skysight-inc/HackerNews huggingface dataset:
You could try bringing up relevant situations where a breach of privacy was the proximate cause of a systemic negative consequence on a large scale, rather than irrelevant-but-also-terrible things that weren't directly caused by a lack of privacy.
Learn to sail

https://asa.com/certifications/asa-101-basic-keelboat-sailin...
Say that to West Virgina kids scraping meals off the floor because the coal mines their fathers work have been closed.
Would you rather he wrote "it's all your fault for not working hard enough you lazy bums, get outta my face!" ?
> I strongly believe that future generations will laugh at us for coming up with such an obviously wrong way of attacking this issue.

This will definitely be true if we don't do it, because there won't be very many black people in future generations.

Affirmative Action and "diversity" are silly, but they're silly because they avoid the just but completely unworkable solution, which is massive wealth transfer to replace generations of stolen labor.
I really like the idea of storing logs in parquet format in S3. It's something I've wanted to play with for a long time, but never have had a use-case. I'm also a big fan of Rust.

I imagine you've seen apenwarr's blog post on logging: https://apenwarr.ca/log/20190216

With that in mind I'd like to read more about the architecture. Specifically:

1. Do you have separate components for ingest and querying that can be scaled independently?

2. How dumb is the log ingest path?
This is the first mention of it working that I've seen. I wonder if it's a limited deployment for Antarctica or the beginning of a large rollout.
i'd incidentally just learned about this a few days ago, posted here (with no traction): https://news.ycombinator.com/item?id=32782944 , which in turn links out to https://simplelogin.io/blog/simplelogin-join-proton/

they have a limited free tier and a paid tier. i felt a little uneasy about the emails seemingly going through another set of servers (in plaintext?) for the filtering so i didn't sign up, but would love to hear other perspectives.
Very good points. Additionally, Apple's silence speaks volumes as to what they are really about.
The files in question[1] are only readable by the current user. That is the default for files stored in the user's folder. I just checked my own installation and the files does have the correct permissions.

Having tokens in clear text is not a serious security issue as long as the files cannot be accessed by anyone else.

The best way of storing credentials today is to either:

A. Use asymmetric cryptography and store the private keys in a non-exportable format like the Trusted Platform Module.

B. Use an API like the Data Protection API in Windows and store the secrets under "User scope". This encrypts the secrets with the user's logon password.

Only solution A above protects against malware running as the current user, however, the solution is also not very portable and technically difficult to maintain across platforms.

There is no way Microsoft (or any other software vendor on the market today) can truly protect against credential stealing if malware is running in the context of the user. The exception is solution A above, but even then the attacker would have brief access to the remote systems as long as the user is concurrently using those systems.

[1] https://www.vectra.ai/blogpost/undermining-microsoft-teams-s...
When the problem is verified solved.
Also, the other way around, when you hire a senior and they insist on using that crap, they are more likely to scam you as you cannot dispute hours made ‘if the recorded screens show code’.
He could have tried to direct the reader's sympathy towards the people getting laid off, rather than himself who is not going to suffer anything because of the decision he's making. If you are doing something nasty because of "just business," the minimum standard in corporate messaging you're expected to achieve is writing an announcement that is itself just business (and not a humanizing self-administered interview like you're getting an article in a magazine or something).

All of the big corporations that you do not want to work for did not invent corporatespeak because they are uncreative or unwilling to engage with human emotions, they invented it because that is the least infuriating way to communicate that they're shutting down a division for offshoring.
Why is 3x more "full speed" and not 30x or 300x?

If it's just a philosophical objection to government intervention in markets then removing government support for fossil fuels and pollution would be consistent with that.
No, this is a very bad idea. Because layoffs are involuntary, they crater morale. If you keep those people at work, it is not like they will all show up and pretend like nothing happened.
The end client is usually the one hiring and paying these people though, not the contractor.

