skysight-inc/HackerNews huggingface dataset:
The situation you describe is rightfully terrible, but the conclusion you seem to be pointing at is, no one should have a phone until they're 18? or similar?

I don't think that's what you actually mean to say, so when we're talking about larger the group, this specific situation won't lead you to the same conclusion.

> Sleep quality and depression are no where near my concerns.

There aren't many ways to study things at scale. This is 250 participants tracked over 5 years. That alone is hard enough.

In the end, I think that you're agreeing with the study - parents involvement and parenting matter.
> How much should you worry about security with a setup like this?

One should be extremely worried about it
I suspect that this is surprising in part because we have so little firsthand experience with bank runs. Before the FDIC, a bank could collapse fairly quickly and with relatively little warning.
Not only that, you have to figure out how to fix the thing if the HA contraption breaks.

There's also security to think about (do you run a CA? how do you handle Postgres certificates, etcd certificates, rotation, revocation, etc).

Some hosted providers also have nice value-adds like query-level performance monitoring and DBA services
Its only really in there to cover googles ass in a situation like this, it's not practical to get users to download your app elsewhere. Even fortnite couldn't really get people to do it.
> I realized the level of attack that I would be putting myself under and the insecurity of JavaScript due to extensions, mitm, and client side malware made it ridiculously unpalatable

This doesn't really make sense. These threats apply equally to people just memorizing and typing in their passwords into web forums. If the user's browser is compromised there is literally nothing to be done.
>You don’t have to reinvent 70+ years of Mathematics

What do those 70 years of mathematics do for me as a software engineer?

>or teach your language to other people before you can have a meaningful design discussion.

It's the other way around. Most engineers will have no clue what you are saying.
RIM had a chance, I think. They had cool devices, could have forked Android and owned enterprise/privacy focused buyers. Maybe Nokia can come back.
Just look at their awful website. What do they sell? They want me to buy an Algolia competitor or something?

You wouldn’t even know they are the Elasticsearch company.

Go to Mongo - immediately shows me a value proposition of building software with MongoDB in their cloud.

The exec leadership at Elastic is very low quality.
Political engineering is hardest.
I'd be interested in recommendations about books like this.
I don't think it's because he donated money, they already have the money so they're now more incentivized to be critical of him in order to distance themselves from his wrongdoing.

> Is it because journalists do not understand crypto, like, at all?

I think this is a part of it, even most cryptocurrency enthusiasts don't understand it (a statement that most enthusiasts would concede, just not about themselves), but I think a more influential component is that people just don't care. There have been so many scams like these over the years that everyone already understands cryptocurrency is mostly scams and people are somewhat resigned to the state of things; it's cryptocurrency outrage fatigue. From the media's perspective, the story is far more provocative if they entertain SBF's meandering chaos rather than file it away as just another cryptocurrency scam.

> Nobody, literally nobody, said Bernie Madoff was "suffering from a solvency crisis." They said he lied and stole money.

I think that's just a product of the era we live in, "suffering a solvency crisis" is the type of euphemism you see all the time in the cryptocurrency world.
Nobody intentionally gets caught.

Coming up with a way to swindle people that doesn’t even have a name, now, that’s next level impressive.
Great article. It even goes there and mentions BCCI.

And with this four-letter acronym alone the clandestine literate [1] might be able to draw his/her own conclusions about the how, the why and the kid gloves with which the media handles SBF.

Imagine a three letter state agency looking for ways to secretly pay off shady foreign allies from terrorists to cartels. What kind of infrastructure would you need to do that on a geopolitical scale? Sigh, if there only existed such a technology irony off!

No, that doesn't mean SBF is crypto's James Bond, but it does shed an intriguing light on certain stablecoins as well [2, 3]

[1] https://www.washingtonpost.com/archive/opinions/1991/08/11/t...

[2]: https://asia.nikkei.com/Spotlight/Datawatch/Tether-cryptocur...

