skysight-inc/HackerNews huggingface dataset:
Sorry for your loss friend.
The interesting part is who is not on the list e.g. HoYoverse.

It has been speculated by many that this is all about Unity Technologies wanting a much larger share of the billion dollar profits of the gatcha games based on Unity.

If all indie devs quit Unity, but HoYoverse (the company behind the money printing press "Genshin Impact") does not, it would still massively increase the profits of Unity Technologies.

Of course because we are literally talking about billions of dollars on the table here HoYoverse & Co will probably all try sueing first.
They would care of projects like this generated broad awareness and organized revolt from consumers.

Companies need adults in the room to keep them from behaving badly. This operating under the observation that they behave badly when not being watched, so a thesis to be tested more than an assertion of fact.

At a minimum they arguably behave worse when there are no consequences, hence inflation becoming air cover to raise prices when prices weren’t being raised before as there was no “good reason” for them to go up.

I love this project. “Index data” projects like this seem ripe as a category, especially with AI and Ml systems providing ready observability on changes and trends.

The question is how to get enough conclusions and salient observations that spur people to the social science outrage factor levels so that they take action.

Or perhaps we should just accept that companies will use these technologies to optimize everything against consumers and not deploy them in counterinsurgency resistance-style whitehat fashion.
You could probably still fudge out of this depending on what exactly was replied.

You could elaborate that the initial pen test was one of those self trigger ones and not an external or "professional" type. Hence you do not have any documents regarding it anymore. Although not ethical the company would see this as not a acceptable metric and dismiss it when evaluating. Your written statement although a lie would not be considered fraud if it didn't get considered in evaluation. I am saying basically make your written statement worthless.

Eitherway you need to make it absolutely clear to the CEO that is as far as you will go an he may as well hire an actor to represent engineering if he wants you to lie as the actor would know as much as you about a fictional pen test.
I've had this notion too. The kicker is, as always, cost.
The OP sounded like he was actually interested in putting security concern's on the company's strategic agenda. So the "trouble" might be beneficial.
>I'm also reminded of the classic story of the pottery teacher who graded one class by final project quality and another by total weight produced over the class period, and found that the latter group ended up producing higher quality work. Higgs in this article seems to be of the persuasion that in his profession, the former style produces better results. I think many of us here would find that intuitively wrong in general.

Wait, how is pottery equivalent to significant expansion of the bounds of scientific knowledge? Humans mastered the contours of pottery thousands of years before farming was a thing, we have no such bearing wrt scientific knowledge.
> Claiming executives knew what they were getting into is pure conjecture.

Schrodinger's executive - when things go well, it's because they meticulously planned every detail. When things go wrong, suddenly they know less about their business than my grandma does.

What is the cause of this habit of making up excuses for people that get massive compensation but never take any responsibility?
Masked 'boot girls' are freeing booted cars in Atlanta
You can 100% tell the truth and be misleading. And why should this person put in that effort? The directors will throw them under the bus in an instant, and in fact are probably planning on it.
Online browsing for one. Gaming... If you don't think you'll profit from the performance, don't buy it.
What company was that? I feel like I read this story in the news a few months ago...
What I'm seeing is that the gatekeeping mechanism artificially restricts qualified candidates from passing the interview tests and the reduced supply of employable candidates causes the compensation of companies practicing leetcode interviews to rise instead (and it makes you bitter because you think you're better than them).

I'm also seeing that given hiring leetcode-trained code monkeys seem to be working fine for the FAANG companies that practice it, perhaps they don't really need that many "real engineers" that can come up with creative solutions to problems. If that's the case they're just hiring the kind of people they actually need the most, and the accusation of "discrimination" doesn't really hold.

Anyway, what I originally objected to was your allegation that reading books and learning standard solutions don't allow one to acquire skills and your attitude that applying standard solutions is something beneath you. I totally understand what you're objecting to (I find leetcode style questions sub-optimal, and when I'm on the interviewer side I don't do it, and that's a competitive advantage for me when everyone else is competing sub-optimally), but unfortunately I am not quite sympathetic to somebody who thinks to familiarizing oneself with standard solutions is beneath them.
Remember how Cuban made his fortune. He didn't build something great. He built something worthless and pawned it off on the dumbest guys in the room at the peak of the dotcom bubble.

Maybe that takes smarts, but not a kind I value.
> Don't come up with new definitions for words and then get offended when people point out that you're being silly.

I think some introspection may be required here.
> Zoomers cant torrent and they are too poor for streaming and they dont know there are free streaming sites based on http protocol.

A bit blunt, but yes. The perils of "automagical."
Indeed what I expected. It should have been titled "The Next Gen Servers Powering Let's Encrypt's Database"
or the go one:

$ go run github.com/eliben/static-server@latest
Kinda the other way around. California has a law that states such contract clauses are unenforceable. I could show you that. Washington State does not.
Dealing with URLs un safari on ios is a nightmare!

I’m surprised that sharing tabs to a mac isn’t built in to the ecosystem. Ironically, firefox synch does this just fine
I think it would be even easier to charge for tiers of software instead of the rent-seeking until the end of time.
The conduct to this point was wrong. At best we're talking about an undocumented, out-of-date pentest that the writer doubts occurred-- and whatever occurred would not be recognized as a pentest under current industry standards. Sounds like an interesting conversation with the client, director, and possibly whoever runs the company. If the company adds to that performing an actual industry-standard pentest-- which it passes easily-- perhaps its reputation does not receive the hit it deserves. If the software doesn't pass, might be simpler to withdraw the submission than proceed with the meeting.
> Do you not mean "where we could volunteer [ourselves]"?

Sort of. I meant where we=family could volunteer members of the family.

Me and 5 adult sons live together. Everything is shared (resources, decisions) and 'we' winds up supplanting 'I' a lot.

To reduce confusion, I can be more mindful of pronoun use. At least until the new economy makes our arrangement widely familiar.
It is recursively ingrained into the current spacetime data structure itself [1]. So no wonder.

[1] https://www.youtube.com/watch?v=RCSSgxV9qNw
Why Is 1/137 One of the Greatest Unsolved Problems In Physics?
Looks like they are showcasing the output of the compiler, not the hand written SQL.
I have literally worked alongside external pentesters for some of those organizations you allude to. I still remember their codenames.

They might have the scale to have internal pentesters nearly as isolated as external pentesters. A ten person startup definitely does not.

Regardless of what tools you use, an internal pen test isn't the same. Do internal accountants use different tools than KPMG? Probably not.

The RFP likely did contain more precise language.

I encourage you to reflect on your position. It's very odd to me that your attitude is, "if the customer didn't want to be lied to, they should've tied me down better, because I'm like a djinni who will twist your words against you if there's the slightest ambiguity." I understand the sentiment that RFPs and contracts need to be locked down. I don't understand the sentiment of, "they had it coming."
Ah, I see. Maybe you're just losing beginners who NoScript then. I hadn't figured out what the Playground was supposed to do but it turned out there was an extra disabled script.

Nevermind, thanks.
Well if they refuse you can't really force them, they might have legitimate reasons to turn clients away but I agree that this is not efficient and since you cited mindfactory I add that in Italy in the hardware business there have been many popular companies with competitive prices that were shut down by authorities for tax evasion.
It is indeed true that we have a lot of supermarkets in Austria, which might make logistics more expensive. But nobody ever explained why we need so many supermarkets from just 3 chains (REWE, Spar, Hofer - everything else is neglectedable). My only explanation is that the big 3 want to squat every possible spot to keep competition out.
The other argument from the chains is that they are forced to buy brand products from Austrian distributors that are more expensive than German ones due to lack of volume (think of making a wholesale contract for M&Ms with Mars Germany, not Mars Austria). Again shady argument, because they could have sued against these practices years ago.

Germany has the luck of being a big country with scale effects and healthy grocery store competition.
I am a bitter taster. It took me years of having chocolate in my coffee to work up to a latte. And even then I tended to adulterate it with hazelnut.

Cold brew is better, but not as much as afficionadoes sold me on. I can still taste the bitters.
Doesn't mention if they're running Linux/what flavor they're running. I personally would be wary of running OpenZFS in production on Linux, especially ZFS on root. It has bit me in the ass too many times on Debian with an update breaking DKMS and rendering my system unbootable.

Also, it's very, very strange/worrying to see no mention of disk encryption anywhere in the post or the tuning guide. For a company with encrypt in the name, that is responsible for the majority of trust on the internet, WTF? That should be highlighted in their benchmarking. ZFS supports native encryption, MariaDB does encryption, how are they encrypting at rest/transit/use?
> 4. Using a keyfile is optional and IMO don't see how it adds any security benefits to the master passphrase.

I believe it fulfills the same 2FA role as does the Secret Key in 1Password <https://support.1password.com/secret-key-security/>: combining something you know (passphrase) with something you have (keyfile/Secret Key), thus making a potential Dropbox breach (or wherever you store your .kdbx) not subject to offline dictionary attacks -- err, unless you also stored your keyfile in Dropbox in which case, yes, it wouldn't add any security benefits
I think Todoist (and others) have Chrome extensions?
On the contrary, it's very similar - you share a keyfile to your friends in a different city and then you encrypt your password safe with that extra keyfile that hasn't touched Dropbox. This solves the threat model issue while also relieving you of the pain of syncing the password safe (in this case syncing is even more convenient than your same-city-physical-visit model)
No idea what algorithm it uses, but if you want to be fancy, pass each fragment of the encrypted file thru a DFT, and save each k-th frequency into a separate file. Such a file will appear as an image with a curious pattern, or an audio file, so if anyone asks, that "4 wav" is music. What's interesting is that 1.wav and 2.wav (and other k.wav) will be nearly identical, so they can be put together into a 7.1ch audio stream (if splitting into 8 pieces). Bonus points: apply flac encoding on top.
Indeed. That translator, Tom Gally, is also a Professor at the University of Tokyo and a regular on this site: https://news.ycombinator.com/user?id=tkgally
I'm not sure what theory of inflation you think I've presented, because I haven't presented a complete one -- I've only offered an explanation of how already-high inflation enables corporations to become less price-competitive, which makes inflation more volatile, and you will find the same explanation in mainstream economics and central bank publications. (I did explain why it isn't continuous). It doesn't make any attempt to explain what instigates the inflation to begin with, which could certainly be caused by a spike in deficit spending, or a natural disaster that reduces supply, or a trade embargo, or a war, etc.

Inflation isn't a price increase in one item, but the scenario I presented above does not create a tradeoff between one item and another; it can apply to any and all category of manufactured goods or services where efficiencies of scale apply. Macroeconomists usually assume only a single fungible good anyway (a "widget").
If your exposed services use authentication and you use strong passwords you are no worse off than any small business but you have the advantage of being a lesser target.
Kernel SMB Daemon (Ksmbd) Finally Reaches a Stable State
i’m totally a hacker, i hack things
> Not if the government keeps building new housing like this article is mentioning. There will always be supply.

The speed of building is limited and may be below demand.

Often in conclusions like this a particular trend is getting extrapolated outside of the applicability region, becoming invalid.
Yeah, rather than take a reputational hit, they've now got a reputation for paying ransoms to hackers. They will now be targeted by more hackers wanting ransoms.
Little Free Radio: An Open Source Radio for Cubesats
Show HN: FalkorDB with Bolt and Vector Index
Big tech has a significantly larger and more lucrative attack surface. Do not mistake size for competency.
The parent comment was referring to lots of other recent “scandals”. I was more referring to them.
You're probably right, but when I put myself in the game developer's shoes I can't think of any other way for me to touch Unity again.
I looked at hole.io vs donut county. I have played neither. From app store descriptions, hole.io looks like a casual mobile game and donut county seems a polished and complex product, with storyline and quality art.

It reminds me of 2048 vs threes. Thing is, sometimes I prefer a casual game.

The copying is still poor taste, I agree with that. At the same time the titles can be different and respond to different market needs.

I’m not sure what to think of that or about the industry as a whole. Especially since when I searched donut county on the app store, there were more copycats.
> banning cruise ships is more realistic then passing the more nuanced taxes that would correctly penalize these negative externalities.

This seems like it can't be true. Banning cruise ships in a port or region seems exactly as easy as taxing them some big quantity for fuel burnt for the entire cruise.
I don't say it is impossible, not at all. But I question if it is completely made by hand like shown in the video, or if there perhaps are CNC machines or laser cutters to help, but not shown. For example, the holes line up so well even though they are hand drilled. I wonder how he can achieve the needed precision with just eye measure.
Appears really explicit - thanks!
This article seems to be rehashing another one at DL News:

Mark Cuban loses $870k to a crypto scam: ‘They must have been watching’
https://www.dlnews.com/articles/people-culture/mark-cuban-lo...
You don’t get to force your preferred definition of the word “engineer” onto the world. Even less act like it’s obvious that it must be that way.
I mean, how can I argue with krapp about shit? I’m out of my depth clearly.
> But the government dragged its feet in paying, and the project got underway only in 2010... Just four months later, in 2011, Libyans marched against Colonel el-Qaddafi’s 42-year grip on power... In the tumult, work on the dam ceased...

You yadda yadda'd the part where NATO destroyed the government.
> JSON columns (as a last resort)

This is the design-time escape hatch for me. The remaining 20% space of unknowns can usually be dealt with here. As long as the most critical tables, relations & properties have been set in stone, I would find it reasonable to allow a "ExtendedPropertiesJson" column in limited areas of the schema.

Over time, these JSON blobs should be refactored into the schema as features become more stable.

The key is to have a solid relational model as the foundation. You cannot really do it the other way around.
It should be about rights, and defending people's rights. Not sure what happened if I look at my own country, and a few countries I've lived in. There seems to be more of a herd mentality. Stick to the herd if you want to be safe.
If it's like the UK, there is so much "shrinkflation" (reduction in product size [and cheapening of ingredients]) that prices comparison is going to need per gram pricing. Identical looking packs now have extra air gaps: inflated chocolate bar wrappers, ice-cream cones with a 1cm gap below the lid, butter cartons have a recessed base, packages that formerly had straight sides now taper, etc. ... lots of these "tricks" already existed but they're being used more and more.

All the supermarkets have full inventory databases, they could send you an updated price list of every product every five minutes at basically no cost. This smacks of a legislature don't/won't seek advice from experts. It's a start I suppose.
How does that work when the employer puts you in a position where you must provide an answer, the expected answer would involve commiting a crime, and the only alternative is to tell the truth? Whether we like it or not, employers have a lot of leverage over employees. Arguably, it is one of the reasons why employees are paid disproportionately less. Such protections should exist.

I'll believe youbif you claim they don't. I'm not an American, nor do I work for an American firm. On the other hand, I do find it ironic that a country would tout law and order while not providing the means for individuals to uphold that ideal.
relevant: https://news.ycombinator.com/item?id=37500895

The "hang up and call back" defense also would work with your "wife clone attack" too
A stint in customer support cures this attitude. It’s a special person who can survive that for a career.
Huh I threw together something like this a few weeks ago using asymmetric keys - pass a file and key and it output as smaller encrypted files.

Only way to decrypt them - have all the files and the key.

Didn't think it was that useful but seems similar to the functionality, but I like that you don't need to share a key here.
Operating system is intended to take care of tasks and hardware interactions. While browser acts recently as an OS itself, this exaequOS is at least an OS in OS in an OS.
Refusing to commit fraud is, in general, not legal cause for termination.

He likely would have a wrongful termination case, depending on state whistleblower statutes.
This, if true, is fascinating and more than a little scary.

I'm imagining a situation where someone can somehow send the apoptosis signal to every cell in my body.
Candidates are evaluated on their circumstances and goals and then we develop a plan to achieve goals that are within reach. We basically get affluent kids into reach schools.

We cant get a C student into and ivy/ivy-like school but our clients have admit rates many times the 4% of the typical applicant.

These selective schools market and work their selectivity knowing many applicants will apply for vanity reasons with no real hope of admission. A high selectivity also helps with rankings from places like USNews.

In addition to SAT prep and tutoring, we guide applicants on how and where to volenteer, what clubs to join and avoid. We guide them on when to submit their ACT scores vs their SAT scores and when to withhold them on and institution by institution basis. We work with them to cultivate and leverage the alumni relationships they have or help them grow them. We guide them on what to highlight in their family background and what to avoid. We help them get recommendations from people the colleges trust and value. We edit thier application submissions and resumes. Once clients get an offer we help them negotiate financial aid. Overall you might think of us like an actor's agent or manager.

Do less deserving candidates get in? That is a little hard to say because of the financial dynamics at play. There is no level playing field here and showing a client in the best ethical light is what we do. In that sense we make average candidates look like great candidates and they takes spots away from less polished gems. I guess in that sense yes.

Most client families are looking for the relationship network that an ivy-like school affords and that is what they pay for. It would not make sense in my mind to use a service like this one to get a student into a "slightly better" degree specific program. For some, money is no object and they might pay us to get them from CMU to MIT but most are looking for relationship building opportunities that lead to partnerships.

Most candidates want entrepreneurship opportunities or tracks in business, business tech or law that lead to partnerships. I'm not sure we have ever worked with someone who wanted to pursue women's studies.
> Other than the basic human trait of greed and gambling, get rich quick schemes, criminal and nefarious purposes, etc I have no idea how any of this is still a "thing".

I think you asked and answered your own question. It's still "a thing" because people still speculate on it. In particular, people gamble on it being more of "a thing" in the future.
Cf. https://en.m.wikipedia.org/wiki/Anne_Greene
python 2 and not 3
It’s not clear what your expectation is. It’s quotes from people so even if they name them there isn’t much meaning to it.
Harder questions need to be asked regarding how metrics tie to actual objectives. Just because I have a chart trending in the right direction is meaningless. “Number of papers published” is not a good metric.

We need more trust and fewer metrics / games. The thing I really don’t want to pay for (as a tax payer) is the bureaucracy in the middle of all of this.
That sounds like a very reasonable course of action. However... given the circumstances the author is in, I don't think his director is the type to schedule a pen test and then wait for all the violations to be resolved in order to get the contract. (I assume the client, as a government entity, is legally required to obtain a minimum number of bids for contracts and make a decision in a timely manner.)

Lying and fraud aren't the same, which is the author's concern. Lying incurs a social cost. Fraud incurs both social and legal costs.
Since we're sharing implementations, here's mine:

https://francoisbest.com/horcrux
I think you don't understand what you just quoted. But yes, you should introspect about why you're being silly about trying to redefine a word and then getting offended over it.