In a way they are operating as a match maker and making a living by taking a percentage of the day rate, so it is partly perception. However, I think it's fair to say that they are hired by and represent the interests of the end client rather than the contractor.
Source? I don't see any possible way a thumbnail playing on hover is patentable.
You mean like when the KGB murdered my grandparent based on class origin and corporation ownership? Or the time when the Gestapo did the same to my great-grandparent, also based on ownership of the same corporation?

To me, it seems like there are much longer periods of problems than periods of peaceful life. Only 30 years out of the last 100 were in lived in relative freedom here, and still excesses are happening today. Protect yourselves people. Nobody will return your health and life back once an excess happens to you.
I would make a joke about equating “free internet” with “proper information” but in 2022 that joke writes itself. And let’s not get started on the “without government oversight” part of your comment.
Was one of the best IDEs for Ruby dev waaay back in the day. I remember using it then. Jetbrains has long overtaken them though.
Yes, my understanding of bitcoin is that it is not untraceable at all since the transactions can be followed back to their source, but it was widely perceived as such by dark markets for a number of years. I guess maybe if you mined it yourself (no longer really feasible for an individual?) or somehow purchased it with cash it might be.
The UI front still has a long way to go but I found that Shortcuts in iOS has some pretty powerful abilities if you know what you’re doing.

My partner and I have a shortcut for “what floor is the car on” since the car is parked in a neighboring garage without assigned spots. We have a shared note and the shortcut appends a line with the date and floor on it. A second shortcut will read the last line of the note and parse the floor and present it.

Shortcut hacks we found:

- parse text from a shared note. Remember scaling is a non-issue.

- there is a “ssh to a server” shortcut option to trigger python scripts or background tasks (or home assistant, etc)

- edit on mac app

- iOS major updates break things :(
lakecityquietpills.com.

Oh, not that kind of contract work? Well then...My first stop when hiring extra help is a tech-focused temp agency, here in the SF Bay Area I've had outstanding luck with Robert Half. Their recruiters speak tech and understand my company's needs. Temps I've used/interviewed really know their stuff and have been happy with the arrangement (pay, flexibility, possibility of benefits through the temp agency). As far as I've experienced they treat customers and their temps fairly as they understand the value of all involved. I'm contacting them this week for a database setup gig. Downside is buyout cost if we really like the temp and want to hire.

For finding contractors, schmoozing at conferences and personal network have been the best, but that takes time. Have spec'ed things out on Upwork and had good work done (I've never based contractor selection on low price).

Best of luck on your search!
Note that this can make employment in your 50's and 60's more difficult though, even if it shouldn't.

Also, I once worked for a military contractor and one of the lead engineers told me the company valued people who wanted to remain engineers instead of moving into management. It was the path he'd followed himself as one of the founders of the company. I believed him and avoided management, only to find eventually that there was no such path to becoming a senior engineer who did no management. So I quit, which caused me a lot of trouble, but it also denied the company the benefit of many years of my learning on the job (there are few ways to prepare for a career in top secret military contracting because you have to get a clearance first before you can start studying many of the things they work on, so a trained employee is much more valuable than in many other jobs.) The senior engineer had the right idea, but he'd never actually checked that his career path was viable for anyone who was not a founder. I think this is a mistake that many companies make, essentially forcing people into management. It is very similar to the idea behind the "Peter Principle", that people rise until they reach their level of incompetence and then remain there. Engineers rise until they are forced into management and have to stop doing what they do best.
> Today we only store the bare minimum - everything else is deleted immediately. ... and I have to re-explain this to junior employees each year to their disgust.

