skysight-inc/HackerNews huggingface dataset:
Agreed - none of the QAs I have ever worked with have done security testing (unless called out in the test plan). One of the companies I have worked for does annual penetration tests which seems reasonable.
Thanks, I genuinely appreciate that compliment.
It’s based on what the OP said which was pretty shitty.
Russian cover of this song: https://youtu.be/1h34a3CpkIc
I think GP is talking about a copyleft license like GPL, but with a few years of commercial use before the copyleft restriction kicks in.
One word... libc :-) There's tons of info on the internet about the gotchas in Alpine. Even fly.io gave up on using/supporting Alpine based container images and they are probably one of the most competent and capable engineering teams out there.
I'm inclined to believe this is an unpaid story by a naively passionate technologist.

Parents name their kids after Apple products. Reason dictates some of them would be passionate enough to write about it, and if it gets clicks it'll end up on one outlet or another - this time its Wired.

I do believe people pay for stories and awards and all kinds of stuff to hype their brand, startups in particular.
OP makes a reasonable argument about why error messages should be constructed the way they prefer, but is it actually backed up by usability testing? Maybe the cutesy errors really do have a subconscious positive effect which is being overlooked here?
If the system you are having trouble with is important to your work or otherwise essential, being a bit antsy about the matter is perfectly understandable IMO.
I think this article is great but it buries the lede. The cutesy errors are indeed bad but more important is being informative about what actually went wrong and how to resolve it. A while ago I introduced a new error class hierarchy at <JOB> which introduced three distinct families of errors - one that was considered a user error (that would be thrown in response to some action that we can predict happening but not totally prevent), one that is considered to have a user friendly message but be generally unexpected, and anything else. If you try and insert something invalid into the DB you'll get a user unfriendly message - if, within the calling function, you know why your call to the DB would fail with a key collision (for instance) you can create a new chained exception off the original and rethrow with a human readable message - when it hits the top level of execution (assuming nothing catches it) then the error printing logic will iterate through the full chain and print everything human readable and dump the full traces of any errors not marked as user side.

This lets us quickly triage new errors (since known user errors are kept out of the main error log) and presents an easy way to convert logged errors to unlogged ones when we've determined the source of the issue (assuming it's an exception we're comfortable with - a lot of our "user" errors are server-side validation that should be prevented by client-side code).

It also forces any errors that we haven't specifically marked as human-readable to render as "Internal Server Error" which we hate along with supplying an easy route to provide a more meaningful error message.

I never, in my life, want to read an error message that starts with "GuzzleHttp encountered a malformed response from aws. ..." nor do I ever want to see "[SQL1002] The newly inserted row would violate constraint widgets_name_key" - write good errors.
Have you seen a therapist? Your back and neck pain pain might be because you are very stressed.
I always found Skype for Business pretty unreliable - it would drop out regularly enough and would struggle if too many people were on a call.
I have no idea what the backend was like but I wondered whether it was due to poor self-hosting?
I can't tell if this is praise or condemnation by demonstration ;P.
The failure mode of clever is asshole

- John Scalzi
Based on my reading of [1] and [2] it sounds a bit more nuanced than "just incorporate s6 into alpine".

[1]: https://ariadne.space/2021/03/25/lets-build-a-new-service-ma...

[2]: https://skarnet.com/projects/service-manager.html
Use nothing newer than 30 years old. Sell it to the customer as secure and proven; lay traps on a few of the glaring well known holes to keep them amused and happy.

Sell it to anarchist buddies as ensuring that these evil arms of government oppression are shackled by the antiquated systems. Reap rewards of regard for helping subvert the effectiveness of the authoritarian State.

Sell it to authoritarian buddies as elegant, focused, and effective systems that help filter out people not truly committed to the Mission. Enjoy the recognition of a faithful Enabler of Order.
Sometimes I feel as if our entire society has turned into one giant cargo cult. Whether it's OKRs or the latest tech fad or black turtlenecks, everyone looks at the last big hit, picks out some set of superficial features of the person at the top, and says, "Yeah, that is the key to success." No one ever steps back to think about causality or even what they actually want.

Brings to mind one of my favorite aphorisms: furious activity is no substitute for understanding. Very few people seem to subscribe to it, but I've gotten an enormous amount of mileage out of it over the years.
These are distinct feelings.

Its not too late to start again and that has nothing to do with your age. You feeling miserable is partially from confusing these things and partially still a distinct unrelated thing.

Do you have alot if debt? Are you on the verge of declaring bankruptcy? Did you read too many articles where you think your future spouse is going to look down on you for not having a high credit score and being shut out of the mortgage market for the next 7 years?

