skysight-inc/HackerNews huggingface dataset:
> Additionally, according to GitHub, the threat actor accessed and cloned private repositories stored in GitHub owned by a small number of our customers. When this was detected, we notified customers on April 15, 2022, revoked all existing tokens from the Heroku Dashboard GitHub integration, and prevented new OAuth tokens from being created.

Various customers received an email from Heroku on April 15 saying "We value transparency and wanted to notify you of an incident we're actively investigating that may lead to unauthorized access to your GitHub repositories connected to Heroku."

The way this incident review (to call it a post-mortem would be an insult to those who write good post-mortems) phrases things, customers have no way of knowing if that email meant they were one of those "small number of customers" or not. And what is a small number, anyways? Is 49% of customers a small number of customers? It's an absurd situation.
Maybe they wouldn't be homeless if the super-rich weren't hoarding so much property.

Homes should primarily be homes, not investments.
>The ironic thing is that Congress cancelled the Apollo program and approved the Space Shuttle program and that was even more expensive (in $/kg to LEO terms).

Highly relevant:

"Human Space Exploration: The Next 50 Years" by Michael Griffin, NASA Administrator, March 2007. He wrote that had the agency continued using Apollo-Saturn instead of developing the Space Shuttle, "we would be on Mars today <https://np.reddit.com/r/space/comments/5324ud/human_space_ex...>
It's true you can't disconnect the decisions of the business from the ones making those decisions. But you also can't hire your way out of current problems, especially hiring lower in the organization and hope for change. To completely reboot a company's decision-making culture by way of importing new people without a complete reboot of leadership is very difficult. And even if you could completely replace everyone in the organization from the very top to the very bottom (which is an impossibility), you're still left with the legacy of existing customers and technology as well as your brand and reputation and relationships. Simply put, changing people is not a solution to these problems. People and decision-making relate to each other, but as time goes on, the ability for one to impact the other without regard to the existing impedance in the organization and market is limited. This is part of the Innovator's Dilemma (https://en.wikipedia.org/wiki/The_Innovator%27s_Dilemma)
Mind that this is a subpage of a much larger segment of the digibarn site. The front page [1] reads, 'The Xerox 8010 (aka "Star") was introduced in 1981.'

[1] https://www.digibarn.com/friends/curbow/star/index.html
Who said it's strange? I didn't know I had ADHD, and if I hadn't and still was depressed, probably an anti-depressive would have been more suitable.

My point is, of course AMPH helps depression from ADHD, because ADHD is a debilitating disorder. But AMPH probably doesn't help in other types of depression not caused by executive function disorders.
OK very interesting ... is the performance benefit on certain platforms, or everywhere? A previous thread says Ninja is faster on OS X and Solaris because of it.

Though that does seem like a large number of corner cases, probably learned through painful experience :-/
Interesting. What are they trying to achieve with these listings? It might be nice for a magazine article or something, but it seems like there is little practical use? For example, I don't imagine any bank being willing to use those shares as collateral, nor an acquisition target valuing those shares as a currency. Is it just ego?
> That's worth much much less than the current 1-month US Treasuries that are available

It's not 10% less, or anywhere close to it. You are only missing out on roughly (1/12) * (0.0113 - 0.0036) * (treasury amount) vs a 1 month treasury bought today..I'm having trouble finding a price chart for 1 month treasuries.

6-month is obviously more sensitive to the rate drop than 1 month, but the 10% number you are referencing is almost certainly for long term treasuries, not short term..
Ha there are some really funny prompts in there. I would love to see what other people wrote in response to some of them! I know I'm supposed to write my own... but I kinda just want to see what other people wrote, haha.
Merit DAO votes to “refund” VC investor instead of paying up on 30x return
> I assume that things aren't true until proven otherwise

Except for your own statements of fact, of course.
I had many of those fun extensions, I think my favorite was one that added physics to your desktop icons so they’d hang from your cursor at an angle if you dragged them from a point other than their “center of gravity”. Sometimes I’d just twiddle icons while thinking through things I was working on.

