.
Look up the FAANG acronym. It’s a collection of companies that are supposedly the “best” to work for. Facebook is the F

Edit:
Here’s an example Reddit thread of what I mean: https://www.reddit.com/r/csMajors/comments/mnl4u2/why_does_e...
Yep, cash, lots of cash. Your cash.

https://observer.com/2020/11/big-tech-2020-presidential-elec...

https://www.opensecrets.org/orgs/apple-inc/summary?id=D00002...
Not signaling in advance for what the car likely considers to be an emergency maneuver is a pretty nitpicky criticism. The problem is the unnecessary emergency maneuver, not the lack of signaling.

As for lidar, well lidar isn't perfect either. You might get the same behavior from a lidar car if a trash bag happened to be blown into the road ahead by the wind. All types of sensors rely on machine learning to classify their observations. Lidar isn't a shortcut that eliminates that machine learning dependency.

Finally, calling what Tesla is doing "single frame image object classification" really betrays your bias here. That hasn't been an accurate description of the system for a long time.
Wrong how? Skewed R?
Hubble has been visited I think twice in 3 decades.
It’s still 500k to invest in poor locations. Unless I’m out of date and that has changed as well
A list of open source games
This is a small list with my bookmarks of open-source video games. Contributions are welcomed.
> There is nothing fundamentally useful about a single NFT so far.

Do people promise there is? NFTs essentially seem like digital collectible cards. It seems stupid to me, but so does collecting little pieces of cardboard with pictures printed on them.
You can use an Android phone without using any of Google services and without a Google account. Can't do that with an iPhone.
>"Bush administration came in and immediately dropped the MS antitrust case because they were 'pro-business'"

From what I remember it was definitely Bush's doing.
I don't understand why this is relevant. To use the word from that article, please do not "shitpost" here, let's keep the conversation above ground.
If they would I'd call that business model open sauce
You're right again. I've edited the first comment since this is clearly a problem.
I didn’t assume that of you at all, I actually had assumed the opposite and that you had experience in the area.

I agree it would be challenging to have deep and useful markets, but perhaps there’s more innovation to be made there — and many of these high level markets that are top of public consciousness I’d expect to have plenty of liquidity.
It's still nothing like today. I could connect to the cluster with my phone in a gas station bathroom if I wanted to. Imagine telling people from the 1970s the sheer amount of computational power I can trivially call up today over the course of a bowel movement on the side of the road.
Oh, it was an Olivetti camera <3

I remember when I was a kid and up to my teens (80's-90's) many more countries had their own national tech and people were understandably proud of it.

I grew up in Italy hearing stories of how forward thinking Adriano Olivetti[1] was.

It was a more diverse world.

[1] https://en.wikipedia.org/wiki/Adriano_Olivetti
Probably, but do you think it’s at least in part a legitimate response to the Chinese threat?
Turns out you can do what the top comment by chhickman is doing without any addon as well. Follow my steps above in "Edit 2", and add this to your CSS file:

@-moz-document domain(news.ycombinator.com) {
a:link {
color: orange !important;
}

/* visited link */
a:visited {
color: green !important;
}
}

Per-domain custom CSS supported out of the box!
Fears London and Paris would die due to Covid are unfounded, finds survey
Sadly Google doesn’t need to be that much better for a bunch of us. I need Gsuite apps daily. Google Maps is still the better alternative, and we all probably watch Youtube.

Getting rid of Google is not an option. The choice comes down to how much Apple I want in my phone.
Many times people engage in behaviour they know is bad for them. See smoking, alcohol etc. Regulating the entities which makes that bad behaviour possible is a reasonable solution.
Carefully written Go vs uncarefully written C? Sure.

Carefully written Go vs carefully written C? I still think C would win by a factor of 10.

