skysight-inc/HackerNews huggingface dataset:
This guide contains (at least) inaccurate statements. It's oversimplifying and omitting important things while putting emphasis on some exotic details where defaults would be sane enough.

"One key, the public key, can only encrypt data, not decrypt it" - this is cryptographically inaccurate. One should use it that way, though.

"Identity is verified by encrypting and decrypting data that both the client and server know". That's not how signing works. The crucial part of the process is to first establish an encrypted channel, then choose something random (not used previously) and finally verify the signature is correct. What exactly would be the data that "both the client and server know"?

"If you're sure there is nobody listening between the client you're on and your server, you can use ssh-copy-id to transfer and append the public key". Almost never happens unless you're in the server room, connected point-to-point. But then the remark about someone listening doesn't make sense. And not a single word about verifying server's fingerprint in the whole guide.

"Keep in mind doing this means you can't use the key for automation because you'll have no way to send the passphrase in your scripts". Unless you use an ssh-agent.

"umask is a Bash built-in which means a user can change their own umask setting". Wrong implication here. umask is a syscall. It doesn't matter what you use to call it. And what if you're using a different shell?

Suggesting painful default umask instead of just doing `chmod go-rwx $HOME` and adjusting /etc/adduser.conf is debatable.

Making this guide "distribution agnostic" is IMHO futile and there already are some distribution-specific guides like https://debian-handbook.info/.
> Conspiracy theory: what if they intentionally throw random garbage in there so you don't get paranoid?

That's not a paranoid conspiracy theory (and certainly not something that should be down-voted to oblivion). It's well documented that Target did that exact same thing to throw off its customers, so they wouldn't be weirded-out by its pregnancy-prediction algorithm.

https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...:

> “Then we started mixing in all these ads for things we knew pregnant women would never buy, so the baby ads looked random. We’d put an ad for a lawn mower next to diapers. We’d put a coupon for wineglasses next to infant clothes. That way, it looked like all the products were chosen by chance.

> “And we found out that as long as a pregnant woman thinks she hasn’t been spied on, she’ll use the coupons. She just assumes that everyone else on her block got the same mailer for diapers and cribs. As long as we don’t spook her, it works.”
Oh, I actually use Writefull to check phrases, this one came up in Google Books. (https://writefullapp.com/)

"after the raid, it is known that Brown wrote to Kagi that he would sign into a hotel as I. Smith and Sons. As he began recruiting supporters for an attack"

These are the results I get for web:

- sign in to a hotel appears 0 time in Google.
- sign into a hotel appears 81 times in Google.
- check into a hotel appears 577,000 times in Google.
- check in to a hotel appears 69 times in Google.
You may've missed the recent news on Google Fiber pulling out of Louisville (https://news.ycombinator.com/item?id=19106998) as well as Google Plus shutting down.

Some folks make a hobby out of the stuff Google spins up and then abandons: https://killedbygoogle.com
>Many people do not realize that Amazon leaving doesn't mean +$3B in their pocket it means $0 and even less than zero in the long term.

How is this any less laughable than the position you're chastising? LIC was already booming before the Amazon investment. The idea that Amazon will be replaced by nothing at all is ludicrous.
You can only purchase on Google Domains if your billing address is in a supported country (15 countries listed).

Would .dev domain be available from other countries?
.local is reserved for multicast DNS/zeroconf, by the standard. You literally can’t use it on macos because it will always try to look it up in with mDNS first, and only fall back on /etc/hosts once that fails.

If you use .local for fake DNS for a dev setup, you’ll probably notice lookups are slow; that’s why.

(This is why I’ve always used .dev actually, although this may make me switch to .fuckgoogle or something instead)
> I never said that business shouldn’t pay taxes. But what do you think is going to happen to the local pizza shop that my 16 year old son and his two friends work at that probably is only making his owner $50K a year once they have to pay them a “livable wage” of $17/hour

I dunno, the same thing that happens in other countries with significantly higher minimum wages? Some prices go up, some people in the economy make a little less, and overall the floor rises.