Nobody cares. It doesn't matter. Go make some money to support and maintain your lifestyle.
I think there's a big difference between grumbling about the results of an election being unfair due to your opponent engaging with a foreign government that hacked your campaign, and unprecedented moves from the FBI days before the election; and working earnestly to actually overturn the results of an election by knowingly lying about the existence of fraud, using multiple levers of government including DOJ and state legislatures to advance that lie, and to top it all off directing an armed mob to literally violently assault a joint session of Congress. If you call both of these things "election denial" that's the false equivalence others were referencing elsewhere in the conversation.
Scratch is blank. Distroless includes some Debian components that removes a bunch of "gotchas" that some people relying on scratch run into.

static has: ca-certificates, /etc/passwd, /tmp directory, tzdata

base has: glibc, libssl, openssl

https://github.com/GoogleContainerTools/distroless/tree/main...
You might have noticed that the price of milk hasn’t skyrocketed over the years, as farmers haven’t been able to pull the same market abuse that the gas companies do?

https://www.ers.usda.gov/webdocs/publications/42300/15259_ai...
Yes! This is exactly what this story reminded me of.
The cryptic IDs can be rather nice - if I throw "ERROR YCOMB-143" at least it's pretty likely you can google an answer... but if you're able to deliver such a distinct error state to the user can't you save a step and include a message about how to resolve the error state (i.e. "ERROR YCOMB-143 Your account is too young to down vote comments")
Intel contract manufacturing for AMD would be a fun turn of the tables.
> “Token not provided in guest headers.” I have no idea what this means, or what I can do about it.

At least this example gives you something that you can report to support of you do contact someone about the issue. It if you are a bit techie you might be able to judge for yourself if trying again is worth it or a waste of time. Many issues don't even give you that much.
Let me try again:

The previous CEO of the story wasn't wrong about what's important at all. Only about how much time it takes. He considered everything important and maximum priority, but didn't believe the "previous thing" was taking 80% of the time of the team. I couldn't tell the team to "drop the previous task" like the other post suggested: it was also maximum priority.

"Important" and "Takes too much time" are very different.
Congratulations on launch!

You are using established lab gear and existing research on metabolites, which helps establish credibility. So you have first mover advantage in that you have learned HIPPA compliance and will be first for FDA approval.

If this product was a huge success, is the thing that would make it difficult for copycats your ML-based data analysis software?

Lots of ppl have sensitive data, but, what could you say to customers that would give them cybersecurity comfort?
"Not really - I mean, if I run Toyota should I not be producing cars I can sell at a profit? And if my sales are falling, isn't that a bad thing?"

Yes to both. Maybe I'm misinterpreting the concept. "Steady" to me in this context means the same, thus financial shenanigans to make sure you don't report "excess" earnings in one period so you can have them in reserve for a future one where you have a slump.

"Regular" profits are ideal, but Toyota today is not a good example, it's a mature company in a country with a mature automobile industry. As a counter example, see the story sold to the investing community about Amazon, not that they would make a steady profit, but that they would become huge and then do something like that. Which they've delivered on (and I wouldn't judge them on anything in the COVID disruptive period 2020 to now).
Some stuff has very slowly been getting fixed. Wallet might be one of them.
It's a tradeoff to be sure, but IMO if you're a developer then development and especially debugging should be the priority. I've worked at one place where developers had a second "office machine" that we used via RDP for doing emails/presentation/etc., kind of an inversion of the usual suggestion of setting up your main system with a stable environment and using a VM to match your deployment environment. I found that way more productive, because using a remote or VM imposes much less overhead on everyday office stuff than it does on debugging where you want to be able to connect your IDE to the running process, add packet filters to your kernel or whatever. But I guess YMMV.
it's not a cutesy error. it cuts the bullshit and tells you what went wrong right in the body
for sure. but it's not "hard" (of course abstraction is hard to learn and see, but not to implement, I hope you understand my meaning here. I apologize for the lack of clarity) to build something like (very rough sketch):

function get_all_products() {
return cached(function () { return Sql::Select(PRODUCT_TABLE); }, Cache::GetSessionCacheKey());
}

render_template(Page::GetTemplate(),
[ "products" => get_all_products(),
"user" => get_user_data()
]);

or as I did for https://goldeneaglecoin.com/ , I would internally route "HTTP" calls, so the javascript and PHP would look identical:

/*
* @url: /products
* @cache: session(1h)
*/
function get_products() {
return Sql::Select(PRODUCT_TABLE);
}

render_template(HTTP::GET("/templates/products"), HTTP::GET("/products");

while the javascript looks like:

GET("/products").then((products) => render_template("/templates/products", products))

The caching is declarative, and the code is "stateless." This is fast enough that caching the render is pretty much not necessary, despite running on a t2.medium, and easily sustains > 100 rps. In the happy path, it reads a single value in the object cache. Only an initial hit will cause a render (using a bytecode compiled optimized template), and only the first XHR will cause an actual lookup in the server side cache (if necessary) because the browser then does the rest.

