skysight-inc/HackerNews huggingface dataset:
Some notes from an InfoSec person.

- Have a stand alone SSH server that is something like a R-Pi[type B] running an OS that gets patches regularly via unattended-upgrades and reboots itself at least once a week.[could also be a minimal VM like AlpineOS if you need Gbps+ line speed]

- Have this R-Pi and your network gear plugged into a UPS that can withstand at least a couple of hours of power outage.

- Use non-standard ports on your perimeter FW for forwarding to the R-Pi.

- Run fail2ban or something similar. Set a bantime of at least an hour[3600 sec] after no more than 5 attempts in 600 sec. This is mostly to discourage anyone who stumbles across your perimeter listening port.[which enough will] Password login will be disabled anyway, but a bot might not check for allowed auth types.[nmap -Pn -p 22 --script ssh-auth-methods <target>]

- No passwords allowed in /etc/ssh/sshd_config[PasswordAuthentication no]. Use public key based authentication.[PubkeyAuthentication yes] Put the public SSH key[id_rsa.pub] of any machine that you wish to authorize into ~/.ssh/authorized_keys on your R-Pi. This way you can authorize and de-authorize remote machines[with particular users] at will.

- add 'AllowUsers xxxx yyyy' to your /etc/ssh/sshd_config

- No root logins allowed![PermitRootLogin no]

- Maybe limit via perimeter or on the R-Pi which source IP ranges are allowed to access to SSH.[whitelisting]

- Periodically review your logs of perimeter FW, R-Pi FW and /var/log/auth.log to see what's going on. It should be pretty quiet, but look at them anyway once a week.

- Sleep well knowing that you have a simple, layered and robust defense strategy that also has power-event survivability.

Others have mentioned port-knocking which is a cool trick but not something that I typically use in an actual daily defense strategy because I'm not sure how much value it really adds.

Don't use your perimeter device to host SSH services. It will not get patches fast enough when vulns come up.
An incredibly smart idea. Thank you. +1
Right. I learned that in the UK there is even an Anti-social Behavior Order (ASBO), essentially a catch-all law for people exhibiting these behaviors (which apparently spans all kinds of stuff from graffiti to littering). No comment as to the rightness or wrongness of this, but there it is.
Aside of the critique that already appeared there about the fact that if you believe that you suffer from being interrupted it does not mean at all that you think you're any kind of special, there's one thing this note completely fails to mention.

One of the most mentally demanding parts of programming (and the part that I personally enjoy the most) is debugging. In small, managable chunks it probably takes most of one's time, while the bigger sessions of finding a particularly nasty bugs are more rare, yet awfully demanding. You can't "come up with a solution to a problem before you start writing code" nor "divide the solution you came up with into small chunks", as your whole job there is to slowly unravel the interconnectedness of all things and produce a mental model of how the code works, how it should work and where the expectations differ from reality. It just requires a lot of concentration, just as any other job that suffers greatly from interruptions.

(also, I fail to see how "come up with a solution to a problem before you start writing code" changes anything. You will still lose your train of thought when being interrupted while coming up with a solution before starting coding - and it will be even harder to justify being annoyed at interrupting party when you can't even show them your IDE on your screen :P)
Or, translated into software-dev-ese:

No New Frameworks.
No New Frameworks.
Whatever you do, DON'T write a new Framework.
Large sea-facing cement walls suddenly make sense when there's a big wave in the harbour.
FEMA camps dont exist
Maybe you mean Brave. That's a browser that blocks ads, bit pays out bitcoin to site owners. I found this one today while researching.
You don't have to write Javascript though. I've built a stack for myself which is written in 100% Kotlin and I don't have to bother with JS.
Nothing wrong with this, but a strong password for all Unix accounts (or, ideally, only allowing SSH with public key authentication) is essentially all you need. Unless you're using a dumb password, you're far more likely to be compromised by an application or OPSEC flaw (like someone getting into the email you used to register your server hosting account) than some crazy SSH compromise.
Article: "Divide the solution you came up with into small chunks". The idea is to use less of your short term memory for the work; by applying this approach to your working memory, you'll have a few slots left over for office conversations.
An analogous strategy is for programs to hold less data in RAM so you can dedicate a portion of the CPU's RAM to keeping track of shopping lists and baseball statistics for your neighbor.
> Come up with a solution to a problem before you start writing code

Oh, so "figure out how to draw the rest of the freakin' owl".
What happens when/if Amazon changes their offering to something that makes your system incompatible overnight?

They wont, or at least historically have not. There's no guarantees however, but this seems like a low risk.

