skysight-inc/HackerNews huggingface dataset:
> I'm fairly certain the first rule of websec is you never trust the client.

Not every piece of information is confidential in every system. Sometimes a UUID is just that, a UUID.

> you have a centralized system that hands out chunks of IDs on-demand

I don't follow. If your system requires a central node that can reliably generate unique auto-incrementing integer IDs, why bother with UUIDs at all? Just base-64 encode the integer ID, or hash it with a salt to protect against enumeration attacks, if you want.

If you don't want the dependency to a centralised system, just use UUIDv7, which is just a timestamp plus random bits, or implement a shorter version of it. There is no need to overengineer.
And this is the first news today, OMG...
Turtling isn't a viable strategy unfortunately. You would need something sci-fi like force fields for "pure defense" to be remotely viable.
Sort of like this?: https://drivers.coop/

"We are a driver-owned cooperative in New York City specializing in paratransit and Non-Emergency Medical Transportation."
For decades, the emperor had been complaining about tinfoil hats and their ability to block the imperial mind reading machines. In ever increasing bouts of frustration he even had his lawyers claim that Big Foil were directly responsibly for child abuse and terrorism, instead of the abusers and terrorists themselves.

Then one summer the emperor’s alchemists discovered a way to get radio vapors to pass through sheet metal, unabated. They kept their discovery top secret and patched their mind reading machines with the new technology. Once again the emperor could hear everyone’s thoughts and it no longer mattered if you were wearing a tinfoil hat or not.

Now that his problem had gone away, was the emperor so naive as to have his lawyers — expensive lawyers — stop their litigation against Big Foil? Should he pretend he had changed his mind and everything was fine now? Maybe even peddle some “anti-mind reading” hats of his own?

That would be silly and very suspicious. In fact, the emperor was so paranoid of any suspicion arising that he increased the intensity of the crackdown on foil hats, even going so far as to arresting the CEO a popular hat maker when he flew into the country on business.

He wouldn’t outright ban foil of course. Not only could the emperor now read everyone’s minds, but by comparing the new machines output with the old he could tell who was wearing a secret layer of tinfoil under their hats. It was these people that had the most fiendish thoughts, thinking that no one was listening.
The Police Chief advocating for his subordinates 5th am rights seems outside his job description. "Who's ox is being gored here" and why?
Telegram messaging app CEO Pavel Durov arrested in France
The US dream of "making it" is all about money.

What we in Spain consider "making it" is to enjoy life, having time to relax, pursuing hobbies, spending time with family. And not having to worry about healthcare bills and pensions. We don't need a lot of money for that. I don't always want more. I just want enough.

In the US the vast majority never "makes it" and they are far worse off than we are here. I think Europe is great the way it is. I would not move to the US even if I was offered a job there. In fact I don't even want to visit and never have though I've lived in many countries around the world.
Usually someone allowed to defect has some value in terms of information they can provide. North Korea while a threat, isn’t exactly a near peer competitor. Especially in defense capabilities.
That's just reality in North Korea. It's not any of the ordinary citizens' faults, but they all essentially have to be assumed to be coerced puppets of the state if they're perpetrating such application fraud. (Though, really, a company shouldn't be accepting fraudulent applicants even if they aren't spies.)

I'm sure there are plenty of North Koreans who are qualified (whether they are or aren't working for state intelligence), just as plenty of people working for Chinese intelligence are smart and qualified and decent people, like you mention, but we don't live in an era of utopian world peace where such things can just be overlooked when giving people access to sensitive systems, and we may not even in ten thousand years from now. We shouldn't expect Chinese tech companies to accept applicants working for CIA or NSA, either.
From my discussions with various LE agents and attending a few talks, NK will send them off to some of the best colleges in either India or China to learn programming, computer science, networking, hacking, and etc. to learn and get a good education. Then they either travel back to NK to become part of something like Lazarus Group (NK nation-state hacking group), or they get assigned to something like this employee scheme to obtain and send funds back to NK.
This is really cool.

