skysight-inc/HackerNews huggingface dataset:
From the official Snowflake response[0]:

>We believe this is the result of ongoing industry-wide, identity-based attacks with the intent to obtain customer data. Research indicates that these types of attacks are performed with our customers’ user credentials that were exposed through unrelated cyber threat activity. To date, we do not believe this activity is caused by any vulnerability, misconfiguration, or malicious activity within the Snowflake product.

[0]https://community.snowflake.com/s/question/0D5VI00000Emyl00A...
Not very, absolutely everyone hates doing their taxes and the whole shady process behind it all. The IRS should have to declare what they think you owe before you pay or submit any paperwork, I don't know if that'll ever happen but any baby or big steps towards that reality will win bipartisan support, easily. Just have to get past the conflicted-out members of congress who are truly being controlled by Turbo Tax and other industry lobbyists.
It's also not a win for people who depend on those weapons for safe. Would the Ukrainians be better off if we didn't have any Javelins and artillery shells to give them? Would Taiwan be better off if a rusted US Navy is no longer sufficient to deter an invasion by the mainland?
I'd wish Joel Spolsky didn't popularize the concept of "programmers can't program".

It have made hireing so convuluted since it boils down to tabs versus spaces.

I'd rather argue that the methodology to hire is flawed generally and dice rolls are probably better then most processes. Especially the riddle and leetcode ones.
Interesting, I also just used the support link, talked to an agent via text chat, asked for a refund, they asked for a screenshot, I shared a screenshot, and they immediately refunded me. They did not suggest an alternate approach (the 3 months of premium you mentioned). I didn't actually want a full refund because I got some use out of my Car Thing while I had it, I was banking on the 3 months of premium. Oh well. :)
The Taxpayers Protection Alliance spokesperson quoted at the bottom says:

> Private tax services "have every incentive to find the deductions that will yield them the best return," Zupkus said, adding that the IRS wants "to extract as much as possible from the taxpayer."

I think it's worthwhile to acknowledge that there are indeed slightly different incentives involved when it comes to the private sector handling tax prep versus the government.

But it's laughable to argue that the private sector is not in it to extract as much as possible from its customers.

ProPublica's series on the nasty ways TurboTax fooled its customers to extract more money from them is a clear example: https://www.propublica.org/series/the-turbotax-trap

Edit: I think some commenters are missing my point here. I'm not agreeing with this spokesperson. I'm saying that it's disingenuous to argue that the government is trying to fleece consumers when it's clear that the private sector has been doing so for some time.
Depends: I wonder what programming tools/languages were present on the old PowerBook. Otherwise, getting any handwritten program or its associated tools/runtimes (if necessary) onto the laptop might be just as much of a challenge as getting audio data off.
How does that work? Can you clarify?
Response time would be one of steams solvable problems. There has not been much research on this aspect in the last hundred years, but off the top of my head.

1. Response time is already great, You have a reservoir of instantly available energy in the form of steam pressure ready to go whenever you need it. look up steam engines slipping their wheels, in fact one big problem with steam is that it is much easier to apply too much energy. Same problem with electric. they need a good torque management system to deliver only the power that is needed.

2. The reservoir response time is too long, Probably not a problem, that is the whole point of having a reservoir, but if it is, make it faster, fire tube boilers, more surface area, etc, a solvable problem. Consider the response time of the reservoir of an electric car. it is far worse than any steam engine, yet you say it has a faster response time.

No the real reason we don't use steam cars is that the engines are more expensive than internal combustion engines without all that much benefit.
Yea the shadow data for my area is hilariously wrong. It’s missing a whole forest that shades my house and a road nearby.
I continuously wonder how we keep building multi-billion dollar applications where both basic consumer protections aren’t in place and there’s almost no liability for the companies running them.

A kid working at McDonalds requires a safe food handling certificate, and the store will be shut down if an inspector sees their fridge is too warm.

