skysight-inc/HackerNews huggingface dataset:
This particular article points out specific problems, but I think your assumption that being a replaceable cog is necessarily bad shows a lack of imagination.

An advantage is that you can set your own hours and drop the work whenever you like and not think about it, because someone else will do it. Combined with working from home, it doesn’t seem like all that bad a way to make a few extra bucks? At least, if the problems in the article can be fixed.

It seems like a decent fit when something else is more important in your life and the job comes second or third.
I've worked for 2 startups in the US and the captables were private. The employees had no idea who owned how much or what the liquidation preferences were.

This post on reddit really opened my eyes about why all your stock could still be worthless even after your company gets bought for millions of dollars. I suggest that people read it before joining at startup in the US

https://www.reddit.com/r/startups/comments/a8f6xz/why_didnt_...
I agree in the abstract but I have seen nothing in his posting history which suggests he's interested in rationally evaluating this or has made an effort to understand what he's pasting any better than the people he copied it from.
https://www.jfrog.com/confluence/display/JFROG/npm+Registry
There are quite a few toxic places in the software business, no?

Medical field (being a physician) is not a walk in the park, but:

1. nobody questions you intelligence/knowledge after, say, 20 demonstrably
successful years in the business

2. on your way home you can say "tough day, but at least I am making $600K/year"
How were Democrats supposed to prioritize something that was already seen as a Constitutional right? There's not that much more you can do about it and then manage Supreme Court appointments. Other things happen. Terrorist attacks, pandemics. It wasn't like it was truly hanging in the balance until 2015-16.

Which is why the marriage equality movement was right to work on support at the state level first and why gay marriage will remain the law of the land.

I have a more optimistic view of this. Removing abortion access as a Constitutional right will push the issue back into direct politics, where, as Traister points out, access is popular. When all is said and done you will have a more legitimate and broader right in perhaps 25-30 states, which isn't that much different from the status quo right now, except you take this focal point away from opponents.

Maybe I'm wrong, but what I'm saying is supported by current polling and the results in marriage equality. Maybe the Court will go further and hold that the right to life of the fetus is an inviolable right.
I don't really agree with the tone of your comment, and why would you cite a section of the article where the author was talking about a front-end testing framework?
Someone is missing knowledge, admits it, and this somehow inflames you? They created a free tool. Nowhere do they claim that this is a comprehensive replacement of a full O'Reilly book.
I have the exact same experience with Linux (Fedora) on X1 Carbon Gen 9 (everything works great), and with the Intel Macbook, where falling asleep connected to the monitor almost always results in a crash.

You simply cannot beat the MacBook touchpad though. Feels amazing. The X1 Carbon trackpad and click buttons feel downright cheap in comparison, and it's the flagship laptop.
In the Internet era, I can directly access reports from leading experts. Why would I be interested in a reddit user?
Yeah the old manual worked great in text browsers. But I imagine they still provide it as such as a package like they always have
It is possible find a text on DDG which is very similar:

(a) The Employee has attached hereto, as Exhibit A, a list describing all discoveries, ideas, ... which were created,... by the Employee prior to the Employee’s employment by the Company ..., which relate ... to the ... business of the Company, and which are not assigned to the Company ... or, if no such list is attached, Employee represents that there are no Prior Developments.

I am not a layer, nor even a native speaker, but it looks to me that this company does not want to steal prior ideas or inventions, but wants to protect them from future claims of ownership by an (ex) employee. So the employee has to provide a list of ideas/inventions/etc that (s)he claims as their own.

Indeed I may be entirely wrong.
not comfortable putting any emails/handles on here (bitten before). but if you put an email in your profile i'll reach out.
If they don't understand game theory, that just means they will act sub-optimally. In any case, the correct strategy for the user is still to not decrypt any partitions, since, as you say, the sooner the user stops decrypting, the sooner the torturers give up.
I downvote whenever I disagree. Observation of downvotes has led me to believe that's the community standard.
It's just not as efficient because the size of a dataset is often the biggest factor in determining performance. simply, I get way more labels if I'm paying $0.10 each vs the cost of a full time salary. And individuals are prone to burnout with repetitive tasks

Data labeling is one job that seems to lend itself well to gig work. There were many times where I would have gladly spent a day labeling images in exchange for $50, no need for benefits
In years past, some Unix utilities used to do things like silently truncating long lines that were too long for the static buffers used by those tools. The GNU Coding Standards document (originally written in the early 90s I believe) specifically says not to do things like this (GNU's Not Unix, after all..)

> For example, Unix programs often have static tables or fixed-size strings, which make for arbitrary limits; use dynamic allocation instead.

