skysight-inc/HackerNews huggingface dataset:
But users are constantly providing the master password to use the application normally. The only complaint is that after first providing the master password to cause the application to decrypt the document, the application decrypts the document, and if someone has modified the application to do other stuff after decrypting the document, it does that stuff.

They're proposing that the author change the application so that it pops up a dialog whenever the KeePass application is directed to export the decrypted document.

I'm not a KeePass dev, but with a bit of search and pattern recognition, it looks like this export feature is implemented in KeePass-2.53-Source\KeePass\DataExchange\ExportUtil.cs:

public static bool Export(PwExportInfo pwExportInfo, FileFormatProvider fileFormat,
IOConnectionInfo iocOutput, IStatusLogger slLogger)
{
PwDatabase pd = pwExportInfo.ContextDatabase;
...
// [IF CONFIG FILE DOESN'T ALLOW EXPORTING WITHOUT KEY]
if(!AppPolicy.Current.ExportNoKey && (pd != null))
{
// [THEN ASK FOR IT AGAIN]
if(!KeyUtil.ReAskKey(pd, true)) return false;
}
...
Stream s = (bFileReq ? IOConnection.OpenWrite(iocOutput) : null);
try { bResult = fileFormat.Export(pwExportInfo, s, slLogger); }
finally { if(s != null) s.Close(); }
}

They're complaining that an evil maid attack can turn off `AppPolicy.Current.ExportNoKey` and set it up to export the document silently. They want it to read:

public static bool Export(PwExportInfo pwExportInfo, FileFormatProvider fileFormat,
IOConnectionInfo iocOutput, IStatusLogger slLogger)
{
PwDatabase pd = pwExportInfo.ContextDatabase;
...
// [ALWAYS ASK FOR MASTER PASSWORD AGAIN BEFORE EXPORTING]
if(!KeyUtil.ReAskKey(pd, true)) return false;
...
Stream s = (bFileReq ? IOConnection.OpenWrite(iocOutput) : null);
try { bResult = fileFormat.Export(pwExportInfo, s, slLogger); }
finally { if(s != null) s.Close(); }
}

They've even gone so far as to ask the author to create a "KeePass Essentials" version, which removes the export feature, plugins, and configuration files entirely:

https://sourceforge.net/p/keepass/feature-requests/2704/#b3c...

But they ignore that with write access to the application directory, an attacker can just change the application to not show that dialog at all.
Early in my career I got to meet Pat Gelsinger so I know firsthand he's smart, very energetic, and he has been in IC engineering since masks were cut from Rubylith. He has all the background and knowledge to do the right things.

But what I have heard so far is scattershot: Be proprietary, be open, be exclusive, be a foundry, own an ADAS company, be nowhere in cars but wish you were, etc. Totally unsurprising to find that leads to starts and stops like this one.

Intel had a recipe that worked. It no longer does. Intel needs a new strategy as coherent as the old one but that fits the modern environment.
Perhaps that's what the speaker intends but not what affected listeners are likely to hear. In the west, it's the speaker's responsibility to make themselves understood by the majority of listeners.
We use macs at my job, there is MDM software available. It's clearly tagged with a sticker on the back, which I assume goes back to some entry in the MDM software, and even though I use a personal Apple ID (I created a new one for this purpose but same end effect) I have no doubt they could press a button to brick the machine until it makes its way back to them if they really had to.
I believe your MDM solution should be able to set up a corporate bypass for this as well as allow you to remotely locate the device:

https://docs.jamf.com/jamf-
now/documentation/Using_Activation_Lock_Bypass.html

Another approach is to just let employees keep or buy out their laptop when they leave as a benefit. The cost of a MacBook isn't that huge relative to a tech salary.
Religious and spiritual folklore surrounding programming
Chick-Fil-A Hit with Class-Action Privacy Lawsuit over Video Data Collection
The challenge with Oracle is this: They easily let people who are unaware in a company install software (happened in the past with Virtualbox to me) and extensions and then after some time do a license audit.
Egypt unveils tombs and sarcophagus in new excavation
What if someone had ChatGPT level text models 20 years ago, and decided not to pursue their development? Was that "saving the world" from the evils everybody predicts for AI, or was it robbing the world of the good that software could have been doing all this time?

