skysight-inc/HackerNews huggingface dataset:
The tl;dr here is:

1. Load secrets dynamically at runtime

2. Share internal creds via e.g. 1Pass

Environment variables (+managing them with .env files) are a better start than putting keys in your codebase, but this can also be leaky/hard to keep up to date.

Most cloud providers have some sort of secret management tool. Vault by Hashicorp is another solid option if you want to run your own.

If you’re hosted on AWS, I’m personally a big fan of Credstash[0], which is basically a simple wrapper around DynamoDB+KMS.

Cheaper than the AWS Secrets product and fast enough.

I previously built a config that would take secrets from Credstash, env vars, and .env files (in that order). This offered the best of both worlds for local and remote deployments.

[0]https://github.com/fugue/credstash
I just left a place that had three different tracking tools that devs had to update, with the Azure boards being customized with all kinds of unrelated 9001 process fuckery that necessitated failing to save any update ever until you dug out the field that was missing. The fields changed on each move across the board.

Unsurprisingly, they were planning a project to introduce another tool on top of it all. Pretty much just bike shedding the company into the ground.
The agile manifesto is pretty short and describes basically the opposite of “Agile” used today.

> Individuals and interactions over processes and tools

> Working software over comprehensive documentation

> Customer collaboration over contract negotiation

> Responding to change over following a plan

I would read it, but I am running late for my daily standup and haven’t finished updating JIRA yet to document my progress since yesterday’s standup.
Don't store secrets in env files. Use a secrets manager and a password manager. Configure SSO for everything. Use MFA for everything. Rotate your keys regularly. Do not allow long-lived user accounts to exists.

https://aws.amazon.com/secrets-manager/
https://keepersecurity.com/

What is a long-lived user account? https://g.co/gemini/share/84c224b18bf0
Reconsidering the energy efficiency of spiking neural networks
Best comment of 2024, maybe even 2025 just on trust.
Carbon capture is an energy problem
I'm curious what you feel is specifically missing.
I'm also a fan of XP, but it really wants everyone to be in the same room.

JIRA escalates quickly. You're smart to put things in place to prevent that.
This is a strangely important article, as this is literally the dumbest feature ever devised and it's shocking and bizarre that we're all sort of annoyed by how terrible it is on devices we've paid so much money for.

I was in a rideshare with my wife as we were headed back home from a concert last week. We had spent literally hours within a couple of feet with each other. We were literally leaning on each other, exhausted from the show, heading to the same place. Siri popped up to recommend she check in to let me - the person literally next to her - know when she'd be home. Good job, Apple.

I regularly get notifications when I'm out and about to check in to share the time it will take for me to get to my home with my elderly mother, who I have a good relationship with but who literally lives across the country, and who I have not lived in the same house with since 1990.

This is an extraordinarily badly designed feature, and it's truly bizarre that it made it into production in this state. If we're all paying nearly $1k for a phone, it shouldn't be nagging us with literally bizarre suggestions all the time.

Like with the absurd lack of iPad-like flipkeys or GBoard-like punctuation shortcuts on the iOS keyboard, things like this really make me wonder if Tim Cook actually uses his own iPhone or if he just has an assistant to manage his affairs. If I were a CEO of one of the world's most powerful companies and had issues like these with my own product, I would be like... this is going to change in the next point release.
If a company can make ASI/AGI I think it will be worth a trillion dollars extremely easily. Probably more. I think OpenAI is probably the most likely to make it happen right now.
I've heard Sr. Architects call Agile "formalized micromanagement."
"I'm clear of all accusations" lmao dude we're not in court
My suspicion is that these banking apps are running root detection code that look for the presence of certain other apps that signal "rootedness".

The stated reason is always "we don't want malware being able to steal your account information".

