skysight-inc/HackerNews huggingface dataset:
I created Remote Friendly in part because there still aren't many places to find remote jobs (a few sites I've visited seem to recycle content from each other or StackOverflow). I've been teaching myself to code and I wanted a project that felt achievable which would also be useful. Creating Remote Friendly allowed me to learn a great deal about starting with an idea and seeing it through to completion.
That's what I'm saying. Most people avoid public toilets and the initiative is a little compensation for a fact that restaurant owners can't change anyway. In my opinion it will not change peoples behaviour.
It actually can be so hard. People who call these services that mainly expose
ad-hoc defined RPC interface "APIs" tend to overcomplicate their code. You get
plethora of endpoint URLs, GET parameters, methods, HTTP headers, and queries
encoded in JSON or XML or GraphQL or whatever sent in request body. It Ain't
No Simple Thing[tm] with this many dimensions.
The latest major Windows 10 update added more EMET features. I imagine by the time EMET is retired, it'll have everything. Retiring EMET seems to be another underhanded trick by MS to get everyone off Win7 and onto 10. Enterprise that depends on it for security will be forced to move sooner than planned, or at least, not be allowed to skip 10 as by the time Windows 11 comes out, 7 will be out of support for quite some time.
You don't understand: in order for Oracle to acquire it, it doesn't have to make sense: it just has to make money.
I'm not normally interested in Opal per se, but it would be great for this. I'd much rather write Ruby for simple call/response APIs than JS.
News flash: If you expose a device web-accessible port to an internet IP with no firewall and leave the default user name and password intact, it will get hacked.

Put your shit behind firewalls and change the default user name and password to something secure. This is common sense stuff, people. Port scanners have existed for ages.
How would the malware even know that the camera was connected in? Especially if you're on a home network (which is firewalled / has NAT on).

I suspect that it must be the central server that this camera reports to that is infected, either directly, or indirectly with some program sitting at a nearby router listening for traffic.
> I'm still getting email :)

While obviously this is not about preventing you from "getting email", you might not have received everything. You should consider the service compromised.
It really depends on how you underpaid or underreported your taxes:

https://en.wikipedia.org/wiki/IRS_penalties

Note that you can only be penalized if you screwed up. If you've paid your taxes appropriately, there is no penalty. So yeah, to the best of my ability I've filed my taxes accurately and paid the amount due, and I've never had to pay an IRS penalty.
What is a good security camera? Who makes good ones?

I haven't been able to find a company who provides a quality POE device that allows me to control the feed into something like Zoneminder.

Do I have to use something more analog to be "safer" from something like this?
Which security measures make sense for a static web site?
I've already acknowledged it as a problem. Simply throwing a bunch of links at me isn't going to alter my view or anyone else's. If you have an argument to make, make it.
For someone who knows very little about this subject, could you elaborate?
Not as such, no. The stroke in SVG has either a round or square end, but no arbitrary shape. Calligraphic strokes are usually represented by a filled path, which you cannot animate that way. SVG 2 also doesn't provide anything in that way. It's probably too much to ask to push path rendering with shaped brushes onto the renderer implementation when authoring tools can just as well create a filled path.

You might be able to achieve something like that with a filter, which could then rely on the underlying path being animated, but I'm not sure where to begin in that case, or whether it's possible.
Previous discussion on the original tweets: https://news.ycombinator.com/item?id=12985974
Wouldn't something like Mario be a better fit for that resolution.
> anything below the server application is often considered the domain of "operations"

So people who write operating systems and virtual machines are 'operations'? I don't think that makes sense.
It's a fair point. Not all users are equal but I'm very unconvinced by this user's issue because there are a million little oddball use cases out there and Apple does not solve those for everyone. The only issue here is that they used to solve this issue for this user and now they are maybe taking it away.
‘Things are getting weird in the polar regions’
Indeed.

I probably would have picked Cantrill for the quote myself, but I have absolutely no subtlety.
We can choose the argue about the scope of the effect (I think it goes beyond just pain and inflammation, and don't think it's limited to mu-opioids), but generally, yes, pain and inflammation are the two areas where the placebo effect has been seen to occur in a well-powered, well-controlled study.
You'd be surprised. If you've ever racially identified on a standardized test, guess what, you've just set the is_black feature.
There is no such thing as objectively "correct thoughts" in this context. There are numerous approaches that can result in success with a start-up. Some people are comfortable with more risk, some people prefer less risk. Sometimes in hindsight a situation that appears high risk, is in fact much lower risk than most observers anticipated (Facebook is an example of that, nearly every valuation stage was widely pronounced to be absurd). As an entrepreneur, I'd argue the best scenario for one's self is make sure the risk you're taking is a relatively close match to your own tolerance for risk (that is, within a reasonable range of your tolerance, not far outside it; the consequences to yourself in terms of stress, quality of life and performance skyrocket the further you get away from that).
Replace one drug with another?