Athletic accomplishments are almost always individual in nature and shared vicariously if at all; they can inspire but rarely can they actually impact the lives of others. Does that give them more license to be themselves, or less?

(For the record, I think the individual owes themselves peace before they owe society any performance; but I'm aware others may reasonably have different opinions)
I understand and sympathise with that.

If you do find the documents though, please consider just scanning them and uploading them to Internet Archive and posting the links to HN. That way someone else in the future can find it and decide if they want to do the manual re-typing etc themselves :)
The video game equivalent of a live show vs. an album.
Ask HN: Terminal Cheatsheets
At my first sysadmin job 2 years ago, my colleague showed me a great Linux cheat sheet with tons of different commands. It was similar to the one on devhints.io/bash but looked more dated and had more commands.

I miss it so much and regret not saving the url for the future. I tried to find it (or a suitable replacement) multiple times and failed.

Please show the cheat sheets you are using!
Know of anything like this that can do EDM/House music?
> I don't think C++ programmers in general are worth chasing. If they stuck with C++ for such a long time, it means they are used to it and accept C++ with all its flaws

People don’t use C++ because it’s convenient and easy, they use it because it’s one of the best widely used options/ecosystems if performance really matters.

Any other language targeting this space has to chase C++ users because C++ is so prevalent. It would be like coming up with a new general purpose dynamic language and not appealing to Python users, or a new stats modeling language and not appealing to R users.
Remember during the crypto boom and companies stock would pop on PR that they were accepting crypto payments. There were even companies that were wrongly attributed to having moved into the crypto space and still got the pop.

I wonder if ChatGPT or AI is next.
Oh I see. That is very different.
It's not that simple. The law recognizes that when signing a contract there is a power-imbalance between employer and employee. It would be different if the contract was written by the employee and signed by the employer.
Louis Rossmann says they shred them and recycle the raw materials so that nobody can resell for repair.
> what "use boring tech" means.

Of course we do. It means you use Node 16 instead of 18 because it’s LTS. 2 whole years of support!
> People move cities, sell houses, buy houses, give up apartments, plan their finances, and plan their career around their job all the time

Then those people are naive. I never plan my life around an employer. I plan my life around my employability. I wouldn’t move somewhere that there weren’t other jobs in the area. Well now I wouldn’t work at any company that wasn’t fully remote
A big one is missing in this article: The clawback provision.

In 2011, when Microsoft bought Skype for $8.5 billion (that’s a B), some former employees and executives were outraged when they found that their equity was worth $0 because of a clawback in their equity documents.

“The only mention that the company had the right to buy if he left in less than five years came in a single sentence toward the end of the document that referred him to yet another document, which he never bothered to read.”

https://stockoptioncounsel.com/blog/standards-ownership-cant...

https://www.forbes.com/sites/dianahembree/2018/01/10/startup...
Right, and they are absolutely an exception.

The general expectation for any company is to milk the daylights out of every quarter they can. Either put your money back into growth or hand it back to investors - cash reserves bad even though they obviously allow you to weather things (like we’re discussing here).
Laravel all the way. It comes with all the basic functionality I would need and tons of packages for almost any scenario.
I wasn't trying to insult you and I meant no offense. I was amused because I couldn't tell if your writing was computer generated. Your paragraph contained a level of exuberance and enthusiasm for VR that I share but don't normally see on HN. I like ChatGPT and I like your writing style when it comes to VR.

I would be happier with VR that was all done on a high powered desktop computer where the headset is just two high quality screens tethered to the desktop computer. I see the problem as trying to put all the processing power in the glasses so people can move around. I've done Sandbox VR here in the Bay Area where I can walk and spin and it's amazing. I'm comparing Oculus to that and feel Oculus comes up short because it's a home consumer setup that has to be affordable.

