skysight-inc/HackerNews huggingface dataset:
Using other terms than “software supply chain security”—for example, “open-source ecosystem security”—could benefit status quo, even if (or especially if?) the recipient of the language is internal management.

In the first case the problem is “I have subpar suppliers with poor security and I need to work around that”, in the latter case it’s “I build upon works that were voluntarily made available, often by craftspeople with limited resources”.

It’s not a secret that words we use have associated baggage that colours our understanding of an issue even on unconscious level. Different connotations of the latter call for different, more humane attitude and perhaps provide an incentive to contribute, sponsor or donate—and vice-versa, using terminology from a world with transactional relationships to level with business types may in fact gradually infect our own outlook.

Sure, a different language might sound less familiar to them, but perhaps there is a good reason for that—the dynamics are different, so the feeling of familiarity is false anyway.
Sure, but you need an "undeleted" view per table now - I haven't seen an ORM offer maintaining those views capability out of the box - any to look at?
Personally, if the expectation is to work 50 hours a week, then the question to ask them is "OK, do you pay 25% more than the average salary for this position?"

Of course, the only reason you'd ask such a question in the interview is that you have already decided you don't want the job. But the response can still be illuminating/entertaining. :)
What about Bosnia? It's much cheaper than Croatia and nearly as safe.
If you count then number of phases that demo goes through there is something like 32 bytes for every phase, so one trick is that quite a lot of the procedural generated is driven by the contents of the code used as data. It's so incredibly clever that the only things in the real world that I can compare it to are watchmaking and RNA.
Thanks for the clarification, I wasn’t aware annexing territories through war was still legal.
jsonb is a viable alternative to mongodb. im not doing blow by blow feature parity...but in 90 percentile usecase, you can replace mongodb with jsonb
Out of curiosity, do you have any links of web apps that you could bring as good examples?
These are all just words with no basis; stating something is 'possible' just because we can type it doesn't mean anything.

> We can’t know for sure if the EU is preventing war. Smaller countries might think the EU is not serving them well and revolt. Germany might flip and decide to invade the other countries again. ... There is no reason or proofs that suggests it can’t happen again.

We can't prove anything about politics, if you mean 'prove like mathematical theorems', but we are hardly completely in the dark. Nothing like what you describe has ever happened in any mature democracy, as far as I know.

> A country like croatia might benefit more from being not into the EU.

You can type 'might', but what does it mean? I might win the lottery. Putin might become a Quaker and reject war. Who knows?
Hancock is equipped neither by training nor temperament to be a scientist. He does not pretend to be one. Trying, he would fail. Judging him as one is deeply silly. He calls himself a journalist. He is a storyteller, and invents engaging stories.

What he attempts is very different from science. He openly speculates about where the evidence might lead. His failure to understand some of the evidence, and what is possible, sometimes leads him to howlers. But remarkably often he has predicted finds that historians foolishly insisted were impossible.

His appeal is in actually engaging with evidence historians and archaeologists try to conceal or downplay. He takes us to actual sites, and shows us evidence historians refuse to discuss, or as often openly lie about. His speculations are fluff. But taking us around to see things, and inviting us to speculate along with him, is engaging in ways nothing allowed to scientists can.

Scientists could draw huge benefit from engaging with the evidence he exposes, instead of demonizing him. Their complaints fall flat because he is, simply, not a scientist, even a bad one, and should not be treated like one. He inspires with what might be, which is a good thing, and that he would do better with better help.

(Uniquely, Scientists Against Myths, on YT, does more engagement than anybody else, but in a way that is badly off-putting. They forget that they are addressing the audience, not their perceived myth-maker enemies.)

He would still be often wrong, but more interestingly wrong. And sometimes, still, he would turn out to be right. There is nothing wrong with that.
Maybe so, but please don't post unsubstantive comments here. Not that you owe out-of-touch employers better, but you owe this community better if you're participating in it.

https://news.ycombinator.com/newsguidelines.html
I think this is simple selection bias. People who reach out are going to be rather motivated (frustrated).

Consider that calling customer support often takes 30 minutes of being on hold and then talking to someone with no power to help you. People are generally do everything they can to figure it out on their own.
no way, lmao... doze is the pinnacle -- the absolute zenith of software engineering, and has barely been implicated in any lethal car accidents.
> hundreds

Thousands.
> If my company has to be responsible for every line of code, we may as well own them.

Good luck with that… your company has the skills to reimplement node?

> but it's generally assumed FOSS developers aren't in it to screw consumers of their offerings actively

It's generally assumed they are in it to get screwed actively… but often that isn't the case.

