skysight-inc/HackerNews huggingface dataset:
Subtitle text:

> Yes of course, they [the west] will bet on the so-called fifth column. On national traitors. On those who earn money here, with us, but live there. And they live not even in the geographical sense of the word but according to their thoughts, according to the slavish consciousness. I do not at all judge those who have a villa in Miami or on the French Riviera. Who can't do without foie gras, oysters or the so-called gender freedoms. But the issue here is not in that, but in the fact that many of their people by their very nature, are, mentally located exactly there, and not here, now with our people, not with Russia. This is, in their opinion, a sign of belonging to a higher caste, to a higher race. Such people are ready to sell their own mother if only they were allowed to sit in the hallway of this very highest caste. They want to be like her [meaning 'caste'] imitating her in every possible way. Yet they forget or do not understand at all that if they are needed by this so called higher caste, then needed only as expendable material in order to use them to inflict maximum damage on our people.

> The collective West is trying to split our society, speculating on the combat losses, on the socio-economic consequences of sanctions, provoking a civil confrontation in Russia and using it's fifth column to achieve its goal. And there is only one goal, I have already spoken about it- the destruction of Russia. But any people, and even more so the Russian people, will be able to distinguish true patriots from scum and traitors and simply spit them out like a midge that accidentally flew into their mouths. Spit out on the pavement. I am convinced that such natural and necessary self-purification of society will only strengthen our country, our solidarity, cohesion and readiness to respond to any challenges.

Extremely extremely extremely hard to follow. The assertions here feel wildly disconnected, completely scrambled. There's such feeling & emotion about decrying the west, and to be honest I would be somewhat sympathetic to decrying of Western class-warfare by the rich/high capitalist class manipulating the world which this almost vaguely barely starts to touch upon. But whatever Western protest there is, it's garbled completely. Fails in every way to make a case that is comprehensible in any way, reads as confused belittling smallminded anger & diffusion of responsibility, a strong protest against ghosts & spectres.

The us-versus-them, trying to rally an identity by decrying the enemy. That alas is something I am all to familiar with these days, from other petty low-dog fascisms I've seen all too close to home, all too recently. The only thing we have to fear are fearmongers themselves.
I was reading the article finished left and went back and thought let me check something.. it's gone.
Not sure I agree with being an outsider being good. Its maybe at best neutral and just drives your life in a different direction. Its a little vague on the details about why.

I grew up not being white enough to be white, not hispanic enough to be hispanic, never quite fit in anywhere and I think it sucked. Maybe the bullying built some character or something? hah. I don't feel real attachment to any culture. I visited the country one of my grand parents came from and felt no connection to the culture or the people other then I looked a little like them.

Eventually I ended up moving across the country, NY to California. I don't really feel like a californian, but after a few years out here, The region of NY where I grew up doesn't really feel like home anymore. My family is mostly spread out now too. Its a weird feeling. I think I would attribute my "success" more to winning the lotto by being into computers at the right time then anything like growing up on the outside.

The advice overall is probably fine, yeah go out and do new things that aren't comfortable. Glamorizing feeling like an outcast doesn't feel right to me. It would be interesting to hear what the authors kid thinks from their perspective too, instead of the parent who chose all of this. there could be some bias. Quick, post, Ive had lots of thoughts about feeling like an outsider.
If they were they wouldn't be able to cover it up.

I mean, we know when they do it - nearly every domestic terrorist bombing/kidnapping attempt ends up being a group of one guy and 4 FBI informers as soon as the one guy asks how to make a bomb on Facebook.
The NetBSD Foundation is a mentoring organization at Google Summer of Code 2022
Yess! Take a look at https://deno.land/x/webusb
I really wish there was a note taking app like OneNote with a TUI. Text only of course. With automatic syncing.

Of course you can make a bunch of text files but Easy categorisation, browsing, auto saving and even something as simple as window-size based word wrapping is difficult with most editors. Of course they're not really made for it.

But I've never come across something like this.
They were employee stock options, not call/put ones. And yes, he had no idea he would owe tax on money he never had.

His tax bill was way more than his net worth.
I've mentioned Mill recently in some threads and the responses were that it has always been vaporware.

https://news.ycombinator.com/item?id=30522481
Same with Stafford Beer, a brilliant, incredibly radical beauty of a human being.
You can in firefox (just tried from the console).
Chelsea, Tottenham, Arsenal and at keat Paris Saint Germain are regularly big -- perhaps not front-page, but big -- news over much of at least Europe even without controversies about an oligarch owner being sanctioned.
Little text to say that you support the malicious actions and hope that nothing is done.
Regardless of how you feel about the objective truth, it exists. Naturally, it follows that people who engage with what exists ought to have better outcomes than those who engage in fantasy. Admittedly, when the majority of people engage in fantasy and even the mere mention of truth is seen as an existential threat, it takes on the opposite dimension. In particular, as mentioned above, the truth-tellers are reviled, feared, mocked, and made to suffer. It should be obvious that a value system that prioritizes fantasy over truth is unsustainable. As more people shift from truth to fantasy, whatever functional or pragmatic underpinnings civilization has erode until nothing fundamentally true remains. Civilization is subordinate to the truth and without it there is no civilization.