I would note that there is more than one way of looking at the problem than just "raise the min wage to $17". Another way would be that we need to lower the price of entry level apartment rentals; or a mix of raising wages by some amount and lower rental prices till we achieve a middle ground that we as a society find ethical.

> It’s amazing that HN posters, many working at unprofitable companies funded by VCs are more than willing to tell other companies how much they should be paying their employees when they actually have to do the unheard of business move of running a profitable business instead of losing money year after year hoping for an “exit strategy”.

Please don't make assumptions. None of that describes me.
If a company cannot afford to pay a living wage for its full time employees, is it "profitable" in any meaningful sense? The owners of that company are pushing the burden onto the rest of society.
Maybe you've never been in an environment where having to change internal domains is near impossible.

I work at the intersection of 3 corporations within our group. We provide a sort of "internal Heroku" using Kubernetes for anyone in the group that needs it. We recently ran into the 63 character limit on domain name labels (we have to use a wildcard cert because nothing else is approved by legal). You wouldn't believe the time developers would've had to spend on fixing the domain schema across hundreds of services if we hadn't found a way out of that dilemma. We're talking thousands of internal names, some of them given our to external partners (we use a partially publicly resolvable name, but we could've exposed our DNS as well) and some used in systems long forgotten.
"Were things different in the United States at some point?"

Anecdotal, but when I was a kid in the 80s, minimum wage jobs were mostly part-time, and meant for teenagers living at home, bored retirees, etc.

Unskilled workers with any sort of ambition could fairly easily get 2 to 3x minimum wage and afford a very modest studio apartment.

Once manufacturing jobs went away, it seemed to kill that off. Before that, even if you didn't work in a factory, other employers had to compete for that wage level.
You saw the part of my post where I advocated for the EITC? From the article:

About 12 percent of those who would gain from an increase to $10.10 live in households with incomes above $100,000. This group highlights the fact that the minimum wage is not nearly as well targeted toward poverty reduction as the earned-income tax credit, a wage subsidy whose receipt, unlike the minimum wage, is predicated on family income.
Roblox is pretty amazing actually.
> most blocking software working on the network layer use DNS, which still works just fine and will likely continue to work forever.

Don't say that twice. Have you heard about DNS over HTTPS? I'm using XPrivacy on Android and have noticed that applications that use Android System WebView (based on Chrome) started making requests to 8.8.8.8, 1.1.1.1 and other public DNS services. It's still possible to block domains via hosts file, but I bet it's a matter of time when Google decides it's "in our interest" to start using their DNS instead of ISP's one.
Screen it if you want. Why are you chatting with person who can say something crazy to you in the first place?

I don't treat this feature as something bad, maybe it was a typo in message or just miss-click, so, allow to modify it. Maybe I sent some intimate information and don't want to keep it in history but trust person wouldn't screen it.
I'd be happy to see benchmarks of that. The problem is that the "shuffling" creates serial data dependencies, while the matrix form doesn't. Sure, the number of multiplications is smaller for direct forms, but that's not what has the most effect on performance.
Google cached version of site: https://webcache.googleusercontent.com/search?q=cache:i-IE6l...
> But the three big public deprecations I'm aware of are Reader, Inbox, and G+.

Google Code. Also Wave and half a dozen chat apps, but Code was a serious one that broke a lot of the developer web.
Small businesses will make up that 3B and more. This is New York not a small company town. Why put all your eggs in one basket?
What makes the minority voice toxic as opposed to merely dissenting?
I don't think this is a huge concern - at least ICANN has the power to designate a successor registry, and I guarantee someone will break down the doors trying to get that particular gtld.
This website blocks visitors from Europe because of GDPR...
If you believe that labor is not an exception to the law of supply and demand, then it follows that raising the minimum wage will reduce the demand for labor, and increase unemployment among those with the least productivity. The net affect of that could well increase poverty, working against the good intentions of minimum wage advocates.

If so, if we raise the minimum wage 2.5 times, so that every full time worker can afford a one-bedroom apartment, there would be a greater number of unemployed workers than before who cannot afford housing.

