skysight-inc/HackerNews huggingface dataset:
Even then, that only covers authorization for things in AWS that fit the general shape of control-plane API calls. There are endpoints in AWS that don't fit that shape, which do their own thing for auth (see e.g. S3 uploads with signed URLs.)
Don't forget to tip your server.
oh man dracula is so good. just installed on my vscode.

25 years with vim...all the way with vscode now
I highly recommend both Tunic and The Witness if you enjoyed Outer Wilds. But yes, the concept of "knowledge" being the power ups you gain throughout the game is truly done fantastically in Outer Wilds, and few other games come close to replicating it.
Are you including Obama in that? He was against gay marriage until the tide turned.

What about the CA Prop 8 against gay marriage that was widely supported by minorities? Were you "dragging, kicking and screaming" those minorities as well?
That is why SecDevOps team turns on the static analysis on the CI/CD server, with the decision backed by the security guidelines.

Then they can suck it up or move elsewhere.
ah. ok
Studios Rentals and Sharing Platform
“Zero trust” is referring to the fact that you are not granting trust based on network location; at the IP layer, all connections are untrusted. Unlike a VPN/on-prem network, where you don’t trust IPs outside your network and trust everything inside the perimeter. This is a pretty big conceptual shift in corporate network design.

Of course you need to establish trust somehow. It’s just done above the IP layer now.

There is nothing in the zero trust network model that requires you to use a third party; you can do the same sort of thing with wireguard right? (A la Tailscale). Probably true that it’s harder to assemble all the pieces than running the minimal OpenVPN setup, granted.
A platform where artists and influencer & all other creative minds can share their studios for rent. Here you can rent a music studios, photoshooting studio, meeting rooms, cars, pools and more. By Hour, Day and more.
Intruder (https://intruder.io) | Various Engineering and DevOps roles | Full-Time | London | REMOTE optional (UK or nearby timezone required)

Intruder is a SaaS platform that helps companies easily identify their cyber security weaknesses, and fix them, before they get hacked. We're a fast growing startup, over 1900 customers from around the world love our product.

Tech stack: Ruby on Rails and Python/Django back-end apps. Celery/RabbitMQ for orchestrating background jobs like scanning for vulnerabilities. Vue.js front-end. Many 3rd party API integrations. Mostly hosted on Kubernetes.

Although our company base is London (a nice office in a WeWork in Shoreditch), we have team members located around the globe and our dev team is remote first. We'll consider remote applications for this role as long as you're within 2 hours of the GMT timezone.

Our open roles:
- Software Engineers with backend or full-stack skills
- Senior Software Engineer that is able to help scale our technology so it can meet the needs of a global SaaS platform, as well as taking on a leadership position within the team
- DevOps Engineer with experience using Kubernetes, Terraform, Packer, Ansible in GCP and AWS cloud environments

For more details please check https://careers.intruder.io/
If it’s fine, you can consider yourself lucky. Authentication and authorization complexity is IME squarely proportional to system and organization size due to network effects inside them. At some point it becomes a significant subsystem in itself and contrary to belief of some it becomes a core business problem, not a checkbox to tick off.
The author of the musl C library has this to say about the POSIX shell:

"I am a strong believer that Bourne-derived languages are extremely bad, on the same order of badness as Perl, for programming, and consider programming sh for any purpose other than as a super-portable, lowest-common-denominator platform for build or bootstrap scripts and the like, as an extremely misguided endeavor."

https://www.etalabs.net/sh_tricks.html
Interesting. Anyone have any experience reprogramming those?
QOI is not on the pareto frontier for compression [1], it is however extremely simple and is a nice introduction to data compression for anyone wanting to learn about the field.

[1] See:

https://www.lucaversari.it/FJXL_and_FPNGE.pdf

https://github.com/libjxl/libjxl/tree/main/experimental/fast...

https://github.com/veluca93/fpnge
You can do a similar thing in motorcycles by rev-matching, this way you don't even need to pull the clutch to switch gears.
> that denies bargaining rights to members-only unions

Then you don't understand what "bargaining rights" are. It is absolutely fully legal for a members union to negotiation on behalf of its members, if those members consent to it.