Besides the obvious “have idea, build idea”, how can one start a successful challenging open source project like this?
It will be most interesting how this applies to teachers, who often have to prepare lessons and mark work outside of hours.
> Anyone can publish a third party library

I propose leftpad.js
Mind sharing which speciality?
Hey, thank you so much for your kind words!
Get me open source Jolt and I'll be all over it...
India misses ten million public WiFi hotspot goal, catchup not looking likely
The article is literally presenting the case that crypto is ALL a scam (emphasis not mine). Obviously not true, and attempt at logical argumentation in article is painful.
You’ve got plenty of paid options with Stripe, but here’s the catch: trying to match what you see in the Stripe dashboard with exact cent accuracy using queries is a total headache. in addition, it would be simpler to add an option to pull that data via an API call.
> Knowing someone's phone number doesn't automatically

One way or another, phone numbers are like home addresses in the digital world. Once exposed, it’s just a matter of time and resources dedicated to that. Not to mention, sometimes it’s just needed to cross over the identity, that’s it.

> This is a nirvana fallacy. It's essentially saying

I didn’t say that. As I mentioned in the other comment to you, some or a lot of people just don’t care about security, and as long as this info is known, it should be treated just like any social media.

Great project with TFC, I never heard of it, but it looks interesting. I would definitely give it a try! I have a question though: does your project require a phone number? If not, why? And would you recommend Signal to anyone who is after security, privacy, and anonymity?
I didn't realize I was such a daredevil!
Thanks! Macroexpanded:

Database “sharding” came from Ultima Online? - https://news.ycombinator.com/item?id=35479553 - April 2023 (89 comments)

Database “sharding” came from Ultima Online? (2009) - https://news.ycombinator.com/item?id=34694397 - Feb 2023 (1 comment)

Database “sharding” came from Ultima Online? (2009) - https://news.ycombinator.com/item?id=23438399 - June 2020 (172 comments)

Database “sharding” came from Ultima Online? (2009) - https://news.ycombinator.com/item?id=17926566 - Sept 2018 (1 comment)

Database “sharding” came from Ultima Online? (2009) - https://news.ycombinator.com/item?id=16343939 - Feb 2018 (1 comment)

Did the term 'sharding' start with Ultima Online? - https://news.ycombinator.com/item?id=425765 - Jan 2009 (3 comments)

As for https://news.ycombinator.com/item?id=36848605 - I've added it to https://news.ycombinator.com/highlights. Thanks!
Most of the indica of "North Korean workers" are also correlates of protected hiring characteristics ("names that didn’t match their ethnicity"). If the United States federal government has a reason to dislike your company, they will use your efforts to suggest illegal hiring discrimination, as they did when they attacked SpaceX for not recruiting "refugees" to work on export-controlled dual use rocket tech.
The question of how the SF officials feel about X moving headquarters out of SF. I highly doubt David Chiu picked up the phone to call the New York Times to offer up his opinion unprompted.
Damn. I dunno, I was just trying to be nice. :(
A very large investment in time which you think would pay back better as an employment assistance company above board.
Yeah. I'm sure it's for something like that.
My understanding is that every police officer has either personally done something unethical or has watched another cop do unethical shit and look the other way. I have personally literally never heard of a cop holding their fellow cops accountable and not been punished for it by other cops. If you know of something, please tell me. I could use some more positivity in my life.
Not entirely sure what point you're trying to make, but I use USD to buy things to live and enjoy life, yet almost none of these USD are in M0.
Big Mistakes That Almost Cost Me My Promotion (and How You Can Avoid Them)
You may do well because you’re lucky; luck does not scale.
I wouldn’t say anti-innovation. The EU just places more value on protecting workers/consumers than businesses. I can understand that to a lot of Americans a government that tries to protect its people from businesses may not make sense. But most of us in this side of the world cheer on when big companies like Apple have to bend to the EU. Yes, even if it makes starting my own business more difficult.