If you could master your instincts for eternity, nature would make sure, the next generation would not contain that skill. Thus you fight a foe, you have no chance to win. You could measure out how to optimal circle the hedonism spiral without getting sucked in- basically a cease-fire..
I was just wondering how 98 seconds compared to any device...
As someone that experienced DDoS which made whole leaseweb feel it (site i was operating was on servers in leaseweb), I can tell you one thing.. Unless you are ddosed by someone from their home connection or one server you need professional DDOS protection. No guide will help you here, you probably don't have the pipe big enough in case of UDP flood and don't have enough resources in case of sophisticated TCP attacks.

If you only want to protect your website then go for cloudflare pro, it will be enough for 95% of ddosers. If cloudflare is not enough then you need thousands or ten of thousands of dollars to get protection.
I ran for board of education and it was an amazing experience. I went door to door in my small town, talked to hundreds of people, showed up at every town event wearing my blazer and nametag with "candidate for board of education". No BOE candidate before me had spent money on lawn signs - but they had to after me. I gave speeches, raised money, bought voter lists from the county and loaded them into our Oracle database at work (into my own DEV schema, of course, this was before I had cheap MySQL hosting) to identify the folks most likely to support me, used Google Maps and other mapping tools to map them out for personal visits.

And then I lost, and it was crushing. On election night when I stood in the election office and heard the precinct numbers come in one by one, I realized I'd never failed at anything significant before. But I'd do it all again - I will once my kids are older - it was one of the best experiences of my life.
The cardboard and marbles would be the engine which drives self-awareness. The individual parts are not self-aware.

But considering the size and complexity that would be required for such a feat of engineering, a very liberal estimate would probably require more mass than is available on the entire planet.

Edit: the sheer gravity of which would destroy the system.
Marble adding machine
Because the camera requests port forwarding from your firewall using UPnP. Now your mobile app connects directly to port 83785 and streams video from the camera without any firewall hassles. The problem now is that hackers can also connect to port 83785 and exploit unpatched security holes.

If a firmware update exists, its probably too technically challenging for Joe User to find and install. For a lot of these devices, there isn't even a published fix. These manufacturers are just rebranding some generic camera from a larger manufacturer or using the same camera and IoT guts and putting them into different cases. These companies probably don't even have a software developer on staff who has access to these firmwares, just perhaps a binary blob, assuming they have any software people on staff at all.
Bring us back another HyperWebCard with a born again ResEdit.
Have you considered hosting these on Facebook Live? Could get Live feedback from the audience to source questions according to what gets brought up.
I guess that would depend on if you are looking for a programmer or an engineer.
Probably on the same basis that your blood cells, skin cells, etc aren't sentient. So the cardboard and marbles would not be sentient, but the system might be. Its the difference between an intrinsic property of the system and an emergent one.
It almost looks like the camera producer/someone from an internal team was responsible for either giving out backdoor or actually infecting the camera...
From the tweet pics, it looks like the outside IP was able to connect to the camera via telnet.

Does the camera firmware open a UPNP tunnel in AP to its telnet port?

Does this guy's Wifi router enable anyone one to open tunnels in his AP router?
As one of the comments on the bottom of the page points out, Canadian woodworker Mathias Wandel built a similar machine some time back: https://www.youtube.com/watch?v=GcDshWmhF4A
Is the first one two loops or one?
So maybe the higher the ask%, the lower their faith in the company?
It's still a pretty big deal to know how Big O for time complexity (space complexity less so) and how to write algorithms that optimize for such. That being said, I've never had to write anything much more complex than a Binary Search algorithm for an interview as far as DS&A goes.

If I were being interviewed I would have no problem taking advantage of any standard APIs I would expect to have available to me, which includes browser APIs if it were a front-end role. Why waste valuable interview time writing a sorting algorithm instead of just using .sort()?
Not really getting your point. All but "having enough money" are actually good advice to not getting robbed. E.g. if carry around a golden Rolex and/or the newest iPhone you are much more likely to get robbed than if you have no watch and a $150 Android device in your hand. And most people don't carry around all their money for exactly the reason to not lose too much.
How are we not yet capable of having a robot controlled arm do this? Come on people!
What is the expected time between port scan for an arbitrary IPv4 address? Is the level of scanning activity so high (or so well-targeted to "promising" address spaces) that one should expect to be scanned in minutes?
UPnP is turned on by default on almost all access points.
hmm, i don't think lazyness is enough. for example, in the billion names example, let's say the first and last elements are valid. at the first step you'll wind up with something like

validPerson : thunk

after n steps where n < 1e9

validPerson : invalid : invalid : invalid : ... : thunk

then finally at n = 1e9

validPerson : invalid : ... : validPerson

because the intermediate calculations still need to happen.

getting that first answer is cheap and quick. getting the second answer requires evaluating those billion - 1 thunks.

maybe you're thinking of list fusion? AFAIK, only haskell does that.