[3]: https://www.ledgerinsights.com/tether-shadow-ftx-saga/
Yup our experience with brittleness of consul and nomad soured me on the HashiCorp stack even though I was very excited about it. We went from buying enterprise licenses to throwing it all out without ever pushing to production in the span of a year.

This stuff, for all the hype about raft and things, is brittle enough and requires enough special attention.

Which is why I’d gladly rather have it be fly.io’s problem.
I mean we're talking about a monthly fee that is less than a cup of coffee, it's not exactly an exorbitant amount
On my iPhone, Safari browser history synchronization to iCloud was enabled by default.
Was expecting answer to be something like: Moby&Tracy.
Thanks Thomas, glad to see you here. For the regions, will I be able to know programmatically in which region a particular instance of the app is running? For reference, I want the users of my service to know that we tested their site in regions A, B and C, and that it's currently up in A and B but down in C and show them that in the web dashboard.
All the iOS developers I follow complain that the rules and logic of app store reviewers are arcane and vague
Yes just like I as a Black person have to grit my teeth about all of the DI&E initiatives where we change branches from “master” to “main” and don’t use the term “KMS Master Key” because it’s “offensive” when I’m not aware of anyone of any color giving it a second thought.
Seriously?

"Asked whether he was overly dependent on that small group, Mr. Bankman-Fried said his circle of close colleagues numbered about 15."

What a softball! Perfectly calibrated to his mistakes-not-fraud PR push.

In contrast, this Coindesk article is exactly the kind of in-depth, no-nonsense article focused on the relevant facts that people used to expect from the NY Times
And look where all the places it took Russia and where it is today.
Serious question: how do you pronounce "Latinxs"?
https://archive.ph/t6HF5
expressing beliefs has the risk of others updating theirs regarding whether they want to have you in their community or not.

doing it anonymously was always the traditional way to workaround this effect. eg women authors picked a pen name for themselves to appear as men.
> it's quite possible that A/B testing has a long-term effect of pushing those participants whose tolerance has been exceeded out of the study population entirely.

I'd compare this to how evaporation rate increases with temperature, as more particles find themselves with enough energy to escape the liquid.

From my personal experience, even if I can tolerate a lot of UX abuse, each such "optimization" lowers my threshold of switching to a competitor. Software in general, and SaaS specifically, resists commoditization, but every now and then an actual alternative to a product/service I'm using shows up - and whether or not I switch (and when) is correlated with how much I resent the incumbent for their UX "improvements".

I'd add one bullet point to your list:

- Unlike regular scientific experimentation, A/B testing is a methodology primarily spread in business circles using regular hype channels. That is, the average practitioner is not qualified to execute it correctly, which is one of the reasons I see A/B testing more as tools to launder arbitrary decisions. Because consequences of doing it wrong are typically not immediately apparent or obvious, both companies and customers suffer (and a vast space for fraudsters is created).

I'm in a charitable mood, so I'm not passing judgement on people for not having PhD-level understanding of statistics - just pointing out that, to the degree much larger than in sciences (even soft ones, which suffer some of the same structural problems), there's little pressure to do such tests correctly (and there's lot of ways to make money or status by doing them without regards for correctness).

From what I hear, a common way of executing A/B test badly and getting bullshit results, is by terminating the test early when it shows the relevant metrics improving for the test group - vs. running it longer if no big improvements are observed (or the metrics start getting worse for the test group). This biases the experiment towards giving false positives. This problem was big enough that there was a debacle around Optimizely few years ago, whose UI was accused to promote this early termination of tests. The cynical take I'm still somewhat partial to is that it wasn't an accident (if not done on purpose, then possibly... a result of an A/B test!) - false positives make the (statistically naive) users feel they're getting more value from Optimizely than they actually are.
It's not a "clear alternative" when Apple doesn't even allow you to mention that. There are other reasonable alternatives such as letting developers mention the alternative payment methods as long as they explain what the benefits of Apple payment ecosystem.

