skysight-inc/HackerNews huggingface dataset:
I find this trend particularly ironic as it has come about at the same time as an explosion in the popularity of "user-centered design". It seems like, especially on the web, more and more companies are telling themselves they care about the needs of their users, while at the same time designing more and more user-hostile experiences.

I wrote more about this here: https://notes.npilk.com/radically-user-centered
On the surface, the article is weak: "vital signs" is not defined; the most precision we have is that it measures heart rate. But, my fitbit already does that. Vital signs, in my own experience, includes blood pressure, pulse rate, temperature. My fitbit doesn't do BP or temperature. Would be nice to know more about this project.
>law firm named Gibson Dunn (who have been at the center of many controversies)

Gibson is one of the most respect law firms in the United States. It is certainly possible that they took some sort of nefarious action, but I find that unlikely, and see no suggestion of proof here.

An article quotes this:

>>Carleton Nelson denies the allegations. His lawyers have said in court that broad allowances for outside work in his Amazon employment contract gave him leeway to do business with Amazon clients and customers.

Well, sounds to me like Nelson took the kickbacks and the argument is whether he did a good enough job papering them to look like real transactions.

https://www.geekwire.com/2022/former-seattle-entrepreneur-an...

As for no damages:

>> Amazon notes that its initial calculation of damages included damages attributable to inflated rents and fees it had agreed to pay to lessors that were controlled by the defendants.... Amazon has now been able to negotiate amendments to the leases, which has mitigated, but not completely eliminated these damages

So seems like the problem was resolved because the fraud was discovered and remedied, not that there was no fraud to begin with.

https://twitter.com/Amy_K_Nelson/status/1489227415108919297/...
Is this a uniquely British tradition?
Same here but I really wish I could use it on my phone.
The unencrypted website URLs is crazy bad. Even before the hack, that means LastPass themselves know every website saved in every user's vault. Forget about the hackers. What was LastPass doing with this information?

I have to wonder if LastPass is implemented as a huge multi-tenant database keyed on user and website URL...? Lunacy.
Reading this again something new jumped out at me:

> "I mean it as - software that doesn’t really care about the needs of
the user but rather about the needs of the developer."

No. The "developer" is often as much a clueless victim and tool of
other forces who misuse her work.

Malware, in it's broadest sense, has become an industrial scale
venture. Technological abuse exists at a system scale.

In some ways that's positive, because developers and end-users, being
much wiser in 2023 than in 1993 can unite against a common foe. But
that won't be easy. The key lies in building relations between
developers and end users that completely bypass the "at scale"
bandits.
Yeah, facts matter indeed, and thanks for the perspective.
For anyone not aware, this is standard stuff for many Catholic parishes.

Every blessed Sunday, in addition to the other Mass rituals, the content is a few readings from the Bible, capped by a homily (a lecture the priest has written) about how to improve as people, or to do some good.

(Not that I'm advocating Catholicism or any other kind of organized religion. Just mentioning it because I know a lot of people weren't brought up in a tradition like that, and the external news is going to give a distorted picture. Just like a lot of people brought up sheltered in a religion have a distorted idea of people not in that one. This gap of understanding can be funny, in that you have a lot of, say, Christians and secular liberals, who're suspicious and critical of each other, when in some respects they have especially strong overlap of values, such as helping those less fortunate. Recognizing those overlaps seems like it might help speed up finding more common ground on the actual differences -- of which there are some whoppers, but there's slow progress.)
USA v. Sam Bankman-Fried Appearence Bond and Order Setting Conditions of Release [pdf]
>We don't 'drive' anything forward unless we're in a car, and we haven't opened a 'one-stop shop' as we're not a supermarket.

But the very next sentence:

>We've probably launched a website

Surely we don’t launch anything unless it’s a boat or a rocket?

