skysight-inc/HackerNews huggingface dataset:
It sounds like the leak is just the mongodb instances being open to incoming traffic from the internet without authentication. This a common problem with MongoDB, because its default configuration is insecure.
Oh come on. Let us have some fun, here is one of my favourites, "bliss kaboom!" which shows tux with a rocket launcher: https://hdwallpapers.cat/bliss-kaboom-tux-rocket-launcher-an...

(although I admit I've changed my view of Microsoft (from lawful evil to somewhere close to lawful neutral) and Google (from chaotic good to somewhere between chaotic neutral and chaotic evil).
Yep — so I’ll support policies to shoot them on sight and perhaps they’ll do the reverse.
I belong to a library system with two branches, that are relatively large and well funded, but I can also walk into a branch in several other town libraries and get a card due to library agreements.

I can also get a special card good at any library in my state, for a fee.

My parents live in an area that isn't serviced by a local library, but can buy into a nearby library. Although no library is usually indicative of an area that isn't worth living in and doesn't fund schools well, IMHO.
sorry about that- didn't realize there wasn't a messaging system in hacker news- you can reach me at Samuel(dot)wu (at) disneystreaming.com
The next Tesla Model Y to be unveiled March 14
Take it one further: everyone should do support, not just read the emails. 1 day per month or so should do the job, it puts everybody in a good position to appreciate that if they don't do their work properly the support people end up taking the heat. So do not just read the emails, answer them, make it work for the end-user and spot the dysfunctional bits in your organization first hand.
OP here. I’m doing it with a family, and I don’t think I’m doing anything reckless. I’m not risking anything consequential. Worst case scenario I go get a job again, and my family’s lifestyle wouldn’t have changed one bit during the whole thing.
However, it's not at odds with the general public's conception of what a cinema film and when I think Oscar, I always think cinema film. I also think irrelevant, but that's another story.
Sadly I'm getting prompted to enter my phone number to login - can't login to delete the account now.
Don't get why this is getting voted down. This scenario is on the gloomy side, but also insightful and a little too plausible for comfort.
Huh. Thanks, I'm surprised I didn't know that.
Twitter and SoundCloud Blocked in Venezuela as Guaidó Returns
Good job for the launch :)

A short question:

> Progress Dashboard comes with a Distraction Free Mode to stay productive.

Isn't the progress dashboard a distraction in itself? That's at least my experience with those kind of tool, but I didn't try "Progress Dashboard" to be honest.
Yes, that's debatable. The party and its supporters could be wrong. But that's another topic on different premise.

The real issue here is many people make verdict based on strong belief based on what they know from media which could be totally fabricated illusion and insist their version of reality is only correct one cause problem.
I had to look up what your "used to eat bananas" reference meant: https://nypost.com/2017/05/23/amazon-gave-away-too-many-free...

Interesting story!
Just leaving aside for a second what a crime against humanity this surveillance is...

It never ceases to amaze me how many of these massive data leaks are simply "mongodb in default configuration".

I just don't understand how it was thought, at any point in time, to be a good idea that mongodb in its default configuration, would be open to the world with no authentication.
US retail giant Kroger abandons Visa due to high fees. Might integrate Bitcoin
> This isn't a sponsored video... but we are getting our move for free
I like how they took the opportunity of the popularity of the post to promote their political viewpoints on trans people (post immediately under first post by same author). It just makes the first post look like clickbait. Why do people feel the need to introduce politics into something that isn't political once they get an audience? Boo.
Are they wrong, though? I got slammed with a bunch of downvotes all at once, and later a bunch of upvotes, and other comments on the page seem to track similarly. You don't think that's maybe caused by a surge of bias?
Imagine giving Facebook your phone number LOL.
I have an old password I made up back when I was 13 that I still remember. Nothing complicated, and it only used 1,3,5,7, and 9 (four corners of the numpad and the center key). 9 digits length. I made it up because it was easy to key in. I went and checked and was surprised there had been no pwnage.
"ln(4)" is the natural log of 4, so it's the solution to the equation e^x=4, where e ~ 2.71828... also known as Euler's number[0].

Reading further in the post will explain where that quantity comes from, and why it's significant, but if you have any questions you can ask them via the comment box on the article.

[0] The constant "e" turns up in lots of places, you can read more about it here: https://en.wikipedia.org/wiki/E_%28mathematical_constant%29

The usual examples for how Euler's number turns up are to do with calculus and compound interest, but there are many other.
https://en.wikipedia.org/wiki/Regulatory_capture

It's totally a thing and actually happens a lot. See AT&T.
sorry! I left contact info in my other comment
This has to do with state partitioning.