I read a lot of people writing comments like "I prefer to go through Apple because of the ease of unsubscription." If the benefits are so clear, why are developers not even allowed to mention the alternative?
Now I feel old.

I remember I was in college and excited when I heard about GIMP. I had been running Linux for a year and wanted a photo editor but GIMP was written for the Motif GUI toolkit which was shipped with commercial Unix systems (Sun, HP, DEC, SGI, IBM) but on Linux it cost extra.

One of our campus sysadmins had the Linux Motif libraries and compiled GIMP and distributed static binaries to us.

There was an effort by "The Hungry Programmers" to develop LessTif as an open source Motif clone. You can see a reference to it in these old GIMP site from November 1995.

Motif 1.2 or above is required. (Ack! This restriction will be removed when LessTif becomes usable).

https://www.cc.gatech.edu/data_files/public/doc/gimp/index.h...

https://en.wikipedia.org/wiki/LessTif

The developers got frustrated with Motif and decided to write their own GUI X Window toolkit which became GTK (GIMP Tool Kit)

While I like and use GIMP quite often I think GTK has become more influential and important than GIMP.
While I'm pretty skeptical a SRO would work for crypto, as mentioned in the article, SROs like FINRA are one of the main sources of regulation in the ordinary financial sector.
Already screwing the customer with trash content. Might as well get em with ads too.
Wait, this is the FBI. You mean they can't just knock on the door of the NSA, say "hey, use your XKEYSCORE to trace this creep", then parallel-construct an evidence chain with fictional provenance so they can nail him in court so hard all his lawyers can do is recommend taking a plea bargain?

What are we paying those guys for, anyway? What are secret police even for, if not prosecuting people you can't legally gather evidence against?
FreeBSD: Stack Overflow in Ping(8)
Do you think that this article (the OP) qualifies as positive press? I don't even think any Republicans have changed their minds.
Try asking it for a poem about bullying John Doe.
I dunno, think about it emotionally. Would you rather have a 2% raise, or for your $20k in stock to become 15k?

We are a very loss averse species.
Elapsed time between crime and capture might be a good regressor.
Tech Civil War
It is still 2 factor, breaching the password manager is a corner case that you can decide to cover or not. It seems like for critical accounts you should NOT. For derived accounts, it should be better than just a password.
Why is surveilling schools with cameras absurd? A societal panopticon is, but visual surveillance of an entire school, surrounding streets and buses? That's already happening, it's just not coordinated. We've pushed the responsibility onto kids with cellphones, so school authorities can pretend they "don't know" what's going on.
I just did a quick read:

> Zero Trust is the next level for API security, though it is not a silver bullet

How to better understand the "silver bullet" point?
I see the potential but I'm not sure if that Lisp-style language is the right fit here. I'd at least add rainbow brackets so you can match up the brackets more easily. Other than that this seems really cool. I can see it being good for more technically minded people.
"It seems like at least for this kind of large-scale, complex application, the cost of pervasive runtime bounds checking is negligible."

Right. The myth that bounds checking is expensive may have come from some terrible compilers in the early days. Berkeley Pascal was a notable example. Each bounds check was a subroutine call.

The common cases for bounds checks are:

- It's in an inner loop iterating over arrays. That's the case where the highest percentage of the time goes into the bounds check. It's also the case likely to be optimized out. This is the case people worry about.

- It's in code that doesn't do a lot of subscript operations. So it doesn't matter.

- It's in non-optimizable code that does a lot of subscript operations. That's unusual, but it does come up. An modern case might be Unreal Engine's Nanite meshes, which have lots of small offsets within the data stream. On the other hand, if you don't check that stuff, it's a great attack vector.
It does if you read the terms etc when installing Chrome before mindlessly clicking next, install, finish.
Hopefully at some point they'll be desperate enough to install walls and doors so that we can focus on work instead of being stuck in an open plan developer ranch.
and the price excludes the 1.5 TB EBS volume
Gerald “Jerry” Lawson's 82nd Birthday
Reasoning about Promises in Weak Memory Models with Event Structures
98% of people don’t care. But they will be scammed by bad actors who push them to install bespoke AppStores.