I mostly agree with the author, but they nicely demonstrated how hard it is to avoid jargon.
BitWarden and other self-hostable open source solutions do allow you to verify everything is encrypted, though you have to self-host to truly verify it (since it's always possible the official hosting service runs different software)
I wonder about DRM. With Audible taking such a big cut, it would be interesting to see a platform that gives creators an 80-90% cut of DRM-free sales. Does piracy represent such a large threat to sales that making >2x more per sale wouldn't be worth it?

Sanderson is distributing raw audio to all backers, so he clearly doesn't think so.
Ashtavakra Gita
The way you can interact with other code is via symbolic references. Indeed, the linker resolves most of these references. These are stored in an object file as a "relocation".

It's considerably less convenient than a package system.
> A recent estimate of the global number of prokaryotic species is 2.2–4.3 million [110], down from previous potentially flawed estimates of trillions [111]

From this Nature article: https://www.nature.com/articles/s41396-021-00941-x
If your articles main solution is “just build what the user needs / asks for” then it comes off as incredibly juvenile and naïve. This is one of the hardest problems in product design.

Also they seem fairly oblivious as to why these hardware apps are poorly made and require accounts. It’s because it’s expensive to write software and you already bought the product. Whatever keyboard light program you’re using costs real money for the company to make and maintain, and they’d like to keep costs down.
I think they would be unreasonable.

A reasonable person familiar with the church would know that 99.9% the talk of demons is metaphor and analogy these days.
C is one of those things that unless you have proper testing, tooling and linting you don't know if you code is incorrect. It may have subtle memory bugs, rely on undefined behavior or crumple in exploitable ways under bad input. Having a feedback loop is really important in learning and improving. Undefined behavior helps subvert it.

For the exact example of above, how would a developer learn not to use gets? The best place would be a section on red flags in API design in the book. If you don't have that you need to find it through experience. Lints, fuzzing, sanitizers can help, but once again, none of this is covered in K&R. Some of it just didn't exist at the time or if it did, it was very primitive compared to what we have today.

Developers could pick up bad habits and be productive for years with them before they get bit by them. I know I did. I look back at some of the practices I picked up when first learning and cringe a bit. Especially since I think a fair amount of that code is still in production.
Minsky is hand waiver to say the least.
We aren't politically stable enough for renewed interest in manufacturing. In any sense that is meaningful, I mean. Why bring manufacturing to a country that may heavily regulate or outlaw the edge you have that would make you successful elsewhere? Let America buy your products but don't let them "help" you produce them.
At this point, "incentivize creative works" is 99% ideological gloss. The long-running payments from copyrighted works are golden Rings of Power from the POV of the financial and legal industries - and those guys are far less neglectful and benevolent than Gollum was, to ever let go if they can possibly avoid it.
The reason Lyft and Uber are working "splendidly" is because they ignored, and then lobbied their way out of, a lot of regulations that taxi companies (in my urban area) were required to follow. At first by claiming they were somehow different because there was a smartphone involved instead of raising your hand or calling a number...and then by lobbying their way into much cushier regulations.

In my city taxi related regulations included:

* a police unit dedicated to "hackney" matters and a hotline to call for everything from reporting dangerous driving, dirty/poor-repair vehicles to lost item reports, and police actually followed up on most of these, and had the authority to pull a vehicle from service

* mandated minimum number of paratransit vehicles, ie wheelchair vans

* prohibitions on declining rides based on the destination or pickup area

* submitting drivers to a criminal background check by police. Go lurk in the uber/lyft forums and do some searches and you'll see drivers bragging about sailing past the corporate-run background checks even with violent felonies.

* random inspections by police

* standards for being in-service

* actual wheels-rolled-this-far metering by a device certified with visible-to-customer seal, not GPS which isn't nearly as accurate especially in dense areas with tall buildings where you get multipath errors and very limited constellation visibility...and almost entirely an uninspectable software black-box even ignoring issues with high density areas. Lyft and Uber could be inflating their mileage by a couple percent whenever they feel like it and nobody would be able to tell.