Hopefully with E2E encryption, passkeys, and the like, the end of days is near for these massive data leaks, but without real consequences, these companies will never realize holding millions of people’s personal information is both a liability as well as an asset.
I once solved the Wayland screen sharing problem this way. [0]

[0] https://social.immibis.com/notice/AeWSRvyKlhBB2hANoe
Why not display the info as a series of QR images? There probably wasn’t a dev environment on the laptop though.

For the record, you’d have had no problem mounting an image of the HFS disk on any modern Linux or macOS system.
It's possible for there to be different categories of bad tech names.
No, that sounds about right. This is a new, agile, cloud-first company that grew very quickly and has faced significant turnover. You don't get such growth by doing everything right.

Looking at linked-in, the unlucky employee could be someone in a sales role, with only 7 months of tenure. Every company has a few sysadmins with a scary amount of reach, but that's not what happened here.

Edit: A ServiceNow access request flow with poor internal controls would explain it.
I feel your pain - one minute you're reading some messages or a note and the next you're locked out of slack with faded screens and infinite spinnies.

Apparently we must be very niche amongst their user base because these kinds of fixes hasn't made it onto their roadmap in years
Don't forget tax domains. Most remote companies in the US want to hire only in the US, not just anywhere in the world, due to needing to set up taxes in every single country their employee might be hired from.
I wouldn't mind 5 day work weeks nearly as much if they had a 3 day weekend. This isnt a serious suggestion, but an 8 day week where I felt like I had a block of actual away time would be such a killer improvement for me.

But I do hope I see a 4 day week in my lifetime. That would be massive.
I am addressing the “why” that you both claim.

The person I replied to said, I quote:

> A distributed project encourages fiefdoms, a centralized one asks for a taskmaster with final say.

What does the distinction between microkernel and monolithic kernel have to do with whether the project is “distributed”, or whether it is a “fiefdom”?
Looks like it's trying to use Runestone[0] (a textbook authoring tool) to get the number of online students but the server url is improperly configured to point at localhost (hence the port scan trigger).

[0] https://runestoneserverascholer.readthedocs.io/en/latest/ind...
Snowflake employees need time to sell off all their shares. This news will hurt the SNOW stock price big.
I'd argue Elance was(?) such a place and it was really bad with the worst clients imaginable.
Define "actually program".

What are you evaluating them on? Leetcode?
> "Civil society" implies the existence of uncivil people

It does not. You are conflating:

civil 2b: adequate in courtesy and politeness : MANNERLY

with

civil 4: of, relating to, or involving the general public, their activities, needs, or ways, or civic affairs as distinguished from special (such as military or religious) affairs

https://www.merriam-webster.com/dictionary/civil

You can see that 'uncivil' does not include in its meanings an antonym of civil 4:

https://www.merriam-webster.com/dictionary/uncivil
It's not even correct - the IRS wants to follow their rules as closely as they can.

I have had the IRS unprompted send me an additional refund because of a mistake I made on my forms, and they caught.

(They also included a letter saying that if I thought my mistake was right, I could fight the refund, or file a new amended form and go for a bigger one.)
rdrama .net. We have a cute orange cat as our mascot.
It had one, but the author mentioned that the drive's hardware had failed.
That's the way it should be. Even the anti-tax people should be for this because it allows people to see what the IRS already knows. That would allow them to request changes as needed. I know people where the IRS had wrong 1099s and it was hard for them to figure out the problem and correct it.
> How volatile is this to the political winds?

Very. Had the GOP won the senate in 2022, this would have probably been cut already. Depending on how this November goes the policy could definitely be reversed.

> Something like this, in order to be permanent, needs congressional approval.

This program did come from Congress. It was apart of the inflation reduction act.
The Shady Business of VPNs [video]
I like the About page explaining the motivation and how it's different. If you want to get ahead of the curve, filters for 4 and 3 day work weeks would be very cool.
Eye exercises for myopia prevention and control: comprehensive systematic review
Thanks for mentioning {X,Y,Z}modem. I think folks forget that it still has modern uses.
Sound like capitalism alright, what's the confusion?
They definitely could do that.
Based on my experience, this feature might as well not exist.
Id like to see a comparison between unionized and non-union teachers.