This is just like Elon “free speech” - astroturf from companies who want to usher in the equivalent of scammy browser bars.
I got a minor in philosophy in college and we read this book for one of my classes. At the time it was one of the hardest books I'd ever read. But someday I'll go back and reread it.
> Elon probably got what he wanted from Apple

Yup - the attention that he met people at Apple HQ.
Why can't it check the invariant as it is reconciling the snapshot with other changes?
I tried leaving spotify and am happily paying them again. I also noticed their recommendation quality improved.
This gem from the twitter feed:

> Apple has mostly stopped advertising on Twitter. Do they hate free speech in America? — Elon Musk

No, Elon, I think it’s just you…
I don't even see pricing for this when logged in, FWIW.
Crypto is pretty much just people tearing down Chesterton's Fence and then going "surprised Pikachu" when most of the protections they bypassed turned out to be necessary.

It can also be hard not to blame the victim after they responded to skepticism with shrill political diatribes, although that's not a new trick when it comes to fraud schemes. The guys trying to sell bogus patents for tapwater-powered cars in decades past used similar rhetoric in order to make pawns out of the gullible. "It's not a scam! That's just what they want you to think!"
Lastpass is an extension. Your as secure as the JS running in that extension.
Not the slightest clue about the commenter, but coincidentally their username led me to learn about this fictitious student https://en.wikipedia.org/wiki/George_P._Burdell
Yeah, I've seen a nine year old stumble upon a snuff video on youtube ... using his mom's youtube account, not youtube kids.
What about 1password is inherently safer though?
I’m super surprised that people here are taking these corporations’ cries about “freedom” and “choice” at face value. This isn’t about the security checks of the App Store. It’s about the 30% cut, but not just the vig. It also about the privacy protections.

Zuck is now complaining about the app store[0]. Why? They can’t track users on iOS. That’s it. They want the freedom to exploit you.

[0] https://stocks.apple.com/A0-hW1tGKRs6TFkPCyFVJ8w
Clean, but don't lubricate. They need to grip the paper :)
Stripe Identity has a major bug, but Stripe refuses to reply with details
Stripe Identity has a major bug, but Stripe refuses to reply with details
After I encountered the ID and face photo, the Stripe account manager told me that the identity verification could not be completed and that it was a Stripe bug,
We completed the Stripe application through Stripe Altas, and after five days of using Stripe, we were notified that the account was closed after submitting the ID and face photo.
Stripe asked us to provide proof of customer purchase, proof of shipping, and company documents, and we provided all of them.
However, after five days Stripe forced to return all the funds to the customer.
My Stripe account manager told me that this is currently a problem for non-US merchants using Stripe and that they don't have the authority or level to fix the problem, so they can only tell us to wait.
Who can solve this problem? How long to wait?
I once started an interview process as a senior developer at Goto, the company behind LastPass.

The contact was a first phone call where someone simply asked the number of experience I had in software development, Java programming, etc. I thought it was weird that basically all they got from the phone call was a bunch of numbers. The weirdest part tho what that they asked how many years of experience I had in... open source? "How many years of experience do you have in open source?"

(Probably because the recruiter had a list of tech and skills required and simply went through it.)

Anyway, I went with it and eventually got a coding assessment. The docx document told me to implement a little deck of cards in Java using classes and inheritance. This was for a senior position.