As a European entrepreneur I care a lot more about consumers/workers being treated fairly than I do about innovation. I know the EU does not always get this right. But man, the US treats is workers and consumers like crap.

I wish I more fully understood the cultural differences that makes this business-first stance so prevalent in the United States.
There's some gain to be had in that I can reliably expect md5 to be available and compatible with pretty much anything back as far as Perl4 or PHP from the 90s, right up to bleeding edge version of Rust or Clojure or exotic language de jour.

Whether that's actually worth anything for a particular use case is a good question, and the answer will mostly be "not just no but HELL NO!"
This is a beautifully designed blog interface. It’s one of the best I’ve seen, making it a pleasure to read.
Yes. A lot of tech history has its roots in gaming. And Trammel is for carebears.
Recent and related:

Telegram founder Pavel Durov arrested at French airport - https://news.ycombinator.com/item?id=41341353 - Aug 2024 (968 comments)
> No online presence

I wonder how they would screen for new graduates, which might not have much professional work history?
So if I attempt to rob a bank with a gun and use a getaway car - the car company and gun manufacturer are responsible for facilitating my heist?
What do people think of SimpleX?

https://simplex.chat/
In this other universe, would the entrenched taxi operators willingly embrace new technology such as this, rather than continuing to provide a sub-par experience enabled by their entrenched position & political lobbying? Because that certainly didn't happen in this universe.
I don't really understand, they claim to have shut down the servers but his switch is still online. If I pull out my 3DS and try to play, would I be able to connect? Or is his switch just bugged out.
I Got 'Professional' AI Headshots to See If Photographers Should Worry
Ahh, the old days! I learned a bunch of OpenGL off NeHe. I even won one of the demo competitions. :)

Another great one for general graphics/demo/simulation coding was "The good-looking textured light-sourced bouncy fun smart and stretchy page" (https://web.archive.org/web/20031218105827/http://freespace....)

And for landscapes in general, Ken Musgrave did some awesome work although I'm having trouble digging up the more technical stuff he used to post.

And then there was software like Terragen and Bryce could produce some great rendered landscapes. It's getting me all nostalgic. :)
In a strong market the management and owners will have to pay more and improve conditions.

Maybe some managers will be faster to exploit things when supply/demand turns in their favour, but pretty quickly the invisible hand of the market would have readjusted anyway.
For someone that has two personal emails and 1 work email, which means three calendars. I can definitely see the value in this.

Going to give it a try!
Dupe (1085 points, 1 day ago, 1014 comments) https://news.ycombinator.com/item?id=41341353
I believe the quote is to "Make things as simple as possible, but no simpler".
How much time do you book keeping to claim all of that?
Except that in the case of Telegram, there is no French incumbent.
The CIA is responsible for scores of human rights atrocities and far-right coups.
(not a lawyer!)

Even if he is right (I firmly believe he is not) and police have a right not to incriminate themselves via body cam footage, this would only preclude courts from using footage as evidence of a cop's crimes. But what if the footage also contains evidence that a criminal defendant is innocent?

Chief Medina throws the baby out with the bathwater.

Of course the solution is not to turn off body cams. They serve a massive public good apart from catching police malfeasance - though that's good too.

The police do not have a constitutional right to prevent bad PR or boxing cops in on the facts with video.
The article states that the biggest factor was user misunderstanding of the options, not so much the number of different options. In other words, if they offer option A at $x and option B at 10*$x, if most users mistakenly think they need option B, the calculator is misleading.

Also, I'm a big fan of "contact us for pricing." It's annoying for users who are window-shopping and want a quickie ballpark, but it helps you identify cases where standard pricing (or pricing which can't easily be described online) can be negotiated, and which the user would have otherwise overlooked. This doesn't work for things like most ecommerce, of course.
There's a much closer example I think people here would naturally understand and even advocate for, without connecting it to the phrase:

"Trust but verify" means letting a junior do the work you assigned them, then checking it afterwards in testing and code review. Not trusting would be doing it yourself instead of assigning it to them. Trusting but not verifying would be assigning them the work then pushing it live without testing it.
Writing programs that compile is much easier in C. It lets me accidentally do all sorts of ill-advised things that the Rust compiler will correctly yell at me about.