“This is the way the world ends.
Not with a bang but a whimper.”
― T.S. Eliot
And everything (besides ignoring PRs) requires content to be explicitly added to the repository to configure GitHub's behavior. For some use cases -- like mirrors of repositories hosted elsewhere -- this isn't possible.
Folks here are likely talking about employee stock options [NSOs and ISOs]. They've each got their pitfalls, but generally if you exercise them, you immediately owe tax [or AMT, depending--talk to an accountant first!] on the difference between your strike price and the current fair market value. If your employer's public, you know what that value is and can generally sell to cover your taxes. If your employer is private, you need to find out what the FMV is from your employer, and you still owe tax on it [if there's a gain], but you likely have no way of selling to pay the taxes.
Some of the people in charge today were also in power 50 years ago:

https://en.wikipedia.org/wiki/Chuck_Grassley

I have no idea if Chuck Grassley had anything to do with that, but my point is that if the same people in Congress then are still in Congress today, you can't claim a clean break from the past due to the passage of time.
Although leftists already seem to think the CIA started the Iraq War, when they were against it and Cheney/Rumsfeld had to invent ways to get all the intelligence agencies out of the picture so they could make something up in peace.

Similarly, they didn't overthrow Bolivia recently, but people think Elon did it personally to get cheaper lithium because he joked about it on Twitter once.
Personal opinion, Google is catastrophically shooting themselves in the foot here, and could lose their market dominance.

GA's second-biggest moat (behind being free) is its existing install base. It's already in place on approximately every website on the Internet. And no one wants to change analytics vendors, because that breaks history, which is a no-no. You want to know if your visits are up/down vs last month or last year, you literally cannot answer that unless you are using the same tool this years as you were last year.

By forcing a migration to a non-compatible version, Google loses that big advantage. If you're going to lose that anyways, then there's less of a reason to stick with GA. Now you're forcing people to gut-and-replace their existing data collection process, what incentive is there for people to stick with Google? One of the biggest reasons to stay with GA was just killed.

The timing is also exceptionally atrocious. Google is, again, forcing people to expend the effort to rebuild their analytics implementations from scratch. Meanwhile court rulings are coming down on a monthly basis enumerating different ways in which Google Analytics violates GDPR. A lot of companies might just brush off these rulings by simply doing nothing, but now they're being forced to actively invest time and effort into Google Analytics. A lot of them are going to be doing an evaluation against privacy-conscious competitors that simply would not have happened if Google wasn't kicking people of their existing platform.

The GA4 data model is also completely different from the GA Universal data model, which is an impediment to their fourth-biggest moat, the fact that every piece of BI software in the universe has a GA plug-in. Many of those plug-ins work despite not being actively maintained since 2015; the GA4 ecosystem is smaller and will take some time to recover.

(The third-biggest moat is Google Ads integration. I suspect that Google imagines this to be bigger than it really is in practice.)
This post hits so close to home for me it is unsettling.

Every 4-6 months we have this ritual where everyone finally accepts that we can't have one person being the "center of the universe" and we have this almost performative process of trying to spread things around to other staff. This will last at most two weeks and then we're back where we started.

It can get pretty bad at points, like when dev's get so comfortable in relying on me to solve all their problems that they'll encounter an issue and instead of actually trying to do anything about it themselves, the first thing that happens is I get a call/text/email/slack asking me to fix it for them.

And to top it off, outside of the occasional weekend, I can't remember the last time I had a day off, but I do remember it lasted three hours before they called me to come in and fix something for them. Nowadays, I don't even bother with time off, public holidays or weekends, they aren't days off to me anymore, they are just days where I can sleep in a little longer before getting back to work.
How did he "use" the vulnerability? What did he do that qualified as overstepping? He literally logged into a website and made requests to a hidden endpoint with random IDs. When he realized he was looking at production user info he stopped and reported it to higher ups. The process he has described is right out of the white hat guidebook. What would you have done differently?
> Something that allows fuzzy search of program names, tags and a short description (using something akin to .desktop files for the application metadata).

What’s the problem with writing a .desktop file for a TUI app? Make the exec line open a terminal and run the app in it. If you want to open the app in place you could probably have the exec line determine the focused terminal and send a command to it to have it run the app.
Yep, same here...
The other company thought there was corporate espionage… and they think the company spying on them volunteered the information?

And then they wanted just one rando fired?

