skysight-inc/HackerNews huggingface dataset:
People are in a choke-hold with this. You can be tarred as a ‘racist’ for pointing out such illegal and opportunistic practices.
There was one couple of days back about a grilling company: New account, evoking emotions, hundreds of awards in couple of minutes, promising short squeeze.

Other than that the whole subreddit is just retailers losing all their money.
Well yes. I'm looking for competent C coders. Competent C coders know how malloc works. It goes with the territory.
Does anyone know what to look for in the github audit logs, exactly?
> competent and secure hosting for an old Wordpress blog

Amusingly, nobody here has stated the obvious: wordpress.com.
I'm of the opinion that taxes are unnecessary in a state (meaning something closer to culture-civilization, i.e. taking "state" as far more than just government, at the least including private banks) were money is created by fiat and debt.

I think this because, as far as I'm able to understand, the fiat currency system is a kind of "infinite money machine" (or something like it) which makes a certain high-enough level of government free from requiring being funded by taxes.

this occurred to me after reading a bit about the book "how to pay for the war on terror". and I also recall reading how the USA government has been steadily de-funding the IRS, which would make no sense under the notion that taxes are necessary to fund the government.
>No need to interweave documentation and code, in most cases.

Locality is the reason, and it's a good reason. Of course, I don't want to see paragraphs of explanation inline, but a one-line comment giving context for some choice that might be confusing is much better and faster to work with than a separate WHY doc.
Sure they did aggressive lockdowns. Welded people into apartments and buildings. Etc. and that absolutely contributed to lower covid numbers.

But it doesn’t change the fact the reported numbers are massively censored and doctored.
Levine is a former Goldmanite, Twitter advisor. GS versus MS, the latter here unusually on the hostile side.
Show HN: I built an open dashboard for my website
I'm interested in the thought process that made you conclude that that is the simplest explanation
You sound fairly rational to me. Do you, in fact, worship the ground he walks on?
> job on upwork.com as an algorithmic developer.

You were paid to write the code by these guys, they own the copyright and can do whatever they want with it. It is not "your code", you cannot "keep the code".

You should have insisted to simply get paid since nobody knows the future. I would take it from the rest of your story you will never see another cent of that from those guys since they stop working with you and "get another developer".

The best thing you can do is negotiate a cash fee only about the AWS handover task since the rest of it is already lost. Genuinely help them migrate, take the fee, and learn from this what not to do next time.
In Germany, the major problem is buerocracy. There are so many rules, that changing land use or getting better allowance simply takes centuries.

It's sometimes that absurde, that nearby lots have 3 times the building capacity.

We already have a land tax called "Grundsteuer", but it's useless in the way it is.
It's not clear to me that this is really sufficient, or even really answers the original question.

On the sufficient side, I don't know that retaining an encrypted version of customer data would really meet a lot of compliance definitions for deleted data. Atleast, nothing I've heard of tested in court. Also, depending on the data, even tokenized / encrypted / etc approaches are easy to get wrong and still allow some correlation. In a previous company when it came to network tooling, we had to be extremely careful that we didn't intercept 1 bit of payload, as even though that 1 bit couldn't be used to meaningfully reproduce a phone call, by many legal definitions we would be illegally intercepting phone calls.

And then circling back to the original question, the problem of how to manage data and customer deletions if just shifted to how to do this with the tokens.

So my take on the original question is as follows. To my knowledge, the right to be forgotten compliance regimes do include time windows for deletions, understanding that it can take time to purge requested data. Also, some customers may want this in their contracts, so I'd try and align any contracts / terms of service with the most strict compliance regimes.

