skysight-inc/HackerNews huggingface dataset:
Is the lack of notarization truly an issue? Aside from demonstrating that the creator has a paid subscription to the developer program, what does notarization accomplish that isn't already handled by XProtect (i.e. a YARA scan) and the Malware Removal Tool (MRT)?

Are there any examples anywhere of malware that has slipped through the client-side XProtect pre-flight checks, but that the server-side notarization checks have caught? Most independent macOS security literature I've read implies that notarization and code-signing is more about retaining centralized control of the app distribution process, but does not actually contribute anything to the malware mitigation tools that have been built into macOS for a very long time.
Pelosi, yesterday: "if Russia doesn’t invade, it’s not that he never intended to. It’s just that the sanctions worked." (from https://www.zerohedge.com/geopolitical/pelosi-just-gave-game... )

So yeah, they're spreading propaganda, fer certain.

Hard to avoid, in the news business.
> Stop normalizing censorship.

We're talking about pedophiles and fraud here. Stuff that is illegal everywhere in the civilized world.

As for the Daily Stormer and the xChan projects: the stuff hosted there also violates laws, holocaust denial or many forms of antisemitism are a crime in most of the European Union. And the only people calling that "censorship"... well, they tend to be Nazis or have no problem supporting Nazis.
Does the $11 happen to be Runescape? :) It caused quite a stir when they upped the subscription price.
The CDC estimates that in the U.S., there are about 32 cases of undetected covid-19 for every 10 that are detected. That ratio (derived from testing of pregnant women, car crash victims, blood donors, etc.) was from before Omicron, when there was for a while a shortage of testing capacity. So, if the ratio in India is 60 to 10, while that is worse than in the US, it's not that much worse.

In any case, Benford's Law helps to detect fraud (made-up numbers), not necessarily just inaccuracy (a low detection percentage, for example).
>There's a lot more to Starship than that, right?

Not for MVP, which is getting Starship to LEO. Once they do that, they can start using it for Starlink and a fair amount of commercial cargo, which means it starts paying for itself and their runway extends vastly

>In-orbit refueling. Heat shield. The launch tower chopstick catch.

First is only required for high energy, stuff like deep space. They don't need that to get iterating. Hell, they don't need second stage reuse even for their NASA Lunar contract, that was part of the risk assessment. Lunar Starship won't be landing back on Earth. If they can't do reuse it'd probably nuke most of the possible profit on that one, but it's not mission critical.

Second is needed for reentry, but again, expended upper stage is fine. Most of the cost is in Super Heavy.

Third is a nice economics thing. SH will be able to hover, landing legs add to dry mass, and landing raises more chance of damage which would slow cadence. Since there is no particular physical reason they can do a tower catch it's worth trying. But worst case they just give up (or give up temporarily) and go back to legs. That's still not at all a blocker for going to orbit.

>Engineering a crew space. Hell, the big window.

Manned won't be for a long, long while. I'm not sure what you're confused about here, you do realize that F9 was going to orbit with commercial cargo for a long while before any human launch right?

>I don't doubt they'll get one into orbit this year, but that's not what I'd define as a completed Starship program.

Well in that case, since I said "as far as getting to orbit" I'm not even sure what you're arguing with. SpaceX's entire thing here is MVP and iteration. MVP for Starship is getting SS to orbit and expending it while recovering SH. That's enough for it to start making them lots of money. Cargo SS will be quite cheap for a rocket. At that point they start to get working on reentry and landing that "for free", just like with F9. And with high cadence. How many dozens of times do you think it'll take them to figure it out? Because remember, they did 31 F9 launches last year alone. And they've got lots of margin in the design.
What courses did you take? Is there any online one you recommend?
This is so awesome
I bet that you could make a fancy key with retractable teeth that could be set to any lock bitting. Seems likely to be cheaper (and definitely faster) than manufacturing a new key for every lock.
> The Earth is a flat disc.

> Is this misinformation, wrongthink, or both?

You missed the fourth option: it's neither. No-one would call it misinformation or wrongthink; rather it's false, or a lie if you're feeling judgemental. I think the person you replied to has made a good point.
Set a monthly budget for non essential subscriptions, whatever you think you can afford. If you hit the budget, and you want a new subscription, then that means you have to cancel something else.
TikTok Can Circumvent Apple and Google Privacy Protections
Gabe Brown claims he can get more calories per acre than monoculture farms[0]. He also claims that it's more thought, but not much more physical work overall. His profits probably depend somewhat on premium pricing that wouldn't hold up if everyone followed his model, but a shift in subsidies could help that.

[0] https://www.youtube.com/watch?v=9yPjoh9YJMk
Getting extensions as customizable as they were before the great purge? They promised replacement-APIs with the new extensions system which they still haven't delivered.
A lot of DIY. Self-hosting. Self-design. It gives me more insight for problems my clients may have, what is happening on the servers, etc.