Not sure that sense.
May not be your fault. Google is not the great tool it was for finding the most relevant information anymore.
Your friend couldn't sell the shares and take a capital loss to offset the options gain?
That's for people everywhere to interpret as they will, without propagandist interference.

To everyone I've ever know it's always been a powerful demonstration of desperation. Every such incident I've seen has been taken abroad that way. Except by CCP shills who prefer to call it... 'extremism'... mmm.
California bill would let parents sue social media companies for addicting kids
There is a proposal to add OCaps on a language level in TC39[0]. There is a drop-in implementation which already works in both Nodejs and browsers[1].

As a developer who wants to sandbox your own (recursive) dependencies, this is wrapped and made accessible today in Lavamoat[2]. Basically a package or app can provide a policy manifest specifying which capabilities (e.g. network or filesystem access) should be granted for each sandboxed dependency. Also comes with a tool that will auto-generate a starting point from your existing dependency tree.

IMO this is the future. Currently Lavamoat does come with a performance penalty but hopefully this idea will catch on and make it into language runtime implementations.

Lavamoat is still marked as "preprod" on npm but talking to the original author, the API is practically stable and it will shortly have its first stable release.

[0]: https://github.com/tc39/proposal-ses

[1]: https://github.com/endojs/endo/tree/master/packages/ses

[2]: https://github.com/LavaMoat/LavaMoat
It is not a smoking gun. Now if they find unique product obtained through a transaction it would be.
Based on the text of the post, it seems like OP stopped "probing the API" as soon as they had enough information to know that there was a security hole. So is your proposal that any kind of probing of APIs in general should be considered malicious? Like if someone has an image conversion API and I submit a gif, or a 1x1 image to see what happens, that makes me a malicious hacker?

That position seems wrong to me, and the strained physical-world analogies you give don't justify it. Often, testing something directly is the only way to find out how it actually works. Which is necessary in plenty of non-hacking situations.
If the retention of the employee is seen as a liability, then that's it, he's out.

Very unfair from employees perspective, but 'self interest rational' from the Corp.

If it's perceived that the employee 'went to far' in their 'discovery' of the competitive API, and that could possibly constitute a crime, then it's basically a 'no brainer', they're going to have to let him go.

Since the staffer did actually report it right away, hopefully he will have his own political cover, and can communicate that to future employers, who should 'get it' - though some won't.

It's unfair but these things happen when an incident blows up into something where the stakes are much higher. 'Fairness' at the microlevel goes out the door towards ostensibly bigger objectives.
This implies Palantir has "technology", which I'm sure they would like you to think, but what they actually do is sell SQL queries as a service.
tl;dr: Programmer doing competitive analysis on a competitor's new financial product discovers that it has poor security. Unsure of the how to correctly report vulnerabilities to the competitor, he raised the question to management inside his own company. His company's management, presumably not being infosec people, gets confused and the vulnerability report is lost in the corporate shuffle. Later, someone else rediscovers the same vulnerability and uses it to steal. The competitor that wrote the vulnerable app also botches the investigation, and blames the programmer, since his account appears in weird log-file entries from back when he was investigating.

I'd say the main mistake here was, after finding the vulnerability, handing off the reporting responsibility to people who couldn't handle that responsibility rather than handling it personally.
I hope one day you are never a victim reading some asshole talk down to you about why it your fault.
I used Nix at work but eventually realized, managing dependencies, compiling cross-platform, and deploying wasn’t actually bad enough to warrant that level of complexity
There are lots of computer systems out there that can create a very interesting synthetic image out of a single word. If you input one normal word, and take the first output you get, you have performed no creative input or intervention. But the output is something that easily would have been copyrightable if a human had drawn it.
“I mean it did make everyone better. The COVID pandemic could have really wiped out a lot of people and we printed money and it helped.”

Well, let’s see:

1. I got maybe $3k from the government due to all that printing.

2. The price level is easily up 25% for things I need to buy, like food, fuel, computing equipment, and vehicles.

3. And I still got Covid, as did literally everyone else I know. My brother still can’t taste anything and a guy I work with died.

If that’s what you guys with economics degrees call a win, I will update my priors from “you guys are idiots” to “you guys are a cult that uses math to further the work of Satan.”
The biggest shared cultural experience of the 16th century was the church, and it is omnipresent in the art we have remaining from then. Nowadays the biggest cultural touchstones are commercial.
CFAA isn’t going away.

> If you're not going to do that, then disclose the vulnerability anonymously and cover your ass while you're testing, or just don't.

No. Just don’t. Know that video about not talking to the police because they interrogate people all day long and you’re an amateur in a pro fight? Same thing with infosec. We attribute IOCs to noobs all day long.