> Linus could sneak a very clever backdoor into Linux

You are aware of a difference between writing a malware and deleting a project you own right?
I considered this for an audit log as well, but ran into a roadblock in terms of associating the operation with a logged in user who triggered the change..

how did solve that particular issue? or was it not a requirement in your case?
another comment here rightly pointed out that what we want is to protect our files from being read by unrelated processes.

there are no good implementations of this yet to my knowledge. encrypted fuse with snitch like rules and prompts is probably the play.

any network snitch program would have caught this and prevented exfill. a prompt would have been displayed for a new connection to sketchy.io udp 53. from pytorch or some child process. most eyebrows would rise. many requests would be denied.

on mac you have little snitch and at least one foss alternative. on linux you have opensnitch, or can roll your own on libnetfilter_queue[1] or lsm hooks[2].

hopefully soon somebody implements encrypted fuse snitch. until and even after then, wrap yourself in network snitch safety blankets and feel warm and cozy.

1. https://github.com/nathants/tiny-snitch

2. https://github.com/nathants/mighty-snitch
I said something similar to my son a little while ago. He said "That's because you taught me to be polite to my elders. We're not that well behaved on our own."

Despite what we may think about our children (or "the youth of today"), they are basically the same as they've always been, behaving well for adults--mainly I suspect to keep the adults attention away from them.

I think that, as long as we keep the above in mind when we deal with the younger generation we'll be able to help to them rise above our mistakes.
It's like booting off a CD-ROM every time. User files are overlaid over the boot image. Installing updates creates a new image from which to reboot. Old images are kept in case of failed update. Prevents some hacking too.
There's more than one way to communicate truth.
You said the government paid half the costs with even more for poorer people. When did Rothbard advocate for that?
> No, a free market is when people are free to make transactions with whoever they please. Big companies are just as free market as mom & pops.

Not really. A company that's big enough to be (even a regional) monopoly forces people to transact with them by virtue of being the only game in town. The question is whether this is a continuous gradient from "more free" to "less free" or more similar to a step function when a company reaches monopoly status.
Ask HN: Question about “preferred shares” vs. “super voting shares”
I'm raising capital for a startup for the first time.

At my startup we currently have 2 classes of shares. Class A is a "super voting" share with 10 votes and Class B is a common share with 1 vote. Pretty standard nowadays.

I understand VCs want to buy "preferred" stock with liquidation preferences. How will that work into our dual-class stock system? Will we need to create a Class C share for VCs for the preferred stock? Or is it a special type of stock which does not require a new class of shares to be implemented?

Also, some articles I read say that preferred shares have no voting rights, is that right? Does that mean VCs purchase shares with liquidation preference but with 0 voting power?
Part days are in both, so any part day is counted as a full day in Schengen. Crossing a border means you lose a day.
Romania is another EU country you can use to reset your visa timer.
Existential threat is different than good old fashion competition tho. Our businesses are clearly no where close to USSR level folly and “pretend”.
Even most smaller shops offer short and long term disability that is either free or reduced cost.
Culture war topics will naturally get optimized by these algorithms due to engagement etc.

Thus the removal of content restrictions alone would be enough to push these to the top, so this alone is not interesting.

I'd imagine the CCP would find the discontent these videos sow to be convenient, but despite that perhaps it would result in net positive if workers wages rise and wealth inequality gap falls.

Tbh I'm more concerned about the algorithm promoting vapid entertainment dumbing down the next generation while apparently in China educational videos are more promoted.
And yet it's still not a good measure. Most businesses succeed on luck and connections. A person's worth is contingent on neither.
How were you able to write a book, I mean it's a lot of writing. How long did it take you to write the whole thing. Did you use some special program? How did you publish it? How did you plan your lessons or chapters?
State support of specific corporations extends beyond QE (bailouts). The entire money-creation apparatus favors large corporations due to cantillon effects. In high interest environment, corporations can collect interest on deposits at the Fed (newly created money). during low interest environment, they benefit from people taking out loans (also newly created money) to push up their stock prices.
USA:

> International Visitors Must Continue Verifying COVID-19 Vaccination Status

https://www.precisionvaccinations.com/international-visitors...
It’s not because girls have higher grades and test scores (which they do)?
> but today I would need to make about 1.5x more to afford a home here.

but there's no reason why you'd expect that the price of anything would stay at the exact same ratio it was 30 yrs ago.

The increase in prices of real estate is demand and supply driven, which implies that way more people got way more richer than you in the intrim 15 yrs. And not to mention some bad gov't policies that prevented an increase in supply, while demand increased, and you see high prices.
The recruiter failed his/her job for not being upfront about this.
Running Advent of Code on a $2 microcontroller
By writing a novel, there's no way to determine what the truth was, and no way to challenge it. This is why historians do not write novels.
OpenBSD KDE Status Report 2022
> feel like tech, finance and maybe law are the only corporate careers where it makes sense to work really hard

Cut tech from the list. Job hoping is the way to get wage increases, not working more than you are payed to.