* receipts on the spot listing vehicle, driver, distance, fare.

Live in a known bad neighborhood? Good luck getting an Uber/Lyft to pick you up.

Need a wheelchair van? Good luck, Uber/Lyft didn't have any for years and it took lawsuits by states and cities. Drivers describe seeing someone come out their door on crutches and driving off because they don't want the "liability" (really, they don't want to wait for someone slow.)

See an Uber driver driving dangerously? Nobody gives a damn, and good luck getting the plate versus a large, high contrast 3-4 digit number posted on every corner of the car. You cannot reach anyone at Uber or Lyft unless you had a ride booked; the apps trigger an outbound call from their call center, but only if you had a booked right and answer the questions the app asks you correctly.
Feedly is fenomenal, its my 2nd most used app after email. I really love the advanced features of mute filters, web alerts and Leo - Feedly's AI Engine.
Don't trust social media. VC funded startups in general are a scheme to get the rich investors richer, the people who actually work on the start up (including founders) are very rarely going to do better than a person who worked as SWE in a big tech company for the same amount of years..
Generational wealth doesn’t cover it. Stanford, MIT, Yale have lots of non-legacy attendees there based completely on academic performance.

> That's more than all of Scandinavia's population combined. Goes a long way toward explaining why so many "big" startups come from the USA.

Expand it to all of the European countries with free healthcare to match the populations and the outcome is the same.

There is some subset that has to bail because of healthcare, but it’s not relevant in the larger picture.
The absolute worst is the "iPhone is dead / charging / not charging" graphic on my phone. I have absolutely no idea which one indicates that the charger is successfully connected. Like PLEASE can you just put the label "Charging" on it.

Is this an instruction or a status?? https://i.imgur.com/2u8RlDG.jpg
There are many reasons to use metaphors [0], but not if you're aiming for maximal comprehension by people who may not have advanced reading comprehension or English language skills. This advice is intended for writing in a very specific context.

[0]: https://www.bbc.com/culture/article/20200710-the-words-that-...

(Plus, you used a metaphor in your question: "point")
Can each vault be decrypted with just the master password or do the hackers need to also break a unique key for each?

What's stopping them from looping through the 10k most common passwords and trying them all on every vault?
I don't think "please don't sneer" means "forego all metacommentary," and I didn't interpret this as particularly sneering or mean or rude. Cursory inspection of dang's citing this rule seems to be really broad, really rude snark, I don't think this comment fits the pattern I'm seeing there.

I'd propose our discourse would be hobbled if we couldn't make comments like, "many people in this discussion have misconception X". But perhaps "very wrong mental model" was too many superlatives and "misunderstanding" would've been sufficient.
We always only hear success stories. Its simply because no one writes or likes 'normal failure stories'. Once in a while we have such a beautiful story that goes viral, but for 99% of normal stories of 'it just failed' never see the light of the day.

I believe I found my success (screen.studio), but first I had to give up on it to start having a healthy relationship with my career. Only then I was able to look at myself being proud, even while seeing everyone tweet (remember, only successful people tweet - thus 'everyone' is a bit biased) about their success.

Good luck!
I'm a happy Bazqux user, too.

It's a simple, no-frills experience that reminds me of what I liked about Google Reader.

I use their PWA on mobile, which works really well.
They are the primary creator of the work. The narrator is not.
> The only reason to use "learnings" instead of "lessons" is to show that you're a serious manager. It's just empty signalling.

I can’t really comment on Signalling, but the word learnings isn’t a new and modern invention. It’s in Shakespeare!