The non-stated reason is often "it makes our threat modeling easier if we can rely on the OS' defenses existing and working so we assumed. As a consequence of that assumption we are not entirely sure that what we are doing is safe from ordinary adversarial behavior on a device without these guardrails. So we don't want to run in such an environment and find out that our concerns were justified".
Iterative development is Royce's "Waterfall" model. It long predates Agile.

Agile is about eliminating management in favour of self-organizing teams. Hence how we ended up with all these tools (standups, Jira, etc.) to try and help developers do the work that managers would normally do.

Although, frankly, I'm not sure Agile ever happened. What we got instead were managers trying to force developers to use tools intended for self-organizing teams, but still with managers and without self-organization, and everyone suffering from the impedance mismatch.

Now that we're in a new age of higher interest rates, managers are realizing that, if they want to keep their jobs, they'd be best get back to doing the work themselves rather than trying to pass the work off to others. The passing of the buck is what we're seeing the death of.
Cars are essential to living in America except for a few cities. Car manufacturers can basically do whatever they want.

There was a recent YouTube video with a car thief that basically showcased a "special" tablet that could get any car started in a minute by plugging into the OBD port. Pretty shitty security model if it relies on no tablets getting out.
Here's some recent discussion of the non-pro version

https://news.ycombinator.com/item?id=41562846
Because the Tor project is the only anonymity network with enough cover traffic and nodes to actually provide a reasonable amount of privacy to users. Yes, there are attacks that are possible but they are typically costly (at least ones that aren't targeted at hidden services) and are mitigated using recent inventions like Vanguards.
There are two methodology that are both called "Agile". They are very different, even opposite to each other.

The one you will find in the Agile Manifesto and related writings. e.g. "Individuals and interactions over processes and tools"

The other is a top-down, upfront-planned, tool based, process heavy corporate method of task-based micromanagement. Usually in Jira.

There would be no point in killing Jira, as the management that wants what it does, would simply find a similar equivalent.
We subsidize unhealthy food and wonder why most of our food supply is full of gluten and sugar and other slow-acting poisons, then we take meat and other essential animal proteins that people survived on for millenia and either process them until they're basically nutrition-free or make them so expensive that it's no longer viable. If people in charge thought solving problems was good for them, they'd do that instead of creating them. It's far more profitable to create a problem so that you can sell an expensive treatment for it.
Sounds perfect. I didn't know of this, but I think I'll start here.
Yeah JSON_TABLE looks pretty cool. Here's the details:

https://www.postgresql.org/docs/17/functions-json.html#FUNCT...
It’s a good point. I haven’t scrolled around much either but there’s going to be selection bias here.

I made a portfolio website and had some projects on it. The projects got me hired but the portfolio website itself didn’t. Again, this was for my first post-college job. I shouldn’t have needed portfolio projects but even ten years ago - hiring for new grads was incredibly hard. It took me about nine months to land my first post grad job and another nine months to land my second. I had done 15 onsites to get my second offer! It has never been easy to get a job in this field in the last decade.
MTBF of 13 miles, where "failure" could mean "fatal auto crash", sounds pretty terrible to me. That's 5 times per hour at 65 MPH.
I love the idea of agile. And I've tried to apply the principles to hundreds and hundreds of projects.

But as a consulting type, I've never understood how you run a project with a fixed (well, ok, continuously growing usually) scope, a fixed budget and a fixed timeline. Which are basically the constraints on every single project.

I think I have found though, that if you can get a client that will spend the time to really define the project goals and how they will be measured, you can almost steer the scope in the direction of priority features.

Then, you can be somewhat successful with running agile on certain parts of a project (like UX design), while "phase-gating" other components of the project that have real dependencies.

You end up, in effect, with a waterfall process with some phases being done using agile methodologies.
I'm writing this while sitting in a "sprint demo", mobilizing the entire dev team, wasting time and money over 2 hours to demo a bunch of small features with no tangible ROI.
With rent control, it seems to be it mostly (always?) seems to be implemented in a binary fashion: a geographic area tends to have most (all?) units controlled or not. When it is removed, then folks can be grandfathered in, so anyone who stays put is fine, but once a unit becomes vacant the unit becomes uncontrolled.