In law and finance there often are kickbacks from sales.

Learning really hard might pay of in tech.
Except be elected. See Bloomberg and Jeb bush etc.
There is always someone who will make their lack of forethought into your problem. As long as they can override pushback with a little bit of social engineering they will never learn.
My entire department is remote. My specific job requires some amount of travel to company’s sites, a lot of conference calls, presentations, etc. Some of my customers require US citizenship (government contracts) and many more have data governance requirements that don’t allow offshore workers.

Andy Jassy, the former CEO of AWS and current CEO of AWS, has said repeatedly in public statements that less than 5% of all IT spend is currently on any cloud provider.

There is a long way to go
I meant I'd support the former group of countries, but it sounds like you're saying that that made you distrust the US to the point that you'd support the latter group. Is that correct? If so, does that mean that you oppose, e.g., this resolution about Ukraine? https://digitallibrary.un.org/record/3994052?ln=en
Invade Russia in winter? Nah probably not.
It kind of did, as proven by subscriptions, SaaS and digital stores as means to be paid.

Which only works for products, not component libraries.
Ford was in early enough that RFC 1918 wasn't a thing, and those address were used internally, using something else would have be rouge.
If I recall Ford also had 20/0.0.0 at one point in time as a dev/staging network.
Source: working at ford in 96 and they had been on IP networking long before I arrived.

Same with General Electric and the 3.x. It was sold it to AWS a few years back, introducing the burden of internal re-addressing.

Before cloud providers/FANG behemoths, these were some of the largest networks around.
They do work like that. My house was raided as part of an investigation. It was about two years after the search that the DOJ indicted me for conspiracy to commit copyright infringement..
> That does not apply to safety critical code.
"Just crashing" a system in (for example) a nuclear power plant is not an option!
Or imagine, the controller of your car breaks crashes at some critical point in time and you can't break until the system rebooted.
Of course all code paths need to be tested. That's an obvious fact.

That’s one strategy. Another strategy is to run parallel controllers and using majority consensus. Distributed systems tells us that provides better guarantees but you have to design your system better instead of your code to avoid coupling (eg so that bad sensor data doesn’t take down multiple CPUs you need to basically duplicate a lot of your electronics). Safety critical systems should probably also be using formal proofs but that’s a secondary thing. However, on net that hardware duplication is probably a fraction of the cost and building your systems to reboot quickly in the face of the fault and testing fault handling regularly catches entires swathes of problems more simply and cheaply.
Successful businessmen make their own luck.
People may have wanted to come to America in the past. Today they are choosing various alternatives because America is shooting itself in the foot with insane red tape in legal immigration. And good people don't want to come illegally.

It's so backwards. It is easier to enter illegally than legally.
The big problem with pipelining in http 1.x is that a response can break the pipeline part way through and there is no way to know what the server processed. A response night for example, mid pipeline be connection:close and that’s that, did any subsequent request get processed? Who knows.
I was laid off recently and would move to buy this, maybe seller financing. I've tried and failed many times to build something. If you change your mind let me know I'll take care of your legacy. myemailum14 gmail
The spec is actually pretty clear on this - do not specify a body on a GET request.

> A payload within a GET request message has no defined semantics; sending a payload body on a GET request might cause some existing implementations to reject the request.

Previously it was "SHOULD ignore the payload".

It's nothing to do with laziness or security - people are writing spec conforming software. And indeed every library I've used allows interacting with a body, even on a GET.
Australia mandates Covid tests for Chinese tourists
You can build cross platform single code base mobile apps with Delphi.

https://learndelphi.org/kiskis-the-crazy-social-network-for-...
Position with the most possible checkmates in 1
Yup the markdown knowledge app hah. It could very well be the experience on iOS is worse. I'm using it on Android with the Pixel 6 and it's smooth as butter.

For sync though I can't comment as I use syncthing.

edit: Actually you're right, now that you've pointed it out I do notice slightly higher latency and animation hitches. Goes to show if you know that to look for you'll find the cracks!
If you enter file system exhaustion (or a read only file system), most applications should fail similarly. You want to be very very careful to only add error handling for known failure modes you know, expect, have seen in production, and have test coverage for. Everything else should fail as gracefully as possible. Anything else is “safety theater” where you feel better but it’s totally illusory.

So yes, some applications should handle a file system full failure. I’ve written code where the file system code was problematic (an infinite loop causing 100% cpu usage is common because it’s a daemon). I still will take that because it was caught so early in testing and we had a clear repro case to go after to reproduce the problem, fix it etc.