The official Elm Architecture tutorial used to contain some examples of encapsulating functionality into modules that would then be reused. The pattern presented there was abused by some folks and some problems that were introduced by state partitioning started to appear. There was a lot of talk about boilerplate and inter-component communication. A lot of these problems could have been avoided by not being so aggressive with the partitioning and so, "thinking in terms of components" has been discouraged ever since.

You can still define components by implementing the model/update/view triplet pattern but the main recommendation is to do it only when this is unavoidable (e.g. Pages or highly complex widgets).
Does anyone else find these informal specifications difficult to digest?

The informative appendices link to papers on TPM and the like but it's hard to find a formal description of the protocol, or at least the sensitive parts, that could be independently validated or verified.

Has there been any work to formally verify/validate the design of this protocol that I'm not seeing?
Windows comes with vbscript built in. MacOS has Applescript, Python and a bunch more out of the box. Plus incredibly high quality languages, libraries and IDEs are just a few clicks away.

My daughters are learning VB.NET at school here in the UK, using Visual Studio for Mac and more recently Windows Visual Studio on a laptop. My eldest is setting break points, inspecting variables, etc like a pro. She loves it. They both started learning with Scratch. Plus there are a slew of virtual consoles out there very much like the home computers of old except faster and far more convenient, plus very affordable kits such as Raspberry Pi. It's never been better.
Good point, though I personally don't work through self.ui but rather prefer loading into the class itself. Then I just put type annotations of the widgets in the class.
Troy Hunt writes ...

> I'm referring to passwordless solutions that involves things like QR codes, pictorial representations, 3rd party mobile apps, dedicated hardware devices or "magic" links sent via email.

Which of these is AuthN, in your view?

Edit:

Troy Hunt also writes ...

> WebAuthn has the potential to be awesome, not least of which because it's a W3C initiative and not a vendor pushing their cyber thing. But it's also extremely early days and even then, as with [insert things here], it will lead to a change in process that brings with it friction. The difference though - the great hope - is that it might redefine authentication to online services in an open, standardised way and ultimately achieve broad adoption. But that's many years out yet.

.., so perhaps the many years have passed.
Who in their right mind would give Facebook their phone number in the first place? Seriously…did people not expect Facebook to sell it to anyone with two pennies to rub together?
Congress and the Equifax Data Breach
5.2.12 was released in May 2018. That's hardly that old. None of the fixes since then sound like security fixes (all of the releases say 'maintenance release').
Sounds like a mainframe-based limitation. Our mainframe behaves exactly like that.
So what happens if you lose one of those USB devices?

Can you use multiple USB devices on the same site?
Stay away from fads, stay away from cutting edge technology, build something that will always be needed and don't take venture capital money in the first 10-15 years or so.

Why: Fads fade. Cutting edge tech is expensive and generally unnecessary to solve most problems. Startups focus on tech and not on the things people need all the time, housing, electricity, food, water, consumables etc. VC dollars are short term focused, < 15 years say, to build a long term business you need fundamentals early on and you cannot be focused on the short game.

Essentially the key is building something that not only has a need now, but has a fundamental need in the future.

Alcohol is interesting as it isn't a need but a desire/want, and it is fairly highly regulated and has been illegal at times all over the world (still today in some places). Both alcohol and nicotine based products are sticky because they have addictive properties, which even though most people aren't an alcoholic they are drawn to the properties of the drink. One could argue currently social media also shares some of those same traits, it isn't needed and could be argued it is damaging in ways, but people are drawn to it.
Implement file uploads and likes in a React chatroom
Building Fast Interpreters in Rust
But whoever buys a ticket will have to provide his passport information, surely not something a hacker wants to do?
High-tax states like California and New York make it hard for rich to leave
> go through hoops

mypy and types are only "hoops" in comparison to non-annotated Python (in terms of added syntax / coding effort), yet compared to explicitly typed languages where you have to declare types, that's just standard thing you have to do so there is no extra effort in comparison to these other languages (and then the judgment that it only works "half as well" is controversial (Edit: or at least needs qualification)).
I really like this. Could you make the page load with the first demo code pre-loaded? I sat there looking at the code and hitting "run", checking the browser console to see if there was any error. Then I realised I had to press "load" first and then "run".

Also, one bit of criticism: if it's not too late I'd also re-think the name. "Easyprog" is going to make any newbies really frustrated when they can't figure something out and the site is just mocking them: "lol, you can't figure it out and it's so EASY!".

Other than that, I think this is a great project - really well done, and it has a lot of potential to me really great learning tool.
No, the big problem there was that KDE 4.0 was really alpha-quality, but all the distros just adopted it as-is and made it the only choice. So if you moved to a newer distro version to stay up-to-date with everything else a distro encompasses, you got stuck with KDE 4.0 whether you wanted it or not; the distros refused to continue to support KDE 3.x while the 4.x series matured.

