skysight-inc/HackerNews huggingface dataset:
> they are privately owned and as such can make whatever deals they like.

Not really.

1) Meta is publicly traded, and has a duty to shareholders.

2) Antitrust laws limit what can Meta can do.

3) Paying individual executives to take action against Meta's interest is a crime.

4) A deal that involves Meta breaching contractual obligations with other parties or otherwise committing torts (e.g. libel) is also actionable.

There are more exceptions, but that should be enough.
They are not "expensive to produce". They are "expensive to sell".

I think even GM realised that the only people who buy Hammers are those with a lot of money and little knowledge in cars.
I've tried SO many it's not funny.

I've settled on Markdown notes in Dropbox, edited with vim.

On Android I do this with FolderSync and vim in Termux.
> Production keys in source control

IaC, right? If you don't put keys into the Code you can't have Infrastructure as Code. Without keys the code only partially defines your infrastructure.
> People are falling over themselves to point out that these families lost their children. Why?

Because that's what Alex Jones targeted to abuse these people. He didn't kill their children, but he did take people whose children were killed, and lie about that fact in order to attack these people for money.
I can't speak for others, but I've never worn a mask on this issue.

Criminalizing drug use in and of itself is evil and immoral. And you are an enemy of individual liberty if you support it.

If we must, we should criminalize the resultant negative behaviors that sometimes accompanies drug use.
Managers are still so busy trying to fill open headcounts because it’s usually use it or lose it. But they know hiring freeze is coming
Would you rat on your colleagues or accept 120 years in jail?
> I'm looking for a PM coach to help me speed run the entire product management role, from strategy, roadmapping, managing stakeholders, dev cycles, etc etc.

This is a very PM thing to ask. I think you are going to be fine. Do nothing.
It's stunning to me that certain political groups are incredibly and violently angry (dare I say... triggered) about something they're completely unable to quantify or describe.

This description is about as opaque as your opinion on Netflix.
Substack, a media company, complaining that Substack's media message has been misunderstood by virtue of its own success is ... its own troubling sign. "The term “newsletter” was just a rhetorical device...".

Substack's assertion that "[w]e are part of a seismic shift in the media economy that is all about writer and creator ownership and independence" shows a parlous ignorance of the past 30+ years of the Web, online publishing, content, distribution, and advertising, and the tendency for all to concentrate over time. Gatekeepers cannot be eliminated, only moved, and frequently consolidated (with Substack being a key contender for that role, see present concerns over online media monopolies and the inherent tensions between moderation, expression, censorship, disinformation, propaganda, fraud, surveillance, and manipulation. As I've pointed out before all are inherent attributes of a media monopoly (or consolidation in general): <https://archive.ph/8ceqI>, discussed at the time on HN: <https://news.ycombinator.com/item?id=24771470>

I'd also very strongly recommend Andrew J. Shapiro's exceedingly prescient 1999 book, The Control Revolution, which covers the prospects, and risks, of online media, amongst numerous other topics:

<https://www.worldcat.org/title/41076267>

<https://archive.org/details/controlrevolutio0000shap>

<http://libgen.rs/book/index.php?md5=9CCE57E117DD4213F395FE07...>
The answer to "Why the downvotes?":

https://en.wikipedia.org/wiki/Frank_Abagnale#Veracity_of_cla...
Someone once told me, “comparison is the thief of joy.”

I’m confident this is a famous quote. But once I heard it, it kept resonating.

Then years later I watched Bluey with my kids and mom says, “just run your own race” and it all clicked. I’m so thankful that it clicked because I feel liberated from this self-imposed sense that I need to absolutely maximize my time here, which is an impossible task.
There may be a language issue here, but to be clear: Elitist != rich. I've run across many poorer folks who harbour elitist attitudes (like, say, ascribing mental or moral failings to folks who choose to indulge in sex, drugs, or alcohol).
Not sure about GP but I’m in aus and can confirm the Coke is that bad
I guarantee that if hard drugs were made available at pharmacies that usage would not go down. Deaths, maybe. You would end up with a whole lot of dysfunctional addicts.

