skysight-inc/HackerNews huggingface dataset:
Ask HN: Building Enhanced Data Encryption and Compliance Service for PostgreSQL
Hi All,
I'm exploring the idea of building an enhanced data encryption and compliance service specifically for PostgreSQL. The goal is to create an open-source service that simplifies the process of encrypting sensitive data and ensuring the database remains compliant with various industry regulations (e.g., GDPR, HIPAA, ISO 27001).

Before starting development, I'd love to hear from others who may have tackled similar challenges or are currently working on something related. What are the best practices you've found for securing data in PostgreSQL? Are there any existing tools or approaches that have worked well for you? Do you think there's value in creating an open-source solution that focuses on both encryption and compliance for PostgreSQL?

Would appreciate any thoughts, feedback, or advice on this!
Not just one I guess?

https://qz.com/work/1326942/sergey-brin-started-google-with-...
I'd prefer the other way around. Reading the raw interview instead of the biased report of a journalist. I want to see all the quotes, not quotes out of context, summaries of answers or stuff like that.
I would posit that this post is a more useful entry into a /now page than a collection of data from third party services. If I want to follow my friends' interests in a specific area of media (e.g. movies) then I'm inclined to log in to that service and see their recent reviews. I'm not sure an aggregator like this actually provides value to readers. On the other hand, reading about a fun software project about integrating with disparate APIs via custom Go scripts seems like a much more interesting personal site post. I guess I'm just really not sold on the benefits of a /now page.
The Split View in edge does this, but it’s temperamental. Surprised this mode hasn’t taken off tbh.
there's no need to worry about a non-technical default at all. if there is a substantive default on Treasurys the world is already over and it doesn't matter where you had your money.
Not just delayed repeatedly but also not a success.

The key point is taping out, first boot, etc does not imply a successful node.
> It's funny how we drill the idea that everything must be reimplemented from first principles into students, only to flip that when they join the workforce.

Kind of makes sense, doesn't it? While in school, you want to learn as much as possible (ideally?), while in the workforce, you want (or the company wants you) to be as efficient as possible. Different goals leads to different workflows.
In our org (large US bank) there has been a huge rollout of github copilot and adoption has been very successful. For me it became essential to learn how this can help me in day to day coding/testing/devops etc. Right now I am churning out a python code to parse a csv and create a report. I have never learnt python before.
You have an eye for beautiful design
Exactly, you should let other people decide what they do with their phones. The majority of Apple users chose phones for the tightly curated, easy to navigate Apple ecosystem. You don't have a right to upend that by forcing Apple to change the product they bought to more closely resemble a product that's already on the market.

If you want an open ecosystem get an Android phone already, don't try to dictate what other people are allowed to buy.

(Writing as a happy Android user who chose it for F-Droid!)
I'm actually very much in agreement with that point.

The world is what it is. A factual observation is just that! But I think it would be better said that while practicing mechanics one should not be trying to practice virtue.

A moral position will push out a factually accurate one if you aren't willing to ignore your views when assessing something.
VCs can act as gurus for a certain sort of idealistic founder types who also have a need for validation. VC funding resembles the traditional form of validation that we are raised with, namely an authority figure conferring acceptance. I can see this as a hedge against the extreme uncertainty of starting a new venture. However, IMO, this need for approval from authority as an adult is ultimately psychological vulnerability and it is exploited.

Obviously, not every funding case is like this. But when young founders lead more with who has funded them than what they’re building or done, I have to wonder.
That doesn’t seem like a sustainable alternative. In the case you are describing, the productivity boost is highly dependent on actually having the right people within ear reach. You are relying on the right people happening to hear other conversations. What if your team is large, so that even if you are all in office, the chances of stumbling into the right conversation is lower? What if you are grabbing lunch, or in the bathroom, or meeting with someone else when that conversation is happening?