You don’t need a criminal record. It’ll ruin many parts of your life. I have friends who can confirm that the record they got in their late teens or early 20s closed many doors. Join a formal bug bounty platform and find legitimate work there.
Storing hydrogen underground is, in fact, very easy and cheap. And, storing liquified hydrogen is likewise cheap. We can expect hydrogen to be produced on-site at large airports from power delivered over transmission lines, stockpiled against low-wind low-sun periods.

Once hydrogen-fueled aircraft enter a particular air freight market, kerosene-fueled craft will be unable to compete, because with LH2's much better mass-energy density, the fuel mass dispensed with may be replaced with paying cargo. Furthermore, hydrogen fuel produced on-site electrically will be cheaper per unit joule than mined, refined, and transported kerosene.

I am surprised to see designs with inboard LH2 tanks. I would expect to see LH2 tanks in wing nacelles, minimizing piping to engines.
I know it sounds radical, but I think all mergers should be banned all together. capitalism works best when good companies with a good culture are allowed to grow, become powerful, then die when they turn to shit, and leave room for the younger generation (a survival trick that all life on earth learned long ago).

At the moment these companies are acting more like viruses, infecting and feeding off smaller companies to stay alive, and often killing them to reduce competition.

I know many people upon reading that would say "what about my payout for the hard work I put into my startup". However, I feel like this culture of selling once you are successful only exists because once you are big enough to become a target, the prospect of continuing to fight against one of these giant monopoly giant-tech-monoliths is dauntingly impossible. If mergers were banned in the first place it would be much smoother sailing all the way to the top.

Then again I've never experienced a startup so I probably have no idea what I'm talking about.
Only a few years ago it was still acceptable, even in very trans-friendly places, for cis people to have a generalized preference for dating / having sex with cis people. Now the position has shifted and it’s much more likely than before to be considered transphobic. The acceptable thing is to consider each person on an individual basis without regard to whether they are trans. Granted, the only consequence so far seems to be being labeled transphobic, but that itself can have worse consequences if people believe you’re worthy of the label.
I don't understand what you're trying to say here. An argument that your browser is just doing what it's supposed to do when it triggers e.g. a SQL injection on some server somewhere is, I promise you, not going to help you if the government decides to prosecute you.
It's much more difficult these days due to Baumol's cost disease. You have to pay the benefits for all those stalkers.
Maybe, but if his company really had a problem with it he would have been fired or at least repremanded when he initially brought up the problem, not months later.
Well on the bright side he at least gets to carry the ST loss forward (indefinitely?)
Autism Correlated with Changing Sensory Preferences During Early Childhood
On some platforms (Darwin, among others), the syscall interface is defined not to be stable. Syscalls must go through Libsystem stubs -- which is written in C.

Go made the mistake of assuming the Darwin syscall interface was stable, and an OS update broke binaries.
Looks like Shrek's forehead. Posting for my own avatar reveal...
Because everyone's going to update their properties so analytics keep working. It's not like when a new chat product comes out and splinters your contacts into multiple chat products.

It's like when, e.g., Heroku sends me an email saying I need to move apps off of a stack they're retiring. They're not killing off my app; I just need to run the command or agree to a maintenance window so it keeps working after a certain date. If I for whatever reason refuse to do anything, I can't seriously claim they're shutting me down. Especially with a long notice period.
Google also claims to do it anonymously. The only difference is that Android lets you opt out, so a wiretap order to Google can't get your location.
To use your analogy in the other direction: nobody talks about the Wizard of Oz source material. Were you aware the movies were based on a book? Maybe Marvel comics will go the same way.
Interesting perspective. Thanks for sharing!
You're mistaking the easy for the legal. It can definitely be illegal for someone to "observe what his own computer was doing and then make some web requests".
i assert that the very practice of typing listings from books and magazines back in the day was exactly the sort of slow paced repetition that was required for really deep memorization. i can still remember PEEK and POKE from BBC Basic 40 years later.
I know right? I bet he even went to the bathroom and even slept at night. Imagine!
I could be totally wrong, but my hunch is that this is more related to the lowest hanging fruit rather than human capacity. Maybe scientific discoveries simply get exponentially harder.

In painting, it's very rare for someone to make anything original these days. We won't have any more Picassos, etc, simply because they were the first to explore a new terrain. It's really not a matter of education, genetics, or talent. The more explored a terrain is, the less there is to discover.

So the matter is really discovering new terrains, like the internet has been in the past decades.
The moral of the story is that you should use Tor / a proxy and remain anonymous if you are planning on hacking someone else.
I didn't say they needed a warrant. I said the opposite.
A Deep Study into the History of Web Design
Having never heard of “Columbo,” I have my doubts.
Indeed I meant 2007, 2020 was the year the reserve requirements were adjust to a zero ratio which I was responding to in the earlier post.
Have you heard of this guy called Snowden? Or maybe Aaron Swartz. Govts have been harassing them too. One guy even took his life