I did not do that and withdrew my application.
I thought this was going to be the seaweed chicharron snacks. There's surprisingly not bad, in fact I might prefer them to almost any packaged chicharrones. If they'd been called seaweed puffs they might appeal to a different audience, the way I see veggie crisps placed near the produce in some grocery stores.

https://www.seacharrones.com/
Then why buy Apple devices? Do you also buy Teslas and wonder why you can’t use gas?
I'll contrast this with my TV. I want a TV that works and displays pictures & sound. Instead my TV is an Android hub with dozens of random apps installed. What it doesn't do half the time is work. Sure, I have "control" but I'd rather have "functional devices!"
Vultr Announces Reduced Bandwidth Pricing and Global Bandwidth Pooling
> So why do you think Apple doesn't want that to happen?

lol i can think of a few billion other reasons why they don't want it to happen.
I have to say the landing page is cool!!
I've heard people make the case that MMOs were VR and Social Media combined, before Facebook etc existed. And I think it's true. I would log on to chat (FFXI in my case) with friends. We would occupy a shared space. People still run nightclubs and do other roleplaying in virtual spaces in these games.

The only thing really missing is the helmet but as far as occupying a virtual world, it's closer than anything else has been in terms of providing what people actually want.
> I want to own my stuff. I want to repair it and I want complete control over it

Then dont buy an iphone.

Apple's market is not people who want to "own" a phone. It is people who want a phone that works no fuss.

You're basically asking - why did apple take the option to make money hand over fist? The answer should be pretty self-obvious.
Yep, it's in the environment: `FLY_REGION`.
Open source, self hosted. Has the nice bells and whistles like browser and mobile plugins.
People need to itemize all the costs (time, fuel, wear and tear) of a commute and just bill their employer. You do this already when you have to e.g. use your private vehicle to go to a work conference. The commute should follow that same logic if its required travel using your own equipment.
> When I was coming up, especially in middle school, we were always told that you should just ignore bullies and they would go away. This, of course, never actually worked.

I don't think ignoring works well, if we consider "ignoring someone" as an emotional attack. The bullies may feel more hurt/rejected/ignored and therefore bully more or in different ways. The ignoring/conflict avoidance can be quite similar to a silent treatment, which can escalate conflict.

> I only realized this way later in life when I started training in Muay Thai and found I had way more confidence standing up to other men, both because I knew how to handle myself and because I wasn't as afraid of getting punched in the face. Bullies only go away if you make them go away. Fighting back is the only real solution victims have in the absence of adult supervision (which is often the situation).

I agree with you that I'd love if more people took self-defense (full disclosure, I train people in what I call Emotional Self-Defense), as when I took Krav Maga I felt more confident to stand up for myself in situations where I had previously thought I would be physically attacked. I disagree, however that "fighting back is the only real solution" because I think what I learned in Krav Maga was the confidence to stand up for myself without having to fight back. I learned that I could fight back if I needed to but that in most situations, just standing up for myself and not attacking back would bring quicker and longer lasting resolution.

Part of the reason I created Emotional Self-Defense is because I thought most self-defense/martial arts don't go far enough upstream to resolve the conflict when it's at an emotional stage and before it becomes physical violence.
My experience is that Samsung devices are quite easy to root. There is that e-fuse thing that disable some features permanently, but to my knowledge, these are mostly intended for corporate devices and you can ignore them for personal use.
>It was of the order of $100,000

That was just their advertising budget. It doesn't include their hundreds of thousands of sockpuppet accounts operated by their clickfarms.
People interested in what taxpayer money is going towards really ought to google where the majority of it is spent (hint: it's not student debt relief)

https://responsiblestatecraft.org/2022/11/22/why-cant-the-do...
What does my consent have to do with anything? The difference between commanding private industry to do something and hacking them yourself is the difference between free and unfree societies. Why you are trying to blur the line I don't know.
The FBI would rather more children get hurt than risk the public learning any more details of their spying programs. https://www.theregister.com/2017/01/06/fbi_lets_people_off_t...
The collapse of Mt. Gox was of a reasonably comparable magnitude IIRC (around half a billion). FTX is the biggest, but it's not exactly unprecedented.
For what it's worth, if I was deploying a bounded set of applications or services in a small number of geographies and couldn't use Fly.io for some reason, I wouldn't hesitate to use Nomad. Nomad is pretty great; it's like Flask to K8s's Django.
Nothing would change for you though, if someone wanted to sideload something they would just have the option to do so.
How is cloud storage more secure than a password managers web interface ?