The other huge difference is that memory allocation is everywhere. Technically, everything should be passing a memory allocator if the function might allocate. After all, maybe I want my container to allocate the next set of nodes somewhere else or at the very least I want to use a pool allocator for some scope of code. In practice, this too is too much even though it’s infinitely more practical and useful than failable allocations.

TLDR: memory allocations are qualitatively different enough because it’s hidden global state that’s used everywhere. If you’re not going to have a memory allocator passed into every function as an override able parameter, faillable allocations aren’t practically interesting. This was a lesson learned about a decade ago but it seems like there’s pockets in the community that still disagree and push back against this. I wish them luck.
I like that term. Caring too much is just as bad. You become a pita to work with and you can't relax and remain objective about things.
Liminal spaces in space. I like it.
This is a big country and nobody has their feet nailed to the ground.

Your local supermarket may be the only one in your village, but the next village is easily attainable. Something being more convenient doesn't make it a monopoly.

I grew up in the Air Force. My mom would always shop at the base PX because it was cheaper, and sometimes it was a 30 minute drive away, passing store after store to get there. To make the drive worthwhile, she'd buy 2 weeks worth of groceries at a time.
Really cool project! I always thought the most important thing about home security alarms is calling the police and filming the outside and inside of a house while transmitting the video feed live somewhere.

Reading this post I was coming up with so many questions.

1. Shouldn’t there be a way for police to turn it off?

2. What are the legal consequences of the alarm accidentally firing and disturbing the neighbors at night?

3. Do sound alarms deter only small burglars?
>In my experience, the smarter someone is, the more entitled/bratty they tend to be (especially to service workers or people they look down on).

That is totally contrary to my experience. Maybe I hang out with good people... or maybe my friends and I aren't as smart as I thought :P
Nah, software is weird because they so rarely ask people to do anything related to the task at hand. "solve a toy problem without using libraries. Please don't paste off SE/AI".

I prefer to actually think about what I want and devise a problem set to work through with the last candidates. You know, "here's a simple TCP server with a minor bug in the handler for one packet. Let's fix it". Real job: here's a 100k LoC server. Add a report/packet type/etc or fix a bug...

Uses up my time as well as theirs, but shows me a lot about how they work as well as what they'll be like to deal with.
> At my startup we currently have 2 classes of shares. Class A is a "super voting" share with 10 votes and Class B is a common share with 1 vote. Pretty standard nowadays.

That only works if your CEO is a superhero. Just because Ford, Google, and Facebook did it does not mean you can.

There was a time when the NYSE wouldn't list a stock with more than one kind of share, but they caved on that some years ago due to competition from NASDAQ.
Rising fuel prices led to greater consolidation of shipped goods requiring larger loads before they are sent out for delivery. You may have seen the rollout of the larger Amazon vehicles which are practically indistinguishable except for the branding from UPS vehicles. Amazon had said they were going to start doing this even before Covid-19. Now they are in the final stages of becoming another UPS with an online storefront.
46% of the US GDP is government spending. Not so far from a majority that you can cast aspersions at other countries? Then again, my socialist New Zealand is trying to catch up with 42% ;). The figure given for Russia was 38%, which feels out of whack: who can trust GDP numbers eh?

https://wikipedia.org/wiki/List_of_countries_by_government_s...
Boss makes a dollar, I make a dime,

That was a poem from a simpler time.

Boss makes a thousand while I make a cent,

And he’s got employees that can’t make rent.
I would argue that prices are not zero, they're just not paid in dollars. Ad-supported software is effectively a barter economy where the consumer does not know the true value of what they're trading away.
I've been having on and off conversations with my manager and her manager about career aspirations. I'm at a terminal level, so I can hang out where I'm at as long as I want. What I didn't tell my managers is the promotion game sounds like a lot of work for 6 months to a year for a possibility that I'll get a job with more work I like less and somewhat more pay. You also start running into the issue where big companies only need so many super senior engineers, so you can't play that game forever. You're also playing it against people who will play it forever because the title means something to them.
or you can create view for every table that supports soft deletion and ensure all of your read-only queries are using those table

CREATE VIEW current_customers AS
SELECT * FROM customers where deleted_at is null;

SELECT * FROM current_customers JOIN ...

Of course, this comes with its downsides e.g. views need to be recreated in every migration and there might be some complex join operations that might not work.
Liminal hyperbolic hyperbole in space
We did something like this, by using postgresql's `set_config()` before every transaction. The trigger functions can read that value using `current_setting()`. It works for us, but for a relatively low-traffic internal application.