It’s also a fallacy to think that there’s a canon of ‘acceptable’ words we can choose from, nor that we are only allowed one word per concept. Language evolves over time and acquires meaning through use.
I would be surprised if there is not some kind of loop in the code that is used to evaluate the gamma function. You can also define factorial like for example the number of different permutations of any set of a given size.
Watching an unwell person publicly spiral into paranoia and conspiracy-obsession and then calling that a "different political opinion" is a pretty bizarre take.
An open-source software for automating DNA origami
Yeah, really. That said, anything that advances cultural acknowledgement of banditry is a good thing. Right now people are walking around with titles like Senior Stagecoach Divestiture Specialist and everyone pretends that it's normal.
It is fairly different from a systems programming perspective. The base instructions (I) are essentially everything you'd expect when writing any kind of regular program and it feels very normal and natural for anyone who has ever written assembly, but once you start needing fancier things like exceptions you'll see a lot of new RISCV specific design choices. This is sort of to be expected, x86 has a different exception architecture from ARMv8A. It's just different, not necessarily less capable. Odds are whatever RISCV MCUs come on the market will eventually be supported with the same SDKs you know and love, but they will have a different implementation for all the system specific functions.
Lying to our children – all parents do this, don’t they?
> They didn't want to skip the progress animation because they liked how it made the app feel like it was doing something, and also if the user got the result instantly, it was "jarring".

Like hard bristle toothbrushes. Hard bristle toothbrushes are not good for your gums. So why do they make them? Because customers like hearing the sound of the toothbrush brushing. They like hearing it do something.
Let's say you are writing an API that works with some particular scientific file types on the back end, and you want to load that data into memory for fast querying and returns. Now, that data is a multidimensional time series for each file. You could spend the next months writing libraries and bashing your head against the wall, or you could leverage the 30+ years of development in that stack that enables you to read these.

Xarray to read, numba for calcs in xarray, pandas to leave it sitting in a dataframe, numpy as pandas preferred math provider. You could write the api componentry from there, sure. Or you could use a library that has had the pants tested off it and covered most of the bugs you are likely to accidentally create along the way.

There's no compelling reason to write everything from scratch. If everyone was taking that approach then there would be no reason to have an ecosystem of libraries, and development would grind to a halt because we, as a collective of people programming, are not being efficient.
I really dislike using left/right in conversations, especially with US residents.

Your discourse is typically conservative (and rejoice, even democrats carry the same, and I start to see 'socialists' doing the same, you're ideologically winning!). Group X does this, but groups Y and Z will do that instead!

A more post-marxist discourse would be that a system in which a company can become and be treated as the world open forum while depending on advertising will limit freedom of speech and ban more than illegal speech anyway. You can also have a critic of the board composition. Or a critic of what 'diversity' mean in big international companies.

Anyway, basic stuff, but thinking of systems rather than people (or group of people) is usually a good thing anyway. That's what scientists do.
Waste of time. When the German Government takes over, good ol' Twitter will be quite OK. https://www.euronews.com/next/2022/12/22/twitter-germany
"I believe it's because product design was generally worse 'back in the day.'"

I don't agree with this generalization. Here's an example: A stereo receiver, even today's A/V receiver, has a certain number of physical inputs. Back in the day, you had buttons on the front to select the input you wanted, clearly labeled. One press gets you the source you want, every time.

Many receivers today force you to press an Input button or turn a wheel to iterate through a list of inputs, a list of unknown size and unknown beginning and end. This is because the display idiotically doesn't show a complete LIST of the inputs at once, or even a moving dot to show you where you are in the list. So you could be one input below the one you're trying to select in the list, but if you happen to turn the dial the other way you'll go through 10 inputs to get back to it. Granted, this is much less commonly encountered now because nobody is going over to his receiver to put a disc in the player, but it was a problem for many years when people were still doing so.

In some cases, older designs were also better for safety. When safety is on the line, the best design (or at least universally-understood standards) often percolate to the top and stay there.

A sad example of this was Jeep's attempt to "innovate" with a disastrously defective gear shift, which killed Star Trek actor Anton Yelchin: https://www.theguardian.com/film/2016/jun/20/star-trek-actor...