I too miss that sort of whimsy and playfulness–I don’t think it’s inherently incompatible with modern expectations of professionalism/accessibility/security but it definitely seems to have been lost from most software these days.

Edit: found the extension! http://www.wildbits.com/gravite/
Subdomains shouldn't be a problem unless your base domain is in the Public Suffix List.

According to MDN:

> More specifically, Firefox double-keys all client-side state by the origin of the resource being loaded and by the top-level site. [1]

They linked the definition of a "site" to the HTML5 spec, which says this:

> To obtain a site, given an origin origin, run these steps: [2]

> 1. If origin is an opaque origin, then return origin.

> 2. If origin's host's registrable domain is null, then return (origin's scheme, origin's host).

> 3. Return (origin's scheme, origin's host's registrable domain).

The HTML5 spec refers to the site's registrable domain according to the URL spec:

> A host’s registrable domain is a domain formed by the most specific public suffix, along with the domain label immediately preceding it, if any. [3]

Public Suffixes are defined according to a database that you have to explicitly register in [4]. If you aren't sure whether your base domain is registered as a public suffix, then it probably isn't.

[1]: https://developer.mozilla.org/en-US/docs/Web/Privacy/State_P...

[2]: https://html.spec.whatwg.org/multipage/origin.html#site

[3]: https://url.spec.whatwg.org/#host-registrable-domain

[4]: https://publicsuffix.org/
How did you manage session information without using cookies?
I'm not sure if it strictly violates any rule or not, but I will say that I've seen people who do this, and it has been accepted. But I think the key may be that the handful of times I've seen this allowed, was a situation where it was very low volume. Like, maybe a couple of times a year or something. If you're blogging every day, every week, or even maybe once a month, I suspect you'd wind up getting your wrist slapped (so to speak).

And as others have said, another factor would be if the only thing your account posts is content from your own blog. Doing that is definitely frowned upon.

But if you're really curious, it would probably be best to email hn@ycombinator.com and ask. Note that the site guidelines[1] do say:

Please don't post on HN to ask or tell us something. Send it to hn@ycombinator.com.

[1]: https://news.ycombinator.com/newsguidelines.html
Gold has had a weak return vs most assets over the past decade and is usually upsold as a worthwhile asset by the people making money off selling gold. It sounds like you're drinking the flavor aid.
I'd be very excited to see any such change come to pass, as an employee of a significantly larger, older, and even more bureaucratic organization.
> What can you do about it? Nerf your CPU performance by disabling "turbo boost" or equivalent. Should you do it? Probably not unless you're particularly vulnerable (journalist, human rights activist, etc.)

The most likely to be targeted (and probably easiest to target) systems are probably cloud hosts. This might be an argument for disabling frequency scaling and fixing clock speed on cloud VM hosts or bare metal servers.

Less of a performance hit there too since those tend to run at a sustained max anyway, and turbo boost can be problematic in those environments due to heat. It can reduce overall throughput in a sustained load scenario.
Seems less like "you were great" and more like "you were okay but we found somebody who's great".
>Coordinating this though may be difficult since many homeless bring crime and drugs with them.

Replace 'homeless' with any other minority group and you basically have the ethos of the American real estate market for the past 100 years.

America's strategy of the wealthy simply relocating undesirable groups without actually solving any of their problems is a very short-sighted one (read the classic: "San Francisco's problems today are the rest of America's problems in 20 years")
On the other hand they could've been growing much more modestly, and then there wouldn't be any layoffs. Not much different to other IPOing companies, many are doing layoffs now. Crypto has little to do with it.
ah a good list as a companion to my simple posix_spawn pipe example in another sub-thread here! thank you!
Gotta spend that seed rd money somehow
As I once read, the contraceptive is not eliminated by the body, so it
gets washed out by the kidneys and ends up via sewers in water
everywhere. No idea how long-lived it is though. I guess it would
break down naturally?
there's a guy living down by islais creek that sells and repairs bikes for other homeless. at one point the port authority cleaned out his camp. 4 large dumpsters full of bike parts
UK health privacy watchdog still in talks over who is accessing Covid data store
The crayon color picker with an easter egg if you set the computer's date well into the future would cause the crayons to no longer look brand new
My come down is only feeling a little more tired. I suspect you are not talking from experience but hearsay.