More likely is that AWS will either raise their prices (or are undercut by a competitor) such that it makes financial sense to migrate to a new platform.
How big is the difference between successful and wannabe in terms of skill?
He means pick a combination with one selection from each front end and back end category. For instance you can pick vuejs from front end and combine it with php/laravel on the back end
Building an object store with FoundationDB
But...UNIX is not Latin, but seems to be a corruption of an English acronym. So a pedant may argue that this is incorrect.
UK regulator orders Cambridge Analytica to release data on US voter
https://www.theguardian.com/uk-news/2018/may/05/cambridge-analytica-uk-regulator-release-data-us-voter-david-carroll
Thoroughly agree. There are very rare times where you need to write your own low level, high complexity system for a high level application, but ... they’re really, really rare nowadays. Almost always it’s developers practicing resume driven development.

I’ve never worked with anyone who tried to implement their own database, but I have worked with people who implemented their own network protocols, JS SPA frameworks and service discovery layers, and they were all really bad ideas.

It gets even worse when said person leaves the company, their system is still critically important and full of bugs, and has the inevitable little-to-no documentation. Other devs have to maintain this mess, and nobody truly understands it.
If you're looking for meaningful, interesting work on a high-functioning team, IMO the only way to be sure is to only apply to companies where you already know someone working there. Find someone you know who genuinely likes their job, and have them refer you to a position at their company. Anything else is just reading tea leaves.
You don't have to accumulate the transformation result into an actual five dimensional array, you can just transform the points, keep them in a list, a quad tree, or whatever you like, and then just run a clustering algorithm on the transformed points. Probably complicated by the fact that every point can vote for several parameters so that you are not actually clustering points but something like lines or planes associated with the points.

That seems also to be - but I did not look at the code - more or less what the creators of the challenge implemented and submitted as a benchmark implementation, admittedly with the expected poor performance score of only about 20 %.
You are right about high-touch sales in my case. I indeed provide guidelines to 'install the website as an app'.
This works every time.

Not because the guidelines are that good, but because in reality it seems to be quite easy for the average SMB owner. Both in Safari and Chrome.

Except offline, I don't use any 'hardware' api's though.
There's Manfred's talk, but it is not available on Youtube due to some unpatched GW2 exploits if I recall correctly.
Ask HN: If you mine crypto, what cables/hardware do you wish they made?
If you've ever strung together high-end graphics cards in an effort to set up a little crypto mine, you'll recognize how hacky (and expensive) the whole thing is, even if you know what you're doing.

PCI-E 1x-16x risers, 6- and 8-pin ATX power connectors with splitters and converters. Cheap surplus server power supplies that can put 12V out at 100+ amps as long as you put in a "breakout board".

Often the cables are too short, or too long, or lopsided.. or it takes three adapters to do what you want instead of one piece. And when you want to expand and it requires 24 pieces of a particular part, you can maybe get 3 in a week from a US-based distributor, or wait 4 weeks to get it from China.

So as I ramp up, I'd love your input on what you'd buy if I made it. My first offering will include a 0.75m (or any custom length) 6 pin to dual 8 pin h-shaped ATX power cable, so you can drive a dual 8-pin graphics card with a single cord from a single 6-pin receptacle. Made in the USA of course.

Hoping to fund this venture with milliondollarapp.com, or perhaps the reverse.
I don't agree with the premise.

Chunking helps to break down problems, but some problems require one to wrestle with many chunks of the problem at the same time, while building intuition. The boundaries between chunks are also not that well-defined, especially when one is working with a new problem that has no solution.

Author assumes that all problems are decomposable to interrupt-proof tasks/units.

This is untrue in many complex problem domains.
Australia is indeed a decade behind the USA, if you define culture as being “that which comes from the USA”. There’s a lot of uniqueness here that doesn’t get surfaced often enough, sadly. Note: I’m not disagreeing with you! More pointing out a slightly different way of looking at the same phenomenon :)
> I have a sense that "software engineer" to "computer scientist" seems to bookend the range.

I think the extremes you want are more "code monkey" and "architect".
To those who are down voting my comment without providing a rebuttal:
https://www.barrons.com/articles/family-office-leaders-are-e...
Cashiers solve the problem of facilitating the transfer of appropriate amount of money from customer to the store but would you call cashier a problem solver?
Show HN: Clojure Redis pubsub client with keep-alive heart beats
Very interesting! On a slightly related note, I'd personally love to see more "C++ variants" (for lack of a better term) out there. By that, I'm referring to ecosystems/languages that are essentially a simplified/abstracted/modernized version of C, but ones that also still allow you to "break out" back to classic C at will. Thank you for sharing.
Dupe

https://news.ycombinator.com/item?id=16999962
Japan is a far flung outpost of the American empire and has been so for its entire post-War history. The occupation forces arrived at a tacit agreement with the former imperial rulers that they could remain in power, so long as they served American interests in the region. This is why Japan received favored status politically and economically over Korea (who were indeed even forced to purchase goods and services from their former colonial oppressors to prop up Japan’s economy).