Caveat: I come from the "small business as client" world, so scaling is not much of a concern for my bread and butter.
Worse, a single mac could take down all the Macs on the network. At one point I reproducibly traced it to a font.
Also the US is terrible at transitions. When manufacturing went overseas, we left the factory workers high and dry. We can end the corn subsidies while providing income and support for farmers to transition to other crops, but that starts to look more like traditional welfare.
Erm, no, I execute on all my bookmarks and put them to use. Because I said I would. I don't use an app for bookmarking, just a massive 10000+ list of URLs in a boring text file that I revisit constantly to GTD. As for exobrains, yeah I'm an externalist[0] through and through, and not ashamed of that. For journaling and note-taking I use Standard Notes.

[0] https://en.wikipedia.org/wiki/Externalism
“Don’t focus on grades beyond what’s required to pass your classes” is tricky — a lot of College/Campus Hiring is selective about both the institutions they will hire from, and the GPA thresholds; if you don’t tick both boxes you likely cannot easily get an internship or graduating offer from e.g. Google, Oracle, or wherever.

Notably, at least a few companies restrict their “Professional Hiring” or “Industry Hiring” teams to candidates with >2 years of post-college professional experience, so the rub then becomes you graduated, didn’t get in, worked somewhere small with the expected “small scale” problems for at least two years, then have to Leetcode and take the arguably harder path into BigTech (which is Industry Recruiting, when you’re not coming from another hyperscaler or notable/known employer).

Is it nonsense that Recruiting filters in this way? Perhaps. Results in losing good candidates? Absolutely. Is the entire recruitment engine a SNR problem? Yes. :)

Internships, Open Source, Hackathons are all excellent advice, as are the other suggestions in thread on building networks, use of office hours!

My quick advice:

- Ask about “Why?” and “When?” and don’t just do the rote exercises which teach you basics about data structures and algorithms.

- Hack on some side projects and have a presence on GitHub, portfolios can be helpful.

- Find a space you enjoy hacking on and find related Open Source, contribute. Maybe that’s something like Home Assistant (nerd out on automating your living space), maybe something else.

- Scratch the itch, humans are all about dopamine hits, all of the above is about gaining experience: this won’t feel like a chore if you’re hacking on something FUN (which is subjective, your itches and others itches will differ). Several people in my 1st Yr CS course weren’t able to find their itch — they’d gone to CS because “they heard it paid well” or “parents said it was a good idea”, they eventually quit, or some persevered and found they hated the jobs professionally, so they had mid-life changes in careers.

- Be curious about Linux, since outside of Microsoft (and even some places in it!) that’s the predominant platform for deploying services, if you can’t navigate Bash and exit vi, you’ll perhaps find your entry into professional settings has a rather steep learning curve!

- Have fun and be social, I know parents say this a lot, but full-time education in a <~ 22 y.o. sense is really the last “minimal responsibility” moments you’ll have in your life.

Disclaimer: I’m a Brit, who now lives in US, and I’ve been a somewhat senior leader at 3-4 huge technology companies in my career, with direct exposure to EIC (early in career) hiring practices.
Sounds like you need an Apple Watch. Not sure if it works with spotify but I run with just my watch and my airpods.
> Belgium approves four-day week

Without mentioning "work" or "job", the title looks like week in Belgium would consist of only 4 days now: Monday, Tuesday, Wednesday & Thursday.
This page has a link to report either copyright infringement or plagiarism.

https://help.medium.com/hc/en-us/articles/200737695-Report-c...
It is, and I figured a lot of people would recognize the $11 :)
I agree. And the fastest, most effective way to address it is for people to stop encouraging it by using Google's email or authentication services. Among other things.

If you then also want to outlaw lazy, hair-trigger account cancellations, and all the other stuff these guys do to shift all effort and risk onto their users, and for that matter all the other hidden ways they exploit the users, then I won't complain. I'll even cheer you on. But I probably won't live long enough to see that. And after those (completely proper) laws were enacted, I would expect a lot of these "free" services to go away entirely. Requiring them to do it right would also require them to pay the cost to do it right, and I would expect that to get passed on to the users.
> who wants to use their own IP ranges to relay potential spam to former users

In your example, anyone who wants to legally run an email hosting business.
Doesn't matter if they have salespeople or not. It matters whether those salespeople can call up and have the other side already sold on the product. Because the product sells itself...

I'll submit Craigslist and Wikipedia as other options. Also Plenty of Fish.