In the same what that it is fully legal for me to hire a lawyer friend of mine, to bargain on my behalf.

What it can't do, is force everyone else, who is not in the members only union, to go along with that bargained contract.

So please, do not say that their bargaining rights are taken away. Instead be honest and say that their ability to force everyone else to have their bargaining rights taken away, and given to the union, against the wishes of those employees, is being removed from them.
Have you seen QOwnNotes? https://www.qownnotes.org https://news.ycombinator.com/item?id=13057022

Markdown, offline (with optional cloud integration) notes cross-OS manager build if I remember correctly on Qt
Walmart Plans to Become an Advertising Powerhouse
> because

How does this connect with the GP? The commenter you’re replying to is suggesting that we should consider the difficulty/limited bandwidth of approaching history for an entirely global perspective, and that there is a universal tendency for people to focus on their local experience.
This needs a (2019) given current events.
My favorite colorscheme is Molokai, which is like Monokai but softer on the eyes. I use a modified variant more similar in layout to Atom One Dark.

https://vimcolorschemes.com/tomasr/molokai
No. You can encrypt symmetric keys with literally any other asymmetric crypto system, such as ECC, as mentioned in the article.
Would you rather use Microsoft's or Apple's free telemetry endpoints?
I platinumed Forbidden West yesterday. It is a beautiful game. But it lacks the magic of the first one where I was walking around slowly around the world wondering what might have happened. Now I know. And it can't be replicated. It's hard to follow-up on such an experience and what the team has achieved is nothing short of amazing. Of course, there are a bunch of things that don't work well.
The weapon- and armor- tiers don't relate well to the progress in the game. They nerfed the legendary because everyone was skipping the purple ones making them entirely irrelevant.
Sometimes the moral justification / social justice police is a bit heavy handed in a game that is set 1000 years after a full-reset apocalypse.
LGBTQ+ representation, Climate change (Lombard street), Handicapped acceptance (Kotallo) etc you name it. I get it, I don't really mind.

Also the game follows the bigger evil fallacy which leads to the main character needing to become a super-hero to "win". I mean Aloy is already at that point, I guess. For example there is a several ton heavy fireclaw that jumps on you at every occasion. I don't see how a person would survive that. Hence it is a bit immersion breaking.
“World's smartest traffic management system” launches in Australia
And he even works at Tailscale now.
>Kudos to that Russian 19% with no alternatives.

Probably a good portion of those 19% have ways to browse western media.
A plain-text file Markdown note-taking with Nextcloud / ownCloud integration
I was hoping this would turn out to be more of a 'developers looking to collaborate' instead of a 'looking for developers to work on my idea' thread.

I will post my profile and hope that somebody can suggest a nice project to contribute to.

Anyway, I'm reasonably experienced in C, have some experience in C++, C++, SQL, VHDL, Python, some HTML and Javascript as well. I have a good mathematical basis and some basis in low-level programming (e.g. assembly, mostly x86). I work mostly on Linux and occassionally on windows.

I'm very interested in mathematics and want to learn: APIs for graphics and sound (e.g. win32, x11, OpenGL, ALSA, waveout), digital signal processing. Also very interested in optimization and computational topics such as interval arithmetic, fast approximation/computation of various functions, arbitrary precision arithmetic.

Looking to exchange experience with other developers, both more and less experienced.
GP is almost certainly agreeing with your statement:

> global monoculture and putting all eggs in one basket as a society is a bad idea
I would be very interested if the screen was a bit bigger. How quickly does the e-ink display refresh?
Frances Haugen asks Government Pension Fund of Norway to sell out of Meta
The isometric gameplay has a Kenshi[1] vibe.

[1] https://store.steampowered.com/app/233860/Kenshi/
Actually a very good one. :)
Interesting idea, I like the premise that people might build fancy ways to interact with this such as VSCode addons with a 'real' UI, but there will always be a plaintext fallback.