> Avoid arbitrary limits on the length or number of any data structure, including file names, lines, files, and symbols, by allocating all data structures dynamically. In most Unix utilities, “long lines are silently truncated”. This is not acceptable in a GNU utility.

https://www.gnu.org/prep/standards/standards.html
> And there is always a huge unmet need for drivers

There is? Who's paying for it?
Murdering all of the men of the losing side of a war and taking their women as slaves to bear more of your children is evolutionarily adaptive - and I would presume that as a result I'm descended from at least one person who did so, and so would be the person I was talking to in your scenario.

"Adaptive" and "morally horrifying" can both be true of the same behaviour.

I hope that the things I consider moral win in the long run, but that's unfortunately not guaranteed.
Runaway stab trim is very easy to diagnose. The airplane pitches, the two big wheels on either side of the console start spinning, and there's a loud clacking sound.

The MCAS failure exhibited as runaway trim.

> it clearly didn't have a strong enough resemblance.

I disagree. The trim randomly and repeatedly coming on and driving the pitch down is runaway trim.

> a well-documented emergency procedure

Like this one distributed to ALL 737MAX crews:

Boeing Emergency Airworthiness Directive

"Initially, higher control forces may be needed to overcome any
stabilizer nose down trim already applied. Electric stabilizer trim can be
used to neutralize control column pitch forces before moving the STAB
TRIM CUTOUT switches to CUTOUT. Manual stabilizer trim can be
used before and after the STAB TRIM CUTOUT switches are moved
to CUTOUT."

https://theaircurrent.com/wp-content/uploads/2018/11/B737-MA...
Some of my fondest memories were learning programming and then infrastructure engineering in bits and pieces while so many “veterans” at the time pissed and moaned about how the One True Way to learn was reading O’Reilly books.

A decade into my career, I’m pretty sure I out-earn nearly all of them despite them having a solid decade on me. Of course, income is a fallible indicator, and to the extent that it’s accurate, I don’t think the difference is “reading books vs Googling” but rather (if I had to guess) some handicap that correlates with bitching about how other people learn on the Internet.
nope! you can reduce the size. trivial example is just XOR: Enc(A) xor Enc(B) = Enc(A^B).. 2 bits in, one bit out.

what you can't do is implement variable-size compression like Huffman trees. if you think about implementing Huffman as a circuit, you have a fixed length output - the worst-case length. you can't read the output any more than you can read the input, so you don't know how much padding you can throw away. therefore it's useless.

the same principle applies to running any algorithm that has a dynamic computational complexity. so you can run a Turing machine in FHE, but you won't know when it halts.
Ignore the people calling you malware here. They’re just Apple fanboys who have never tried to run a business before.

Your app sounds like it offers real value and is actually innovating. Apple is destroying your business at their discretion, for seemingly no reason.

Have you consulted with any lawyers? If they’re suspending your account without any cause, I think that counts as a breach of contract on their end. And if there were are a lot of competitors popping up in the past 2.5 years, you could potentially even calculate some hefty damages beyond just the $99/year Apple tax.
In this was the case, the gov would've just done that: ordered citizens, not companies, to vax up. But the gov isn't dumb: they knew such an order would be struck down by a federal judge in a matter of days. That's why they this clever truck with companies.
While in theory you can, I'm yet to see a proper defense in depth implementation despite having >10 years in the industry. In my book, if you get shell access to pod, it's game over, as these secrets in program's memory are probably also available as environmental variables, accessible in k8s Secrets etc., not to mention other ways to compromise an underlying node and the whole cluster.. But yes, this is already too far from the original topic.
Stop tending other peoples' gardens. I don't write software for any device if I need to ask permission from some faceless billion dollar corporation. I write software I can manage myself.
well partially the reason this works is that under this arrangement (ie. LLC), you work for the company as a contractor, so you have less protections and are easier to terminate. as a result, the company can afford to vet you less, because they know they can fire you relatively easily.
That's incorrect. That's the Apple reviewer. After that, it goes to further review by NCMEC, where it's verified. NCMEC is the only one legally capable of verifying it, fully, and they're the ones that file the police report.

So, to get flagged, you need many hash collisions destined for iCloud. Then, to get reported, some number must get a false positives in the Apple review, and then some number must somehow fail the full review by NCMEC.
Technorealism (1998)
Protection. And, perhaps, shameless plugging?
I would like to know more, if you're able.

Eight years of false imprisonment sounds like lawsuit city, to me.
Show HN: Termius (YC W19) – Share your terminal session like Google Docs
Hi everybody, I’m Roman from Termius (YC W19, HN launch https://news.ycombinator.com/item?id=20118727). I want to share news about a new exciting feature that we wanted to build for a long time. It’s Terminal Sharing. Terminal Sharing enables engineers to get instant help from their colleagues by providing a link to their terminal output updated in real-time. There is also a mode where the viewer can enter commands from their end.