But I also acknowledge that there have been major safety improvements. The other day I rented a chain saw for the first time and was comforted to see the safety brake on it.
Some provide a unique feed with an unguessable URL (very convenient, but easily shared).

Some require auth with Http BasicAuth (I think that’s mostly podcast and I don’t think it’s used very much)

Some show a preview snippet in the feed and you can view the whole article/thing after opening the link and authenticating
>Libraries that genuinely have special needs like numpy could always go outside this system, and have a “be careful where you install this package from” warning. But most libraries simply have no need for the machinery being exploited here.

My personal experience with any situation where I need to get some crusty random python library to run has always been a situation with a lot of "-y"ing, swearing, and sketchy conda repositories. Usually it's code that was written years ago and does some very particular algorithm that's essential, so any warnings in the pipeline basically becomes ignored by the sheer difficultly of the task.
It's hard to give specific advice without knowing what your cybersecurity experience is.

But I'd make sure the boss knows going into the audit the company is going to have its ass handed to them. But that's actually a good thing. Having a good pentest/audit will give you an idea of where to start.

If you can get funding, get Nessus and Burp Suite Pro. Burp Suite is best used if you have a good understanding of web app pentesting and can manually do stuff, but the automated scans are pretty decent too. Automated scans will pick up stuff that's usually easy to remediate and will thwart low-effort threats and/or script kiddies.

If you can't get money for Nessus, OpenVAS can work. But if it were me and I couldn't get money for a Burp license, I'd pay for it out of my pocket.

Also take time to understand what the upcoming audit is going to look for. If you understand the controls, you can go look how to implement those controls. And once the audit comes back, the audit should help you prioritize remediation.

Someone suggested a SOC2 audit. Depending on how this audit goes, I think that's a good idea. Or at least try to adhere to the controls within SOC2, if you're not going to get the audit itself.

ITProTv has some good security stuff. I'd review it if you have the time and/or inclination. It's a little basic, but solid basics are necessary.
I clearly stated I don't support the legal basis for civil asset forfeiture, particularly as its used in the US, specifically without filing charges or that the asset is the defendant so the government can launch a civil action against an asset for being suspected of being the result of a criminal action by its alleged owner.

It's even worse that law enforcement gets to keep the proceeds of seizing assets where there are no charges (let alone convictions) so we've added a profit motive for what should be unlawful search and seizure. Yay capitalism.

But that is the legal doctrine we operated under.

Unlike the Amazon case, there is a mountain of evidence against SBF, the new CEO has no doubt coopearted and provided ample docuemntation, there are 2 cooperating witnesses and charges have been filed. Through ownership of Bahamanian property (and who knows what else) there is a clearly evidence trail between FTX customer assets to SBF and SBF's parents and associates. It is all quite plausibly the proceeds of crime.

Basically, SBF walked into a bank, robbed it and then used the money he stole to post his bond.
I've had a few feature ideas too. I'm currently paying for the hosted instance of Miniflux, but it's nice to know that self-hosting a personal fork with the exact feature set I want is incredibly easy: small code base, single executable, minimal dependencies.
In the context of any other trade relationship would it be acceptable for China to block all access to its own market, whilst still expecting full access everybody elses?
Apple has lost many of their top chip designers
Dude I don't know you, I don't know what you do. All you did is link a Haskell SQL library. Sorry I don't care about that particular project.

You seem to be under the impression that unless people are coerced they'll only work on projects that entertain them in some way, like a child playing with bubbles.

I feel sorry for you that you have such a poor opinion of humanity. Personally, I think humans are curious, collaborative, and like to build things. Yes they like to build things they find interesting but interesting is a wide concept. If my Mom got cancer then I'd probably be more likely to work on cancer software.

I want to live in a world where people can voluntarily work together to build things based on shared interests, whatever those interests might be. A world where people aren't forced to submit to business owners like you.