I'm going to shop for the type of VR I want. I realized in this thread that that's what I need.

https://sandboxvr.com/sanfrancisco/
SAST: How code analysis tools look for security flaws
Io and Rebol both have homo-iconicity and a macro system. Would you call them a Lisp? No wonder Lisp is the most powerful language in the world, when all powerful languages are secretly Lisp – without even knowing it!!!

I mean, the name "Lisp" is short for "List Processing", it's disingenuous to claim that Lisp doesn't need runtime List Processing.

https://iolanguage.org/

http://www.rebol.com/
They’ll tell you that this is unchangeable, it’s the default, etc the first few times, but if you persist, they’ll usually just strike out a clause like this if they actually want to come to an agreement. They may not even bother telling legal (depends on company size).

Really it depends whether you’re negotiating from a position of strength and and can walk away, if you are changes like this become possible, if you are not changes are more difficult.
Ah, so you're just stretching or compressing the midtones "from the middle"? I guess a bit like putting an "S" curve in at just the right point.
Oracle would immediately sue that customer out of existence.
Ask HN: How long did you wait it out at your job for promotion?
how long did you wait/work in that opportunity before looking elsewhere?

whats your title?
Why would they rip "Java out of everything" instead of using a free SKD/JDK?
> I guess it's a reminder

I would happily sign a 1 page document that said, "I acknowledge that I have been reminded of my obligations under the document signed April 1, 2004 and been provided with paper copies of said agreement."
Web development as well, as it turns out (compile to wasm).
I thought Zoom's desktop app was Qt?
> It honestly sounds like an excuse to fire people. Or leadership has no clue.

Neither of these are true. The truth lies somewhere in the grey area between these two things.

> Who in their right mind would think they would continue to stay home and do everything online?

Hindsight is a helluva drug. Covid has made several lasting, possibly permanent, marks on society and our habits. Nobody could say what those were going to be.

The world is a lot nicer when you (correctly) assume that everyone is doing their best with the tools and the information they have to work with.
As a musician I don’t see these tools as competing with what I do but enabling me to do so much more. It takes a lot of time and money to create a professional recording for my songs and drum machines and synths just don’t work for Americana. These tools offer the possibility of backing tracks that sound like Willie Nelson’s band from the 70s but at a fraction of the time and effort.

I can’t wait until they get to the point where they’re more composable or auto-accompany given an acoustic guitar and vocal input.
If ChatGPT was a real life person he'd be locked up for being a swindler and a con artist.
Being natural does not make it safe. It is however a common food additive, and we’re talking very small quantities here. It’s really not the “toxic chemicals” as claimed by the OP.
Lightweight processes is explicitly not os threads in at least two senses: smaller footprint in memory, and no system call for every context switch.

It’s explained in many documents about lightweight processes, of course for elixir/erlang/beam but also for Go and Crystal and even going back to Solaris Internals and modern Project Loom for upcoming JVM situations
If you can prove you legally obtained the locked apple device, apple can unlock it for you. So this is a solved problem
As others pointed out, most likely stolen, although one legitimate case would be computers from a bankruptcy where the IT department was laid off and did not wipe the machines.

It would be good for Apple to have a bounty program to take the machines back and reunite them with the owner, possibly paying a reward to the finder. If the finder is the thief, they'd be taking a big risk of being fingered and arrested.
I think you need to broaden your thinking horizons here. The thought in the midst of the pandemic was that it brought ecommerce/payments to the masses who would otherwise follow their old routines. Thus the large hire. I believe the theory was that once everyone starts on this new routine of convenience it would be difficult to return to old patterns.

Your comment reads as someone who likes to look back on the past with all the knowledge of today as if it was so incredibly obvious.

That said there will be some significant knock on effects from pandemic that will be favorable for those companies however not as large as originally thought.
I would be pretty worried about the potential for the license cost to skyrocket over those decades
> You got many offers precisely because a lot of companies were (over)hiring

I got multiple offers when I was looking for a job in 1999, 2008, 2012, 2014, 2016, and 2018
A bunch of the original Java engineers went to Google, so they had enough say that they didn’t need to buy it.
Somehow the Exxon researchers made predictions four decades ago that are still accurate today.
A mate of mine was paying, say, $50/month for his gym, and had been doing so for a few years.

When he cancelled he was informed he’d actually been on a reduced rate based on an expected 10 year subscription, and as he hadn’t stayed 10 years, the price had actually been $60/month, so he now to pay a one-time fee of $10/month for every month he’d been with them, in order to be able to cancel.

Or, if he couldn’t afford that or didn’t want to pay, of course he could withdraw his cancellation and keep on paying his $50/month fee.
What i learn from Erlang, is, naming is hard.

What does `gen` mean in `gen_server` ?

Thanks for replies for "Generic". So this article is not well organized in that case. With some simple naming explanation, it should be obvious to guess what the system does.

Abbreviation doesn't save the writings.

Some more examples, in Ruby, instead of calling `implement Module`, it uses `include Module` . I do think include is not as clear as implement.
Ask HN: Should interviewees start asking their own coding challenges?
During the interview process, it's often said that the interviewee is interviewing the company as much as the company is interviewing the interviewee. Therefore, it seems fair to ask the company engineers to solve a programming question to prove their competency in an area that is important to the interviewee. If this became standard practice, I believe that we could start to fix the broken technical interview process that plagues our industry.
I think you are exaggerating.

> Very very very few companies are going to go pay Expensive Law Co. (TM) $500 per hour to review changes to the contrac

If they are already hiring "Expensive Law Co." then most likely they have them contracted anyway. Even with big corporations, there was never an issue with this. They were always happy to send my changes to their legal team for review and also allowed me as much time as I needed to review and consult my own legal team (if I had one).
It is in their and my interest that the contract describes the relationship in a way we both want and it is fair for both sides.

> "yes we totally understand but we have no power to change the wording in this contract we use for every single employee"

Had that too. Just be persistent and firm. "I can't sign the contract with these clauses in." 100% of the time they would eventually change their mind.
It may be bad for them that the clauses will be gone, and they need to show their employer they put up a fight and also it would be much worse to lose resource that otherwise was ticking all the boxes.
Short term they make more money if the only lose 9 out of 10 clients. But long term the loss in mind share might do a lot of damage. Java's biggest selling point is that everyone (or at least every enterprise) is using Java. If they manage to push people away they will just lose to C# as the industry slowly shifts to greener pastures.

Of course you can also make money on Cobol, and IBM presumably makes decent money on System Z mainframes. So in the short term it might be great.
sorry to hear about your friend. I know someone who got hit by a bike while crossing the street and hasn't been the same since. Bad things happen, the question is prevalence.

also, I don't think it's fair to say "the upside doesn't seem that big" when the vast majority of users report life-alteringly positive experiences, including Steve Jobs and many many others:

https://www.google.com/search?q=Steve+Jobs+lsd

https://www.google.com/search?q=famous+people+who+have+tried...

hope this helps.
Sometimes people pay because they have something from Oracle and the sales stuff throws Java etc. in/pushes hard. Those CIO/CEOs makeing the decision might not now that it's free. Or they are scared away by Oracle to use these. Or some external company does your IT project like EY. Or they got sold some Java extension by Oracle. And if you pay millions for the database, the Java costs might be trivial.

(Haven't payed myself for Java as CTO so this is pure speculation).
I haven't been reading here as long as you have, so I don't have your perspective. But:

As a reader: I don't think there's only one POV, but maybe because if a topic interests me, I tend to read the whole thread, or at least the first page. And reading deeply enough inside threads, I almost always see multiple POVs, interesting responses and somewhat polite disagreements. Almost every week there's something someone says which is very interesting, resonates with me, or (more rarely) from which I learn something new and sometimes unexpected.

But you're right, wading through comments takes time. I don't do this if I'm very busy. So some weeks I have just a single comment page open on my browser (both mobile and desktop) and I read through it in between things, 5 minutes here, 5 minutes there, until it's finished. I don't read anything else except the front page's headlines.

As a writer of comments: Writing a good comment takes time. Several times I've written a long detailed comment and then didn't post it because I felt I didn't have time to polish it enough. But not always. And reading through other people's comments also takes time out of this, of course. This personally is what reduces my participation.

I don't think having the threads collapsed would help me much. For me it'd be much of the same, I'd still expand them all anyway and read through them, hoping to see those comments that make it worthwhile.

As for dark mode, I don't care about it much. Personally I almost never use it in applications. In my mobile web browser I use the built-in dark mode when I read something just before sleep, but that's it. I personally prefer "warm light" solutions like flux or in recent years built-in OS solutions.

As for your references to the "Silicon Valley Coding Diaspora", that might have been (and still is?) the core audience, but imo the readers / writers nowadays are much more varied and international than that. Which is very important for me. I think focusing solely on "Silicon Valley" would be a waste for this site.
You forgot the JVM (and the tools built around it, so for example you can monitor / profile your app in production etc), and the massive galaxy of 3rd party libs that is the Java ecosystem.

Whether you like Java (the language) or not, Java (the ecosystem) will not go away. In fact, it is alive and well, and I would guess it is at least an order of magnitude bigger and more mature than the .net ecosystem.

If you don't like Java (the language), you can choose Kotlin (Java++), Scala (Haskell--), or other languages (eg. Groovy?)...
Is this such a big problem? Everybody must verify data anyway. Otherwise bad things may happen. Like evil ai apocalypse that scientist have warned us about.
'almost all ideas are bad'

This is not the way to look at it.

'Ideas' are too early to be judged as good or bad.

Ideas are fodder, they are there to be moulded into things that are good or bad.

Often ideas are just foils to help you think.

They are so contextual as well: 'full screen smartphone' was maybe only possible by Jobs, with that much direct and coercive power over engineers. Motorola CEO was not going to pull it off. But Apple did work with motorola to make a 'music phone' as an experiment.

I think your note about 'yesterday's ideas' is bang on.
Why would you need to sign anything when you leave?
“Have you worn your socks inside out yet? I heard its great!”

Its sad because someone will screenshot an erroneous article, that will spread as a random meme and some will not know the context due to it being cropped, before you know it a random fad of wearing your socks inside out begins and no one knows why except niche online users who reshare memes.

All because someone just took a screenshot of an article at its word without any hesitation.
Often a company will offer severance more generous than they are contractually/legally obliged to in exchange for the leaver signing some extra restrictions beyond what was in the original employment contract.
Intel's horrible quarter revealed an inventory glut and underused factories
It normally isn't that hard. The rock and fossil parts look very different. Go to anyplace where you are allowed to take fossil rocks and do it yourself. It isn't hard to visually see where the rock (limestone ends and the fossil starts. Any 3rd grader can do a reasonable job of separating rock from fossil. There are parks like that all over - most fossils are just another clam (or similar sea creature) of the same type experts have seen millions (billions?) of and so there is nothing interesting left to discover.

Note, do not let the above take away the work experts do. While a 8 year old can do it, those are the easy cases, and a few "hammer slips" don't matter. There is a level of detail that trained hands can do better. There are many types of rocks that can hold fossils, and not all are easy as limestone to work with (limestone is the majority though).
No, this shouldn’t be the case at all. Set this up with your family members if you want this to happen when you die. Give them your 1Password login and recovery keys or something.

I do not want anyone, least of all city hall to be able to unlock my stuff under any circumstance, including the one where I’m dead.
Management decided it was easier to hire c++ programmers.
Application directory and Application Settings directory are not the same thing, usually. (Indeed usually on Windows and Linux, the former isn't writeable to the user account without elevating privileges, the latter is)
And one comment up:

> From TFA, which you clearly did not read:

It’s a fair comment and callout in response.
Backend: NestJS + Prisma (DO NOT USE TYPEORM!!!)
Front-end: Next.js with TypeScript (for SEO)
Infra: AWS EB (t.micro) + Cloudflare