Perhaps i'm misunderstanding your point. But even then, lisp, scheme, smalltalk, python and perl don't implement map and filter in a lazy way. Of course, i'm thinking in terms of haskell lazy, perhaps, again, i'm misunderstanding and you mean something else.

In retrospect, i think i'll revise my opinion and say map.filter is probably a bigger code smell than referentially transparent mutation.
Part of it is that there's a feedback loop: as Kubernetes + Docker become more and more popular, the tooling around them gets better and better.

Also, I find Docker a lot easier to work with than trying to manually maintain parity between my dev environment and production hosts. Having previous "pushed simple apps to a single box or two" I'd never go back, even for the simplest of apps.
Assuming the router is somehow allowing NAT punctures or port forwarding, or if there is no router, then any easily compromised device will be compromised within 5 minutes of connecting it to the Internet.

Usually much less than 5 minutes. There's just that much Internet scanning.

If NAT is configured properly, then there is no risk.
Mini WiFi device developed by Stanford missing link for Internet of Things
I disagree. Companies need to know these people can walk the walk. Sure, I don't expect you to know all the spec details. Googling the spec or asking questions is fine. I had one interviewee that went through a similar boot camp. The discussion portion of the interview went exceptionally well; he knew all the topics and had opinions on using certain technologies over others. It seemed like a good fit, until we got him in front of code. He struggled to do a simple object assignment in JavaScript.

To your point, any small typing mistake or mouse movements shouldn't be judged. Interviewers know you will be nervous during the interview. If they are discrediting candidates over that, they shouldn't be interviewing.
In Acid Machine, I have created a kind of virtual 4 channel mixer, that is the only thing that connects directly to the main destination output. All osc nodes that are generated by an instrument get connected to the instruments master gain node, then that connects to one of the mixer channels. All mixer channels then connect to a master mixer gain, then the output.

If you do it that way, you just need to attach the recorder to the master output of the mixer.
You can typically afford to be picky (or have jobs apply to you) once you have a notch in your belt.
Why take bullshit that you pay large amounts of money for and ascribe the 'effect' to homeopathy when you can get placebo effect from aspirin or sugar pills?
This is the weakest argument in defence of homeopathy... you don't need homeopathy to get placebo effect and so why give credence to a bunch of wackos
> not be allowed to skip 10 as by the time Windows 11 comes out...

I thought Microsoft had claimed that there will be no more versions of Windows, only updates to 10.
"We proposed a fairness measure that accomplishes two important desiderata. First, it remedies the main conceptual shortcomings of demographic parity as a fairness notion. Second, it is fully aligned with the central goal of supervised machine learning, that is, to build higher accuracy classifiers."

Your dispute may be with the authors.
This is probably the coolest thing I have seen today.
so are you stating the hacker was notified, or was the hacker polling to check the port?
People build these, and they are fun, and I'm surprised that they don't still make and sell the Digicomp[1]. (yes I know some people have been doing limited runs but it seems like there should be a persistent market for it)

[1] https://en.wikipedia.org/wiki/Digi-Comp_I
Are most of these things spread via random IPv4 address probes? Are we going to be a somewhat safer when networks are IPv6-only due to the size of the address space vs the used addresses?
Go and read the article, it's not quite like that.

Edit to say: Although, this article is sort of an ad for Instapainting, so of course they're going to make things sound positive.
"It blocks 21% more socially engineered malware".

What does that even mean? That it blocks malware links from social engineering attacks? Seems like really confusing wording.
They might've bought bitcoin on an bitcoin exchange and had their bank account frozen- it still happens frequently. Banks in the US are still scared to do business with bitcoin folks because they don't want to get undue attention down the line

Banks also don't want to do business with bitcoin exchanges because this makes it trivial to loot an account over which you have gained unauthorised access. At the moment the bittcoin market consists primarily of people who value privacy over convenience and criminals. Until the former gets larger you should expect any reasonable bank to be extremely way of the latter.
In a tiny town in the middle of nowhere middle america, where the cost of living is 90% the national average, we can't keep college grads starting at $75k with an assured 10% bonus. This is a town where all marble 4,000 square foot McMansions start at $240k. bestplaces.net puts this as a comparable salary to around $280K in San Fran.
Do you know that there are people who actively fight against ISPs filtering the internet?
This brings back memories of Windows 95-98 era, where a fresh install would get infected in matter of seconds after connected to the internet.