The most effective solution in my experience has been when working remote, and having a culture where a team has open discussions on their own Slack channel, with threads for particular conversations. That way, everyone can contribute to the conversation, it’s asynchronous so you don’t have to be in exactly the right place and right time to participate, and people can go back and review details very easily if needed.

You are right that that doesn’t apply if the conversations are happening in private DMs, but that’s a matter of team culture. You have to be intentional in a remote setting, just the same as you do in an office setting. But if you are it can work very well in my experience, perhaps even better than in person.
The concern is that AI will be better than artists for making art, and artists don't want their art to be part of the tool set for creating that AI.

Totally new situation for humanity that almost no one saw coming. So artists are forced to use the outdated and lone weapon they have; copyright claims.
I don’t this it is
Widespread adoption of Macs by students really went hand-in-hand with the transition to Intel, likely because of a boost to battery life that allowed students to take notes for at least two lectures before needing to plug in.
I think parent does have a point, A lot of the early soviet successes were hasty and just made to be first. Sputnik 1 just beeped, Laika died very early on on sputnik 2, Yuri Gagarin had very little control over what he did, he was more of a passenger. But hey, they were first

https://youtu.be/rSK7rUSnFK4
Those damn Ukrainians, trying insolently to live their lives next to russian capital.
The other day I forgot the name of a street in my town, right as I was trying to tell someone to turn onto it.

I said, "I don't know the name of the street - It's the son of (CHARACTER) from (VIDEO GAME)" and then I remembered the name. I was completely right about the game character, apparently I'd remembered that mnemonic but temporarily forgotten the character's actual name.
> It's funny how we drill the idea that everything must be reimplemented from first principles into students

Where on earth did you go to school that you couldn't just call list.sort() after your first algorithms class? I've never seen a class that teaches students that everything must be implemented from first principles. They only do that for the concepts taught in that class, or 1-2 classes prior, to make sure you are actually learning and have a clue what you're doing. Which... should makes sense? You should want engineers to cut costs based on understanding rather than ignorance.
Thanks, I wish the companion book were ready!
2024 Florida Python Challenge
What's even funnier is that I've heard from someone working at OpenAI is that (at least in their office) they are hybrid, working from the office 3 days a week.

From talking to people who've worked/work at Google it sounds like a lot of the issues stem from too few employees dogfooding their products (especially hardware), and huge inertia to get anything off the ground/make large changes.

Add to that the lack of cohesive product direction (constantly deprecating and replacing messaging products as the main example) and you get Google.
> I think is a changing circumstance.

It's a circumstance that changes once. That's not what instability is. Having a revolving door of partners, moving around a lot, and going long bouts without being present before re-entering a kids' life causes instability. If the child has the confidence that they're going to see their parents at regular intervals indefinitely and stay put, that's stable

> I would think spending less time with each parent would also be detrimental, just to a lesser degree (compared with 0 time),

This is conjecture.
This is good advice not just for compilers, but for any kind of software. Test the behavior of the public interface, not of the internals. Doing the latter too much will just unnecessarily lock you into one implementation of your software, without much gain.

As examples: If you are creating a web API, only test against the exposed public routes of that API, instead of writing tests for internal helpers. If you are creating a GUI application, programmatically exercise the GUI instead of starting your tests halfway into the innards that respond to the GUI buttons.

Tests lock behavior into place, so you should only write tests for behavior that needs to be locked.
Stunning how out of touch CEOs are with their own employees.

If there is one thing that would significantly improve the quality of living of all employees, it would be remote work. The fact that leadership wont give that (which costs nothing) I believe demonstrates some personality characteristic that is arguably sociopathic, and I do not throw that word around lightly.