I wrote this code 12 years ago, and porting to react doesn't require any change on the server side. We just put RTK-Query in front and let it do all the rest.
I kinda did a similar thing recently with DALL-E 2, recreating a badly drawn heavy metal album cover https://twitter.com/P_Galbraith/status/1549519849558519808
Forwarding is clear, but how did you set up the "send as" feature?
“None shall pass!”

My EM theory second year was quite tricky
Same build your own project. As a full stack I wanted to know what devops and infrastructures was all about I went down the rabbit hole. I made my own Kubernetes, Istios, Helm charts, CI/CD, throw everything you can at it with even some eBPF and stuff. I learn sooo much. And it was so good to see the progress and getting the gotcha of the field. For instance one back then was how do you use kubernetes with databases. (I think it’s pretty much solved now but not 100% sure I have to check again). That was very different from what I usually do. And I mean it was functioning!

You can’t beat this type of knowledge. And you learn even more things on the side. I am still blown away by the capabilities of eBPF and what the guy at Netflix does with it for instance. Or stuff like Falco. And if someone (here a devops let’s say) think your are like half bluffing you can show them exactly that you are not. And it also work to spot those that are bluffing and really just read a blog post about it.

Which comes back to the question: better to learn by doing and then you see more the real experts and can lean on them. Or continue yourself to be one.

So ya best way to get knowledge. Like we say there is no free lunch.
They’re releasing from the strategic petroleum reserve, so yeah “he did that” but it’s not sustainable. Meanwhile the administration still actively hostile towards domestic production, which is what will actually solve the problem.
I have a problem with software that tries harder to be "cute" than useful, but that's a rant for a different day...

I think the issue with error messages like these aren't so much that they are cute, it's that while the developer thinks they are being clever somehow, these kinds of messages usually come off as patronizing or condescending to the user, especially when the user DOES have the technical skill to know what's actually wrong.
> Unicode art is good

This use case is crying out for a Textual-based ASCII art editor.
Not anymore. But there used to be!
Lag free? What are you doing where lag is problematic? Sure it takes a couple hundred milliseconds longer to open a file or save a file but the actual editing is lag free, and that's what matters.

It's probably been a decade since I used TRAMP, so maybe it's gotten worse or more likely people are expecting more of it.
Gotta be thinking they’re working on their own graviton given how much aws claims it’s saving them.
Generally I feel that unions create deadweight loss, enriching the people in the union at the cost of raising prices for everyone else (and importantly, it's an inefficient transfer because of deadweight loss)
Maybe "Guru Meditation" would be better?

At least it contains the suggestion of being more serene about the whole affair.
This has nothing to do with books, but my (now ex) wife and I met another couple many years ago, and we were friendly for a short while until they moved away. A year later, my wife got an itch to talk to the other wife. She had no address or contact info, but my wife was part bloodhound at this sort of thing, remembered her mentioning her parents in another state, and eventually tracked them down to see if she could get the other lady's contact info.

The other lady called my wife back... and the conversation went something like "how did you find me? Please don't ever contact me or my parents again, just pretend you never met me, and please, please, don't ever let my husband know where I am."
I'm not sure all their OS are Linux 1.0...
Agreed. And while I’m sure we have all been let down by apps/tech at one point or another, I think the user in this case discounts the tremendous effort put into developing apps, and to me a somewhat “cutesy” error message is enough to remind me that a human created the very opportunity I feel let down by.
All dust is abrasive (or at least as abrasive as a material of that hardness can be) when it's new and yet to be worn down by the environment. God knows how many machines are rolling around mines, foundries and scrap yards as you type this. Moon dust is only an issue insofar as the kinds of people who wind up doing aerospace engineering don't tend to have the kinds of work backgrounds that make one good at designing things for low margin industrial environments so they're apt to make rookie mistakes in that area. This isn't a hard problem. Every major rubber components manufacturer probably has some gray beard who can look at your dust under a microscope and then tell you exactly what you need to do for your application.

The huge temp swings, now that's actually a real problem.
once a process is no longer bleeding edge, what's the benefit of keeping manufacturing details secret?

at this stage, presumably no one would risk the capital and time required to copy the foundry while publishing details increases the likelihood of attracting more clients.

thanks in advance for the clarification on why the industry operates the way it does.
At the risk of taking this off topic, yes, Teams is by far worse. Just the authorization process is shockingly bad.

Here is a previous comment from k_sze about it. This is for a security process, so there is no excuse.

https://news.ycombinator.com/item?id=30368431

> MFA fatigue wouldn't be such a big problem if their MFA and SSO implementation was not so utter shit.

> Whenever I get a signin prompt, there is literally no way to tell what I'm signing in for.