My hunch would be that some unions did well and others didnt, but it would still be difficult to understand the data without comparing to the tax base regions for the school.
No it wont and anyone who hires at that rate will get what they pay for.
Web browsers can already do that. I'm not sure what else is desired beyond what they already do.
I wish job sites would show total compensation. They show a Mozilla job posting which, when I was there, would consistently pay 30%+ bonuses. At other jobs equity comp has been 50%-75%+ of my comp. Comparing jobs looking at base only is useless for me.
Yes, if it's relevant, e.g. when running an actual community. But physical gatherings have the advantage of not going on continuously 24/7. My experience with Discord, aa well as communities run by IRC earlier, is that if you log out before work and log in after, you'll spend an hour or more just going through the backlog.

Chats are for kids, students and unemployed.
great work! We are also trying to design a new different way to use LLM: https://flowith.io you can generate stuff on an infinite canvas.
I think we can differentiate between the rules, level of judicial independence, and different systems too.

It's not all or nothing as far as the words "legal framework" goes.
They have that comparison in the compensation view. Unionized teachers make a lot more money.
Don't really think it's a good idea to let lawyers pick who the people can vote for. Nor that justice is served when the conviction is obtained on alleged book keeping crime from 2017 in which it was claimed it was to influence an election in 2016, and relied on testimony from a man that perjured himself multiple times. And that it was illegal for a bookkeeper to select "legal expense" for payment of an NDA agreement.
That correction occurs when the currency collapses and the newly impoverished continue working at massively reduced real wages and living standards. The inability for Spain, Italy and Greece to inflate their currency is one of the things leading to high unemployment. If this was to happen the trade with China will still be beneficial - the question is how much loss of wages and living standards could the west tolerate. And since much of our current living standards is based on continued access to cheap Chinese goods then there will be a loss of living standards either way.

China is still a big importer of raw materials so there will always be that. But it's not like we can all become farmers and miners.
YES - this was very much on my mind actually. I was thinking we really need section outlining for Markdown (and for diffs etc, so like "two people want to edit this paragraph" when we have collision detection later). It didn't make it into the first cut but was and still is top of mind as I'm dogfooding it.

I have had some good ideas and some stupid ideas for semantic history, and many very mixed prototypes. The simplest option, and what I'll probably go with, is just a table of commits-modifying-this-thing. But that's not all the information; for example, a linear list of commits doesn't convey branch/merge topology well. I'm not sure how useful that information is, but I'd kinda like to see it.

The data I collect is two things: first, we can do a semantic git-diff operation in the backend; and second, we search-index the diffs so you can say "which commits modify entity X" and get a fast answer. That's what the UI will do when you focus on a function.

I use off-the-shelf TS grammars and write custom queries for them. I've got a custom abstraction in the backend that lets you query for ranges of nodes at once, which is how we jump to the top of comments above a function rather than to the function definition itself.

Your back-burner project is exactly where Asqi is headed -- and in fact, the backend for this is 100% done in Asqi but the frontend doesn't show the data yet. The idea is to determine things like, "two branches modify function X in two different ways" and even if the diffs don't collide, you get to see that there's a potential semantic conflict coming up. There's some potential opportunity to use past change data to detect when a function is sensitive to multiple editors, or when it's just a big list of calls/hooks or some such where it doesn't matter so much. So in the long term, I think of it as "how important is this potentially interesting conflict scenario" as some type of user-attention number that is priority-sorted so the user sees most-important first.

