skysight-inc/HackerNews huggingface dataset:
The point of the salt isn't that it makes it take longer to break any one password. What it does is prevent you from re-using the rainbow table you generate breaking one password when you break the next one.

Sha1 is not a very secure/expensive hashing algorithm and thus does make it significantly cheaper to break even with a unique salt.
There are ways to look for anomalous behavior without creeping too hard (even though it's a business's right to view and monitor all network traffic on their system).

If someone who doesn't have a business need to upload lots of traffic begins uploading large amounts of data, you may ask questions. Maybe you kick off a scripted playbook that then checks for increased logins to other privileged systems, or for large transfers of data from internal sources to the user's desktop.
In what world does all this data in the leak would be stored together in a unified ecosystem? It makes absolutely no sense.

If you're saying that Twitch runs their developer environment in a lousy manner (and you have proof of this), then please go ahead.

But to imply that an intern/average developer would be given access to all this branching information is ignorant.
"Confirm that any third party with whom an app shares user data (in compliance with these Guidelines)—such as analytics tools, advertising networks and third-party SDKs, as well as any parent, subsidiary or other related entities that will have access to user data—will provide the same or equal protection of user data as stated in the app’s privacy policy and required by these Guidelines."

I call to all smart knowing license people of Hacker News.
Is this a copy-left license attached to a person's data?
I had the same experience with The Economist. And they've been harassing me for months trying to get me to subscribe again.
Anecdotally have friends who have very obvious chronic health issues after catching COVID. Trouble breathing, migraines. They're young and healthy too, mid twenties to early thirties. Might be same catalyst triggering different chronic issues but it's horribly irresponsible to say this is something "overblown."
Remember why you started.

If the situation/conditions are different now and you are not happy or your expectations are not fulfilling: Time for change ?
> Seems like if the referrer is hacker news the site responds with a very pleasing image to get around hacker news hug of death?

That and throw some scorn towards sterotypical HN users, which the operator probably finds obnoxious.
Rentech?
Thanks for pointing this out, we're working on ramping up support and a dev rel team. Appreciate the feedback.
There are protests because there isn't a legal way to stop the build. No one can have a pipeline traverse your land against your will.

If the right of way already exists, then it isn't just "your land", it is "your land with caveats, one caveat being a pipeline can be built here".

If the land is seized via eminent domain, then it is not your land any more.
My editors and code review tools do not format or highlight sql for me when it's embedded in other files - eg java. I find capitalized keywords to be very convenient. Of course at that point, I can't run sqfluff on it either but this thread has already devolved fairly quickly.
Also keep in mind that the land was ceded to the USG under significant coercion.
Usually, if you’re visibly underperforming, you get clear warning messages from management before you actually get fired. They tend to be very motivating. Alas, if you’re not getting them yet, then your performance doesn’t look as bad from the outside as you think.
I feel as though it's impossible for anyone to write a thread on HN about Facebook without someone immediately coming in and saying that Facebook is stupid and they deleted their account years ago.

Yeah, me too. But you usually don't have to look beyond your immediate family to find someone that uses Facebook (or at the very least an FB-owned property) a ton. We aren't typical!
Website Feedback for Free
Hi!
It's Wednesday, and I would like to help fellow builders, by giving you honest website feedback FOR FREE.
If you are interested post your website below!

If you would like comprehensive feedback on your website please check out my company: https://dvia.com
Erlang's runtime / virtual machine

https://blog.stenmans.org/theBeamBook/#CH-BEAM
> I can't think of another, large, corporate web 2.0 startup who's gotten owned in a similar fashion

Linkedin, Microsoft, Yahoo, Google
If you want to delete your account, and your primary goal is to prevent future data going to the owner of the app from your device, why not just delete the app?
Download Phoenix FD 3ds max 2021 for free
Oh good, Ted "Cancun" Cruz will finally be put into prison.

In all seriousness, my daughter in college was in a psychology class where they were talking about serial killers. The Zodiac killer came up and a guy in the class said, in all seriousness, "Isn't Ted Cruz the Zodiac killer?"
Exactly. Taking it to the next level, leave your own tracking info in the fakery, e.g. "favorite vacation: France". Then if someone cold-spams you with tickets to Paris, you'll know why.
I definitely don't believe in good outcomes. I don't think performance is rewarded, and the next level is unobtainable. The systems only get more complex and unstable. The company has been making a string of decisions that have a negative impact on employees too.

I'm a midlevel application engineer mostly maintaining systems that move data from a legacy system into a cloud system. There's a high level of context switching and constant PRD support issues. It's a terrible environment for me, yet most other postings don't seem any better.

I haven't completely ruled out internal or external moves, but I'm tired of people saying "just leave". I have posted to a couple internal and external roles, but didn't get them (not enough "real" Android experience). I have some professional and personal things that limit some of my choices and can make the switch difficult/risky.