> When the MS Authenticator app receives a MFA request notification, there is, yet again, no way to tell what service the request is for.

> To add insult to injury, when I need to signin again for a SharePoint guest account, it consistently fails to correctly redirect me back to the SharePoint folder.

> Microsoft's MFA is just security theatre. Take MS Teams for instance. Why does it ask me to sign in again, and yet still allow me to read messages that are already on the screen? Worse yet, the MS Teams desktop app can still receive new message notifications and display them while I have not re-logged in yet.
Not Every Startup Should Be Venture Backed (2015)
I hope you also consider security problems as feedback.
Seeing the amount of y’all excited about the guification of the terminal makes me concerned. I get it, this is a reaction to the appifying the browser.

Please don’t turn to the terminal as a panacea for browsers. I don’t want my cli apps to suddenly be colorful or worse have css. Go back to making native apps, they are significantly better at doing interfaces than a terminal emulator.

/rant
Milk around here has substantially increased in price, though it is still cheaper per gallon than gas.
Have PS1 triangular graphics made a retro resurgence yet? Because I'm so down for that.
Stop worry about forgetting about a feature idea, or bug description. If it's any important it will come back to you. Stop writing down bad ideas. Have at most 20 tasks on your todo-list, then order them in importance, and if something else comes in you just drop the least important todo/task. Think of tasks/todos as balls, you only have to juggle those that are made of glass, the other balls will bounce back up. If you have a list of 600 issues, most of them are no longer relevant - the code has changed, or the issue no longer exist. It's not the holy bible. Focus on what needs to be done right now - in order to to achieve your near future goals.
Not to mention the fact they provide hardware attestation to apps which will enable them to lock out rooted phones.
This was in mid 2019, so I'm not surprised things have evolved since then. It's good they've got an official solution now, but when official tooling only gets introduced to an ecosystem after the fact, there often ends up being a schism in the ecosystem that can keep hurting for a long time; just look at Python (it's far from a perfect comparison, but still). And the original comment reads like a confirmation that this is happening with Clojure:

> Leiningen, the older and still quite popular way

> borkdude’s new project seems to be trying to bridge the gap by providing some pre-canned equivalents of popular Leiningen commands, but built on top of deps.edn. Instead of lein this is neil.

Maybe the story will be different for Clojure and people really will converge on the official solution eventually, who knows
The ability to simulate and setup infrastructures. For example, here's one[1] in VirtualBox that can't run on M1.

[1] https://blog.uidrafter.com/scripted-virtualbox-vm-installati...
I would think that what you're suggesting could be done by doing a bunch of Fourier transforms. If there is no relative motion of the camera you could assume that objects with high frequencies would be less massive than objects with low frequencies that could give you a useful bound on their mass/density. (Assuming a fairly uniform energy density in the scene)

For my own curiosity, I wonder if some of the variables they're missing are based more on the context of the video, rather than the content. Like, colors, for instance. Maybe if you ran everything through in black and white you could get it closer to an integer lower bound?
> This post was adapted from a thread on Twitter.

Lot of words to express frustration when a Tweet with an image attachment could convey the same.

"Well this is awkward" is just the "header" for any error you may experience during the process with that application, and is the same thing that Mozilla does (essentially) when the browser crashes.
In a world where computers usually go "fast enough" we can always count on Python to create opportunities to learn computer science.
Could not agree more. At least it better than "Something went wrong. Try again later." That drives me berserk.
Hmm ok, I'll take your word for it. There is another issue too though, which is that the BEAM itself is being replaced with a native-code VM. I don't know if the compiler for that starts with bytecode.
Well, in HPMOR, Harry discovers at the end he would have solved a quite major problem very early on if he had bothered to inform Dumbledore of some extremely important facts regarding Professor Quirrel.
DOT rule would require airlines to issue refunds for domestic flights delay
I'm sure the universe exists before the first human appeared.
Amazon employs teams of economists. So I’d say the answer is by telling teams of economists they’ve got a new product and want to figure out how to price it. Because it’s not as simple as just “take expected costs and add 30%.” Different products have different margins. There are tons of other factors I’m sure they consider like whether there are any competitors, hype the product has, and how long they expect the product to be popular.
Getting off of oil solves the problem, not bandaids like temporarily stoking production of a resource we don’t want to be using.

In an ideal scenario, we’d institute a carbon tax and subsidize EVs and clean electrical generation if US politics weren’t broken, but here we are.

The average voter doesn’t understand global oil market economics, geopolitics, refinery capacity, fossil investment divestitures, etc, they just want to drive where they want to go. Don’t want to be beholden to a constrained energy resource? Switch to proven alternatives. It’s not rocket science. Make it cheap to buy EVs and make it more financially painful to by combustion vehicles, even if you’re cutting checks to EV makers out of the Fifth Fleet’s budget.