If employees had a say in who gets to be leadership - which is how most of nature works - then CEOs would be be acting drastically different.
Yes, TPM is just one way to access your disk. The only reason to use it is in my opinion to not have to enter a super long password on every boot. An extra key if your mobo fails is the way to go. Or if you can't boot after an update, and you don't sign your recovery OS with the same key.
2 and 3 so far, but I am planning to support the others as well, thanks.
Oh no; I agree with you completely. I just wanted to point out that the document does not disclaim being a “standard”, is just says that it is not an “Internet standard”.
Adding another interesting layer - my analysis doesn't hold true for angel investors, though. Maybe I was just really fortunate (or, 'of course I was!' in hindsight) but the Waterloo region angels who invested in us were so similar to YC themselves and angel investors from the valley. Founder-friendly, people who'd done it before, adventurous, etc. Almost the anti-pattern to Canadian VC.

So there's an interesting dynamic change between pre-seed and early seed angel climate and proper serious institutional VCs in Canada.
Thanks for correcting me.

I see now that the Bearblog landing page lists "free themes". I'm having trouble, though, making sense of the "no stylesheets" selling point(?) at the top of the page, especially given what you are now saying.
Welcome to dang's list of cool posts. If he doesn't like it, you don't get to see it.
I can't help but notice that the homepage has at least a hundred pictures of humans, and zero pictures of any diagrams or charts.
In fact the first programming I did on the Macintosh was using Borland's Turbo Pascal for the Mac.

I took an introductory programming class at the University of Kansas. it taught us Pascal and it was a new language for me (having really only known BASIC, noodled with assembly). It was a bit surprising that the class used Macintosh's — these running a kind of "project-less" version of Turbo Pascal as I recall where you simply fed in your source file with ReadLn() and WriteLn() functions sprinkled throughout and observed the result in some kind of console window.

I'm not sure if I was aware of THINK Pascal (or THINK C) at that time but when I soon after bought my first Macintosh (a Mac Plus) I went looking for software to program it and it happens that a professor was selling his copy of Turbo Pascal for the Macintosh.

So perhaps it was serendipitous, but Turbo Pascal became my introduction to Mac programming. I stuck with it for perhaps a year or two before moving over to the richer THINK Pascal. (And later I migrated to THINK C to run with the big dogs — having to learn about pointers and C parameter passing was a right pain in the ass for this naive young coder).

(By chance, I happened to be on a mini-quest recently to try to recover these old programs that I started and abandoned back in the 1980's. And I have come across my original Turbo Pascal floppies as well as some of the crude apps I tried creating with the tool.)

As others have said, I suspect Borland jumped into the game early gambling that the Mac might be the Next Big Thing, bailed early too when it turned out that it was not (that of course would quickly be the IBM PC clone market).
They need to bring back that medieval game as well, Infinity Blade, several years ago I got an iphone just to play that and Tiny Wings.
The exam questions themselves would be plagiarism also
> "The most straightforward way to do this would involve having physical access to a victim's phone as well as their system password or another exploitable vulnerability that would allow them to make changes to settings."

If I have all that, why would I need a second level vulnerability? In fairness, the Wired piece might be technically correct, but it does seem overblown; a nice fluffy PR piece rolled up with clickbait.
Probably too late, but we support this over at mailpace.com

https://docs.mailpace.com/guide/idempotency
Most sign language users are functionally illiterate.

https://academic.oup.com/jdsde/article/17/1/1/359085
Happiness and sadness are emotions - inherently transient.

I have actually thought that "life, liberty, and the pursuit of happiness" was aan error, and should have been "life, liberty, and the pursuit of fulfilment"
Local news is highly actionable. I learn what's going on in my community.
In my CS program, a huge portion of all students were collaborating. Why did you specify international students?
An easy way to deploy Docker containers to your VPS using Ptah.sh
Hi there. :)

I'm Bohdan, founder of Ptah.sh - a flexible, fair source and independent alternative to Heroku/Vercel which puts you in control of your expenses.

I wanted to share with you how you can deploy Docker images onto your own VPS with my service.
In general, yes. My rule of thumb for a basic web server is 100k QPS per physical core on cheap hardware, slowing down if it's doing anything intensive (depending on the nature of the images being requested and how the requests are distributed relative to the disks' layouts, they could have been pegged at the disks' throughput for example), speeding up if you have a particularly light workload or better hardware.
If you got past the picture, you would have read that he was a friar.
>The setup includes over 30 RCA switchers and more than 12 HDMI switchers.