Like I said, most slowness comes from memory access and fragmentation. In C you can use strategies like arena allocations. In Go you cannot turn of the GC.
https://en.wikipedia.org/wiki/Velvet_Divorce
He was focused on using his machines to efficiently generate mathematical tables. It was Ada who realized the potential of the analytical engine as a universal computer. She even wrote that given a good numeric representation for sound, one could program the analytical engine to generate algorithmic music based on mathematical rules. Babbage himself wrote examples of programs for the engine, but they were all very simple examples of numerical calculations that would be applicable for generating mathematical tables.
FAANG is composed of large companies - not great companies. Those employers rarely make it onto genuine lists of best employers and if you want real pedigree on your resume you'll want to come out of a small but successful company. You can be asleep at the wheel for two years and leave a FAANG with neutral or positive reviews because you were sociable - if you helped grow a tiny company into a small company recruiters will take immediate notice.
Yes, me too. Is that all he thought it would take to switch? Wasn't Apple's offering good enough that such an insignificant action was all it took for him to get nervous about user flight? I get that he wants his users to be locked in as tightly as possible, but again, it comes across as very low confidence in their own product.
i kind of assumed that nfts, just like a lot of physical art, is just a new and exciting way to launder money
From the docs:

> ... indicates that the server refuses to brew coffee because it is, permanently, a teapot.

So I guess, when it is asked to perform coffee brewing? But pay close attention, to your general purpose brewer:

> A combined coffee/tea pot that is temporarily out of coffee should instead return 503.
I'm interested in and excited about oil, but three things have stopped me every time I've tried to give it a go.

1. The complete and utter lack of useful documentation. There's not even a link to any docs from the main page of the shell's site. You have to get to the docs from the release page, [1] but I had to find this out by Googling. Given the number of blog-post-like entries in the docs, seems like it would have been less effort and more effective just to write standardized and complete documentation from the start.

Just as an example: can anyone tell me what built-ins Oil has, how to use them, and where they are documented? I'll give you a hint. I found out from one of the blog posts that oil has "min" and "max" commands. The following is valid Oil code:

const x = min(1, 2)

But what other commands does Oil have, and how do I use them? I have no idea. Some of the doc pages 404 so maybe they're supposed to be there. I have found some pages listing built-ins which are mostly undocumented, but none of them list min or max, so I know they're not complete.

2. It's still pretty buggy and lots of features are missing. Development has seemingly moved slowly over the last several years. If it ever did get to the point where I could make it a daily driver then I'd be willing to track down and report bugs, of course.

3. I'm a little concerned by how much emphasis is put on POSIX / Bash compatibility. Unless there's going to be a way to fully disable what Oil considers "legacy" language support in a script, then that is going to leave a ton of footguns for people who want to write "modern" Oil code. It's not clear to me whether that's the plan or not (I haven't read every one of the blog posts), but it seems like a mistake to me to sacrifice possible syntax improvements on the altar of compatibility.

To be clear, I realize this is basically someone's solo project, and I am impressed by how far it's been taken, just clarifying why I don't think it's ready for general use yet.

[1] https://www.oilshell.org/release/latest/doc/
With the HomeKit and UniFi integration I can finally say “Hey Siri, turn off the Xbox internet”

I do have to say, the amount of integrations are quite remarkable. I’ve been running Homeassistant for about two years now. It can only see it getting even better.
It would be interesting to see similar data for other large cities which posters on HN have been predicting/reporting mass exoduses from such as the Bay Area.
If an experience can't pass a double blind test, I don't think it's serious. People don't want to just support an artist. If they did, they'd fund them on Patreon or what have you. What they want to do is act like its about supporting an artist when in reality it's also about them playing the game of supporting an artist before they get popular so they can make an income off of identifying talent before it arises.

This is a well worn path and a lot of actors engage in it, but it isn't really about altruism. It's about return. The difference between holding a real Mona Lisa and holding a forgery is that you know for certain that every molecule of light reflects as it did. That the very materials used by the artist are still there. This is not the case with NFTs.
Implementation of Google's Zanzibar: https://github.com/ory/keto
Orson Welles talks about Citizen Kane (1960)
Narrowing Division Insight and Benchmarks
https://en.wikipedia.org/wiki/Maurice_Wilkes

His Turing award citation: "Professor Wilkes is best known as the builder and designer of the EDSAC, the first computer with an internally stored program."
Super duper excited about this and have been for the past five years. Awesome to see things coming together.. good things take time! This guy is singlehandledly trying to elevate shell, revealing its secret beauty and immense power. My favorite thing is his obsession with bash backwards compatibility-- it has led him to get super deep into the bash parser. Unrelated but useful by the same person: Bernstein chaining of ssh and su: https://www.oilshell.org/blog/2017/01/31.html
Sorry but this reads really silly.