> Well, a dose doesn’t last forever. It wouldn’t be surprising if it was a net negative.

My near-sightedness returns as soon as I put down my prescription glasses. I've had to wear them every single day to be able to function decently. Imagine that.
Don't get me wrong, I love Django and think its a great framework for writing internal tools like this. Redis gets a pass too since Django has native support for it in 4.0+. It's really the (IMHO unnecessary) combo of MySQL+RabbitMQ+Celery that turns me off.

Redis itself has had solid support for building reliable distributed task streaming for nearly 4 years (Redis ConsumerGroups introduced in 2018).
Is it known who at Github can access private customer repos?
Full Headline: With The INFORM Act, Congress Plans To Empower Ken Paxton To Go After Amazon If It Doesn’t Tell Him Who Sold The Books He Doesn’t Like
People keep pointing to Armstrong's $110M house like it's some sort of injustice. If you think billionaires should exist at all, then that's one of the least-bad injustices imaginable

Ok, I'll admit it, billionaires should not exist at all, there should be a heavy wealth tax that makes it hard to become a billionaire. Will a CEO work less hard if he (and his peers) can only ever gain $100M in net worth before a wealth tax on assets kicks in?
I like your 5 things to do to live a happy life.

A corollary to that is the 3 things one must do to stay out of poverty:

1. Graduate from high school.
2. Get a full-time job.
3. Don't have kids until you get married after the age of 21.
And switch to which better alternative? It's not like there really is one...
> It’s the same narrative as in fintech. Banks and Autos have a pretty similar moat - legal/regulation/compliance.

Agreed, having worked in fintech I can say with absolute confidence that the regulatory nightmare of entering new Markets is often harder than solving the actual payment processing. Luckily, I got to operate in a gray zone wherein I couldn't take funding since I couldn't incorporate but I could operate on a shoes string budget and work in the Auto Industry as a day job. There was no moat to create, for us, though.

> And I will add to this - as a Tesla driver for 4 years, I think sooner or later Musk’s strategy of playing chicken and just weaseling around / muscling through various investigations, and general attitude around compliance with regulations.. is going to blow up in their face.

It's expected, his brand of over promising has made him the darling of the VC and retail investor class which to be honest matter more than the issues thye've had tn encounter thus far. But, just as yourself, I feel that this is starting to come to an end: his problem with the SEC, FAA, and now with who ever is trying to pin him to that twitter deal will likely land him in extremely difficult positions.

FSD and the yoke steering wheel each had their own hurdles, but it's not clear that this can go on much longer; it's not just bad PR, it's putting an even bigger target on his back with seemingly more risk than reward.

It's been a pretty insane thing to see how Tesla's market cap was higher than all car makes combined last year, it still seems entirely insane to say that.
I apologize for the disruption we caused you when rolling out Grafana 9. We are working on improving our releases to Grafana Cloud and also on making sure that errors due to breaking changes in a major release won't affect customers in the future. As a Grafana Cloud customer, you shouldn't need to read docs about breaking changes when we upgrade your instance.
The cynical view is the Edison myth; the positive view is "show up". That is, opportunity (that exists) tends to go to those who show up.
The problem with “good” fiat is that it is never good for everyone. Inflation usually hits discriminatorily. And it doesn’t last. Even the US now has high inflation.