Communities and knowledgebases can be built without salespeople.
Benford would likely detect manipulation, but not systemic underreporting. If they're just missing half the cases and accuracy is essentially arbitrary, then it probably wouldn't show up as violating Benford.
It seems like withdrawals were in cash: "Quadriga used an unusual teller-window system for customers to withdraw their money. Rather than pay customers via bank wires, they were told to come to a nondescript building in Laval, Quebec to pick up the cash."[0]

[0] https://en.wikipedia.org/wiki/Quadriga_Fintech_Solutions
I try to be extremely resistant to subscriptions. I only have Amazon Prime (not because of video, just for free shipping) and Spotify Family (with 5 people on it, it's acceptable, although it's still annoying and expensive).

I don't subscribe to any video streaming service; Youtube is quite usable with uBlock in a browser (I don't even have a TV anyway).

Software wise, Adobe Creative Suite pricing is predatory; I just use Affinity and am very happy with it (I do have a license for Lightroom 6 which is fine for my needs). I have a copy of Office 2003 which is perfect (and pre-ribbon!) I manage todos on Workflowy which is free and fits how I think perfectly; if it ever went away I could probably do the same in a text file.

When it was free (twelve years ago?) I did use Instapaper, but found that I almost never came back to an article on a Kindle or other device; "Reader mode" is available on most browsers and lets you read with no distractions directly.

I think it's still possible to avoid all the subscription traps and random offerings, but I agree it's all going the wrong way.
Nice looking framework but it doesn’t seem to support features that would be useful on very large visualizations, such as zoom and zoom windows.
Great article! Love the story approach.
I’m probably using the term very loosely but PretzelBox can be used to host a website, store and share images and files (like Dropbox or Imgur or wetransfer) and integrates with AWS to give you an entire backend you can extend to run a whole business.

In my mind, I feel this could/should qualify as a hosting service
They don’t spend taxpayer money. They get paid with taxpayer money, after they have delivered. Big difference.
I suspect in reality all these narratives are basically fiction.

We know we are really bad at tracking knowledge work productivity but we will make up narratives based off bad data.

I imagine the real story is that the productive people are just as but not more productive at home vs the office and the slackers are walking their dog more instead of walking around the office.

"Office slackers waste time in different ways working from home, everything else basically the same"
I've wanted to use "SQLite db per user" for awhile now but haven't had the right problem domain for it yet. https://engineering.backtrace.io/2021-12-02-verneuil-s3-back... looks really interesting.
Good question and one way to approach it, for sure. But it appears paradigms shift in waves. Running a business means focusing on the most important things for that business. It’s likely that things like these are microoptimizations.

For instance, there are many companies that have taken the pandemic as an opportunity to enable permanent remote work even post-pandemic. It would have been a massive recruiting improvement to have had that pre-pandemic. (And it was, I worked at a place that was like this). But in the end, it was better to just focus on the business itself. There’s only so many things it’s worth not standardizing on.

As someone who prefers both in-office and more than 40 hrs of work, I find this whole thing interesting
This actually happened at my first software job.

We were expanding fast by hiring bunches of contractors, which was already giving pretty polar results. After a while, my team got one too.

They didn't have a computer ready for him yet, so my lead pairs me up with him to babysit basically. We go chill in a conference room and I basically just try to get to know him and explain what we do here. I can tell he's nervous, and since this was my first dev job I remembered that feeling all too well, and wanted to be nice to him.

Immediately, he barely speaks english. Weird, but okay. Then I try to just talk shop with him, and find that I can't get any answers about recent stuff he's built, what he's interested in, frameworks he's used, or even what his favorite language is. They guy clearly knew nothing about software. I laughed to myself in a "not my problem" kind of way.

After a while I finally hand him off and explain the situation to my lead.

Turns out, he had a totally different person do the interview and coding test. And he didn't know anything about software. When confronted with this reality, he simply repeated, "I can do the work, I'll get the work done, I promise." Presumably the plan was to either just try and collect the first paycheck or two, or maybe he even wanted to outsource the work to someone else.

So, maybe don't rework your whole hiring process around this possibility, but at least do a video chat.

(This was well before covid.)
Major problems:

1) Botting/Troll Farms - existing review systems suffer from sophisticated and persistent false positive and negative reviews. You may have solved one half of this issue, but it's not hard to buy your competitors product, damage it, and submit a negative review.
2) Corporate Cycling - even presuming somehow you only have honest reviews, if your product is subject to frequent refreshes it is too easy for a company to say "oh we fixed that in latest model".
3) Statistical significance - again presuming you don't have the first two problems, how do you know whether a failure mode is common or not? Everything breaks - its about whether or not it breaks 1 in 100 or 1 in 10, whether it lasts for 5 years or 20. I'm not sure subjective "oh this broke for me" tells you that it is common. I think you also need the instances where nothing broke to calculate true failure rate.
Crypto dead mans switch like sarcophagus.io.