Something like de-Nazification never happened in Japan. This is who comprised Japan’s Conservative party when the post-War democracy was founded and still comprises it today. Abe Shinzo is the grandson of the former prime minister Nobusuke Kishi, who was nicknamed “America’s Favorite War Criminal.”

https://en.m.wikipedia.org/wiki/Nobusuke_Kishi
But the problem is, around that beautiful core, the React community has built a mass of libraries, meta-frameworks, techniques and practices that are decidedly less beautiful.

This is exactly what I have found working with React for the past couple years. Once you factor in the React ecosystem, things get messy/ugly and decidedly unproductive.

I'll most likely be moving on to Vuejs.
> Although I'd strongly suggest to leave out the recommendation about supplements and drugs.

I don't think there are any recommendations in the list at all, just a list of reading materials to discuss with your doctor
Hey Eric, load balancers are getting an upgrade in the near future. Keep your eyes peeled this week!
This seems like a differently-worded variant of "we get the government we vote for." But that conclusion has been convincingly rejected by sound political science for quite a while now.

The policy preferences of the voting constituency in any given national election are not strongly correlated to policy results. This is shown convincingly in Benjamin Ginsberg's book, "Do Elections Matter?" I strongly recommend this book - after reading it, you will never again try to explain away an act of government by attributing it to voter sentiment.

It is a difficult-to-deny fact that, in the USA, the government frequently and quietly advances policies which do not appear to be derived from any kind electoral mandate, nor are favored by a substantial portion of the electorate.
As companies get bigger and they monopolize industries, they can afford to be extremely inefficient without any negative repercussions.

It makes the system fundamentally unfair. Money is supposed to be a representation of the debt that society owes an individual for contributions that the individual has made to society but its not like that - It doesn't matter how useless you are to society, you can still make a lot of money. In fact, it's easier to make money if you are useless to society; smart people let other people create value and they spend all their energy on coming up with strategies to capture the value created by others.
However, -es (as in "unixes") should be perfectly acceptable too. Just like how "indixes" and "matrixes" are fine in English.
As much as I nodded along with your exasperation at the parent poster's (father's) demonstration of bias, you can't compare long-distance public transportation infrastructure in places with the population densities and growth rates of Germany and California, two extremes in that sense. California has 1/5 more area, with half the population, and that population has almost doubled over the last 35 years, versus a few % growth in Germany.
...well, it's possible that that's part of the manipulation too.
We accept Bitcoin
In another HN article today [1]: "Logic will get you from point A to point B, but imagination will take you everywhere." — Albert Einstein

Programming (more generally, problem solving), especially of the creative sort, is not logical. It meanders and takes a non-linear path to the solution, and is not always amenable to chunking.

[1] https://undark.org/article/book-review-mlodinow-elastic/
You'll notice people here will say then you shouldn't exist if you depend on ads. They essentially prefer a centralized internet.
>The feel was very New York, except stores close much earlier on par with the rest of Asia.

Closer much earlier? What time do NY stores closes at?
Would you like to add this book to your list? I posted it to HN, but it never got any attention.

"Nutrient Power: by William J. Walsh"
https://www.goodreads.com/book/show/14603192-nutrient-power

If found it via this article: https://www.lewrockwell.com/2013/02/bill-sardi/weaning-away-...

"Dr. Walsh concludes, after years of investigation, that a gene-altering process called methylation (explained below) is involved in 70% of serious psychiatric conditions. That means it will soon be possible to molecularly reverse chronic mental problems. As brain science advances, the use of psychiatric drugs will gradually become obsolete since most mental disorders involve disturbances or imbalances of essential nutrients that alter brain function."
Google Advanced Technology and Projects
Подлинный, Неподдельный, Настоящий, Истинный, Искренний, Чистопородный
- Подлинный Корпоративный Контент.
- Неподдельная Омни Сетевая Платформа.
- Настоящий Форум Лидеров.
- Истинное Трансграничное Экономическое Сообщество.
- Искренний Капитал Сообщества.
- Чистопородный Бизнес Контент.

#Подлинный #Неподдельный #Настоящий #Истинный #Искренний #Чистопородный | Telegram Private Channel (Invite link by request)﻿

Search the Community | Showing results for tags 'Подлинный', 'Неподдельный', 'Настоящий', 'Истинный', 'Искренний' or 'Чистопородный'.
"should flyers be illegal? posters? tv ads?"