That whole debacle can mostly be blamed on the distros, though the KDE team can get a little blame for their numbering scheme (moving from "3.95" or whatever to "4.0" and not explicitly calling it "alpha" or "beta"). The distros are the ones who are supposed to be exercising some quality control and making intelligent decisions about what to include or not, rather than just blindly throwing things in from other projects.
The brain is 60% fat and basically the rest if cholesterol; ignoring water.

If you eat a diet which is low in fat and cholesterol, you are going to lack the building blocks for your brain. You're going to have a degrading mind.
It's actually a lot simpler than that: I can't afford it. I don't have the free cash at the moment. I am focused on eliminating debt and increasing savings and I can't do either if I spend some grand on an IDA Pro license.
It must suck when your status symbol is now obtainable by the peasantry.
I seriously doubt the vast majority of Facebook users would think about that.
Out of curiosity can you share what the price of IDA is now?
You can't just "replace men with women" though, as it's not clear that the reason men are in higher paid positions is because of discrimination. For example, men on average work longer hours than women, which obviously contributes to the pay gap. Men also take less vacation than women, which generally makes them "more reliable". If I have two SysOps people, and they have the same skill level, I'm probably going to promote the one that took less vacation time.

The priority should be in curbing the behavior of men who are overzealous in their work to the detriment of their own health. That would probably bring down the pay gap significantly.
I wonder how much such a service costs. It's really impressive how much attention they put into everything.
This is a misleading comment, because it oversells Rust and criticises Ada unfairly. Ada and SPARK have a track record of being used to build safety critical systems, unlike Rust.

Rust might seem like a big win compared to the average C or even C++ projects due to its memory-safety guarantees, but at the end of the day the only thing it has on Java or Python is protection from data races. It also has some type system features which enable writing robust code, but SPARK is in a different league.
Mute Netflix previews before autoplay with Chrome
It does in a way. Article 13 is largely a product of French and German politicians. Just because the German data commissioner says something like this doesn't mean there aren't plenty of German politicians eager to implement Article 13.
> Take it one further: everyone should do support, not just read the emails.

That's a really fast way to burn out your entire team.

Devs don't necessarily have good communication or people skills. They haven't been trained to respond politely when someone sends them a screaming, all-caps e-mail that their product is garbage. That's my job as the Support Engineer.
I can't take this article seriously. First of all Julian is no hero, let's dispel with that myth real quick. Did he run a website the published data dumps? Yes he did but a journalist he is not. Also the way this author plays fast and loose with his wording makes me not believe the majority of what he is saying:

> Last week, the International Court of Justice ruled that the British Government had no legal powers over the Chagos Islanders, who in the 1960s and 70s, were expelled in secret from their homeland on Diego Garcia in the Indian Ocean and sent into exile and poverty. Countless children died, many of them, from sadness. It was an epic crime few knew about.

> died, many of them, from sadness.

>> died ... from sadness.

I'm not saying the British government was in the right, I'm not saying Chagos Islanders didn't die but if we can't stay rooted in reality and facts then your "journalism" is a joke (if that wasn't apparent from this website itself).
Cache-Control for Civilians
Free in Australia too. When I was a kid you could order books from the library and they'd be put on the train for you -- you could pick them up / return them at the station (if you lived in the country I mean)
While personally saddened by this loss, I don't think this post "gratifies one's intellectual curiosity" [0].

[0]: https://news.ycombinator.com/newsguidelines.html
What Folding Phones Say About State of SmartPhones
I don't think the issue really is a fear of death, but a fear of dying before you've been able to do what you wanted to do with your life.

At 97, most people have probably long accepted that they're well past their peak, they've accomplished everything they're going to accomplish and even if they continue to live for another 10 years, they're unlikely to add anything dramatic to it. Their life is pretty much complete. Von Neumann at 53, despite the many things he had accomplished already, probably had tons more he wanted to do. His life was not remotely complete.
My mother was my french teacher at school three times. At home she was "mom" and in class she was "madame". It was not complicated.

That being said I did once call my male first grade teacher "mom" so maybe I'm not a good example
That snopes rating is bullshit. Snopes is also well known for bias that the journalists cover.