When taking backups, if possible use WORM (on S3 I think this is called object locks), and set the lock to be less time than the compliance regime requires, but long enough that there is always locked backups that can't be deleted by a mistake or adversary. Depending on required history, you can then just let the backups expire. If you need longer backup history than the compliance regimes allow, then it comes to structuring backups so selective data can be removed, and then relocking the backup. And doing this on a rolling basis, so at no point in time or run of the cleanup are all backups being touched at the same time.
Which not so well known books are suitable for beginners to learn programming?
Marketing,

"The timeline for shifting to an "upstream first" cycle for new features starts in 2023, with 2020-2022 dedicated to making it work for pre-existing functionality. The Pixel 6 is expected to be the first Android device to ship with the GKI and Linux kernel 5.10, marking a major step in this process."

Means this is still one year away, if it actually happens, and then only Pixel devices will support it anyway, as so far most OEMs couldn't care less.

Not to mention that upstream will never accept all the things that make Android Linux not really Linux.
You’re right. I meant the idea that the only thing platform owners do is optimize for the community.
Why would ideological inclination be a primary bias factor unless the ideology includes such pettiness as putting your bias ahead of your work as one of thousands of low level fact checker employees?

If I try to not be a blind ideologue over such a small thing as being a fact checker, wouldn’t I be better than median politics fact checkers who want to exert their bias as much as possible?

We don’t want political stuff in the fact checking. It’s far more bias to have fact checkers who are in line with the median citizen and put their political stances above fact checking. Aka doing their work.

Every one has biases. However not every one will consciously or otherwise, have their biases seep into determining what is misinformation or not and so on.

Edit: Even sadder is the parent is not down voted to greyness like the person you responded to. A sad take. Not only putting bias ahead of an attempt at “the truth”. But leaning into that. Which makes the thread make sense —- not even trying to act in good faith.
For some reason for the single app I had used this for, there was no "Disconnect" button - so I just did the nuke option of deleting the connection right from the main settings page: https://dashboard.heroku.com/account/applications#third-part...

For checking your Github audit logs, you can go directly here (replace ORG_NAME with your own): https://github.com/organizations/<ORG_NAME>/settings/audit-l...

Or from: Organization > Settings > Archive > Logs > Audit Log

I hope we get some more clarity on the extent of this incident soon. We'll rotate our keys anyway but I really hope the attackers did not have access to the ENV vars that are commonly set on Heroku directly.
Fluid dynamicist here. I think these sort of blow-up results get far too much attention from the popular science press, and I don't know why. This is practically a pure math problem. Both the Euler and (constant viscosity) Navier-Stokes equations are known to be flawed models in certain situations. And corrections for basically any identified flaw exist. Just because a certain category of flaw hasn't been proved yet doesn't mean much; its correction might already be published!

From what I understand, in the 1930s Jean Leray provided that the 2D (constant viscosity) Navier Stokes have smooth and unique solutions. And in the 1960s Olga Ladyzhenskaya proved that for certain non-constant viscosity laws (which are a lot more realistic than constant viscosity), the 3D Navier Stokes equations have smooth and unique solutions. From a physics perspective, there is no mystery here in terms of whether a properly posed problem will blow-up.

A lot of people (for example: [0]) link the question of whether the Navier-Stokes equations have smooth and unique solutions to turbulence, which makes little sense to me. Take the situations mentioned in the previous paragraph where proofs exist. The turbulence problem still exists there! The problem of turbulence is one of computational complexity. Turbulent flows seem to require a lot of computation.

[0] https://www.quantamagazine.org/the-trouble-with-turbulence-2...
I still sign off with two-dashes-space [Return] Name. Depending on your mailer, it should result in a signoff that doesn't get included if you hit Reply. "Name" might include the full multiline sig, but I've always deplored multiline sigs.

Depending on who I'm writing to, I might precede the sig (or the name) with some expression of goodwill, such as "Love" for my kids, or something more formal like "Best regards" for others.

The best signoff for a two-line email, of course, is an "Unsubscribe" link and 6 paragraphs of unenforceable and nonsensical legalese.
I wrote my graduate school thesis on Intel SGX. I was not a good student in grad school, my thesis was not some innovative thing but now it is completely useless.