When I was getting into programming, some of my biggest problems were: compilation errors or not being able to set up something on a Linux server. One of the ways to get help in such a case is to ask a friend or colleague who has done it before. One more thing, we all remember times (before the pandemic) when teammates could come to your table and check out where you got stuck and often it’s in a terminal window. Unfortunately,it’s often impossible in the post-COVID era when most of the teams work remotely

Of course, there is always a way of using a multiplexor like tmux, byobu or screen. However, it’s a bit annoying because you have to deal with access like adding keys or passwords. Then you have to communicate back and forth to see if the person is there. You also need to remember to start those tools before you end up with an issue. And finally, you need to remember to remove the access later. The whole thing is even harder on Windows with Putty. Alternatively, you can use zoom and screen sharing, but it requires dealing with control over the keyboard input, which is quite cumbersome.

This is why we built Terminal Sharing in Termius (https://termius.com/windows). If you need help from your friend or colleague, then you can create a live session in just a second. You get a unique link to sharein just two clicks. Terminal Sharing is available on Windows, Mac, and Linux, no mobile support yet. You and the viewers need only to have the free version of Termius to use basic Terminal Sharing features. We like the idea of giving this feature for free to spread the word about the product and build more advanced, paid, collaboration features for teams later.

In terms of the technical implementation, Terminal Sharing uses WebRTC under the hood, and it tries to establish a peer-to-peer connection when possible. WebRTC uses TLS 1.2, which encrypts the traffic.

Check it out here: https://termius.com/windows. We’re still testing usability and viability of this feature, so any feedback is welcome. The feature is free, but it requires an account (no subscription required!). Please share your feedback in the comments!
You're sure there wasn't a bird on his shoulder, so to speak?
Well hopefully you've done lots of minor coding or projects in school or... something.

Did you hack savefiles for a game? Did you write your own game? Did you write something to simulate statistics for a game or something? What are your major projects in your schooling? Did you automate something on your computer with scripting?

For a junior dev, these can show initiative, a willingness to learn, to experiment, and to produce something.
No, the reason the worm hypothesis is good is because it would explain the clinical trials where it appears to be effective. (If there were no such trials, as you claim, the entire discussion about worms would be moot.)
Don't forget that Brave is the product of an advertising network and their goal is to increase use of Brave to push more ads.
To be fair that wasn't the user I asked for sources, we should see if they have something still. Also that wiki link was fairly interesting, particularly the Hart case in 2014 in which the Canadian Supreme Court found that using the confession drawn from the Mr. Big technique was inadmissible (although their was a later exception in a relation to a violent case that already had supporting evidence).
To me, this would actually support the point the others were making a bit at least...
If we can believe that this would have been more common prior to 2014, at least in Canada then MAYBE that could indicate that it was/is commonplace in the US which AFAIK does not have a ruling like in the Hart case.
That's why I said proxy. The vast minority of members of our society take care of our actual physical needs. The rest of us do other things to provide other kinds of value, so that the farmers can do things like enjoy a nice TV show at the end of their day without producing it themselves.

For some of those other companies, a TPS report is required.
What would be the ratio of HNers who are Backblaze customers vs those who are AWS customers. I bet Backblaze number is small enough where Backblaze employees on HN can downvote you enough for it to matter.
> You said other apps are fine, but are those other apps advertising themselves as parental controls or as stalking software?

Search for "accountability software", and you'll find apps advertised in a very similar manner that have had no issues with Apple, with absolutely no mentioning of parental controls.

> I took a look at your website https://truple.io and... there is very little mention of this being for parents. TBH looking at the website is... deeply concerning for anyone that would legitimately want to use this product. Especially on a spouse?!?

It's used voluntarily by the device owner. It's not used "on" anyone. The whole point of this is to provide accountability. Including a comment from below I'd hoped would get pinned: "Some may not agree with the use of parental control/accountability software. That's fine. Truple is not designed for you. There are tons of people who are negatively impacted by technology and they desperately need/want help. They should have the option to get it, and there should be competition in the space to deliver the best product for them. In today's world, using the internet is a part of life, and isn't something you can reasonably go without. Truple was built to help people learn to use technology responsibly with the help of their loved ones."

> Last... I find your focus on "online filth" insulting.

Online filth was intended to generalize the concerns, not focus them.
Seems like the Internet level networking is quite robust at this point.
We will not make it quiet.. It will be found out and I'm sure the privacy organisations will make a big deal of it.

I have much less of a problem with server based scanning. But my device is mine.
The FBI couldn’t mainly because they haven’t caught up to this level as it’s not their primary objective they are first and foremost and investigative outfit.

The NSA not to mention the entirety of the US defense industry could’ve easily found a way to break the encryption on a single device especially since they only had to break a relatively simple password / passcode it’s just a question of how much would it cost and how long would it take.
I think this is why having the ability to self-host is worthwhile. This option gives you flexibility to bring this stuff in house if you want to build a team to operate it (or put it on a current team's todo list).