I am a conceptualizer. I do think it's a lack of ideation, or that the even when new ideas are presented they aren't pursued. I think I'd love a job as an architect, but that's unobtainable from my current level.
I wouldn't take your personal experience on Facebook to be universal.

Being a public social network, Twitter's toxicity and distortions are much more visible than Facebook's, and the user experience is far less varied because of common touchpoints like Trending Topics and celebrity posters.

Facebook is a far more unique experience per user, so personal experience isn't a great way to understand others experience. A lot of Facebook's problems are related to the network you've formed, on Pages you have to follow, or in private Groups. Facebook also serves far more people and is ubiquitous and worldwide in a way that Twitter just is not. That's why you can't really rely on your own judgment of the product and sort of have to fly on instruments (population level data) to understand it. This is also why it's critical to have researchers have access to that data to understand what is going on.
What alternative is there to utopian ideas? Status quo? It's not working for most people anymore. I'm not saying we should radically change society, but if Jeff Bezos and Amazon aren't paying taxes, there is something wrong and it should be fixed.
It happens, we're not perfect ¯\_(ツ)_/¯
Flash did it better. And on Internet Explorer 6.
Investigation of violent pushback financed and equipped from EU budgets
Yeah, C is really easy to interface with assembly language.

Doesn't necessarily have to involve assembly!

https://duckduckgo.com/?q=c+interpreter
This is basically GDPR. You, as the creator of an app or service is the sole entity responsible for people's data. It's on you to make sure to not spill that data to third-party services.
was like that for me too, I believe app[hash].js is the culprit, a 5mb download. It's a very pretty site, and I wish I could do this shader / unity / 3d stuff
DLP products tend to be more about scanning the contents of data for sensitive patterns, at least in my observation of the market. There are other products (typically built into SIEM) that do correlation on login events, network traffic and whatnot to detect anomalous behavior.
In California the New York Times still requires you to chat with a customer support person on their website. You still have to wait in queue, then wait for the person (or maybe it's a bot at this point) paste in several attempts at retaining your subscription.

The law needs to be that you can cancel all recurring payments through a standard interface. It's ludicrous that my online banking account doesn't just show me all subscriptions and allow me to cancel all future payments of any of them.
What they meant is wrong.

I can consult Merriam Webster, which agrees with what I said.
https://www.merriam-webster.com/dictionary/circumstantial%20...

Or Britannica

https://www.britannica.com/topic/circumstantial-evidence

Or Cornell

https://www.law.cornell.edu/wex/circumstantial_evidence

Or basically any single law firm or courthouse

https://www.shouselaw.com/ca/defense/legal-defenses/circumst...

https://www.ojp.gov/ncjrs/virtual-library/abstracts/circumst...

https://www.nycourts.gov/judges/cji/1-General/CJI2d.Circumst...

Yes, inferences must be made. But as a lot of those links mention, direct evidence (the other kind of evidence) is often worse as it's usually eyewitness accounts.

Lazy television writers have done us all a disservice by repeated implication that circumstantial evidence isn't good enough.
I feel like a lot of policies were always there for that reason. I don't consider this anything but just another policy like that.
One shouldn't aspire to be a Zuckerberg/Dorsey.
It seems like charming psychopaths are using most of these checklists to further their goals and fly under the radar. One must admit that these checklists are just common sense and not bad in themselves, what is bad is the goal of winning people over for attaining some nefarious goal or gain some advantage.
> There’s a reason pretty much any real tech company doesn’t use nosql except in very clear explicit cases.

That is such a bold claim that is obviously not true.
They're going to sell this pill for the same price as a single IV bag of saline at a hospital? Way to go Merck!
An extra solar panel would be cheaper per w I'm pretty sure
> Frances Haugen's gumption and foresight.

Yeah if you mean hiring Obama's attorneys and orchestrating a media crush for not censoring people on the internet hard enough, I don't know what else you could mean.
Surely this is a thin cover for a weapons program
It's the Erlang runtime/virtual machine, like the JVM is for Java, Scala, etc.
I was trying to delete my Instagram account just yesterday and didn't even get around to it since I needed to do it from their website.
It's a fun idea. I'm working on something similar for my personal site (a little interactive 3D sandbox with threejs and bullet physics).