Edit: There is another comment linking an article from Intel saying SGX is full steam ahead in Xeon. Yay my thesis is not useless!
> The Proposal is non-binding and, once structured and agreed upon, would be conditioned upon [...]

> There can be no assurance that a definitive agreement with respect to the Proposal will be executed or, if executed, whether the transaction will be consummated... The Reporting Person reserves the right to withdraw the Proposal or modify the terms at any time including with respect to the amount or form of consideration.

I think you're mistaking it for a deal that's much further along than it is, there is no binding agreement where Mr. Musk would have to pay penalties or anything like that for dropping the deal. An agreement reached as a result of this proposal would be, but that seems unlikely right now.
Every time I see a crosswalk near a roundabout, I think that's a terrible place for a crosswalk (the drivers are distracted by figuring out if they need to stop, and when it's clear to keep going).
A cruiser is distracted by an unmanned drone and then taken out by one or more guided missiles, resulting in the most significant loss of a naval vessel in decades. War is technology, more so than the work most of us do.
It's really fascinating seeing all the conspiracy theorizing going on with this offer. You have a number of really creative threads going on here.

To step through this... So we have someone with a net worth near 300 billion dollars that is going to go through all this trouble to:

-Unblock one user

-Which will then trigger an American political party to like him

-This political party will then make it less likely the SEC will bother him, potentially saving him tens of millions of dollars (or 0.01% of his current net worth) in some hypothetical scenario

What a theory! This same political party and twitter user was in power when the SEC fined him+Tesla $40 million in 2018. How do you make sense of that with your theory?

If politics was his main driver, why wouldn't he just use his wealth to directly incentivize politicians?
>Buyout firm Thoma Bravo approaches Twitter with acquisition interest

https://www.reuters.com/technology/buyout-firm-thoma-bravo-a...
Taxes aren't about funding the government, they're about surveillance, control, and wealth redistribution.
what does it take to get a good word-to-vec--style model going- or are those not 'sparse' ?
I propose, as well, that we “weed them out” with a week of hunger games, battle bots, and rocket launch tests.

In seriousness, through a decade of experience in AI, I have found that most “famous” and “exotic” algorithms that software engineers love testing (e.g. OP’s references to sorting, tree searching, and recursion) come up exactly never in my day-to-day.

Please, limit testing to the actual data structures and algorithms that dominate 99% of the proposed work. If the proposed work is not in a field you are truly an expert at, then don’t be responsible for technically interviewing this person.

In my branch of AI, if I’m not getting solely evaluated on my ability to work with tensors, vectors, graphs, …, then I realize there is no AI group at this company (or it is inferior in its autonomy). There are so many extremely useful specializations in real-world moonshots, that would otherwise get bludgeoned upon any interview within a general purpose software engineering culture.
> It's not as if Apple is trying to hire US workers, failing, and then resorting to the H-1B program as they're supposed to.

They don't have to try and fail to hire US workers in order to use the H-1B program. That's for employment-based green cards. The H-1B only requires specialized skills - software engineering is a specialized skill.

> They use the H-1B to increase their labor pool and lower costs

Go check out levels.fyi to see what Apple pays "generalist software engineers". It's well-known that the younger generation of American workers is financially struggling. So it's not like they're turning down software roles at Apple because it's not enough money.
if you're against title-holding, you are really against the idea of ownership, and capital.

> Because the titleholder is not obligated to do anything at all. Their role is to own, not to do.

their role is to provide capital to purchase the title. And in the future, some other capital holder will buy the title off you.

This whole process is what enables investment in the land in the first place. It's the same idea as shareholders buying shares off other shareholders. These "secondary" buyers don't directly contribute to the company (analogous to the land), but their role is necessary to distribute the risk of investment across time. High risk takers buy the IPO, and lower risk takers buy after the company has proven to be successful.