If, again, the law of supply and demand applies here, a better approach would be to increase the supply of both jobs and housing by reducing the regulatory burden on each. Less regulation on business means more and more profitable businesses competing for an inelastic supply of labor, raising labor prices. Less regulation on housing means more of it at lower prices. Lower quality housing that would otherwise be illegal is made available to people who could otherwise afford none at all.

If you're an unemployed person living in an illegal shanty town, subject to continual law enforcement harassment, even becoming a poorly employed person living in a legal shanty town is an improvement, where an increased minimum wage is not if you can't get a minimum wage job.
> > The radioactivity of spent fuel decays exponentially

> True, but it is still question of the half-life (i.e. plutonium)

To expand my statement, yes, spent fuel is a mix of different isotopes, some stable, and others unstable with different half-lives. The point being, if something is super-radioactive, then by definition it has a short half-life. And conversely, if something has a long half-live, it's per definition not as radioactive has something with a short half-life.

Thus, after 10k years, what is left is not that radioactive (to be more specific, after 10k years with a once-through cycle, spent fuel will have a radio-toxicity about 20 times that of natural uranium ore. Now, I'm not suggesting you should grind it into dust and sprinkle on your cheerios in the morning. But it's not any kind of civilization-ending toxicity either.

The idea that a future civilization will have the know-how to mine stuff 1 km underground, but somehow they have no clue about chemical or radio-toxicity just seems so absurd to me.

> It is a reasonable concern, because we have never before in our history produced such toxic waste that lives so long.

Citation needed. My guess would be that we have produced an unfortunately large amount of toxic waste, but the vast vast majority of that is not radioactive, and will thus never decay. Dig it up a million years from now, and it will be as toxic as it is today. The incredible energy density of nuclear fuel means that, in the end, the amount of nuclear waste is very small.

> I don't know about you, but I do hope that Homo sapiens will survive next 10k years.

I hope so too. In my mind, however, climate change, biodiversity loss, topsoil loss etc. rate far far higher as risk factors than a comparatively small amount of nuclear waste. In fact, by not deploying nuclear due to risks associated with nuclear waste, we significantly reduce our chances of dealing effectively with climate change, a much higher risk.
Arch: https://wiki.archlinux.org/index.php/Security

CentOS: https://wiki.centos.org/HowTos/OS_Protection (limited)

Debian: https://www.debian.org/doc/manuals/securing-debian-howto/ind... (old)

Fedora: https://docs.fedoraproject.org/en-US/Fedora/19/html/Security... (old)

Mageia: https://wiki.mageia.org/en/Msec (limited)

Oracle Linux: https://docs.oracle.com/cd/E52668_01/E54670/html/index.html

Red Hat: https://access.redhat.com/documentation/en-us/red_hat_enterp...

Slackware: https://docs.slackware.com/howtos:security:start (limited)

SuSE: https://www.suse.com/documentation/sles-15/singlehtml/book_h...

Ubuntu: https://help.ubuntu.com/lts/serverguide/security.html.en (limited)
I am in India. Yeah &kponly seems to be working as well hiding the search results completely.
> ...the CEO, my boss (amazing person who I credit with making the summer bearable)...

> the last thing I’ll end with is the CEO. What an absolute scumbag

My head is having a hard time reconciling these 2 statements.
> Jobs that were previously considered in the realm of "teenager jobs" are now perceived as actual career tracks and a means toward a living.

This is a funny way of writing "previously lucrative careers available to blue-collar workers have largely evaporated".
So it’s bad for a mom and pop franchisor to have to operate profitably and pay minimum wage but not for Silicon Valley companies that don’t have to operate profitably and who can afford to pay their workers six figures because of VC funding?
كلمات اغنية وتستمر الحياة زينة الداودية
Apart from time-series data, I've seen EWMA used by Elasticsearch to do load balancing (?) and also outright by actual load balancers as well to help with latency sensitive flows.

https://twitter.github.io/finagle/guide/Clients.html#power-o...

https://blog.cloudflare.com/i-wanna-go-fast-load-balancing-d...