People saying that it's not small or that it doesn't load fast enough are kind of missing the point... it's supposed to be a showcase of some skills this person has, not a tiny fast site.
Bruno-Simon.com
I'll take your word for it (I'm in the lack of knowledge camp), but I don't see this as an argument for not raising the marginal (and if we do it right, effective) tax rate on the very wealthy.
It could have been lifted verbatim from the GDPR.
I dunno, try opening a couple of parallax / animation heavy websites and just stay on them scrolling up and down. I have had the fans revving up from that plenty of times.
Making bad choices happens all the time. Learning to correct them is a good skill to build up.
That's an interesting corner case. Even if turnabout is fair play I wonder if it's even a good idea. If you have two devices, and you delete your Apple ID from one of them, do you brick the second device? I think there are dragons there.
This argument makes sense in the normal course of drug development, but drugs which are financed by the federal government like here (to what extent the tens of millions the government gave amounts to the full cost of R&D I don’t know) should not be allowed to be sold back to the American public above cost. We paid for (a portion) of the R&D already, pharma companies should not be allowed to charge us again.
> Those novels I had to read for school?

But that's not a fair comparison , you stumbled on FFIV on your own, or it was advertised to you in a potent way, in any event the process of discovery is much more powerful than the novels, they were just homework.

But it should also be said that most people consume books via movie adaptations.
For more, similar, coverage of the same issues from July:

https://theintercept.com/2021/07/07/intercepted-line-3-pipel...

Surprised it didn't get more attention then. It's fairly convincing in my opinion.
Space solar arrays would be the perfect solution if we needed the energy in space. Since we need it on Earth, and since the sun is already sending exactly that energy to Earth, they are almost entirely pointless.
I'm going to take that as a compliment, thank you ;-)
> Sha1 is not a very secure/expensive hashing algorithm and thus does make it significantly cheaper to break even with a unique salt.

Ok, so how long does it take to break the hash I've provided if it's not very secure?
it buffers you from dark billing patterns of all companies except apple
I believe that would require time travel.
Blockchain wallets are an interesting case. I would argue that for example an Ethereum wallet that generates an address for you in the Ethereum system is not required to provide a way to delete that account again. Similarly, the Chrome app is not required to allow you to delete your hackernews account even though you created it using the Chrome app. Generally, if an app enables you to create an account in a system controlled by someone else, the account deletion rule shouldn’t be applicable.
I mean, the PSP was formed to replace the more violent coal police and break strikes... police protect capital... same crap, different decade.
from the Guide ...
> If your app supports account creation, you must also offer account deletion within the app.

big sigh of relief for me with a service companion app that delegates account creation to a web admin interface ...
I think the bigger underlying trend here is that people increasingly know about the thing they are buying. This means the balance of product, brand, and sales that leads someone to buy business software is getting more and more skewed towards product. It's kind of crazy that measuring product impact on revenue does not have established practices to the same extent sales and marketing approaches do.
A good system would probably have tiered permissions, something like:

1. No internet apps: store data locally on the device only, no upload or download.

2. Partial internet apps: store data locally, and only download data through an Apple proxy service that hides the user's IP address and any identifying info.

3. Full internet apps: store in the cloud, uploaded/downloaded through an Apple proxy that logs/filters everything. Or even stored in Apple's cloud.

4. Unrestricted internet apps: VPNs and web browsers, and whatever else actually needs arbitrary access to the internet.

There's no reason my bluetooth scale app needs #4 (which it has today) when I would much prefer it have #1.
But I think most people know what those words are so somehow the idea is shared very well. Most taboos are probably like this - they're actually well known but talking about them and doing them is discouraged.

I wonder about believing you're wrong about any specific knowledge you have. That's pretty hard. Others can try to communicate it to you but your brain tries to find ways to reject that information.
>I wish someone would make a site like that again!

I will make a site similar to that. I really want to. I have plan all drawn up for how it will work.

Its ad free, but with premium services for those willing to pay. One member of a family or group can pay for everybody.

The site is ephemeral, all posts are removed after three months. Its not a place where you store all your photos.

Its a site where friends and families share their holidays, their baby photos and birthday invitations. There won't be sharing news.

I'm not scared to take on the behemoth, I'm one guy in a home office. I only need a few thousand subscribers to make it worth my while.

I've got about 2 years left on my current project, then I'm going to start.
> And you need to stop your web service for the duration of the "verification" or switch to DNS-based verification, which is not supported by all DNS providers.

I have been using the webroot option. Minimal web server configuration which I have standardized across my web servers and put into configuration management, and doesn't require the web server to go offline, just a reload at the end to pick up the new cert.

Also I don't update software on running system but will build a new system and replace the old one after testing. All automated.

I took the time to set this all up to make it easier on me in the long run, and it has. To each their own.
Exactly. We don’t disagree, I don’t think. Decision trees and regression analysis should count as statistics for the purpose of this issue, as they are transparent and accountable. Neural networks are another beast entirely, in my opinion.
I'm not sure I see that as a benefit so much a government doing a poor job on regulations for subscription services and online payments
I find the first code example easier to read and process.