(Btw, I would personally not like to hear that my pet project was being implemented by a non-free product; the silver lining here is that Asqi will always let you analyze private repos locally if you don't need to pull them automatically -- i.e. if you have local clones -- so it's probably free for what you're doing unless you're launching a SaaS product. I may also add some type of data export API later so you can use the Asqi backend to power other frontends.)
I wonder if this is connected to the layoffs they've had. Cancelling marginal product lines and focusing on core competencies sounds great in theory, but the actual process can be messy and generate ill will. An "overstaffed" company is surely more likely to "go the extra mile" in a way that customers will often remember (e.g. by assigning a skeleton crew to maintain this thing or open source it).
Until Google decides to give developers the ability to let the browser invade the rest of the system, which, in six months, will suddenly be necessary for everyone to do things like bank online and pay utility bills.
For beginners, "Naked Statistics: Stripping the Dread from the Data" by Charles Wheelan is a great choice. It explains everything with examples, making it super easy to read.
> Are they just banking on people not caring enough or knowing about the refund process?

This seems to be the official policy for many retailers, insurance companies, etc. Hide the process, make it difficult, so you don't have to pay out as much.
1. It surely costs way more in employee expenses to monitor, correct, and collect such small fines. Plenty of times they'll just let a $200 fine go because it's not worth the effort to collect.

2. Taxes are a means to an end, as is the government. There's no benefit to fining people for clerical mistakes besides encouraging them to not make them. There's no value created by fines. There's no shareholder greedily pocketing the revenue. If they can avoid mistakes for people, that benefits government employees by having to waste less time on stupid stuff, the taxpayers by not having to waste time on stupid stuff and avoiding fines, and the people at large by not having to waste public money on paying people to fix stupid stuff on people's returns.
Hello, community!

I am Vadim Voitenko, a database engineer and the developer of Greenmask (https://github.com/GreenmaskIO/greenmask), an open-source project for data anonymization in PostgreSQL. During my R&D work as a database engineer, I realized that database anonymization is not widely discussed or popular, despite many companies encountering issues in this area. Therefore, I decided to contribute and write a series of articles about data anonymization and the common problems people face. As a database engineer and enthusiast, I want to share the first article (https://hackernoon.com/database-anonymization-the-basics), which I hope lays the foundation for understanding the problem and provides examples.

Taking this opportunity, I would like to highlight several important features of Greenmask project that might be interesting for you:

* Validation: Powerful validation commands allow you to check transformation differences, constraint violations, and schema changes.

* Highly Customizable Transformation: For instance, customizable transformations such as random email generation (https://greenmask.io/v0.2beta1/built_in_transformers/standar...).

* Database Type Safety: Integrated with the pgx driver, ensuring accurate value encoding/decoding.

* Dynamic Parameters: Allows resolution of functional dependencies between columns (https://greenmask.io/v0.2beta1/built_in_transformers/dynamic...).

* Deterministic and Random Engines: Offers both deterministic and random transformation engines (https://greenmask.io/v0.2beta1/built_in_transformers/transfo...).

* Single Utility: Easy to set up and run.

* Schema Dumping and Restoration: Delegates these tasks to PostgreSQL's native utilities, as they are the most reliable.

* Backward Compatibility: Dumps created by Greenmask can be successfully restored by pg_restore.

* Large Objects Support: Handles the dumping and restoration of LargeObjects (https://www.postgresql.org/docs/current/largeobjects.html).

* Control Schema Changes: Checks your schema changes against the previous snapshot, prints the differences, and returns a non-zero exit code if changes are detected. This feature can be helpful in your CI/CD pipelines.

There is definitely a lot of work ahead. Have a look at the planned features in our Roadmap (https://github.com/orgs/GreenmaskIO/projects/6).

We have prepared a playground sandbox for experiments and for evaluating the Greenmask utility. You can access it here: (https://greenmask.io/v0.2beta1/).