Yes, yes, and yes.

Who needs all this junk? No one.

When walking down a scenic street, you know who says to themselves, "What this street really needs to make it truly pleasing is more flyers and posters"? No one.

When watching TV, who yearns for more ads? No one.

This is all junk no one needs except the advertisers themselves. The rest of us don't want their garbage.
> I wish everything was REST,

REST and X12 EDI are orthogonal features: REST can use any format for resource representation, and X12 EDI formats are a data representation.

X12 EDI can be used in a REST way (one of the two mechanisms in healthcare standard operating rules for certain HIPAA-mandated X12 transaction is RESTish—the HTTP+MIME method—though there is also a SOAP method.)
One constraint is that the scientists would like this system to be something they can maintain on their own, and that (for better or worse) means using languages they are comfortable with. Python is obviously popular in science, and C++ seems to be the current de facto "fast" language of choice. It's likely we'll develop two versions of the system, of which one can be more "researchy" and therefore able to take on more technical risk. However, we'll still want to be strategic about what that risk is so that if the research side of the project is successful it could in theory become the production system.
The situation is actually a bit tricky. If they met over the internet, there's no way to guarantee the absence of a Man-in-the-Middle who has been allowing the romance to proceed without interference, but who tampers with the messages which give the address to which the ring must be sent (and who fakes the message which says the box has been received.)

The only way to avoid this possibility (of a man in the middle attack) is to be "introduced" by a third party you already trust. See e.g. https://en.wikipedia.org/wiki/Needham–Schroeder_protocol

In the absence of a trusted third party, you could be talking to anybody, through any number of lurking intermediaries. If you've got a trusted third party then the problem, as posed, is moot.
I think they mean "time" for the botnet in this case
Wonder how downvoting this is by the rules :)
Orientalist mystique is doing a lot of the legwork in a piece that you correctly describe as holding true for most advanced Capitalist economies.
Jamie from DigitalOcean here. VPC is coming to DigitalOcean and the cluster will live within a VPC. Past that there are a lot of details! Is there something specific you're interested in?
Wonder if Fox will demand their artwork be pulled down.
I've never lived outside of the East Coast / mid-West, but what you're saying sounds feasible. That said, I'd guess that the "who are you? What is your background?" question is more of a Boston thing than a New York thing, since New York doesn't have the Puritan / Boston Brahman caste system. I've known of a number of people who went to state schools or random unknown schools in New Jersey who've done reasonably well here.
A Flower Crusade That's Going Nowhere (2001)
I'm like you and I know some people willing to build something on the IRC channel I'm on (https://kiwiirc.com/client/irc.rizon.net?channels=#/g/dpt).
> it's kind of a security-by-obscurity measure

This comes up as a point of confusion often, so allow me to clarify:

A non-standard port as the only security mechanism (e.g., an unauthenticated HTTP admin-interface) would indeed be 'security through obscurity', but a non-standard port as an extra mitigation layer on top of existing security mechanisms (e.g., SSH authentication) is 'defense in depth'.
Yes that happens. I explicitly exclude any US company with a presence in Canada - as that implies an HR department in Canada with Canadian salary guides. I got an offer from IBM that made me laugh. On top of that they wanted to own anything I did on my own time. Stay away from IBM.
I think it depends a lot on two things: Flow and Complexity of the necessary scope.

A broken flow is much worse e.g. for a musician, but still very important for programmers as well.

A big, special part of the flow can however be the complexity of what you have to keep in mind to make a good next step. Programming can have a lot of concepts and connections to be juggled at the same time and non broken commit needs tons of things to be kept in mind, too small to write a todo for it. Those need to be read in to ram
again after an interruption. I think programming is indeed special here.

Good code minimizes complexity, but you want to map out as much of the complexity in your head before even starting to archive exactly that. Especially at that point you really don't want to be interrupted. A good indicator for work that suffers a lot from interruptions might be when you already turn to some whiteboard just for yourself, because you need to get some little bits of your mind to mentally work on other parts of the project and still have them within reach.

Most other work is much more linear and e.g. reading your last few sentences rather quickly gets going again to write the next.
No, in the brave new world there would be no “large ad vendors” so your problem would not even exist
> no one has ever seems to have heard of a suit that isn’t black.

This seems like a time-warp to the 1930s with a pinch of Henry Ford. "They can buy a suit of any color as long as it's black."
Configuration Management, Application Automation, and the Future
I've never heard of hyperlocal investigative journalism. Local journalists simply won't have the resources to be able to do it.

At a local level advertising probably doesn't corrupt the journalism simply because there isn't very much of it.