14 year olds can easily get their hands on a bottle of vodka, what happens when they get amphetamines?
Oh for me too, but I wish it was easier, like something supported seriously by my language of choice, my OS of choice or my libc of choice, with the flick of an flag... I don't retest the whole libc and kernel every time (although, err, someone should, right? :-)
> Git is an awesome version control system, used by over 93% of developers, and is at the heart of modern CI/CD pipelines. One of the benefits of Git is that everyone has a complete copy of the project they are working on.

I feel like this is copy-pasted from a pitch deck on why GitGuardian should be funded. Does anyone reading the article care about this anecdote? Like do people stop reading at "well I'm one of the 7% that doesn't" or think "wow a lot of people are using Git, I should buy their thing"?

Sorry for the meta comment, but it just stuck out as odd to me.
Except in the scenarios where the company's support starts telling users to click through the warning, which I've seen a few times.
I think that's a good system and it is nice it exists, but I sense that expiring something might be a better way.

There's a lot to be said to having people step up to defend something instead of having people attack something bad, or even overlook it out of ignorance.

I also remember one thing trump did I thought was interesting was that adding a new regulation required eliminating 2 existing regulations.
Thankfully, all federal government positions like this have clearly specified salary ranges.

So let's take the DOJ, since they have easy to find vacancies.

https://www.justice.gov/legal-careers/vacancies?position=1&t...

They are mostly GS-15, which is 150-175k pay per year.
They do fine on benefits, etc.

15k in stock is not a ton for them.

Certainly not something you'd mess up a job or career over.
I think the fundamental problem is, a lot of orgs just don't care about security, as it doesn't affect their bottom-line. Even breaches are only a temporary hit on the PR. Proper way to address that might just be legislation, with heavy fines based on total revenue.

That and also security is just hard to scale. That's why if it was mandated by legislation, companies would be forced to spend a comparable amount on scaling their security teams and efforts.
Sabu did much more than just rat on his colleagues.

If he had just ratted on his colleagues and was apologetic about it, he wouldn't get a fraction of the hate he does.
We are working on improving the error reporting for the IDE extension. Regardless of the audience, Prusti is based on the Viper verification framework which is mainly implemented in Scala.
Out of curiosity, why is Obsidian closed source? It doesn't look like you charge for anything, and with the size and type of following you have, you'd probably see some really cool stuff get sent your way.
Even as bad as their reliability issues are, I'd still be more worried about their security issues:

https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-v...
https://msrc-blog.microsoft.com/2021/08/27/update-on-vulnera...
What does "BSL with fallback to MPL" mean? BSL unless you go out of business anyway, and then in that case it's MPL?
Ask HN: What did you learn today?
People often say that software engineering requires you to constantly be learning, so what did you learn today?
This shit happens all the time.

Old school one when I was a security consultant for a bit (pre-automated pentest scammers). Medium size regulated fintech. Domain admin passwords and admin accounts were stuck on post it notes on a board in the machine room. If you went over the road to the college, asked to use the toilet, which they seemed fine with, and poked your 200mm lens out of the bathroom window you could snap them all.

Don't assume that level of competence improved with addition of technology.
Vanadium isn't all that common.

This is only 0.4 GWh, going up to 0.8 GWh.

Globally, to completely replace fossil fuels we will need on the order of 1 PWh.

It's early days still. Far too early to be picking winners. There are dozens of storage technologies being experimented with, each having advantages and disadvantages, niches and no-go areas.
“Catch Me if You Can” largely fictional work claims new book (2021)
The $30 isn't for the food, it's to make sure you don't have to interact with "those" people i.e. the poors.
Transformative VR Is Likely Coming Soon – LessWrong
Congrats! Been following Obsidian here and there and I'm finally giving it a spin.