I expect the IoT to go though a similar phase, but eventually get fixed and be secure enough.
JetBrains Rider (cross Platform .NET IDE) Early Access Program Is Now Public
They have DNS too, and they also protect at lower OSI levels (like TCP / etc.) https://www.cloudflare.com/security/
What if the device opens up some random port via UPnP? What then? Do you turn off UPnP? If you did, why did you even buy this camera?
We use Ubiquiti Unifi. We use their software with it, but I'm sure you could feed it into Zoneminder. Very happy with it.
I'd be very happy to see AppleScript retired in favour of JavaScript. The pseudo-english syntax has always been painful. It might have been reasonable with a good IDE, but I have never found one that can tell me how to write what I want to write.
While obviously not as good as Ethernet, the internet-over-power-cable (powerline) solutions aren't a terrible option.

In my apartment, the biggest issue I face is interference from other wireless routers. Because of this, the powerline performance is about 40% faster on my desktop (right above the router one floor) and much more consistent. It also does help with wireless congestion, and really helps with using my desktop as a PLEX server. Before, higher bitrates would cause serious issues, and now it just works.

I'm not sure if the tech has matured recently or I just had a good use-case for it, but it's miles better than WiFi. I'm using TP-Link's product.
Comment out all but the first and output the result. If it's what you expected, uncomment next line and output the result. Is it what you expected. Repeat... Debugging is just a specialized form of troubleshooting so the same rules apply. Bring the system to a known good, and increase until you find where it breaks.
To give this context:

Blasting people with water cannons has exactly one purpose - get protestors to disburse. It isn't a tactic to control an unruly crowd into a more orderly one. The water being blasted is at high enough pressures to bruise and it is extremely cold. This is the middle of winter in Dakota - and protestors are also being sprayed during the night.

Many other police tactics and injuries are being reported.
Asana.

No seriously, that's what they were using at HR when I graduated.
From what I have observed in my life the mechanism of homeopathy has great appeal to people who show some propensity to twisted thinking. Particularly of the all/nothing kind and having trouble with keeping opposites sorted. The problem seekers, the ones that instinctively reach out the most obvious wrong solution.
Eek, who knew the rise of cheap CMOS-based surveillance cameras would lead to DDOS attacks?
> As in vote selling and coerced checking? probably can't, but then again, neither can centralized internet voting solutions.

This is one of the reasons why we don't have internet voting: it's inferior to the status quo in critical areas. “blockchain” is not magic pixie dust which fixes that problem and the people backing it don't seem to have studied the problem very deeply, as evidenced by your repeated assertions that “the voting would using a cryptographic system to ensure confidentiality” before finally admitting that nobody has proposed a system resistant to a key class of attacks.

> Even in normal voting, you can take a photo of the ballot to then prove who you voted for and get paid for it (and/or not get beaten).

The difference is that it's harder to do that – or even illegal, see http://bigstory.ap.org/article/709338e5557a49e7ad5c68109ffec... – and it's not foolproof since you could take a picture of a ballot but void it and cast a different one, both of which make widespread coercion or selling unreliable.

> As I said in the original comment, I don't think it will solve problems that have always been with us

Simply asserting that it's always been with us doesn't change the fact that this is a problem which the current status quo was actively designed to prevent and that the proposed system makes that problem far worse.
>Do people dispute that a cashless society would be a dream come true for the US government & Fed?

For all intents and purposes we are already cashless.

But again, the government can't force you to use a specific medium for transactions, only what they will accept in taxes. If the system doesn't work for the people, the people will find away around it. That is guaranteed.
Show HN: Tourgather makes it easy for solo travellers to connect and meet
Show HN: Make any website mobile-friendly with this app
Please fact check this blurb and I will add you to a site where I am collating "gig" opportunities for the new economy:

Remote Friendly helps you find a new job at a remote-friendly company. You can subscribe to their mailing list to receive a weekly email of new remote jobs. You can also follow them on Twitter or Facebook to hear of new positions.
I use redis + lua quite a bit in my home-grown analytics real time tool. My biggest fear is when do I know I am overusing lua ? Is there a quantitative measure for "smallest bit" of logic ? I fear I have been given a very long rope with Lua + Redis and I may be unknowingly about to hang myself.
TI-83 has alphabetic input (but not QWERTY)

Also, that's quite clearly not Doom. A Doom port must have at least E1 of the original Doom, with minimal layout changes. That means multiple levels, and up/down moving platforms, by definition.
Which rephrases this https://en.m.wikipedia.org/wiki/Leibniz's_gap
I wonder how much of this dynamic is caused by the 10 year fund life? Would VCs respond the same way if the LPs gave them 15 years? Would VCs change the sort of company they invest in?