This isn't any different from land holding. High risk buyers would buy new land (offered by the crown/gov't), and perhaps develop it (or not, if they want to take on a loss since undeveloped land is money-losing). But once the land is proven valuable - e.g., the city is expanding into this new land now - the value grows, and they can sell to a different title holder who want more certainty of the value of the land.
Is it not ok to mock creationism anymore? I need to get out of my cave that's 5,000 years old and learn modern customs.
Hear hear!

This is a beautiful and insightful thread which completely avoids talking about money.

Not all social networks devolved into hate filled screaming fests, the main reason they do is because that drives engagement, which brings money, which makes stakeholders happy.

This is the only reason that running Twitter as a private company owned by a single rich dude might make a difference.
How _lucky_ that github itself was the subject of the attack in npm.

Unless I'm missing something, this attack could have gone unnoticed for a long time (it would be hard for someone to connect a random breach in their infrastructure to an oauth intrusion affecting two of their service providers).
I highly recommend the solo founder + consulting path. Look around you and find a problen you want to solve, and try to solve it well. Maximize for being able to spend time on that thing. Do consulting work when you need money or want to change things up a bit. Eventually along the journey you’ll find other bright and motivated people who you will want to work with (as friends first), and possibly form a team of cofounders to build stuff together. I was in a similar spot about 5 years ago and not only has this path given me numerous ways to hone my skills across a broad spectrum of disciplines and stacks (not to mention dealing with very real “business shit”), but you meet wonderful people as part of this, gain a “see it with your own eyes” perspective of how dysfunctional most orgs actually are, and you forge a lot of good contacts and in-roads who can potentially be future customers of a product you build. Selling things is so much easier if you have people championing you internally, and people will happily champion you if you prove your competence and truly solve their problems. You also get real agency with this path - if you’re doing consulting work to pay your bills but maximizing for your free time to build products, you can also just…not build products for a bit. I’ve learned many skills, do personal research projects, and get to spend more time with people I love as a result. Obviously I’m incredibly privileged to be in this position but I truly believe if you’re competent and maybe a bit clever the opportunity is still there and very much alive. The best part is that if you no longer find it palatable, it serves as the best resume fodder you can possibly have - just go back to the “normal” working world and kick off the cycle again later using what you learn on someone else’s time (while also being an excellent internal contributor because they may also be your customer some day).
For many accounts the audit log isn’t going to show some crucial information—git activity. Clone events are only available through the REST API for Enterprise customers.
Am I right to say GitHub knew about this on the 12 April [1], but Heroku customers are only finding out now, 4 days (!!!!) later?

Heroku boasts:

> we will notify affected customers by email without undue delay.

4 days. Really. "without undue delay".

[1] https://github.blog/2022-04-15-security-alert-stolen-oauth-u...
If I want to revoke all Heroku's access to Github, is it the "Heroku Dashboard" I'm looking for under "Authrorized Oauth apps"? I revoked that one, but not sure if that is everything.
Hence why I mentioned "as far as I am aware" instead of stating is a fact.

The 10% as pointed out in a sibling comment, while admirable isn't large parts.
Code comments that are wrong can be very useful. I've found many bugs that way. If I find a comment that states an assumption that does not hold in the code, that's the first place I analyze when looking for a bug. And very often it turns out the comment was right, but the code was wrong.
> They don’t check for employment eligibility/citizenship status before interviewing.

Believe it or not, that's actually a good thing. It means they're looking only at skills and qualifications, not passports or "driving down wages with foreign labor", when making hiring decisions.