"By choosing to value beauty, you are making a statement about its importance in your personal priorities, values, and hierarchy of needs."

People flipping art and holding assets on port docks to dodge taxes is valuing beauty?
Enforcing the Facebook Code of Conduct would be a start. Have you read it?
You can look into btrfs and duperemove for offline dedupe.
If you want to support artists, just give them money—don’t force them to buy into a cryptocurrency. Most marketplaces require a fee to even “mint” the token in the first place. If the artist can’t recover that money, you’re ultimately harming them, not supporting them.
This discussion calls to mind the quote, miss-attributed to Albert Einstein, "We cannot solve our problems with the same thinking we used when we created them."
> What are the examples of successful withdrawals?

Australia or Canada, perhaps.
I can't tell if you're joking, all of the results except the top one show "Shell oil" results for me. Not hard to imagine that this impacts searchability if you're looking for something specific.
Linkerd amongst the ranks of Kubernetes and Prometheus
Oh, that's excellent. Yes, it's very much like that!
Elites across history have seen their countries as a resource to be mined long before the invention of the concept of a nation-state. This concept significantly predates nationalism.

What's unusual is that in the past few centuries, the rest of us have been explicitly conditioned to act in national interests.
The withdrawl from India was safe (for the British, let's ignore the partition bloodshed) and didn't lead to immediate regime collapse... so I certainly don't think it went as badly as Afghanistan or Vietnam.
The problem with this is that even a well meaning and useful piece of technology will be called a scam and ponzi if they have a coin. Look at the layer one chains, ETH, SOL and AVAX. Are these ponzis?
Can't believe we'll get Nuclear Subs but not Nuclear power to combat the actual looming threat of climate change.
This is about the nuclear submarines. It's 100's of billions of dollars.

Currently all countries with nuclear-powered submarines have nuclear weapons.

Australia has been a hillbilly nation for a long while, they were literally looking at buying nuclear-powered submarines and converting them to diesel.

The have the expertise to deal with nuclear, the resources and a strategic position.

It could be a chance for them to grow up.

Traditionally they have used their large land size for digging. Farming and minerals. They have educated themselves at a high level but they do not use that except to sell education to others then send the locals to the mines.

It's hard to know if it's possible for Australia to pivot. Pride in being uneducated, like the fear of nuclear and the cult of environmentalism is as toxic there as anywhere else and they have left it late. But we will see.

Biden's announcement - https://www.youtube.com/watch?v=XGYzQERSjmQ
I'd rather be bored out of my mind than have to work. Lucky for rich folk they can do what they want whereas most of us need to work to live.
By learning what they are. It's not that difficult. A pyramid scheme of any sort requires new participants continually. Crypto currency does not.
"It just works" is a factor for a lot of people and businesses.

Whether or not this is possible because Microsoft is an aggressive, monopolistic company is a different conversation altogether.

I pulled up Azure last weekend to see what the pain level would be on standing up a new corporate environment for our organization. It turned out to be so easy I just did most of it on Friday night. The thing that was most staggering to me was the ease with which I could provision AD DS services. I don't even know where those computers are. I am more than happy to not have that problem on my hands anymore. Some of you will argue that this is a perk of Azure and not Windows, but I would say that Windows is the enabling factor behind a lot of this automation.

On Monday morning, I handed everyone new windows credentials and it all just worked. No fucking bullshit. VPN, certs, office, outlook, visual studio, everything.

For organizations that don't have time for bullshit, Windows seems like a reasonable option to me. I know a lot of you can come up with an unlimited supply of one-off reasons why windows should never be used, but the harsh reality is the entire ecosystem considered together is fucking wonderful if you don't have an unlimited IT budget and need to turn a profit to survive.
Just curious, would one of the newer HDR formats/displays, with their more accurate color space and brightness, have helped?
What would stop the good Facebook employees from just memorializing evidence of the harm Facebook does to girls/society/the elderly/the conspiracy minded/the Rohingya/etc by emailing supervisors about it and then leaking the response or lack of response? Is Facebook just going to fire the good people that still work there?
Nobody listens to chicken little because he's overdramatic and hyperbolic, like most children who haven't had enough life experience to temper their reactions.