Side Note: If you folks would like a portable version for Windows (non-installable version that can run from a cloud folder, portable drive, etc), let me know. PortableApps.com has a few Electron-based apps now.
And yet I see it get violated all the time. People should do a lot of things, but a lot of my coworkers are lazy and do not do quality work. Given that it happens, and that I can't prevent it, one must then ask how to guard against it.

At my org, we even try to generate all secrets with a standardize prefix/suffix so as to make them very greppable. That doesn't stop "Architects", "Customer Solutions", "Analytics" types from … just working around the standard tooling and manually generating one by hand because … IDK, they think they know better? I really don't get it.
The main impediment for knowledge retrieval in apps like obsidian/roam etc. are that the notes cannot be retrieved easily, especially as the number of notes scale. (Maybe, Obsidian users might disagree with this point, but that was my assessment.)

Dendron is built for ease of retrieval of notes. It is built mostly for devs. Now, I can retrieve forgotten syntax easily in Dendron when compared to other apps. The fact that is is built on top of VS code helps.
Obviously this will vary by jurisdiction, but it's a relatively new problem in all of them. (At least, the format is new and it hasn't been obvious if/how the old rules apply.)

In the UK for example the advertising regulator decided it's advertising, kind of like a 'product placement' on television, and therefore needs to be clearly so/declared.
If you read farther in to the article, the reasons why Republicans aren't using the verified political sender program (which is available to legitimate political campaigns of all parties, not just Republicans).

Republicans have been complaining (with statistical evidence taken from published research) that Google marks Republican party email as spam much more often than it does with Democratic party.

In an effort to dampen the political pressure against them, Google created this program. However, participation in the program has a host of requirements, critically including that any campaign whose emails get flagged as spam will be removed from the program. Since Republicans would only want to enter the program to stop Google from flagging their emails as spam, which evidence suggests they routinely do, they'd all just get booted from the program immediately anyway when their email got flagged as spam.

The whole program is basically a farce, designed purely to make it look like Google has stopped flagging Republican emails as spam while not actually doing so.
That’s great. Frankly I have enough buffer that I want my next job to be interesting and fun even if it just pays half.
You won't get major advances in technology without dumping billions into it.
Netflix Announces 'Basic with Ads' Plan Priced at $6.99 per Month
I'm not going to disagree with that and I'm not opposed to the privacy controls in GDPR. The context here in a solo dev who is dealing with GDPR. When you're trying to get a business off the ground, iterating fast and trying to build a business that can survive to day 2, every single bit of busy work should be avoided. Why reduce your chances of success by chasing a market that takes more work than other markets? The global market without Europe is big enough to support any startup; so long as you build something people want.
I'm having high hopes for Bear notes v2 (called Panda in beta). It does the textbundle format which makes complete sense, and also has native pen support on iPads. So actually it is simple, and a joy to use, and also you're not locked in to anyone.
How We Built Proton.me
I committed my google maps api key to a public github repository recently and github immediately sent me a warning about it. The thing is, I did it intentionally. The key is used on my website and the website is served by github pages.

Now, it's an embedded maps api key, there's no cost to use it, nobody can use it from a domain other than mine, and it's easily visible in the page source if someone views that, so there's really no reason not to commit it since even if I didn't commit to somewhere publically, it's still publicly available on my website and nobody else can use it anyway.

Is this a reasonable exception to this rule?
I had a maths teacher who accused me of cheating because we had coursework to solve a particular problem, I solved the problem for that case and then the general case using math she hadn’t taught me even had a pascal program that you could enter parameters and it’d give you the answer.

She literally couldn’t get her head around a student going to the library, taking out a book on maths and teaching themselves because they where curious.

The UK has a very strange educational system, curiosity isn’t encouraged, you learn like a good little peg in a round hole.