With this much investment, he could've bought a big industrial matrix (well, it's a single TV, so a switch would work) and pay someone to make a cool UI to select the consoles
Opening up a webpage is easier than cloning a repo, compiling, and running a binary
That's good - isn't it?
Eric Schmidt can eat poop
Thread yesterday https://news.ycombinator.com/item?id=41256222
I don't use Google for most searches anymore. Unfortunately, with relatively newer search engines it's taking time for them to be at parity with Google.
Oops, missed that. The question still stands, but read "AWS" as "AWS or a similar service."
Weird Object Careening Across the Cosmos at Ludicrous Speeds
Entire books were written about the disaster that was Apple in the mid-late 90s.

https://www.goodreads.com/book/show/581496.Apple

They weren't wrong. Just an amazing turn around.
Grocery stores, notaries, etc. all manage to verify identity in person and even remotely. I’m not sure why we need to go from a public 9-digit number straight to drawing blood.
No, it's correct. If you're currently not living on ramen noodles, then your SR will be lower. So ramen noodles are factored in
They made no effort to help the issue, when they very easily could have.
They can do that with ARM as well, the license cost won't bother Intel. The parent argument regarding lack of margins stands.
UUoCA: https://porkmail.org/era/unix/award

I hadn't heard of it before.
I'd go further and bet that those "impact" metrics likely came from a spreadsheet pusher like Schmidt.

Schmidt still takes the gold medal in my estimate for destroying a company he ran by not understanding how the business actually works (as CEO of Novell he decided to screw their channel partners not understanding that the channel relationships were the company's entire moat against Microsoft).
So if I don't have to take it literally I have to go with my own interpretation, which might be different from Aristotle's and voids the entire purpose of writing down his teachings.
There are some alternate front-ends that bypass the sorting shenanigans. I use hckrnews.com.
Ubuntu support added for Microchip's PIC64GX RISC-V platform
There's nothing that's more expensive than free.
But what do Google shareholders get out of this?
The article says directly: “One might even suffer greatly and still live a virtuous—that is: a good—life. When Aristotle speaks of a “happy” life, he means a fulfilled or flourishing life rather than a pleasurable one.”

Suffering certainly does make it harder to be virtuous, but you can interpret that not as disregarding the poor but as giving even more justification for orienting society toward satisfying everyone’s basic needs.
Toonami Aftermath is very similar to this, but for late 90s/early 2000s.

https://www.toonamiaftermath.com/
Interesting that it actually crawls all those sites. Must be computationally heavy.
You seem very concerned with my opinion, even editing your posts multiple times to add extra points, and replying to yourself to do the same!

Time to put the keyboard down and go outside :)
That awesome demo was on a 512K Mac at that. Jobs had insisted on a stock 128K model but the engineers expanded it without telling him.
Another nice thing about Mermaid for those of us working in a .NET ecosystem is that Azure Devops supports it[0].

[0] https://learn.microsoft.com/en-us/azure/devops/project/wiki/...
I don't know if I'm missing something about the Newyorker but every article I've tried to read loses me in a similar chaos of literary references and excessive thesaurus usage.

I can't tell if I'm illiterate or it's overhyped.
I mean, one click takes you to "Get Started" which then has some of the best docs I've seen in a long time. Put together and created by the people you saw on the first page?
One of its biggest advantages is how widely deployed is it, it is supported by many apps for note taking in a way or another.
Question: is a CS degree complete without compilers? Or Networking and Distributed Systems?
Minecraft's realms paid subscription cloud hosted servers have been down for more than 72 hours now. Radio silence on an RCA or compensation to affected customers. What's the longest you've seen a global enterprise paid service go down without any communication from provider? Did they recover eventually?
>> What other language would people choose in a browser? Lua?