It's been awhile since I saw the film, but that's what I remember. Regardless, even taking my comment less literally and more like "it feels like a children's show" would still be an accurate take.
> forgiving yourself and take a deep breath

I appreciate the reminder and the helpful tone of your comment in general!

> As you learn, you will undoubtedly be aghast at your own code that you wrote at any time before 6 months ago.

Just checked, and my code from 6 months ago looks identical to what I write at work. My programming style went through a few different phases but its variability has mostly leveled off since I've started writing in a mostly-functional style.

> It's not purely about technical strength

It's simple stuff like putting together a base Modal display component for re-use instead of copy/pasting that div with the inline-styled zIndex of 99,999 for the umpteenth time.

> As you move up the seniority and scale ladder to larger projects and architectures

I hope to side-step a lot of those pitfalls by exiting the ladder altogether and starting my own company where I take a fine-toothed comb to the process of onboarding new hires. Time will tell if the demands of scaling a company end up sidelining my desire for good hires, but software is still a somewhat nascent field, so the sky's the limit if you ask me!

> the human brain is weak, and it's hard enough to not get caught in the wrong local maxima without facing up to the immense challenge of choosing between global maxima in the incomprehensible problem space where software meets human needs in the hybrid meat/mental/cyberspace ecosystem where they exist and evolve over time.

This is a good way of putting it and it's why it's the problem I've chosen to work on for my first product as a startup founder. I call it Pidgin, and my vision for it is a GUI tool for refactoring and even writing code in a more deterministic and reliable way. I spend my mornings before my day job working on it. I think the fact that I think about code quality intensely at all hours of the day probably contributed to the emotional tone of my initial comment. :)
> What are the examples of successful withdrawals?

Canada, Australia, New Zealand, and the Caribbean territories. Arguably Hong Kong.

You could also make a reasonable case for Egypt, Ghana, India/Pakistan... The withdrawal itself was peaceful and didn't leave the state in immediate civil war, even if it wasn't stable in the medium term.
I lean towards believing that such age restrictions have a counter-effect: causing youth to be less prepared and abuse what is restricted after finally being allowed. For example, more binge drinking in the US compared to other countries with lower age restrictions.

I think properly informing/educating youth is a better solution. Treating them as some other entity not worthy of rights will not lead to a productive solution.

Found https://www.youthfacts.org/?page_id=92407 which has additional supporting arguments in the matter.
I'm all for supporting artists to make more art, but how many of these NFT peddlers are actually talented artists trying to make a living and how many are just skilled marketers and shill bidders?

To me NFTs sound self-contradictory, the digital world is inherently fungible and discrete. That's why computers can exist and you and me can be sure the same sequence of bytes gets executed in the same way on different computers.

The only uniqueness here exists in whatever specific public ledger implementation you decide is worthy, and you better hope it will still exist in 20 years, along with the link to the wordpress blog where your jpeg actually exists. Or maybe it's embedded on the actual chain now as they did with those 8 bit spaceship pictures, who knows. Old man yells at cloud, and I'm not even old yet.
Buy a ledger https://www.ledger.com/
I'd argue that the Soviet withdrawls from Eastern Europe went pretty well. Safe, orderly, no real bloodshed.
Apple quietly hires ex-Cuomo PR chief
That's not so much to do with RSA as it does with Perfect Forward Secrecy. In fact, the banks tried to make their own separate TLS standard instead of using TLS 1.3: https://www.eff.org/deeplinks/2019/02/ets-isnt-tls-and-you-s...
I don't care about lidar. What I want is _any_ system that starts from a foundational basis of establishing a geometric model of the environment to determine "flat ground" vs "thing" without first trying to classify its pixels and ignoring the things it can't identify. Humans do that without lidar just fine, but Tesla's failures consistently look like it doesn't even try to establish geometry with its cameras.