https://www.nginx.com/blog/choosing-nginx-plus-load-balancin...
Would it not be easier/more legal to scrape them using leaky login forms?
perhaps they didn't want to repeat the errors of the past...
https://assets.pando.com/_versions/2014/03/12867224113_6375f...
I would only post something like this to social media if I wanted some sort of reaction. I'd expect Virgin Media to send a bot reply before some other company though. I think this form of customer service is far more frustrating than some other brand trying to capitalize on it. That's the only thing that seems surprising about this, where is VM in this chain??? Kudos to SkyUK for stepping in where there is a clear gap in customer service + therefore a market opportunity.
Here is the wikipedia article [0] on protein poisoning. Like mentioned above adding fat to the diet helps avoid this condition.

[0] https://en.m.wikipedia.org/wiki/Protein_poisoning
... And the secure constructs like aes gcm/aex are unavailable on the command line - only usable as library functions.
Instead of using Accenture and McKinsey they Germans should consult with the Israelis (perhaps in secret -- the Israelis built the entire Singaporean Army in secret).

The Germans are already leasing Israeli drones to protect their troops in Afghanistan for nearly a decade so there is a good working relationship. The German drone pilots are trained in Israel and they fly the drones from Israel because of some regulation in Germany that doesn't allow them to fly the drones from Germany.

Germany extends lease of IAI Heron drones until 2020
https://en.globes.co.il/en/article-germany-extends-lease-of-...

Germany to approve €1b deal to lease Israeli UAVs
https://en.globes.co.il/en/article-germany-to-approve-1b-dea...
Article didn’t seem to spell out the math on the methodology being reported on.

Essentially they’re saying someone would need to earn $17.90 per hour to afford a one bedroom apartment. This is apparently calculated by taking the number $930.80 (presumably the average one bedroom monthly rental) and dividing it by .30 (the article states this is a common measure of affordability to spend 30% of your income on housing costs) which equates to $3,102.67 monthly income. They then multiply this by 12 to get a yearly income of $37,232 which works out to $17.90 per hours for 40 hours per week.

So the most important number seems to be they’re saying a 1 bedroom apartment costs $930.80 and they don’t take into account the fact that people often live with either a significant other or a roommate and that multi-bedroom apartments cost less per resident on average.
AWS tip: Wildcard characters in S3 lifecycle policy prefixes
Please don't make assumptions. None of that describes me.

Seeing that HN is completely supported by a VC and serves an advertisement for YC, I think it is relevant.
Apparently somebody tried this to get rid of Alex Jones[0]

[0] https://www.adweek.com/digital/twitter-users-are-blocking-hu...
I heard that old google cloud offering price was increased 10-fold on short notice.
Not the same, but close
I don't like this as much since a savvy user might then try to navigate to /pages/ - which has what on it?
A Comparison of Inflation and Reward Pools in Steem, EOS, Everipedia, and Karma
With many edible fungi species - Boletes for instance - boiling can be the difference between getting sick (2-3 days of GI distress) and a good meal.

When it comes to other species like Amanita phalloides (death cap) or Galerina sp. - which contain Amatoxins and resemble edibles - boiling will have no effect: You will need a liver transplant [1].

Amanita muscaria does not contain amatoxins - but it does contain muscimol and ibotenic acid, which are interesting in their own right [2].

1 - https://en.wikipedia.org/wiki/Amatoxin

2 - https://en.wikipedia.org/wiki/Muscimol
I dunno if that's accurate. "Lots of development + Amazon" is more than "lots of development." Amazon not being there doesn't necessarily mean there will be more of something else.
> Experience builds up rapidly as the same damned thing is built and installed over and over. Nuclear doesn't have that.

Do you think this is the reason the US Navy doesn’t seem to have major problems getting nuclear power plants built and installed in submarines and aircraft carriers? It’s interesting how civilian power companies have had a bunch of high profile failures in this area but as far as I can tell new warships still seem to be able to get reactors fine.
Sources, please.
Mother Learns the Identity of Child’s Grandmother. Sperm Bank Threatens to Sue
Mark, are you up for helping with solid security for cl-solid? (The library now works with both Neptune and Allegrograph) https://github.com/gibsonf1/cl-solid - live use of cl-solid library here https://graphmetrix.net , sometimes very lively discussion of Solid here: https://gitter.im/solid/chat (including Tim BL)
On IOS Safari. Medium forces a login to see content.