Brendan Eich originally wanted to use Scheme. There are some Scheme in Javascript implementations:

https://www.biwascheme.org/

https://lips.js.org/

https://www.wescheme.org/

https://web.scheme.org/
Ah so I guess XFCE, KDE, and MATE are all just pretty much the same DE then.
A bit late into the war but better than never.
are there any archives of the video?
Very fair comment - clearly a lot has changed.

I do have to balance that a little with the fact that a lot is resting on the success of these nodes. It's almost the only good news Intel has, so we should be skeptical. That wasn't the case in 2017.
EDIT: wrote something stupid here before my morning coffee
A key thing to appreciate is that both Github and Gitlab support rendering Mermaid graphs in their ReadMe's

[0] https://docs.gitlab.com/ee/user/markdown.html

[1] https://github.blog/developer-skills/github/include-diagrams...
I do not understand the AI naysayers.

The other day I had an idea for a Chrome plugin. I'm a senior dev, but I've never made a Chrome plugin. I asked ChatGPT 4o if my idea was possible (it was) and then I asked it to create an MVP of the plugin. In 10 seconds I had a full skeleton of my plugin. I then had it iterate and incrementally add capability until it was fully developed.

I had to do some stylesheet tweaking and it asked for a permission that we didn't need, but otherwise it completely nailed it. Easily provided 95% of the work for my extension.

I was able to do in 60 minutes what would have probably taken several days of reading specs and deciphering APIs.

Is my Chrome plugin derivative? Yes. Is most of what we all do every single day derivative? Also yes.

How are people still skeptical of the value that LLMs are already delivering?
I actually did my thesis on plagiarism detection for code! Its developed by Ghent University and was initially created to replace Moss, the other tool mentioned. It’s called Dolos and its open source: https://github.com/dodona-edu/dolos
The Untold Story of SQLite (2021)
TS is actually has better typing than Python (mypy). And the whole React (Vue, etc) infrastructure around it. Without these two things I wouldn't even bother writing frontend code.
I recently looked into setting up a finger server on a spare Ubuntu box, but came up with nothing useful.

Admittedly, I didn't look very hard, so if anyone has some pointers, please share.
> I can't say for certain why they can't use GPLv3 - just that no company I've ever worked for (n=4 since GPLv3 came out) - will allow it on premise

My limited experience with IP lawyers at big software companies is that they have zero understanding of software licensing and patent law. They just seem to parrot some line they learned in college 10 years ago, even when the plain text of the license or law sitting in front of them proves them wrong. It's honestly baffling how they get these jobs.
Darn, I wanted to link the article.

Something that really stuck with me is that they seemed to believe in their gods in an interesting way: they specifically negotiated their vows, being very explicit about what is promised. Because they really expect the gods to punish them in the corporal world, shortly

We’re a lot more loose with our vows nowadays. Although to be fair, negotiations with all-powerful monotheistic gods don’t make as much sense in the first place, really. Most of these gods are so powerful that you can’t really offer them anything but obedience/loyalty/love.
I wonder if this-view-but-for-browser-tabs would be useful.

E.g. instead of opening 4 google search links as tabs, you could just open one "to the side" and quickly go to the next link if it turns out to be SEO spam (and avoid a click to close-tab or back-buton).
Okay let's say the app can be enabled remotely by someone other than the user of the phone.

What next? Have you looked at the app? What can actually be done with it? Please explain the exact steps an attacker would take next, with evidence.
Depending on the distribution of international / domestic students, this also sounds wild and in congruence with the other commenter.

If there is 10 out of 100 international students, and they do 30% of 10 cases, then 30% (!!) of international students cheat while only 7% of domestic students cheat - in conclusion, international students do most of the cheating.

Regardless of this statistical thought experiment, I don't know what to do of data like this. It is not really ethical to act on it.
I wish Reddit and Old Reddit supported Mermaid natively.