I already manage my hobby software projects using plaintext files, using a made-up syntax that is not quite org-mode, not quite xit, but that I'm also not too strongly attached to.

The one thing that jumps out of me that would make it hard to switch to xit that the spec currently doesn't allow lines to start with whitespace, which I use for grouping things. I settled on 2 spaces, but could also see 4 maybe being a better choice because of how it makes things line up.

(presented here with additional spacing because hn doesn't parse single newlines)

UI

[ ] Buttons

[ ] Front page call to action

[ ] Make it red

[ ] Make it really big

[ ] General

[ ] Increase padding

[ ] Stronger drop shadow
Article is overall unpersuasive. The first part is silly: copying a whole array instead of using a functional data structure such as a red-black tree is just asking for a huge slowdown. The second part doesn't give enough detail to really make its case. Author's solution was a big tree with mutable nodes, but there's a cautionary tale in an old article[0] by Ramsey and Dias about using a zipper[1] as a functional representation for the control node graph of a C-- compiler.

[0] https://doi.org/10.1016/j.entcs.2005.11.042

[1] https://en.wikipedia.org/wiki/Zipper_(data_structure)
> i.e., a license is preferable to a public domain dedication

Are we that easy to fool by lawyers? The public domain is the public domain. Before someone comes out and says that the concept of dedicating IP to the public domain doesn't exist in some countries or is full of hidden perils, I'll ask you to provide a single case where code was attributed to the public domain and that became a problem for the author or for the users.
I really wish the open source community would work on an open firmware that supports these webcams. Security is one thing, Wyze recently start pushing the WyzeBeta iOS app, which seems to pivot users towards subscription for basic functions like viewing motion alerts. That’s kind of alerting too.
Everything also beats the built-in Windows search when it comes to searching through text files by having the 'content:' operator. Combine it with a specific folder path and you get even faster and accurate searches.
No, that's not accurate. The final form of your Haskell program before it's compiled down to some assembly language (currently C-- or LLVM) is a graph reduction problem. The partially imperative part is the runtime system, which actually reduces the graph (= runs your program), but this is significantly more complicated than the sort of high level loop transformations you're talking about. Search "spineless tagless G-machine" for a (somewhat idealized) description of the core architecture of GHC.
Hi Dane, thanks for taking the time to reply and thanks for listening to our feedback.

It is still not clear to me what "40 server ENVKEYs" means. Is this different projects, or each ENVKEY on each of the projects? What counts towards this quota?

I've read a comment from you today (on another thread) about migrating from OpenPGP (RSA) in v1 to NaCl (EC) in v2. So I guess V2 encryption/decryption works faster on the gui/cli and security is stronger. I still would have loved as a customer to have EnvKey done this transparently to me. No idea on the internals, but something in the line of: whenever a customer updates any of its secrets, re-encrypt everything to use V2... but probably given existing architecture/design this is probably either too complex or unfeasible. Which makes me wonder... what would happen if an attack was found on curve25519 or certain type of attack was found? Just wondering, out of curiosity, if the current V2 design would support re-encrypting using a different algorithm (or even another key) in the client-side without other major changes (even if client has to re-encrypt messages from the CLI/GUI). Just wondering.

I've decided I'm going to give it a try to re-import all keys in order to see how a migration would look like and see if I'm hitting any limits beyond the free tier, but if I am, even though I would pay 2-3x what I'm paying now, I think either I'll move to the open-source version or look for something else. In any case I'll drop you an e-mail with my experience.

Coming back to the pricing discussion, as a customer I still like V1 pricing for its simplicity/clarity. You pay per users and that's the end of it. I believe a combination of nº of projects and nº of users might be the way to go for your product, because as a customer is easy to understand and easy to predict, and even if there is a fixed price per user/project then the more projects you add, the more you pay, incrementally... but this is just a thought. Same with the limits... I mean, it would be nice to say, here are the limits, if you surpass them regularly, they would be charged by X amounts.. which is also incremental.