The gold standard has its problems, but putting hard limits on currency creation and manipulation is prudent.
The interesting thing is that at least the version on this website does NOT put non-Western immigrants into the high risk group. It puts Western immigrants (and descendants) there, and non-Western descendants, but not non-Western immigrants themselves!
I'm going to grab a copy. I just noticed that when I was scanning to see what books there are about the BBS scene out there. The answer seems to be not much.

ADDED: There's actually a brand new book that looks interesting: The Modem World: A Prehistory of Social Media.
Wow that severance is incredible! They reached out to me awhile ago but thought their whole platform being tied to crypto was extremely risky. Engineers need to save for bad times and have months and months of cash for downtimes as in 3-4 months there will be alot of people looking for jobs.

Fun fact in 2009 I interviewed at google and the HM said that 500 people applied to the job I was interviewed at(onsite) and there were 3 others that were also brought onto the onsite, so 4 out of 500 getting a chance to interview, with only one making it. Lets hope it doesn't get that bad again.
I'm with you, I don't know the answer this is definitely complex.
It could be a combination of things -
a) burnout due to ever changing tech
b) ageism
c) highly paid devs choosing to retire / switch professions early simply because they can financially

40 is definitely not that old anymore for tech I think. Well I'm 38 I'll find out soon.
Is there any combination of words I could write to you that would kill you? That, to me, sounds like something from an SCP story, not the real world. Are you really suggesting that everyone has a secret password that will make them commit suicide?
Yeah, recession start and ends can only really be determined accurately in retrospect. And like you said it's marked by the decline meaning it starts when growth hits its high point and ends when it hits a low point. In terms "feeling" like a recession, it'll be more like midway through the descent until midway into a recovery. A stock market crash is frequently a leading indicator of a GDP recession though not always. We could be seeing the early signs of recession for the past six months, but we won't really know for a while.
Crypto was always a plaything for people that had extra money and no idea what to do with it. That extra money dries up, guess what happens to crypto.
It makes the types available in runtime. You can take a look at the current WIP version of the new upcoming Deepkit book which explains it in great detail: https://deepkit-book.herokuapp.com
See section "2. Runtime Types"
*[HIRING] [FULL-TIME] [FULL-REMOTE]*

* Nav is growing :seedling: and we're hiring for Engineers (Sr. Staff and Sr. Staff level) and Engineering Leaders (100% remote in the US OR in office PA, UT, CA). *

:moneybag: Comp range $110-170k based on level + equity + variable pay + unlimited time off + pick your perk !

*Who is Nav?* Nav is the largest marketplace of curated financial products for Small Businesses. Nav uses real business data and proprietary scoring to quickly match borrower qualifications with the best business loans and credit cards. Nav offers a unique, free Financial Health dashboard showing credit and cash flow insights alongside recommended financing options. In addition to aggregating traffic directly, Nav’s platform seamlessly integrates within other software and websites, making it the leading Embedded Finance solution for SMBs. We are profitable and backed by Point72 Ventures, Goldman Sachs, and Experian.

*Tech Stack: *Backend- Go, Python, Ruby, and Elixir; Frontend- React, Node.js, GraphQL; Orchestration & Shared - Containerization - Kubernetes & Docker, SCM - GitLab, AWS Cloud, Linux environment; Database- PostgreSQL; CRM & Reporting- Salesforce (Apex, Lightning), Tableau, Tealium.

*No 3rd parties or agencies please. Due to contractual obligations, we can only hire in the US.

https://boards.greenhouse.io/navtechnologies/jobs/4537989004 / https://www.nav.com/company/careers/
> Django stack with MySQL, Redis, RabbitMQ, and Celery

MySQL is a weird if not slightly disturbing choice. Other than that it's a boring, battle-tested stack that is relatively easy to scale. I agree that Go is nicer, but I'm biased by several years of dealing with horrific Flask / Django projects.
Not all medical issues need to be made into an identity.
Online I can close the tab/game or just block you. Why playing a video game should be equal to attending a catholic course? If I don't like the comments recieved on my twitter/fb/instagram account I can just disable the comments.
Ask HN: How do I stop flip-flopping an important decision?
I've been indeterministically bouncing from one state to another (and back again) for longer than I would like to admit. Frankly, I'm in a while(1) loop, and I desperately need someone to hand me a 'break.' I would love to settle on the decision and act upon it. For context, I'm 28, a non-EU resident, and have been programming for five years.