It doesn't matter which hurricane it is; it's whether or not it's bullshit for him to be doing that. That's it. The picture isn't fake, it's true that he FAKED that news. It's fake news. The hurricane's name doesnt matter.
The point of the model is that there will be many bosses that are not affected by such biases, who will then employ only women because they recognize that the other bosses have overlooked women due to "liking people not things".
Those yeast were fed a precursor. There is however a patent that takes it all the way from sugar.
You are clearly not in the brewing industry. Pot gorwes could olnly dream of this level of efficiency.
x86, not IA64. IA64 is the Itanium architecture.
Would also be interesting to hear the reasoning of someone who has seriously considered using Elm but ended up with not using it.
Show HN: My own MERN starter pack
Yes, they made this change some years back. (2013, maybe?)

Used to work just fine. Still works fine for driving mode on the Android app for some reason.

So I've just been typing out a location close to my home address for the past five years.
> 8. Yes. Polar isn't fully self hosted but that defeats the point. My cure hypothesis is that knowledge benefits from being social which is the main thing I'm trying to test. By the time I'm done I think 95% of you would agree that keeping it private is insane as you don't benefit from the community.

Then why are you calling it a Personal Knowledge Repository? It sounds more like you're trying to make it a social media network.
This was a stunning video. I realized about 18 minutes in that this video itself was part of a multi domain human influence campaign. Then 23 minutes in, he asks it outright “is this video a weapon?”.

As someone who spend a lot of time thinking about memetic propaganda and influence, this was insanely eye opening.
Yeah, some of us got into this as a hobby because it can be done for so little.
RIP
Loved this guy and his band
If anything goes wrong, gravity drains the molten salt into a storage pool that spreads it out, stopping the reaction and letting it cool and solidify. The lining of the underground pool can be made arbitrarily thick and durable. Contamination like at Fukushima is physically impossible unless someone deliberately damages that lining.
I know the original article provides some data in terms of what the "classes" are.

It would be nice to have some DEFINITIVE numbers that says what the class ranges are.

It seems like a moving target, and subject to wide interpretation.

What salary ranges constitute poverty? middle class? upper-middle class? upper class? insane 1%?

Is there even anything definitive to point to for these numbers?
The idea of buying a car as an investment that should retain value is totally alien to me. The thing starts to lose value as soon as you drive it off the lot. By the time you're done with it the car will be worth a couple hundred to a few thousand bucks. You agreed to buy at the listed price, and that's on you.
What? They didn't believe Musk's claims about price reductions when they bought them? I mean it's been a long time coming but he built a space program for heaven's sake.
And if they are surprised that's the entire point.
Aside from the awful UX of client certs, which we could imagine being fixed, FIDO tokens are very narrowly conceived to solve the exact second factor problem - and nothing else.

If you do client certs you've got this whole identity thing baked into the certs. But the FIDO token doesn't have an identity, it only knows how to prove it's still the same FIDO token you had before. So that's immediately much better.

If I use a client cert to sign into GitHub and Facebook, it's a matter of moments for that to be correlated. If I share the client cert with my sister or a colleague, again easily correlated.

But with WebAuthn there's nothing to correlate. The only way to check that Bill and Suzy are using the same FIDO token is to wait until say Bill tries to log in, and ask his token to prove that it's still Suzy's token. This requires a physical interaction (e.g. button press) from Bill. If the guess was wrong you learn nothing but Bill notices it didn't work. So, maybe, if you're nearly certain but just want to be 100% that could work, but ordinarily it's not viable at all.
They're not opposite - a statement like "the first thing on any page to grab your attention should be the thing that brought you there" is a visual design principle.

The problem with design as practiced on the web today isn't about methodologies as much as it's about goals. The design choices maximizing value provided for end users are polar opposites of the "industry standard", the ones your average startup runs with.

Seeing the modern UX practices defended and rationalized brings to my mind the image of a 13 year old asking parents for a computer to use "for education" - yes, a computer can be a powerful tool for learning, but you and I both know that's not what you will really be doing with it.
"drugdealing" "just not worth much pity"

Sure thing. Those cold hearted pushers who make people addicted to the killerdrug marijuhana for example, do not deserve the smallest pitty. Put them all in a dark hole where no sun shines, serves them right.
It's probably not the .NET you're thinking of: "By 2003, however, the .NET strategy had dwindled into a failed branding campaign"

https://en.wikipedia.org/wiki/Microsoft_.NET_strategy
I was anxious to know what kind of subgenre of anime (cartoons) I was going to see!
Gatsby: Canonical URLs and React Helmet
I was responding to marak830's claim that the guidelines say you should downvote comments you disagree with. You can look at the guidelines; it's not there. The rest is my opinion.

I believe that downvoting comments that you disagree with is a terrible policy since you end up with an echo chamber where anyone with a contrary opinion gets their comment moved to the bottom of the thread and grayed out. If someone says something you disagree with, the appropriate response is to engage them in a dialog and figure out why they believe what they do, not downvote them.