Anyway, thanks for mentioning in another comment you are considering some adjustments. I mean, as drcongo said, maybe we are not your target anymore, maybe we are just a vocal minority, you are the one with all the info anyway. The new pricing might be the right thing for your company, not a clue, although I honestly think there can be something in the middle that even if it gets you marginarlly more money/users at the beginning, might allow your customers to stay and grow as their company grows, which will help you grow as they grow. Final though, the current jump in princing from the free tier to the business tier makes me hesitant to even use the free tier.

And again, the product itself is amazing and I am very happy with it, no complaints at all with it.

- minor edits for clarity -
Probably not the place to post this, but I'm directing and producing a couple of short films and it'd be great to find people who want to help in any aspect of the post-production process: musicians, designers, VFX/3D artists...

If anyone is interested in knowing more about this, please reach me out to hello@borjamoya.com
Is my downvoted & dead sister so because she is false or because she spoke an unspeakable truth? Surely this cannot be one of those places where mentioning an offensive word (as distinct from using it) is considered offensive? @dang
If you need any help or even just advice on VPN, I am super available (Wireguard only, of course, the best ever) :)
Translated version:
https://www-digi-no.translate.goog/artikler/ber-oljefondet-t...
(With access to all of the article)
Been using neeva as my daily driver for at least 6 months.

I do use !g somewhat frequently (2-4% of quieres I’d guess) but the results are definitely good enough for most quieres.
> The public domain is the public domain

“I place this in the public domain” has a significantly different meaning in British English.
Samsara | Multiple Roles | Full-time, 100% Remote OR Hybrid In-Person/WFH (US & Canada) | Apply here: https://grnh.se/766dab941us

Samsara is the pioneer of the Connected Operations Cloud, which allows businesses and organizations that depend on physical operations to harness IoT (Internet of Things) data to develop actionable business insights and improve their operations. Samsara operates in North America and Europe and serves more than 20,000 customers across a wide range of industries including transportation, wholesale and retail trade, construction, field services, logistics, utilities and energy, government, healthcare and education, manufacturing and food and beverage. Learn more about Samsara's mission to increase the efficiency, safety, and sustainability of the operations that power the global economy at www.samsara.com.

Open Positions: Senior Engineer (Full Stack, Backend, Frontend), Senior Embedded Software Engineer, Staff Engineer (Platform, Video), Engineering Manager, Principal Technical Program Manager, Senior Data Engineer, Senior Product Manager, and more!
Growth was already slowing in 2019, which is why the fed started dropping rates in June. In fact 2019 was the lowest growth in the entire decade, the lowest since 2008.

https://www.bbc.com/news/business-50234626
I use light theme variant of Solarized at day time and dark in the evening.
While perhaps technically true, I think you are taking a word's general strict meaning, and are attempting to apply it to something where the meaning is often stretched a bit liberally.

While yes, it is true that a "loophole" is something that is unintended but allows some subset of people to benefit, when it comes to "tax loophole", that has colloquially come to mean "any means by which a special interest group gets to avoid taxes". "Tax loopholes" can be intentionally added to the tax code, even if "loophole" implies something unintentional.

Remember that English is a living language, and meanings change to suit how people use words, not how the dictionary may have once defined them.
Workers are free to take non-union jobs if they don't want to be in a union.
Yeah Amethyst does that, but for >80% of setups the default layouts are good enough once I get used to it. And custom layouts is coming to Amethyst!
> Project ;)

What?