Left a very bad taste in my mouth but at least she did eventually apologise.
I’m Raffi from Lago. Frankly, Stripe is a awesome company. They’ve built amazing products, including Stripe Payments (the blog post starts with this exact same statement). When it comes to billing, we do believe we are creating a better solution, especially for companies having complex billing (usage based, for instance). At least, we offer a new solution to prevent additional % fees on revenue, vendor lock-in and rigid billing solution by creating the tool we would have loved to use.

We do not bark up the wrong tree, but try to give our point of view about the perfect billing system
Related statement by Frank Abagnale:

- https://www.abagnale.com/Frank-W-Abagnale-Jr-Film-And-Book-C...

Wikipedia for Frank Abagnale:

- https://wikipedia.org/wiki/Frank_Abagnale
I rephrase then: would you do something other than what the feds ask you (malice-free compliance), when you have your freedom on the line?
Thank god for films and media made before 2016.
I've done some limited experimentation with this[2], and it seems like a quite powerful technique for programming. I was inspired by this demo[1] of Dion from 2020. (The first video is amazing)

[1] https://media.handmade-seattle.com/dion-systems/

[2] https://github.com/mikewarot/TreeHouse
'On a long enough timeline, every tech company becomes an AD company'
Here in Europe layoffs are more uncommon but I am having a very hard time finding open positions compared to just 3 years ago ( last time I was changing jobs ), and the situation is getting worse and worse each week that passes. And for juniors is already far worse: I very rarely see job openings targeted to them anymore. It seems like everything is frozen.
This is definitely a marketing piece. And they charge a LOT for it, so it's not a solution for the common masses.
Dipsea | New York, NY or Remote (US timezones) | Product Manager | Full Time | https://dipseastories.com
Dipsea is a female-founded startup and audio content studio at the intersection of storytelling and sexual wellness. We produce the best audio erotica in the world. Backed by world-class investors including Thrive (Slack, Stripe, Hims) and Bedrock Capital (The Athletic, Cameo), we’re a team of creators pioneering a new genre of storytelling and creating carefully considered experiences that subscribers love. We’re on a mission to empower our listeners to find joy and confidence in and out of the bedroom.

We're looking for a new team member with 2+ years of experience in product management or relevant experience on a product team. Our team is super small, agile and has a high impact every day on 100,000s of users around the world. You'll be an integral part of feature development, business process improvement and product design.

To apply see https://jobs.lever.co/dipseastories/810652a7-3b47-43db-a2eb-...
At this point you sound just like the people still going on about how Ivermectin does so do something.

Sorry, but following the science requires the ability to admit you're wrong in the face of new evidence.
Not really. They only have 83-90 million users. That's not really a big table, at least in my world...
Surprised they didn't just charge them a $2,500 fine for each pro-democracy comment.
Sabu never expressed any regret for his actions, to the contrary.

You don't have to be a bad guy to accidentally hit someone with your car while driving. But if you don't feel bad about it afterwards, you're probably a bad guy. If you go out of your way to point and laugh at the person you hit ...
> In the embedded world, code statically allocates all memory it needs up front.

Except for things like the ESP32, which uses malloc pretty liberally within ESP-IDF. Networking is hard without it, it seems?
DeepMind breaks 50-year math record using AI; new record falls a week later
My company has monitoring for this, but it still seems to be a law of nature that,

1. someone adds new service/server/infra in a submarine manner

2. it goes to prod

3. the cert expires and outage begins

4. my team is asked what to do, because "we're the cert experts"

5. we add it to the monitoring

So it only happens once … per service. Which isn't great. But how do you get people to slow down and do simple shit, like add a monitor to your new service? (Or promulgate a design doc…)
Creative developers makes their own frameworks for their apps, Javascript is different with how much people choose to depend upon new libraries all the time instead of solving simple problems themselves.
it's just standard SEO fare. don't read too much into it.
At this point Is there any debate that this company is NOT an extension of the US government?
I think both exist, but you're right.

The majority of Architects I've brushed against in the last decade have been exclusively an additional marketing force for AWS with very little ability to objectively reason from first principles or assist with knowledge of anything outside of the AWS ecosystem.
> … part of the experience is being completely disconnected and knowing you're on your own if anything goes wrong.