Also it's not completely true. Recruiters will make a note of your employment eligibility for planning purposes (a new hire needing a visa transfer will take longer to start, the company has to allocate budget to legal etc). In large companies the people making the hiring decision most likely have no idea, and definitely do not care, about the candidate's work permit status. It's a thing for HR to take care of as a part of closing the deal.
And here I was expecting to see how the power station is wired.

https://www.piping-designer.com/images/disciplines/electrica...
You completely misunderstood their post.
Wrong choices are still wrong. I'd like to move into a house with my wife, but at this rate we'll be saving for a decade to get there. With climate change we have no idea how the real estate market will be at 1.5 degrees warming.
I compile my own fork of FF for myself and my family for years, and i've switched us all to brave search for the same reasons as `
colordrops`.

`yegg` can do whatever he want's, I just want no part of it.
> property that could be owned outright by the resident

So why don't the residents do it? Ownership requires capital, which presumably the residents don't have access to.

So the landlord is providing the capital required for the building's initial investment, just shifted across time. They don't necessarily have to be there at the inception of the building's initial investment phase, but they are party to the entire chain of transaction, and is necessary for the initial owner's exit out of this investment.

If the landlord would not buy at _this_ price, the initial owner of the land/building may not have had the risk appetite to build the building in the first place.
It's a consequence of living in a society where everything is about money. You absolutely could build a better operating system, but doing so wouldn't make you any money, so nobody can afford to do it.
Future Mercedes Internal Combustion Cars Will Be Based on EV Platforms
Why is Intel wrong for trying to solve software problems in hardware, while ARM/CHERI are celebrated for being ahead in trying to solve memory safety in hardware using pointer upper-bit tagging and now CHERI's provenance metadata (performing fine-grained bounds checks on every single pointer dereference, rather than just following instructions without performing extra work)?
10% in a browser currently having 3% market share with a decreasing tendency towards 0%.

Most of that code is surely related to what was replaced initially instead of new subsystems being ported.
I had never heard of this, super interesting, thanks.
It's more nuanced than hand-waving away anyone that wants to talk about copyright reform with neo-capitalist 'everyone will choose to be a freeloader' hyperbole.

"If you could feed everyone on earth at the cost of baking one loaf and pressing a button, what would be the moral case for charging more for bread than some people could afford to pay? This represents the difficulty at which we find ourselves straining at the opening of the twenty-first century."

--- Eben Moglen, speech he gave in 2003 - refer: http://moglen.law.columbia.edu/publications/maine-speech.htm...
Israel’s ‘Iron Beam’ Laser Successfully Downs Rockets, Drones, Mortars
Try HN.algolia.com to search for "learning programming." Try theodinproject.com and freecodecamp.org. Check out why.edu. Best of luck. Nand2Tetris is a fun project/book to check out once you have some basics down.
Time Might Not Exist Physicists Say Causation Is the Basic Feature of Our Univer
> can outsource every service he "provides" and still turn up a profit

the outsourcing might increase efficiency of provision of the services due to economies of scale.

This efficiency gain is then reflected as the profit.
So this means they also got access to all the private npm package code? Compromising all the organisations using travis or heroku is one thing. But all npm packages quite another.
Yet Chrome and Safari, the browsers that really matter in 2022, won't be moving away from C++.

Chrome folks have been playing with Rust, but seem more keen in improving their C++ static analysis tooling instead.

As for Mozilla, it is 10% of Rust code and lets see for how long Firefox still matters, given the existing 3% market, even EdgeChrome has surpassed it.
I mean, having played with MPX for use in a JIT, it was slower than just manually bounds checking.
> Following immediate investigation, we disclosed our findings to Heroku and Travis-CI on April 13 and 14

13-14, so "only" 1-3 days later, depending on what GitHub mean and timezones involved.
As I comment on many HN posts, I cannot exaggerate the impact that alcoholism medication has had on my life. It is only tangentially related here, as this comment is not about disulfiram but rather naltrexone, a drug with similar goals but a very different mechanism of action

This is all to say, if you or a loved one is struggling with alcoholism, I highly recommend looking into The Sinclair Method. Check out /r/alcoholism_medication or this accounts recent comment history. That community supports those that use disulfiram as well, but I cannot comment on that medication myself