I'd be curious to see a 'sliding scale' implementation:

* all newly built units are uncontrolled

* all units that are 5-10 years old have a maximum rental increase of 3xCPI

* all units that are 10-15 years old have a maximum rental increase of 2xCPI

* units >15 years old are rent controlled (~CPI increases)

Is anyone aware of jurisdiction(s) that have done such a thing?
I don't mean this in a snarky way, more just to inform: proscribed actually means forbidden unlike the word prescribed, which means recommended.
One issue is that many many ticket management solutions suck a lot more that JIRA.

As an analogy, it feels the same as saying "git sucks", and going on a journey to try CVS, SVN, VSS, DropBox's version management, Apple's TimeMachine, Synology's file management etc. to discover the strength and weakness of these random solutions one by one.

At the end of the day you end up really liking git, but when telling to people that git is really great you're met with grunts and middle fingers.
shockingly the solution is harder throttling...
"Agile Ceremonies Bible: the decline of the Church of Agile", this will be the tile of my next book.
Fair enough. Sigh.

I can't help but wonder if the initial blowblack didn't cause some amount of oppositional defiance. or if the FSF just can't operate without him or the inverse. Kind of his life's work.

Not excusing his behavior, just trying to understand it (without putting in enough effort to really understand it, I suppose). I guess I still have to hope that there's some plausible explanation beyond "he's a shitty person".

Maybe there's room for a new foundation for anyone that wanted to pick up the torch. Aside from that, I'm not really sure what there is to do.

Thanks for defending the ND world.
Have you seen the software development job market? It's absolutely awful, the worst it's been since the internet became mainstream.
For anyone else unfamiliar with this initialism:

> Cost of goods sold (COGS) refers to the direct costs of producing the goods sold by a company. This amount includes the cost of the materials and labor directly used to create the good. It excludes indirect expenses, such as distribution costs and sales force costs.
0. It takes too much effort to create and manage tickets. There are too many things to click, too many fields too fill, and half of them should be auto-filled.

1. Manager types think JIRA is a solution to getting shit done when the real problem is bad communication and politics.
Fast tests for slow services: verified fakes
OpenAI Takes Its Mask Off To Reveal What It Really Is
You know, you can just talk to me about my wording. Where do I meet those gullible venture investors?
You're right, most places I've worked this applies only to a subset of branches, usually main/master and sometimes other branches considered "stable" such as for the staging env.
We have an obesity epidemic because our food is poor quality and loaded with calories. It's loaded with calories b/c it's cheaper to make it taste good by adding sugar or oil rather than using quality ingredients. People don't have time to cook homemade meals b/c they're working multiple jobs. They have long commutes and work long hours and don't have the energy to cook when they get home. A pill to curb your appetite is just a bandaid. Your appetite isn't the problem. It's our food and work culture that is designed to benefit the business owners not us.
Google has deep pockets and SOTA hardware for training and interference
Your use of communism here is a strawman to not talk about socialism. Socialist programs is what kept the world from going back to feudalism.
Every individual, and on a broader perspective every group, has innate preferences to different forms of organization. It‘s called contingency theory. Agile fails because it was a form of adaptive organization, built out of the highly adaptive/performant cultures of software development, that was never able to be scaled like they tried. In major part because it lost the adaptive aspects in the hard-coded systems, and created unproductive busywork because people were too busy putting something on the board, rather than focusing on work.
If you want an overview of available tools, I published one a while ago: https://hsm.tunnel53.net/article/secrets-management/