I don't remember it being any easier to write C that passes through a static analyzer like Coverity etc. than it is to write Rust. Think of rustc like a built-in static analyzer that won't let you ignore it. Sometimes that means it's harder to sneak bad ideas past the compiler.
The old saying....Some variation of.... If you fire your bottom 10%, your top 10% will also leave.
Crypto and Bitcoin will not survive the next global economic crash.

The hype is long gone already.

But Bitcoin is somewhat suspended in the air like the coyote, it could last some time, until enough holders need to go liquid.
I had a similar experience with an HR manager in Australia, boasting about how they'd used a recent downturn to cut individuals' hourly rates by 10% (including many of my friends), while not reducing the charge-out rate to the client. Corporate management (as distinct from small business) selects for people like this.
I'm not sure why it's on me to provide evidence against such a broad and sweeping claim about more than 900,000 individuals in 18,000 departments. Your claim is statistically extremely improbable on its face (except insofar as no one on the planet has never done something unethical), which is precisely my point: when you're dealing with nearly a million people in 18000 organizations spread across a country the size of the US you get a lot of variety.

As for producing evidence: of course I can't, because "police officer reports misbehavior through appropriate channels and the infringing officer is disciplined early in their career before they caused a major scandal" never becomes a headline for obvious reasons.

My personal interactions with police officers who truly believed in their mission to protect and serve and believed that the majority of their colleagues felt the same way are all I have, but I imagine that that's inadmissible.
Yeah, and? Get. Yeeting.

I'm messing with you. Mostly. But you have to assume, as the premise, that these sort of things can be solved. Notably, you have to sling a lot of matter at it, so you may as well sling a lot so you can miss some. And maybe the leftover matter getting heated up by radiation/particle cloud is part of your energy recovery mechanism?
Interesting to see the US perspective on this.
The issue with this is that it's illegal in a bunch of places.

I would love to drive for Uber when I have a bit of free time, but I'd need a licence from my local authority, and taxi insurance which is unrealistically expensive to obtain on a ride by ride basis.
Grammarly SDK has been deprecated
I knew Grammarly might have been notorious and the SDK has been deperacted on January 10, 2024, followed by a lay-off[1]. Personally I have been using the VS Code extension[2] based upon and recently, I find the API is finally unusable.

[1]: https://news.ycombinator.com/item?id=39295962

[2]: https://github.com/znck/grammarly/issues/411#issuecomment-19...
Bikeshedding for Fun and Profit
That “there is very little reason to hate Firefox more than Chrome” is hardly a compliment.
"What kinds of people operate tor exit nodes and why do they do it" is one of those questions that I know I'm not even supposed to admit being curious about, let alone ask, in the company of people who are most capable of accurately answering.
I believe the first iPhone did the work of crushing [Canadian] Blackberry's dominance.
Some points for you to consider:

Charcoal is very much in use around the world, forests are now small enough that entire forests are marked to make way for mines, and forests are not-self renewing on time nor does a mine convert back into a forest.
A huge part of the arbitrage here is cost of living and cost of labor across national borders. They'd never make the same aboveboard doing employment assistance because their clients would all get locally competitive salaries, which are very low compared to getting hired under the pretense of being in the US.
North Korean engineers aren't nearly as scary as a "Trust and Safety" company founded by ex-CIA operatives.
Citation needed for New Zealand being pretty much 'at will'. Especially for large companies.

From https://www.employment.govt.nz/ending-employment/dismissal

If an employer wants to dismiss an employee (end their employment), they must:
* act in good faith
* have a good reason

Redundancy would cost three months reasons and Uber would be required Uber to argue, not that the person doing a job isn't a worthy employee, but that the role they perform shouldn't exist in the company anymore – a hard argument for Uber to make about their drivers I imagine.