You can connect to obituary oracle on chainlink and release data to prespecified law firm upon proof of death. Then make sure the law firm validates the death before opening. Wallets and Keys inside. Or secret pass phrases inside.
Glad you're earning some money, but I turned ad-blocker off to see how you incorporated ads on your site - honestly taking up a quarter of the screen with autoplay videos and blinking ads is some toxic 90s geocities stuff... ad-blocker going right back on.
A short story about pandemic misinformation and biased reporting
Why not just say what it is?
Honestly I can't say that I don't understand them.
It's so easy to make good bots, and spam/automated propaganda is a HUGE problem on any social network.

Also posting good (stolen) content automatically to farm karma to then be able to spam everywhere for a few hours is a very common tactic

If I had to run a free social media like reddit I would do the same, you have no idea how hard it is to handle that imo
Especially with increasingly convenient password manager UX’es (e.g. integration on iOS)
It's slow af and various site traffic blocking tools get triggered by it.
OK, so you're redefining Starship into "expendable second stage".

I don't think that was inherently clear to anyone but you. I don't think that's the definition the parent poster meant in the context of "Starship is going to take years longer than originally predicted".
So what happens to these digital coins in the face of loss of keys? Actually, what do banks do as well? If someone dies with a large sum in an account, how is it different than a digital currency at that point? There's no physical tangible good that has value. It's just a number in a digital ledger for crypto or typical bank. Is the only difference in this case the encryption, otherwise typical banking rules would apply?
“Proprietary software” suggests the commenter did not have the source code or resources to do that. Sometimes you just have to make the best hack you can.
I posted a comment on HN two years ago about this exact thing, but I get downvoted and flagged https://news.ycombinator.com/item?id=25044185#25048850
I’ve found self hosted alternatives to a lot of services I’d need to pay for. I run everything on a raspberry pi k8s cluster that probably costed around $400 to build. It’s paid for itself already.

Now if only I could convince my wife that we don’t need Netflix….
Good article, that.
>It's just about plausible that they emptied the ATMs and took the money home occasionally.

What kind of business with ATMs "takes the money home"?

Even if it's totally legit, it's also totally insecure - they could be robbed at any time.

Money in such quantities are not takes to the home and stacked the kitchen top, they are deposited to banks - by armored guards in vans.
You could argue that gmail is not a product that I own, but I paid for it, so technically, don't I own it? ... Should we own the free services that we've paid for with money and data?

I really don't see how, so this reads as hand wavey to me. Also, keep in mind, even if we're taking claim of payment at face value, you paid something for it, but that doesn't mean you've paid in full & paying for something doesn't imply ownership (like leasing a car, renting an apartment, etc).
Sorry to hear that. We don't see this internally but if you put your email in your profile I'd be happy to reach out to you. (not sure else how to start the communication chain unfortunately). SDM on the team that owns backup.
I appreciate the theory of this project but won't use it. Spotify isn't getting any of my patronage, either directly or indirectly, due to how they are trying to destroy the podcast ecosystem.
Title is incorrect. First sentence of article.

>The Cabinet decided to lift most coronavirus restrictions
(2019) and yes, the irony is not lost
Which would certainly be an interesting experiment for his one million person mars colony.
I hadn't thought about it that way, but it certainly would explain his actions. You don't compromise with nazis. If you're convinced that's what they are.

This would explain a lot about Trump too. He was in a misinformation bubble as well.

Which means even world leaders aren't immune to this tribal trap.
The police have limited resources and they can’t go after everything.

Online stuff is hard because it usually requires cooperation of multiple police forces in different jurisdictions. I think it often just comes down to there being easier things to go after closer to home.

I don’t know why Facebook does nothing though.
I'm quite serious - if someone starts with doubting this kind of claims in general, your portfolio isn't really designed to be obviously authentic. I see blog posts on your company's website that don't attribute you personally. Same for the apps in App Store. Basically until you moved your writing to Medium, just 3 years ago, you seemed more concerned with promoting your venture than yourself.

I'm even worse at this - you'd be hard pressed to find anything of value attributed to my name since I left academia. I even don't host most of my code at Github. At least I won't be surprised by somebody not trusting my portfolio ;)
Lent is coming up, which, culturally, is a good time to do weird things. I tend to disconnect from the internet for those 40 days, though the past two years have been a bit less-disconnecty than I prefer, with Covid and all (especially 2020, with all the shutdowns and such working their way through). I just use it minimally, for work, and basic communications with some people, but quit forums and most other things for that period.

It's quite healthy, and I absolutely encourage it for anyone interested in the space to better understand their online usage and such.
It was a scam though. They read our mails and sold PI to advertisers. Google say they stopped doing it but there is no way I trust them. Do you still get flights added to your Google calendar automatically?
You have two jobs:

* Write code

* Do not express any opinions that conflict with the dominant zeitgeist

edit: I'm not joking. In most tech firms these are your two jobs.