I have always wanted to get a degree in software engineering. However, when I first considered going to university, my math skills were far below the level required for passing the entrance exam. Despite not knowing how to add two fractions, I was determined to get into the study program I wanted in the future. Fast-forward a few years: I invested about 2K hours, scattered across three years, in mathematics only. Besides math, I read and programmed a lot. I was very disciplined and covered about 70% of the university curriculum I was aiming for, including areas like computer architecture, computer networks, computer security, databases, operating systems, compilers, etc.

Considering that I have very high aspirations (migrating to EU/US, six-figure income, etc.), what should I do? There are some compelling things about enrolling in a university: I'm sure having a diploma is very valuable for the immigration process, and good networking can never hurt. But I keep seeing people who succeeded even without a degree. I don't know their path in detail, but I know they have done it, although they are usually EU residents. Anyway, an inevitable question arises: why haven't I enrolled earlier? It almost feels unfair now. I've put so much work into everything, and for what, only to start from the beginning again? Time is precious. Besides that, I'm a bit skeptical about how the networking part would turn out since I'd be 10+ years older than most students. On the other hand, I'm positive I would regret it for the rest of my life if I hadn't at least tried. I know that I would be miserable if I stayed here forever.

I just need someone to nudge me in the right direction with a convincing argument.

Thanks for reading.
Is your argument that there would be less dependence on Brussels than there is on Westminster? Because my argument is that “less dependence” is not what independence is.
Yes indeed, thank you too.
So "quiet" that Bloomberg's reporting on it?

If you're a farmer, you're going to buy fertilizer from wherever and whomever unless prevented legally from doing so--and I, as a citizen of the US dependent on others growing this food on behalf of me, appreciate it.
I honestly thought the pandemic would be the trigger for a recession. Clearly that wasn't the case (or at least it was a delayed effect). This doesn't seem to be a case where a single event triggered a recession (eg subprime in 2008). It seems to be a combination of events.

Inflation is a big one. This one is interesting because the two biggest factors (housing and gas) are completely artificial price hikes. Housing is a double whammy because we had artificially cheaper housing in the last 2 years because of the pandemic. That makes price hikes seem worse than they are (note: there still are significant price hieks in rents). There's pent up demand from the pandemic. There's some institutional buying of homes (which honestly should be outlawed). But really it's just price hikes "because we can".

Gas was triggered by Ukraine but that's just another "because we can" situation. The Biden administration could ban exports of refined petroleum products if they really wanted to apply downward pressure to gas prices. It's not that Biden has a bad energy policy. He seems to have no energy policy.

And then there's crypto. What a lot of people are learning is that the only thing holding up the crypto bubble was the collective belief in continued speculative gains. That's literally it, even for the (supposed) stablecoins.

I personally see crypto as a massive waste of energy (eg Bitcoin energy usage is about the same as Sweden's) for very little utility so I personally hoped the bubble would burst because crypto is such a massive example of a solution desperately searching for a problem. I can't say this was or is inevitable. Collective delusion can last a really long time. But I hope the bubble does burst.

Obviously this sucks if you work (or, rather, worked) for Coinbase. At least they're getting some severance. It may be a rough time for finding a new job, even for software engineers, for a couple of years, something that hasn't really been true for >12 years.
I hear you. I'd also ask what seniority you're asking. My relatively young friend group routinely scoffs at Java and C# shops for making a big deal out of experience in one language, while the two languages are slowly converging to be nearly identical in most places that matter. But I definitely see this attitude more around the 10+ YoE crowd.