> NZ has government provided healthcare.

Which contractors have to pay for through ACC levies.
>From what I can tell, there is very little reason to hate Firefox more than Chrome today

Firefox is considered by experts to be less secure than Chrome, is one reason.
My theory that it's a sophism to mollify people who are offended by not being trusted, or to mollify people who think not trusting is rude.

I'd just assume see it not used though.
YC alums have never had more voting power than others. At least I don't remember any time when that was true.
An unpopular opinion: one of the parents is a full time care giver.
Many users will see "contact us for pricing" and assume that means you can't afford it. That's fine if your customers are enterprises but definitely not for consumer products that middle class people might actually buy.
I'm going to use this - thanks!
so they would have info about their school - professors, classes, clubs
It's not taboo—this kind of repetitive meta-discussion is so common that users get tired of it and tend to flag it.
How’s it going?
Maybe obvious question. Were in-person or video interviews done? Seems so likely to get caught.

So fascinating as well having a person that was paid to do the interview. I guess there is a secret web site where people are waiting to do this as a service?
Both systems think they are right, both are coping. One is slave to hustling and greed with no time/chance to enjoy basic things in life. The other will always be under the boots of the employees/managers and complain while enjoying basic things. Both are slaves to their masters, just enjoying a comfort enough to keep going at it.
A police officer on duty, or in an official vehicle has zero expectation of privacy aside from being on break (say to go to the bathroom).

They are expected to fill out a duty log as a part of their job which may be used in an evidentiary capacity, and any failure to ensure that an issued piece of equipment is not used in support of that is a dereliction of duty.
>>> I'm a big fan of "contact us for pricing." <<<

I have opposite feeling about them. They are like open invitation to give the sales guy a window of opportunity to look up your company website, and markup the price accordingly.
I'm sure they have a few thousand such candidates out and about.

But surely insignificant to the hundreds of millions in China, India, Indonesia etc.

Why DPRK when the alternatives are so much more numerous?

The entire population of DPRK is only 26mil, the entire country is half the size of the city Jakarta.

Most Americans probably outright lie on their CV, that tells you nothing.
> Except for one person, it never occurred to this very smart group of people that removing the source of confusion could be a good option.

Reminds me of the quote: "It is difficult to get a man to understand something when his salary depends on his not understanding it."

That applies to us as software engineers too, our salary depends on having projects to write code for so it's not so surprising that a very smart group of people don't often consider that doing nothing or removing something is a valid solution. I like the author's observation on this too: it would be nice if removing things were rewarded. I wonder of the employee who questioned the calculator's necessity got any reward.
I guess this explains the endgame of https://news.ycombinator.com/item?id=40571145
Thanks for the correction! I'll take it out from the list above and put it here instead:

Introducing ArcticDB: A Database for Observability - https://news.ycombinator.com/item?id=31260597 - May 2022 (31 comments)
It's Apache licensed. Clause 4 does say some things about accreditation, etc.

IANAL, but simplifying the [what-I-call] legal enumeration, it says: "You must retain, in the Source form of any Derivative Works that You distribute, all copyright notices from the Source form of the Work".

Did you put any copyright notices in your work? If not, it may be too late, because they can continue to distribute the old version that did not have copyright notices.

There's also some requirements that they clearly identify anything they have changed, but I'm guessing they haven't changed much. Maybe their sneaky way of changing the branding would violate this? I don't know, IANAL.

If you believe they have not complied with this part of the license, then what they are doing is no different than hosting your copyrighted movie or book on GitHub and you can send a takedown request, sue for damages, etc. It may not be worth the cost though.
I feel like with the warranty usually lasting 50k or so, it’s reasonable to say many people wouldn’t keep a car, or have ever planned to, past 150k, even if the car is perfectly drivable 8 years on with that mileage.

My car is that old, and I expect to keep it at least 8 more. But many would have traded in by 8 years especially if they drive so much more than me.
or the product is still being built out and they don’t know how to price something in beta