However, that's because I've written a fair bit of C code, and so when my brain goes into "C mode", the symbols &, =, ~, <<, etc. all have clear and unambiguous meanings - whereas ClearBitField does not. Additionally, the pattern ~(foo << bar) is a common C idiom, so beyond the individual symbols, my brain recognizes the whole pattern so it's "semantically compressed" (easier to think about) for me. This would not be the case for a beginner.

Which style is better depends on an individual's preferences and experiences - there's no "right" answer.

This is a stellar example of one of the many reasons why code-as-text is a huge mistake - because structure and representation are conflated and coupled together. A sanely written programming language represents code as code objects, and you can configure those code objects to be displayed however you like, whether that's baz &= ~(foo << bar) or ClearBitField(baz, 1, bar).
Yep. That makes more sense. But here, they are basically looking at your ability to manage credit "responsibly" by looking at your payment history, and utilization, among other things.

So say if I spend $3000 a month, and pay it off every month in full, and my total credit limit is $10,000, they will ding me regardless of my payment history, because my utilization (30%+) is considered high. So if I want to maximize my credit score, it behooves me to get more cards (easiest way to increase total credit), and spread out the payments among them.
> For some reason, school boards are terrible at the use-mention distinction.

School boards are mostly comprised of average enough people, who are generally quite bad at this distinction. Although with school boards it's a bit worse because school board members can selectively choose not to recognize this distinction as a cudgel against their petty opponents (the lower the stakes, the nastier the fights...)
I don’t think they provide the energy, they change the required energy for a reaction to occur. My understanding is that is can happen due to the physical structure of the catalyst changing the electronic configuration of the molecules being reacted. I think often instead of the two molecules coming into contact and reacting, the two molecules and the catalyst come into contact. It’s a whole different reaction, but the catalyst molecule doesn’t change its composition and is left unchanged after the reaction.

I guess maybe a terrible analogy would be you’re trying to cross a flat field but there is a large group of animals, say, cows in the way. You’d never be able to get through the crowd of cows without exerting a lot of energy. Then suddenly a dog, catalyst, come over and starts shooing off the cows. Now the cows have moved out of the way and the flat field is clear. You can now make the journey while expending less energy.

Hmm maybe someone else can explain it better!
There are academic researchers and private teams all over the planet attempting to find solutions to disinformation, bullying and even spam.

Of course, it's pretty clear by now that there isn't going to be a magic bullet that is going to make everybody happy.
I don't see how this precludes just-in-time access. Even if people can re-up on their own, you can still observe the data access patterns and manage the risk. Further, when you see someone is getting blocked a lot you can improve the experience for them so they are unblocked, or have more efficient access to the data. This is just mature data and security management.

Quality of life and developer experience are important topics in many ways, but should they really trump security consistently? It's always going to be dependent on people's risk assessment and comfort, but frequently it skews the wrong way because the people making the decisions know that they'll be gone.
FB is a toxic, sociopathic company, led by a sociopath. Full stop. Talking about its 'incredibly smart business choices' is like talking about the 'smart moves' a serial killer took to avoid capture for years & years. Interesting to some perhaps, but obviously not worthy of any admiration.
I thought it was pretty obvious that that was a joke.
I'll likely get a porr rating this year based on their feedback. Interestingly enough, they say I've somehow turned it around in the past couple months eventhough I didn't change anything.

The only real feedback I got on why I'm off track is that I'm slow. I also agree that I'm slow. Management and I agree that I'm slow due to a high level of context switching. I brought up that maybe a new team with less switching would be better for me. They are discouraging that.
I worked for a multi billion company and even 6 month contractors had access to basically everything with little effort.
It's not the conclusions I've
drawn based on your own dismissive words that will prevent me from putting stock in what you say, it's the way you seem to believe that it's impossible for others to have experiences that differ from yours. I'm not the only one making assumptions here, the difference is that I'm making assumptions about you based on what you say- you're making assumptions about the whole of humanity based on your own experience. It really blows my mind that you're convinced that what worked for you is a panacea. Of course, saying things like "Tldr get fuxked" doesn't lend your words any strength either, so I guess I shouldn't be so surprised at such a limited perspective; forgive me if I stop giving you my attention. I hope you have a pleasant day nonetheless- best of luck to you and your loved ones.
For example how does Oracle make money from MySQL, a free open source implementation of a database? They sell support.
I should be able to tell my credit card company that I'm ending a subscription, and have them be in charge of notifying the provider that the subscription has been terminated
Five to the power of five is 3,125. Ahem.
We built a system that creates backups of PII using that mechanism; throw away the key after data is supposed to be deleted. That is legal under EU GDPR.
I'm not sure what you meant by "online rebalancer" above, but shard rebalancer in Citus is open source since March 2021: https://www.citusdata.com/blog/2021/03/13/scaling-out-postgr....
This is brilliant! This wasn't just an accident; a true easter egg. Good find.
Too risky. I have a family to support.