If you want to run a Greenmask playground for the beta version execute:

git checkout tags/v0.2.0b1 -b v0.2.0b1

docker-compose run greenmask-from-source

I would appreciate feedback.
So the account was without 2FA protection?
Darn; overlooked that one hiding in the middle of all these Working Democracies.
Showing 0 items for me!
Have we passed the turing test?
SF's Highway to NIMBYism
That revenue isn't even a drop in the bucket. The issue is and always has been parasitic jobs: you wouldn't need anywhere near as many IRS employees and tax accountants.
It sounds like they found a way to bypass MFA on snowflake (because snowflake didn’t expire session cookies), and stole an employees credential, obtained via a “Lumma-type Infostealer” which I guess is just a key logger in browser extensions and fake versions of software…
If you don’t have another reason for consolidation than consolidation then yes :)
Yeah, I think that would be a totally reasonable caveat.

It's all a theoretical thought. But I feel like pre-pandemic a lot of companies were wishy-washy with remote: yeah, we do it, some more than others, whatever works... post-pandemic a lot of workplaces have codified in vs out of office days, that kind of thing.

Async feels similar. A lot of "hey yeah, it's all cool, as long as you get the work done" sentiments, but then daily video standups at 10am, team meetings multiple times per week, etc. I'm just curious what a codified version of that would look like.
"Secure Blur" – Redact Videos Safely and Aesthetically
What vehicle/year/model?
This is why we need more incremental rendering[1] (or "streaming"). This pattern become somewhat of a lost art in the era of SPAs — it's been possible since HTTP/1.1 via chunked transfer encoding, allowing servers to start sending a response without knowing the total length.

With this technique, the server can break down a page load into smaller chunks of UI, and progressively stream smaller parts of the UI to the client as they become available. No more waiting for the entire page to load in, especially in poor network conditions as the author experienced from Anartica.

[1]: https://www.patterns.dev/react/streaming-ssr
Sure. But the important thing is that manufacturer trusts its own system enough to take legal liability on himself. And that matters.
Nitpick, but if the filter options are mutually exclusive then they should use radio buttons or lists. Checkboxes imply that multiple selection is allowed.
That's what the article implies, but I think it's overblown. They provide enough information (unfortunately) to identify the employee whose credentials were stolen, and she's a Sales Engineer. The data seems to have come from her own Snowflake account, which was used to build demos for customers or prospective customers. It's quite possible that those customers granted her access to some of their actual data, which was used in those demos, but it's a far cry from unfettered access to the customer's Snowflake database itself. It's also quite possible that the hacker exfiltrated fake-but-realistic data used for demo purposes and doesn't know the difference.
SPAs and "engineering for slow internet" usually don't belong together. The giant bundles usually guarantee slow first paint, and the incremental rendering/loading usually guarantees a lot of network chatter that randomly breaks the page when one of the requests times out. Most web applications are fundamentally online. For these, consider what inspires more confidence when you're in a train on a hotspot: an old school HTML forms page (like HN), or a page with a lot of React grey placeholders and loading spinners scattered throughout? I guess my point is that while you can take a lot of careful time and work to make an SPA work offline-first, as a pattern it tends to encourage the bloat and flakiness that makes things bad on slow internet.
It does work against the government's stated interest, but not in the way you think.

Tax policy is the government's strongest tool to change personal behavior, and if the system is simple and automated it doesn't do that at all.
The fax is a good trick, but my favourite story of this type involves a hand-written hex editor and many, many, hours of copying bytes by hand:

http://www.oocities.org/zztexpert/docs/upoprgv4.html
Almost all SEO will become programmatic SEO
Yeah guys, I was just joshing, and actually if it isn’t obvious, I was joshing in a positive way (hence the “spirit” comment; I think it’s a good idea.)

In the mean time, I tried to document the limitations and make it clear that I didn’t consider it plug-and-play, and that I will appreciate feedback, bug reports, and PRs.

I will prioritize addressing things from the comments here, as well as taking advantage of the documentation talk are graciously writing. ;-)
I doubt this will do anything for a state tax form. It's not their responsibility.
8 years of the same parts, repair knowledge, and continued software support?

Sign me up immediately.
macOS (Darwin) has always written filenames as NFD via the macOS APIs. The underlying POSIX-ish APIs may not do NFD, but Finder and every native macOS GUI program gets files in NFD format.