If you want something simpler, have a look at SOPS: https://github.com/getsops/sops
Are Startup Accelerators Worthless?
I've massively limited use of scratch in my house because of the "social" aspect. instead of being creative and learning about programming they spent most of their time looking at recommended "programs" by others which mostly consisted of meme videos, annoying sounds, gen alpha slang etc. I never saw much programming "inspiration", at times it almost seemed like allowing them to use tiktok. did anyone else have this experience?
if you don't address a root-cause, you will end up with a mess of patches and spaghetti to work around it which will just grow and grow. it's literally an unhealthy way to address problems in any system, regardless of how effective the patch is.

it's not bad we have the patch, indeed it's a good thing, but the patch should not remove the need to address the root-cause.
the description of the previous (bad) law as 'rent control' represents malicious disregard for the truth. 'rent control' idiomatically means, in english, limitations on raising rents over the entire period of time a tenant inhabits a property, not over the predetermined term of a lease. the wikipedia article explains:

> The loose term "rent control" covers a spectrum of regulation which can vary from setting the absolute amount of rent that can be charged, with no allowed increases, to placing different limits on the amount that rent can increase; these restrictions may continue between tenancies, or may be applied only within the duration of a tenancy.

argentina has never, to my knowledge, had rent control in any of these senses. when the lease expired, after three years (or previously two) there was no restriction on how much the landlord could demand in rent to sign a new lease. commonly it would be several times the old rent, due to inflation. three years ago the dollar was 184 pesos https://dolarhistorico.com/cotizacion-dolar-blue/mes/septiem... so a 250 dollar rent would have been 46000 pesos. now it's 1230 pesos https://dolarhistorico.com/cotizacion-dolar-blue/mes/agosto-... so those 46000 pesos would be worth 37 dollars without the yearly inflation adjustment

the text of the article sort of admits this by omission, while implying the contrary through its dishonest choice of wording. this is in sharp contrast to the integrity and reliability i normally expect from reason—i often disagree with their values but rarely with their facts

this has misled commenters here such as https://news.ycombinator.com/item?id=41659436
In the 1990s, I was working on eCommerce and was sent to our factory in another state for a week to understand that side of the needs, then a few days at a customers place of business in another state. This was a government contractor. Understanding the whole process was important even in that industry at that time.
I think this counts as flight time, not paperwork & preparation time on the ground.
Is really a friendly trade or just plounder?

https://dialogue.earth/en/pollution/741-china-s-environmenta...

The Chinese oil company Sinopec has been charged with mass pollution, dynamiting areas of a National Park in Gabon and carving roads through the forest

According to GlobalTimber.org.uk, China is sourcing huge amounts of wood from forests in Cameroon, Congo, Equatorial Guinea, Gabon and Liberia. What is worrying is the illegal nature of this trade

Half of all wood imported from Cameroon into China is harvested illegally. In Gabon, 70% of wood exports to China are illegal. In Liberia 100% is illegal

The case of Nigeria and its Niger Delta oilfields is well known as an environmental disaster area
For sure, I agree. However there is also a context switching cost and IMO switching between your IC work and, say, a dozen small diffs is rougher than a couple larger diffs. That opinion said I haven't experienced fast reviews myself, so maybe that's what I'm missing.
we can spin the semantics how much we want, but if you ask 100 managers what they mean with "agile" is "do things faster".
This is actually a good idea. I say we go even further and stop wasting so much money cleaning up after companies - get rid of the entire legal entity known as a corporation and let investors shoulder the full liability that comes with their ownership stake.
So why is it hosted on IP addresses associated with the foundation?