Same in software-land. Nobody wants to have years of who-knows-what subpoenaed.
seccomp filters generally are whitelists. If they haven't whitelisted io_uring_setup it's a non-issue. They only suffer the performance consequences of userspace having to use the synchronous syscalls.

also, iouring doesn't allow arbitrary syscalls. so it's not really a complete seccomp bypass even when allowed
I can't imagine the logs are off very much of the time then
The spam on Twitter
I absolutely love that (see Al Capone) is the example used while discussing some dude who was accidentally sent money by google.
Yeah. I do wonder if it is possible to pack this into a standalone binary so that I don't have to install PHP - not due to language bias, but so it might be run without any package installation steps.
> white people are all privileged or don't face trials and tribulation.

This is an equivocation. I am privileged to downvote people on HN because of my karma, while others aren't. This is not the same as saying that people who can downvote people on HN don't face trials or tribulation.
> The cost of fork is proportional to the complexity of the spawning process (e.g., the size of its page tables), not the spawned process. The talk gives an example where fork takes 7ms, although I'm not entirely clear what it's doing (I only read the slides, not listened to the talk).

I allocated 1GB of memory, wrote a byte to every 4KB page of that memory, then did the same fork benchmark. The kernel has to do much more work to copy the page metadata associated with the resulting 262144 page frames.

> Meanwhile, you can look at io_uring as describing a kernel thread that does a limited set of tasks... so why not implement something like vfork on top of io_uring? Of course, the interesting question is what process bits can be twiddled in io_uring_spawn, but unfortunately, there's no examples from what I can see to get a sense of how powerful it is or isn't.

We're going to need to add a number of additional io_uring operations to provide the full capabilities of posix_spawn, but I'm expecting to do so incrementally. Eventually: everything you can do by making a syscall, at a minimum.
Where is a service that doesn't focus specifically on

1.) data pipelines / data-science

2.) cicd / build pipelines

3.) ... you name it

I mean, just a service that gives me all the groundwork to build one of the above myself.

Is there something like that?
Yesterday I used logs to help a customer who had mis-configured their SAML SSO (the problem was on the IdP side). I use our database audit trail logs to understand the sequence of changes a customer makes that sometimes results in behavior that is surprising if you only look at the current state.

We put a big emphasis on the second S in SaaS and we want a magical 1-email support experience whenever possible. Audit logs help this.
Living in a hilly area, this is the way to go down hills. If you tense you get tired going down, aswell as up hills.
No comments on saturated fat vs liver disease (ie fatty liver) though. The common wisdom, I believe, is that you want to avoid sat-fat if you have fatty liver disease. That may not be a killer like cvd, but it is a big deal too.
Yes, we have a GitHub action[1] that uses the dependency graph API to generate a stackaid.json file which will list your direct and indirect dependencies.

1. https://github.com/marketplace/actions/stackaid-dependency-g...
> Again that would be request tracing, not application logging.

from what ive seen people who rely on logs do not have proper request tracing and/or metrics. its much simpler to dump a bunch of unformatted junk to stdout and throw elasticsearch at it, but not a good experience.

i agree overall, i find logs to be a last resort with really bad signal to noise ratio.
Whats interesting is in 2008 the vast majority of overpriced housing markets were CA, FL, and a little bit of AZ, NV, and NJ.

Now its all over: ID, TX, WA, MD, TN

Its as though we took 2008 as a playbook for how to run reckless housing markets in the rest of the country.
I like that it's (apparently) open source.

Are you forming a company around this and do you plan to monetize it? I would find that information helpful to know whether I should consider it as a candidate for a tool in my day job, or disqualify it for my hobby projects.
I love these thought experiments.

I would very likely go for one year, but I think it's highly unlikely I'd go for two.

If I had to go for 5 years to get 45M, I think I'd pass. I definitely am not going to out-earn that or anything, I just value my time way, way too much, and value money way too little.

9M does a lot for my people and me, and after that I think I would just be helping out more people. They can suffer in their own prison!

If I could risk 5 years in prison for $120M, with a minimum guaranteed return of 45M and a maximum of 2-3 years? Yeah, I'd go for that, even if the chance to succeed without prison was pretty small, say 20%. The chance to escape punishment is a big motivator, and don't all of us think we're clever enough to do it?