Frankly, that’s silly.

In the very unlikely event that something goes seriously wrong, having a satellite-based emergency beacon is easily the difference between life and death or serious life-long injury.

I’ve spent plenty of time in the backcountry where cell service is not just spotty, but nonexistent. Now that beacons are cheap and widely available, I always take one.

Being self-sufficient and disconnected are good, healthy experiences — having an emergency communication mechanism for emergencies that you cannot handle yourself doesn’t detract from that.
In the US, there's definitely less hiring going on, too. Seems more and more common to shut down a successful interview pipeline with the "hiring freeze" excuse.
There is a large backlash happening against blockchain right now in Europe, from your profile I would assume that that is the problem.
Lets compromise. No more vehicles and no more drugs.
Possibly the reader-hero/-author mirror effect. I wouldn't ascribe too much to gender equating to philosophical tendencies.

I'm often disappointed by the lack of philosophical depth and nuance objectivist
adherents display. Plus, the arrogance of assuming one's perception is exactly the way reality is when there are as many viewpoints as there are individuals. Beyond math and gravity, subjectivity and ambiguity are the norm. Furthermore, no one is an island and cannot scale their efforts beyond themselves without cooperation and friendships that require solidarity.

Modern libertarianism, the political extension of hyper-individualist objectivism, is largely an ideology sold and popularized by billionaire climate deniers to cynically benefit themselves.
Surgeons have a practiced ritual ("scrubbing") to prep for surgery. Do you practice a credential-scanning ritual before saving (committing) your code or pushing your code to a remote repo?

I have git hooks to lint code syntax, but nothing for scanning for leaked credentials. Looking @ TruffleHog now, mentioned by another poster.
Doctors used to not wash their hands too. I get it though, and i've seen the same thing. Really it comes down to education and not granting access to secrets to people who aren't capable of handling them.
Even formal methods and verification have bugs.
> but I'm not 100% ready to leave yet.

You're living in the past.

It's normal for this kind of thing to go right down to the wire, but it's also normal for startups to fail (90% roughly fail; the numbers vary (a lot) by stage of the company). In a "buyer's market", you made a bet so you should see it through, and if it goes under you just get a new job.

But in today's market, I don't know. Layoffs are in the news, because they are news. Hiring freezes are rampant. But the unemployment rate is fine. So ... I just don't know! What I'd do just from that POV is make a list of top 10 or even top 20 companies I want to work for, and see how many of them are actually hiring. If that number is 75% or more, stick it out just a bit longer. 50% or less, start an aggressive job search.

Besides layoffs being newsworthy, VC funding amounts are down 53% YoY. So being this close to the end of runway and not having something lined up is not promising. But maybe you aren't part of the inner circle and know what's going on with funding.

There is a huge personal risk tolerance factor as input to your decision. To me that's the biggest factor and isn't answerable.
It is probably more precise to just stick with the term "US-legal" instead of thinking about birth. That's a better term I should have used.

The mechanism is if there's one perfect candidate of the right age, race and caste but the person isn't US-legal, then companies will be forced to consider people of the wrong age, race or caste. Maybe not right away, but when the supply of the perfect age/race/caste US-legal people run out.

In my experience, the visas usually accentuate the distorted racial makeup of tech companies because they all go to overrepresented countries.
For all that, he is less dangerous than Malcolm Gladwell.
this is how i learned to code
Nah, I don't agree with this. Lisp is inherently dynamic, there is much more going on than just automatic garbage collection.

To achieve the same-level of expressiveness in C you need to craft an interpreter, dynamic memory allocation doesn't cut it.

I once wrote a simple linked list library in C to achieve lisp like functions, things got complex very quickly. I still dream of writing a garbage collector for it and evolve it to a lisp like state.

Like Greenspun said, I believe any sufficiently complicated C or Fortran program contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of Common Lisp.