%rwhois V-1.5:003eff:00 rwhois.singlehop.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:ORG-SINGL-8.198-143-164-0/24
network:Auth-Area:198.143.128.0/18
network:IP-Network:198.143.164.0/24

>>> network:Organization:The Wordpress Foundation

network:Street-Address:660 4TH ST # 119
network:City:SAN FRANCISCO
network:State:CA
network:Postal-Code:94107
network:Country-Code:US
network:Tech-Contact;I:NETWO1546-ARIN
network:Admin-Contact;I:NETWO1546-ARIN
network:Abuse-Contact;I:ABUSE2492-ARIN
network:Created:20171214
network:Updated:20171214
I used to think JIRA sucked until my company migrated to ClickUp. In general most of the tools can be made to be usable if a tech lead or engineering manager can tweak them to what a team actually needs. Usually they are left in the hands of TPMs or Scrum Masters who generally make the whole process too heavyweight and complicated.
1. The world* is* everything† that is the case‡
Would you answer:

> If every time you voted for a prosecutor, and every time your vote was in a minority, would you still feel you had a say in the bias of the prosecutor?

You said previously at least by voting you had a say in the bias. Is your answer to the above a genuine "yes" because you feel there was opportunity to lobby other citizens?

I don't agree that there is necessarily even that possibility. Thus my position is that elected or appointed by an elected official are equally broken.
IMO it's a good example of where government regulations are needed (max hours for salaried workers, overtime rules for wage workers etc) because otherwise its a tragedy of the commons type of situation. If another business can (and will) exploit their workers, they will undercut you because their costs are lower so you either need to do the same or go out of business. It has to be an outside party that looks at that situation and realize that's not good long term and stops it because businesses won't.
You can have a shared password manager, 1password is good for this. I forgot how expensive it is, but for families its like 3 euros
Donations are not investments. They don’t result in ownership.
The free tier API isn't US-only, Google has removed the free tier restriction for UK/EEA countries for a while now, with the added bonus of not training on your data if making a request from the UK/CH/EEA.
Perhaps I could be less condescending, but is it not teaching, and constructive feedback, to warn this poster that it's impossible to diagnose without much more context, rather than engaging in wild speculation like other commenters? It would seem that they're the harmful ones. And I did suggest several avenues for superior support, rather than trying to tackle it all alone.
Somewhat related website: "Real opinions from real people about a project management system which unfortunately is also real"

https://ifuckinghatejira.com/
> I more worry about AI hoovering up my hard work... I still appreciate some recognition and am not writing to feed a machine.

I don't get this focus on so-called AI. Google and other bot farms have been hoovering up hard work wholesale for decades, even intercepting clicks and credit via things like AMP

If people give up writing, then only bots will be writers. Damn the technology and keep posting
I hate labelled methodologies like "agile" and "waterfall". Manager types routinely think that they're going to change the world by being "agile".

I mean, as a fast learner, I'm already agile, have been for 20 years, it's not like you discovered it yesterday. Lots of people have been agile for thousands of years.

In reality things get done if you, the manager, unblock blockers, fund necessary shit without piles of documents, make employees happy to work, and make sure nobody is wasting time doing things they are not good at.
Honestly not that surprised, the only surprising thing to me is how little of a slap on the wrist this feels like.

It felt like a shaky premise at best as far back as I can remember. Even "standard" things often have many intricacies that a person might not know to say, and it may not let them know/ask them about it.

As an example, think of all the questions TurboTax et. al ask about taxes.
it sounds more like the sequel "children of ruin" children of time primarily involves spiders.
I run several sites but 2 of them tend to come up more in interviews and are all linked from my GitHub profile:

https://sfc.fm - A website to listen to Super Nintendo music in the browser. Folks usually find this more cool, talk about WASM and covers several common things we can skip over talking about items like RESTful APIs and random JavaScript questions.

https://wiki.superfamicom.org - A website for all things programming the Super Nintendo. This tends to be more interesting to management folk (which is interesting on its own) but tends to be a point in an interview where the "can this person actually program" questions end and culture questions start getting more specific. Recruiters also tend to latch onto this one as well.

No one ever mentions my blog, but I don't post all that much and the content is technical, but usually very niche.
Coincidentally it seems the reason Jira is a mess is that it has too many PMs chasing too many features.

Maybe this was the point of the linked text but I could not get past the paywall.

If it was just a board with cards with text it would probably be quite usable.