Should you? I don't know your situation and whether you can build an Okta-caliber level team internally. (My guess is that many smaller or non-tech focused orgs would have a hard time with that, but that's just a guess.) It's a hard question worth asking.

It's easy to think "we could have done better" when things are on fire, as opposed to all the times when the status chart is all green and you don't have to think about Okta (feel free to s/Okta/other service provider/) at all.

Disclosure: I work for FusionAuth, an auth provider that has both SaaS and self-hosted installation options.
> The original version of the app I submitted for notarization had the Truple logo, with a red dot/circle to indicate recording and make it more suspicious. The redesign I did dropped the red dot/circle because competitors weren't being forced to do anything like that.

Doesn't this seem kind of damning? Like you admit the recording dot is suspicious, so you remove it because why? Are you targeting anyone that isn't fully aware of what the truple notification means, maybe because they are a child or otherwise mentally compromised?
Must have if you work in public places in SF. I can barely count how many times I’ve personally or had a friend who’s either had their laptop stolen in a coffee shop or attempted. In recent years thieves even got more brazen and just try to snatch it from you while your hands are still on the keyboard which is perfect for this device. You’ll want to enable full disk encryption for full security.
Different tools serve different purposes. Just because you wouldn't write a web browser/server/IDE/OS in a shell scripting language doesn't mean they don't have value or are failed paradigms.

I've written tons of shell scripts for one-off jobs or simple work that would've taken 2, 3, maybe 4 times the amount the time to write in a "real" programming language. (E.g. throwaway code to generate 10,000 test files that are slightly different would take me 5-10 minutes in bash, but maybe half an hour in node or python.)

Passing around strings isn't the BEST paradigm but it's extremely flexible when you need flexibility. There are times when you need something more solid and that's fine too.

And fwiw I'd bet a majority of the software you listed uses bash somewhere in either their build process or SAAS stack.
I’m not worried about my Google Home devices

They’d have to work reliably first
Ahh, but how many of the nines need to go on which side of the decimal point?
I would think it would fall on the zone operator to properly configure a CAA record to restrict issuance by an unauthorized CA.
There's also the public suffix list: https://publicsuffix.org/list/

It's probably a good idea for the author to add this project to the list.
> So you relegate all study of personality traits (which are different than archetypes) to the pseudoscience bin?

That’s called “psychology”. The real science even has that nice little observation that which side of the school admission year you’re born on is basically the only thing about when you’re born that makes any significant difference.
In my local market, I prefer a modified version of this.

I buy a second hand last generation Apple device from someone that comes with a year of AppleCare or warranty. I then sell that device and repeat every year or so.

AppleCare does not add THAT much value to devices sold on my local aftermarket, so you get a deal on it.
"By paring back the hardware, the designers of the Atari Video Computer System gave game programmers room to be creative"

That's some rose-coloured glasses right there if there ever were any.

"You know, we COULD give this thing hardware sprites, independent video and audio chips!"
"No! Think of the game programmers! They thrive on constraint!"

My money is on the money.. The cheapest design that still allowed (the best programmers to make) reasonably good games.

That said, the system was enjoyable to play when I was a kid, and it's enjoyable to read about now, great article!
Disclaimer: Former AWS engineer, never worked on IAM directly.

AWS is divided into multiple partitions. For the vast majority of users, there is one partition - the regular commercial - other partitions being China, GovCloud, etc.

Within each partition, there is a primary region that needs to be available for creation/mutation of credentials and policies. However, that data is replicated to other regions within the partition. That means the use of credentials that exist does NOT depend on the primary region being available. The replication is something that is closed monitored, and SLA breaches will result in pages.
X.org Server 21.1.2 Released, Back to Pretending All Displays Are 96 DPI
Entirely agree, we should find ways to reliably support upstream. But that is a different issue, and unfortunately it is one that the main beneficiaries are not willing to solve.

Forking solves the issue of an upstream dependency not willing to fix a bug.
So is Chrome. This doesn't diminish the value of security research and subsequent improvements by either.

I'll stick to Firefox anyway :)
Project authors need to have the ability to own the project that author if there’s any hope of it growing and evolving with the times. We might not always agree with the leadership in a particular project but as like as it is open source that’s not a problem as anyone can then fork it and add their own vision to the fork. Which is precisely what happened with GNOME.

As an author of FOSS software myself, I’d quit in a heartbeat if someone told me I wasn’t allowed to make my own decisions about my own projects.
From what I've read about it, one of the exciting things about QUIC and HTTP/3 is that they're much more extensible. Meaning anyone might be able to dabble and experiment with their own version of the protocol.

So yes, I'd think the rate of progress may well increase. Not all will become standards, but I imagine we might see HTTP/3.1, 3.2, etc. long before we see an entirely new version like HTTP/4