It was only a matter of time. All those authors who used Medium as their Medium to share knowledge (face palm)
Not related (as far as I know) to Wild Bill, but I lived for several years in Springield MO, just blocks from the square where he famously shot Dave Tutt. The evening I proposed to my (now) wife, I had some mutual friends "kidnap" her, and take her to the square. I showed up and dueled them with our cap guns, "re-enacting" the famous gun fight... rescued her, and the rest is history as they say. In those parts, there are many that still know a lot about Wild Bill.
Yeah, the best impact would come from using SELinux, AppArmor, and GRSec. Everything else is just tweaking defaults, which for up-to-date software probably isn't going to impact your security much at all.
Mmmm...I love manufactured consent in the morning.
How is it possible that rents are rising while incomes aren't? Is the housing stock shrinking, or growing slower than population? OK there maybe some banking/Fed/investment related trickery moving housing prices (to buy) irrespective of "organic" demand, but not rents, right?
> RedHat's FreeOTP

It's abandonware these days and hasn't been updated for years. The iOS app doesn't work anymore and can't use the camera for reading codes.
I would not recommend using “ufw” for configuring the firewall on a production server (as it’s not easily composable and lacks configurability for more complex rules). I can recommend “ferm” instead as it allows you to compose multiple config files (important for automation e.g. when using Ansible) and allows describing more complex rules that e.g. involve policies.
I don't think many people are opposed to that way of thinking. But as a responsible team member you still have individual duties and you need to be able to explain them.
Is using gmail to send mails from your server a good idea?
Masterminds of Programming – Chuck Moore on Forth
Less "toxic" than "vocal". The vocal minority often wins in politics (see: gun owners).
Thanks. What about using the hardened images they provide? https://www.cisecurity.org/cis-hardened-image-list/
Early on building https://faunadb.com/, it took us about a year to discover that the literature referred to "historical" or "time travel" queries as temporality. Other startups in our space were also using homemade jargon.

We figured somebody else had for sure done this and kept searching for different keywords until we picked up a bunch of papers with the correct terminology.
I recently found out that the sidebar menus on pages within https://developers.google.com/web don't work with JS off (usually a trivial thing: show sub-items by default and hide them with JS). Almost every Alphabet website has something like that.

So yes, minor anecdote, and I genuinely appreciate the hundreds of Google employees who really help the Web and share useful knowledge (and don't lead developers into using techniques best suited for billion-user websites, as FB often does) but I'll reserve to right to side-eye anything Google says.
The mom and pop are pushing their costs onto the rest of society, ie public money. We at least try not to let people starve in the street, and so provide government services for the poor. The VCs, for all of the faults of that system, aren't.
What's your background, and what position was the company looking to fill?

I was accused of this same thing on a "Who is Hiring" thread a while back. I posted about looking specifically for senior front end engineers. What I got instead was close to 50 emails from boot camp grads, many of them data science.

If candidates feel the need to disregard what I say, why exactly do they deserve my time in return?
I don't know how this stuff works, what gives google the ability to sell these domains early? Also why is everyone cursing google for taking their local .dev? Google is not the only place you can buy these. Namecheap has .dev in the works, and GoDaddy is taking pre-orders as well (I didn't keep searching but I'm sure it's available at many other registrars), but nobody is cursing and shaking their fist in the air at those services. So what does google have to do with it? Why are we all holding them responsible?
Saturdays in the Bronx with Bach
It’s highly likely, though. Supply and demand: less demand for real estate and employees means prices will be lower, which in turn means others will buy more.

Economics isn’t a zero-sum game, but neither is it a completely uncorrelated bag of stuff.
Why compare your fantasy to reality?
A startup fail story
So soft handed implied blackmail? Seems legit.
Meh, QSAs check boxes. In my experience they are not very technically capable. Some are, of course. Most are not.
Different diets foster different environments for bacteria. Different diets can work for many one works better than others