Anyway, as you say, I'm the outlier. Almost everyone, even in the richest nation on earth, would accept that level of risk without a whole lot of thought.
I think at least one advanced civilization before ours existed. Turning to the original paper (1804.03748 on arxiv.org), there's many geologic signatures that aren't fully explained and match our own civilization's geo signature. There's just too many such geologic events for them all to be igneous or whatever.
I agree with #1... Workers before the cache is crazy powerful for the original purpose of Workers (modifying incoming requests). But now that people are starting to use Workers as their original (for remix, etc) it would be nice to be able to have the cache before Workers. As it is right now, having the CDN do full content caching of rendered Remix pages is difficult.
Coming up from rural circumstances is far more likely to trigger positive discrimination than negative.
Neither could destroy SpaceX satellites as fast as they can be launched. No State can.

The issue would be whether they could cause enough damage to make the orbital plane (temporarily) unusable.
It's on our roadmap to expand support to other systems such as Windows.

May I ask why using a thumb drive is a deal breaker? Typically the setup for our software only takes around 15 minutes to complete, and we can have someone from our support team help walk you through it.
I know a handful of people who have been laid off. Each one was very angry about being laid off - it was unfair, the boss always had it in for me, etc.

The ones I talked to a year later would ruefully admit it was a net positive for them. They were forced to reevaluate their careers and make corrections. One, for example, said it gave him the kick in the pants to start his own business, which he'd always wanted to do. Another told me it gave him the motivation for getting clean from drugs (the reason he was laid off was showing up for work high).
I am fine with hiring that enforces equality of opportunity (where nobody is denied an opportunity because of their race).

I am NOT fine with hiring that enforces equality of outcome (where some people, who would otherwise be considered unqualified, are granted an opportunity because of their race).

Race should account for ZERO percent of a hiring decision.
When the hydraulics failed (brake line exploded) on my old vehicle I discovered that the cable is also attached to the brake pedal, so I didn't have to play games with the parking brake mechanism. There is a world of difference in braking force though, it's like pushing on the side of a brick building to gently encourage the vehicle to stop. I was lucky that I was driving a manual so I could also downshift to kill the speed.
Grew up in Omaha, on the flight path for planes landing at Offutt Air Force Base. Had a B-52 fly over a few times an hour, 24-365 the entire time (pre-1991).
Which label do you recommend for classical on Spotify? Except Deutsche Grammophon.

I noticed that some recordings (ie Rachmaninoff's Vespers) are poorly recorded. With amount of dynamics, especially in choir pieces, they are overdubbed. I do not use volume normalization.
Are these deaths of just migrants illegally enter the country or do they represent all migrants regardless of whether they use a port of entry or not?
Awesome, signed up!

Can i submit a stackaid.json manually? Ie for private repositories that i want to be counted towards my funding-split?
Since we've come full circle, I'm now wondering what new chat thing will replace Discord later this decade.
B-b-but the Windows Credential Manager asks me to authenticate before it shows me the value of any saved passwords! It must be secure, right?
You think the USG that funded SpaceX/Starlink isn't going to have control over it...?

While Starlink was marketed as a boon to rural democratic internet access, those promises have been walked back and its pretty clear that it the limited bandwidth is primarily intended to increase the Pentagon/ICs communications capabilities in the field, much like the Internet itself.

The USG did not fund a swarm of satellites so that American (nor Russian, nor Chinese) farmers can watch Netflix.
In that case, you might be interested in this youtube playlist [1]. The uploader claims to be new to Rust and implements the entire book in it. I haven't watched it myself, but had it bookmarked at the recommendation of a friend.

[1] https://youtube.com/playlist?list=PLy68GuC77sUTyOUvDhVboQoOl...
Buy Tinder Platinum
Instead of complicating it, you can just plug your iPhone into your mac. That version lasts a year.
In fact, the distinct tracking markers are designed so that at any angle there is some line that contains a sequence of black-white segments in the 1:1:3:1:1 length ratio. Find three such markers, look at alignment and timing patterns at the expected place, and voila, you can infer a matrix of pixels ("modules" in a jargon). And masks are designed so that at least one mask will obscure naturally occuring patterns that look like tracking markers (the evaluation process even mentions the aforementioned 1:1:3:1:1 ratio and penalizes it).
Once again so many people are led to think Wikipedia is broke and must be saved
what's the thinking around supporting projects that aren't node based?

I've got tons of dependencies but none of them involve JS.

Also, what many node devs have multiple projects they rely on. what about a tool for auto-merging package.json files to make one to submit to you? Seems like right now a dev would have to go through a lot of manual work.
I don't know one off the top of my head, but here are a few bullet points:

* Both provide fully-managed or hybrid SAAS options. Dagster has Dagster Cloud, while Astronomer has Astro.

* Both are containerized deployments.

* Both have fully-functional local development environments. My Airflow development environment is my local env managed by the Astro CLI. It works great. I haven't worked with Dagster, but I've heard that it's lighter weight and local development is delightful.

* Both have functionality for data lineage. Dagster has Software Defined Assets, while Airflow/Astronomer integrates with OpenLineage. I don't have direct experience here, btw.

* Both are reasonably priced. They're cheap enough that the build vs buy decision is a no-brainer: buy buy buy.

One difference, however, is that Dagster natively isolates tasks in the DAG into separate Kubernetes pods. You can get this with Airflow if you use KubernetesExecutor, but KubernetesExecutor is only available in Astronomer's Hybrid-SAAS product. Only CeleryExecutor is available in Astro.

There's also a difference in syntax for defining DAGs. I find Dagster's approach is more Pythonic than Airflow's standard way of defining DAGs. However, Airflow's TaskFlow API is almost at parity with Dagster's approach.

One advantage that Airflow has over Dagster is its maturity and pre-built integrations with other systems. If I need to interact with Fivetran in Airflow, there's a provider for that. Hightouch? there's a provider. Snowflake? Yep. If there's a widely used product or managed service related to data, there's probably an Airflow provider for it.
Risk?
KYC requirements are wrapped up in the AML rules. It's the same. Any one handling money needs to know their customer. Banks will run "credit" checks on new accounts usually through Chex Systems. It checks if you had a bank account closed due to negative balance.

Also pushing $250k to a bank/sweep account won't set anything off because the risk to FI handling the money is minimal. There's minimal risk it can be clawed back and the risk is on the FI that pushed the money. If you pull the money, thats a different story due to rules around ACH clawbacks. I assume fidelity lets you fund your account with no max though a push either ACH or Wire but to pull, you're limited to $50k or a lower amount per day. If you try to transfer that money out from a pull, it will get locked down till the ACH clawback period expires.
If I understand correctly, Parseable is relying heavily on DataFusion for its SQL implementation:

1/ I know that Parquet and Arrow are very good for time series (mostly metric names, labels, timestamps and real values), but are they good for strings, which are quite important in logs?

2/ Is DataFusion able to execute an SQL request over a large number of large Parquet files without loading everything in memory at the same time, or can it process a Parquet as it reads it, in a streaming fashion?
Walking is basically controlled falling. This is basically an extension of that. You just let one leg go in front of the other like you were walking, rather than taking singular steps.
I think that the solution is to make it a non-issue: fingerprint the machine and make sure that the auth tokens are only usable on that specific machine... but this solution is both a privacy nightmare and a flimsy deterrent (especially on Linux, somewhat on Windows, might actually work on Macs though).

I agree with Microsoft that it's a non-issue: there's no concept of a separate user-inaccessible data compartment unlike with Android and iOS, so the best they could do is to store it in system-provided keychain (but usually it is often unlocked during log-in, defeating its purpose).