Countries want to join the EU for access to the common market and funding. Democracy has very little to do with it.
Well, to be fair many of them had some kind of prototyping to see if customers like the product or not before building the complete product and releasing it.
AWS was first developed internally to solve their own developers problem. Dropbox had a very viral successful video to gauze customer interest. For Facebook, Mark Zuckerberg did develop many side projects (like gathering opinions about some historical art for class project etc) during his time in college before combining all the best features to release Facebook (which didn't have photo gallery feature at the time of release).
One overlooked part I think is the network. I remember listening to interview of Stripe founder and he mentioned how that network helped in getting initial traction to the product, so it's not all about building in silos for months and hoping customers would come when the product is launched.
I don't know about dignity. Ask any nurse, doctor, grocery worker, restaurant worker, etc. how they feel about being called a hero. Calling us that to exploit our sense of duty or compassion. Giving us pats on the back and "bonuses" if that amounting to half a week of rent or food. We won't just stop at being actual people. We'll keep on organizing and quitting and lying flat or whatever we need to do to get our share.
And there is something notoriously absent from the webpage, the fact it might be possible to tunnel underneath some headquarters and leave some explosives directly underneath to blow the enemy up, pun intended.
> I wonder why advanced militaries don't appear to use them

In cities they can use pre-formed tunnels - subways. Otherwise they aren’t needed because enemies don’t tend to sit in large static artillery-proof castles
The Corn Palace of Mitchell, SD.

https://www.tripadvisor.com/Attraction_Review-g54718-d145077...

Why exactly is this "story" here?
I love the idea of an e-ink computer, used to own and love a Psion Series 3 [1], and would like to think that I'd buy this sort of thing, but to be honest in the end probably wouldn't. The MacBook Air is just too good as an all-round machine to make me want to carry a second thing.

[1] https://en.wikipedia.org/wiki/Psion_Series_3
I am interested in seeing your frankentop, have you written it up in a blog post, or submitted to hackaday etc?.

Personally, the Surface or tablet form-factor seems like the future to me, bring your own keyboard.
What a brillant idea... I have sim-racing gear amassing dust in the garage, you make me want to try it out...

I probably won't but only because the Logitech shifter I have requires to be plugged in to the whole steering wheel assembly which would be bulky to have around the desk...
So this is like a calendar but just for a day?

should we have some columns grayed out to show downtime similar to a weekend for a week?
Interested in fun (or useful) iOS & web projects. Also interested in meeting Southern California (LA) people

Repos & contact info: https://github.com/xta/
Apps: https://fastrobo.co/
So like HUMP, then?

https://www.strangertickets.com/97787708/15th-annual-hump-fi...
I am interested but I already bought a reMarkable. But this is a normal laptop otherwise, meaning if I run Ubuntu on it I can use terminal etc.

I would probably consider getting it for christmas or my birthday, but I am also an outlier as I would be able to take it off of taxes.

on edit: a propos the remarkable one thing I got disappointed in is I used to own a pocketBook and when it broke figured I'd move up to reMarkable because bigger screen, but it's actually harder to read because while larger it's darker. Just an UX observation.
The one I use is from this repo: https://github.com/chriskempson/base16-vim, which is built on the "base16 system" https://github.com/chriskempson/base16.
> Most safety net programs are far more focused on "avoiding a catastrophic outcome" than guaranteeing a good outcome.

Right. It's weird to me to see so many people framing it in the ensures-good-outcome sense.

A "safety net" is literally a thing that catches you when you fall. That's it. It doesn't push you higher in general; it just helps you avoid the lowest of the low.
Tokyo Night is just amazing.
FFS, enough with the April Fools nonsense already. Back when Slashdot was relevant I used to stop reading it on 1/2 April due to the low signal to noise.

Please downvote April Fools posts so that we're not wasting time reading garbage.
Probably not the FBI but the relevant regulatory agency possibly. Being a whistleblower comes with its own set of risks though.
Homer in the Bronze Age? New Evidence from Mycenaean Greece
Microservices for a small application developed by a handful of developers
In Clojure the default associative data structure is a persistent map and cloning it with 0 changed nodes is basically a no-op.
Exactly, but I couldn’t figure of how it actually differs from CC0, despite apparent protestation to that effect:

> The CC0 and various "do what you want" licenses and various public domain dedications may be less attractive to the initial developer for various reasons (i.e., a license is preferable to a public domain dedication).

Maybe the difference is more a branding/tribal association than a legal one?
Ah yes, haven't played XBill for a while.
Ah, you're probably right, ambiguous violent agreement (: