skysight-inc/HackerNews huggingface dataset:
At this point I'm wondering what happens if the EU invokes their malicious compliance clause, and tells Apple outright what to do. Will they just refuse and hope they don't lose the EU market?

I think one point lost in most of these conversations is that the existence of an open iOS will spawn a lot of "change your region to Europe" how-to articles in the rest of the world, creating an escape hatch from the walled garden (and finally a good reason to use a VPN), similar to what Apple keeps attacking sideloading for. Maybe they'd rather keep control of their other markets than be in the EU one.
Well these cases are completely different
Isn't “malicious compliance” the business model of Apple and most successful companies?
Even Apple implemented the equivalent of the cookie prompt — the mandatory “Allow App to Track” dialog on iOS.

So the idea clearly wasn’t all that bad. IMO the problem was that the EU law left it up to websites to police cookies, but it should be part of the browser instead — just like Apple’s tracker permission dialog for iOS native apps is part of the operating system.
New push in Congress to ban TikTok or force Chinese divestiture gains steam
>went through two instances of three-full-day versions of the author’s Monday meeting

Sometimes it takes more indoctrination than others to try and convince people that the social climbers who seek leadership positions above all else can be suitable for the job.

>Leadership Is A Hell Of A Drug

The concept makes sense, with "leadership-seeking behavior" manifesting itself strongest in those who have the greatest (yea, bigliest) lack of natural leadership ability, and who need some kind of a "fix" to supplement this deficiency. Kind of analogous to the drug addict and their toxic drug-seeking behavior which is not only self-destructive but damaging to everyone involved in one way or another, whether apparent or hidden behind closed doors.

And once they've gotten their fix they still can't perform as well as ordinary people who don't need some kind of artificial aggrandizement.
can you link me to such polls?
Apple’s recent behavior in Europe sure is perplexing to me. The arrogance suggests a kind of legal naïveté that a $2.6T multinational can’t possibly have. It must be a calculation. Do they figure Washington will pull strings to bail them out of their predicament?
> They only controlled the border and what goes in and out of Gaza

"only" is used here to diminish the suffering of the Gazan people. Israel has had Gaza under a brutal blockade, across air, land and sea. They control everything that enters or leaves, and infamously were so cruel they counted the calories entering Gaza [0] [1]. Israel even claims control of the air over Gaza, and prevents civilians from collecting rainwater [2] [3] [4].

Israel has been enforcing collective punishment for decades - they want that land, and they want it only for themselves.

[0] https://www.timesofisrael.com/israel-counted-calorie-require...

[1] https://www.nytimes.com/2012/10/18/world/middleeast/israel-c...

[2] https://www.amnesty.org/en/latest/campaigns/2017/11/the-occu...

[3] https://www.haaretz.com/opinion/2016-06-22/ty-article/.premi...

[4] https://www.aljazeera.com/opinions/2014/3/10/debunking-some-...
You can think of it as a "fail-safe" situation.

Being cautious here means "it's better to assign a CVE when it's not a vulnerability, than to NOT assign a CVE when it's actually a vulnerability"
> Typically, security researchers are held to higher standards when disclosing vulnerabilities. The expectation is that CVEs are assigned for ‘meaningful’ security vulnerabilities, and not for any software fixes that ‘might’ be a security vulnerability.

Maybe that's the aspiration, but it's clearly not the case in practice.

I reported a firefox bug 12 years ago where a malicious SVG could cause a hang - basically a 22-year-old XML bomb, adapted to SVG patterns. My bug turned out to be a duplicate of a 16 year old firefox bug.

No way of stealing user data. No sandbox escape. Not a crash that might indicate a buffer overrun. With a process per tab, it doesn't even crash the browser. It's just a file that takes a very long time to load - and it's not even an image type that user-generated-content sites like facebook and reddit allow you to upload. Reasonably enough, 12 years ago it was triaged as a minor performance issue.

Apparently in 2023, this counts as a CVE.
And a companion law: the more they string together, the more of an antithesis it is.
I've experienced startup acquisition as an executive and as an employee. Unusual travel is spot on. Our CEO was a frequent traveler, but the rest of the exec team rarely traveled. When 5 of us were all traveling to the Bay Area at the same time, the cat was pretty much out of the bag.
This is ridiculous. If you develop a game that needs to be available on all major platforms, Apple devices are a part of them.

Are you also one of the people, who would argue, that you can build you own road network, if you don't like the terms on the current road network?

Luckily it is not you who are going to work on these regulations, but people who actually care about free markets (how ironic that the EU is the progressive one on the question of freedom).
> why on earth did they start OpenAI with its lofty goals

Recruitment strategy. Quote:

"even though sharing everything is definitely the right strategy in the short and possibly medium term for recruitment purposes"
I once got an email that had a disclaimer informing me I could not make decisions based off its contents. Even if I was the intended recipient
To prevent the flagging you would have to block an entire country which has an army of people trying to prevent discussion as we speak.
Anyone who has had to sift through large BNFs such as [0, 1] to find that the syntax error was a syntactically significant "TO" knows that this is the case. Natural language has synonyms, computer languages really should avoid synonyms and also any spurious syntactic sugar.

[0] https://www.postgresql.org/docs/13/sql-altertable.html

[1] https://www.postgresql.org/docs/13/sql-commands.html
Ask HN: What's wrong/right with Postgres migrations?
Background:

- About 9 months ago we burned 2 separate days handling migrations on Supabase. Supabase CLI version and/or local Docker version change made it impossible for my teammate to bring up the db on their local. Migrations couldn't be applied. Fresh pull didn't work either. I thought this was a fluke.

- Working with a new team/stack (flask, alembic, postgres). Twice in the last month I had to change the `alembic_version` in the db just to get the migrations to apply. I think we found ourselves in this situation because we rewrote the history by having the new new migration point to a previous revision (HEAD^) instead of the last one (HEAD). Not sure what our motivation was.

- What am/are I/we doing wrong?
- What's the right/robust way to do this?
- How are teams of size >2 handling this?
- Isn't this scary?
You would be correct were the war about retaliation. It is not retaliation. It is a military operation. It is a military operation to remove an implacable enemy who deliberately positions military hardware such as rocket launchers in and around civilians and civilian infrastructure. This is an enemy who would kill more than 30,000 Israeli citizens if it could. Hamas would kill every single Israeli if it acquired the weapons to do so. We know this because they frequently fire rockets at civilian targets. They are doing so even now as you read this. Hamas would kill every single Israeli even if it meant killing thousands of Palestinians. We know this is true because Hamas leadership has been saying this for decades.

Further, when you compare civilian casualties to other wars, even other wars in neighboring countries, the casualty rate is extremely low.
There is also a thing that could be perhaps called "the neophobic paradox": excessive neophilia halts progress, as it turns it into a random walk. It turns into people chasing the next big thing, with no noticeable progress over longer timescales.
Given one of the things you can get on an app store is a replacement keyboard, "security" is, in addition to all the things you listed, "make sure there are no installable key-loggers".

And for web browsers, which are basically an inner-OS, making sure that plug-ins can't read arbitrary content from the pages you visit.

And given that "phone" is an app, that it can't wiretap all your calls.

Also, one of the fights between Apple and Facebook was basically stuff which, by my reading, was stuff Facebook wanted to do which was illegal under GDPR: https://www.cnbc.com/2022/02/02/facebook-says-apple-ios-priv...

There's also stuff which is bad for the device, but I'm not sure if it really ought to be Apple's responsibility to prevent, like crypto miner libraries running on-device as an income stream for the developer.
Well it seems reasonable to me they terminate their developer account ONLY AND ONLY IF a developer account is not mandatory to be able to have a foot in the iOS market.

Apple has the responsibility to safeguard apps delivered by its own store, but it will be each third party store responsibility to do the same while also complying to EU laws.
"Führer" is these days quite rare to use as its own standalone word. You'd rather say "Leiter" or perhaps "Anführer" instead.
> The environment where we write critical code the way we do now is very wrong. It's actually not that easy to figure out if something is exploitable or not.

Then the correct approach is not to cause "CVE fatigue" that can cause significant second-order effects. Not to mention the fact that who else is better suited to make that assessment? It's unavoidable that an assessment still has to be made because fundamentally there are use-cases where touching a working system has to have a really good reason. This will result in actually important things not getting patched because not-kernel-experts had to make that decision.

I also can't imagine large vendors being forced to follow a significantly more frequent update cadence also choosing to retain their current level of QA. Best case we're going to get more frequent less tested updates, worst case we're going to deploy an actual vulnerability due to some low-importance bugfix (with an assigned CVE).
Yeah, on Netanyahu we agree. He is also dangerous, as his attempt (?) of dismantling the judiciary branch of government showed. He absolutely is part of the group of wannabe authocrats in Western-style democracies: Trump, Le Pen, the AfD, Meloni, Erdogan, Modi... The list is quite long, unfortunately.
NASA Opens Call for Simulated Yearlong Mars Mission
Did they define what they meant with going to far? During metoo in Sweden, the dominant discussion was about media ethics and how far things should be legal with trial by media. There was also discussion about banning men from concerts and have women exclusive departments on trains.

There has also been discussion about giving women free credit points for university programs with high ratio of men (but was later cancelled because they did not want to give men the same credits in programs with high ratio of women). Affirmative action in education has been a fairly hot political topic for the last couple decades.

An other discussion is about quota systems for boards or management, and if those system is effective strategy for equality. Within EU it has also become a question if such laws should be on EU level or on a national level. Similar discussion also exist with parental leave and if those should be shared or dedicated, and if it should be EU law or national.

Which region of the world are we talking about with "+40% of men think that women had gone too far in pursuing equal rights", and what is the context/demographic/method of polling used?
Or maybe the US is just too comfortable with being the home of multiple large criminal organizations? Said crime syndicates then actually get fined for committing crimes on countries with actual rule of law, unlike the oligarchic farce that is the US justice system.
I thought I covered that in the part about needing to check for updates/release announcements yourself if you've turned automatic updates off?
Again nonsensical body-experience argument. Do you need to see 11 dimensional world in order to invent math to deal with string theory? Do physicist see those extra dimensions in their eyes?
> The idea is that we just place glyphs where the coordinates tell us, and if that is a fractional position somewhere between pixels, so be it, we can render the outline at that offset just fine. This approach works—if your output device has a high-enough resolution (anything above 240 dpi should be ok).

So it just requires 6x more memory, GPU power and HDMI/DP bandwidth and prevents usage of large monitors ...
This is almost exactly my assessment of this. Based on the action of these companies in the past (and especially Epic), the only thing I see happening by forcing Apple to further concede is the further "enshittification" of the user experience for less tech-savvy users. I'm the "tech guy" for my family and lots of my friends and I don't want to spend any more time than I currently do troubleshooting their purchase and subscription experiences. In my mind, Apple cultivated the App Store and iOS/iPhone experience and that's what got the platform to the place it is currently. Adding the option of shittier providers and shittier platforms only makes the entire situation shittier so that a small subsection of users can install the niche apps that they want.
Israel prevents foreign journalists from entering Gaza to cover the conflict - that fact alone should cast heavy doubt on their intentions.

Many journalists appear to have been deliberately targeted: killed by snipers, bombed while sleeping in their own homes, or hit by airstrikes while travelling.
I've seen this as an exec and an employee. In addition to things others have noted, I've seen:

- Unusual visitors to the office (or even having visitors at all!)
- Sudden shifts in roadmap priorities
- Sudden changes in interest or emphasis on reliability
> This sounds like a case of Schrödinger's documentation: it may or may not exist. I think Boeing is still looking for it and doesn't want to admit they don't have it until they're absolutely, positively certain they don't.

I can imagine that for each plane could exist millions of documents, hidden away on different servers. Best-case scenario they could claim that a subcontractor was order to create it and lost it.

From experience I saw a company where people would have single copies of documents stored on hard drives, personal cloud drives, memory sticks, etc. They were always able to find what they needed, but there were a few close calls.

This is where being under so much pressure to produce the documentation, somebody ends up magic-ing it into existence. I wonder if they even have a chain of custody that would highlight that forms, etc, were retroactively created?
Signifier without a referent. Came back to me reading about the "leadership" article that's on the front page right now.
Can you expand what Apple has done to count “malicious compliance”?
I think they should also be on the EU list of gatekeepers for the DMA
Refusing is moot. They make $3bn profit every month in the EU. Shareholders would certainly send Cook off if Apple loses access to the EU market. Apple will play this game until the EU takes the gloves off, and they will.
The person i was responding to didn't say israel should stop the blockade. They said israel should dismantle their colonies. Which they did in Gaza in 2005. There are no colonies currently in gaza.

It should also be noted that the blockade happened in 2007, so there was a 2 year period there. In any case, the israeli withdrawl is one of the key historical facts that lead to the current geopolitical context.
The manager should almost always get the blame. Why didn't they get help from another team, why didn't they supervise that dev more carefully, how did the bug get into the code in the first case and were proper test procedures followed. Has there been a history of mistakes which show a pattern that's not being managed etc etc.

Ultimately the CTO is responsible to the board for why a problem damaged the business (even if it was all the mistake of a developer somehow). And the board to the shareholders for losing money.

In reality people, of course, try as hard as possible to evade blame or lay it elsewhere but in theory a developer who makes a big mistake should not have been in a position to do that damage solo and it's a fault in the system if they were able to - and in the people responsible for the system.
There were quite a few magazines of the era: Dr. Dobbs, Byte, arguably some of the electronics mags, Popular Mechanics, Popular Science... that would have looked very unfocused through the lens of 15 years or so later.
They did not asked for platitudes nor euphemisms. They asked to reduce resentment vomit that lowers actual informational value.

If you exaggerate and state things in as emotionally insulting way as possible, you are not saying things as they are. You are exaggerating and burdening everyone else with need to disentangle your emotions from actual content.
The farmer do whatever he wants within its field, the road laws don't apply there. But he has to follow the laws when he is on the road where a tractor has no reason to tip over.

Your analogy is not relevant here.
In the USA, this law exists for physical mail:

https://about.usps.com/publications/pub300a/pub300a_v04_revi...

I'm not sure that it has been applied to email, but that would make for some very interesting cases. (Is Intellectual Property merchandise? Rights assigned to the content of the message?)
Excellent advice.

Question: in what ways does insurance domain knowledge set you apart?

I understand certain industries benefit from Engineers with domain experience (e.g. Healthtech companies needing HIPAA knowledge).

I'm curious as to what particular skills insurance companies need from Engineers?
Automated Optical Firearm Detection
Too late for law, prepackaged foods are mostly garbage in
> Are these just empty words? Or is it legally enforceable

Neither. The purpose of this language isn’t to bind the recipient; it’s to guard against claims that the sender waived privilege.

> “inadvertent disclosure” of privileged material does not operate as a waiver so long as (i) the privilege holder took “reasonable steps to prevent disclosure”; and (ii) the privilege holder took “reasonable steps to rectify the error.”

https://www.americanbar.org/groups/business_law/resources/bu...
The question is why is a community supposedly dedicated to truth and quality of information falling victim to this? The likely answer is what we're all expecting, the publish or perish culture put in place by major publishing houses and the pressure that puts on academics to maintain their livelihoods will cause some to cave under the pressure and pursue darker paths, and this is just another marker of that.
While interesting, it's hard to identify any component of the author's argument that isn't fundamentally flawed.

Ambiguity is not "the true advantage" of natural language and certainly not one we want a query language to adopt.

Pointing to the limits on the complexity of SQL queries most business folks can write overlooks the fact that there are SQL queries that most business folks can write.

Wanting to make SQL more procedural is a terrible idea, for all the reasons already expressed more eloquently in this thread than I can.
and any reason you decided not to answer the second part of the question?
An Introduction to Flyscrape [video]
Long was hyperbole, lets settle for overdue?

But then there still isn't much around crypto, so I'd don't hold my breath on that one.
Just speaking from my experience here: I worked for a company that was comparable in role to Boeing. I was prohibited from retaining any documentation about my work that was not court ordered. Files, notes, emails, scribbles on a napkin all of it had to be destroyed.
It does, but you can't forward this data to a separate service or push to your calendar so you can see it on your watch.
This is why their petulant behavior, as brazen as it is, doesn't really bother me. Every action they take just provides further evidence and support for further anti-trust action that will affect the entire big tech industry. Now it's up to the regulators to deliver on enforcement and take a bite out of the poisoned apple.
"I Don't Want to Live in the USA When This Happens 2030 " – Andrew Bustamante [video]
It's free as in beer (for regular consumers anyway), but (unless you know different?) only available via obfuscated binaries, with no documentation of the actual file format. Correspondingly, it's the only video format I know of that I can't use industry standard open source tools like ffmpeg with.

I'm very aware of the manifold ways in which RED suck.

Edit: There's a certain irony about it. RED took a bunch of free stuff and pretended it was proprietary. BM created a proprietary format and pretended it was free.
Starkly different to the laissez-faire approach to Asterix copyrights by whomever holds them, assuming someone still does, which have allowed countless parodies and cameos in stories by many other authors (a long tradition of the French comic scene anyway).

Which reminds me, I'm re-reading "Tintin et les Picaros" and there is a, presumably unlicensed, reproduction of the likeness of Asterix, and another of Mickey Mouse, in it.

They're both in the last panel of page 54 in my copy of the book by Casterman (I reckon that's the canonical edition, yes?). The panel shows the carnival in Tapiocapolis and there's two revellers dressed as Asterix and Mickey.

But, you know. Copyright. It's good when it's protecting us, ey?
I don't know think a head of HR (the person they try to hire) would like to live in a dormitory
Just wanted to say that this was one of the most thought-provoking and sensible exchanges on the post.

>To the point of your article, I tend to believe you have to start as viewing yourself as net negative, and then trying to understand how to either lower your overhead, or generate enough value to overcome the overhead, or both.

An unexpected side effect of starting my own business is that I can't help but view myself and my team this way. We're bootstrapped and have day jobs, but there is absolutely no avoiding the gap between how much revenue we generate and how much we'd need to work on the business full time.

>[1] I tend to believe that most management is not net positive value (whether they are necessary or not for various reasons is somewhat orthogonal), and managers/leaders who generate net positive value are rarer than they should be.

I read a lot of Taleb in my early 20s, and he'd call this iatrogenics in a non-medical context, and I'd agree. One of the ex-Pivotal guys I spoke to mentioned that most of the highest-performing teams emerged from "benign neglect" from management - i.e, they got busy and left the team alone. Could be a recipe for disaster, certainly, but there's also compelling anecdata out there that it could be the grounds for great things with the right people.

>On day 1 i would give them a 1 question test that says "do you believe you are already adding net positive value to your team by being here" and send anyone who answers 'yes' to the reprogramming station.

I really wonder how many people would say "yes" to this. It seems like an insane thing to say, but I'm honestly not 100% sure how many people would pick up on that.
Elixir and its Task module (https://hexdocs.pm/elixir/1.12/Task.html) is the best of both worlds here.

The fundamental concurrency system is green threads (similar to Go), which makes for a fantastic programming model where you spend your time writing linear blocking code, while actually having full parallelism. This is achieved both with the VM and the abstractions built on top like GenServers.

The Task module is a convenience that allows you to do "await" type work when that makes sense - because (as you describe) sometimes it does.