skysight-inc/HackerNews huggingface dataset:
They could switch sides of the road, instead of replacing the vehicles. Moving and rotating all the signs is probably cheaper and easier.
I have just checked quickly the comments and post-mortem, and I start wondering - it seems that the attack itself would be not really possible if Matrix would not be open source (as this would restrict access to the sensitive data)? Is that right?
The title gives the impression that this was an outage of Cloudflare's DNSSEC service, whereas in reality the Cloudflare website was down due to a DNSSEC error. Ideally the title should be clarified to make it obvious that Cloudflare customers were not affected.
Just because you are employed doesn't mean you are compensated well.

> So many companies in so many industries are just starving for good employees.

Perhaps we should consider the possibility that qualified candidates are not willing to work for sub-standard compensation.
Web Development Contract: Talent Agreement Essentials
Perhaps the HN headline should mention that it's a static site generator? I didn't know what SSG stood for until I clicked through, perhaps others are similar.
Depending on your threat model I think that signing packages directly from your CI is acceptable, assuming that your CI runs is a reasonably isolated environment (e.g. on your company's LAN) and people who are able to trigger a release are correctly vetted.

If I understand the parent comment correctly they were somehow shipping the release signing key on their production environment which is a whole other level of bad.
Any magazine is part of the media - especially if it's continuing the same exact discourse as other media outlets.
Hetzner and OVH (and presumably other cheap hosters) offer DDOS protection for some time now. Don't know if it's any good though, as the nature of a DDOS protection service makes it difficult to standardize and discuss publicly.
On the first issue opened by the hacker:

> Complete compromise could have been avoided if developers were prohibited from using ForwardAgent yes or not using -A in their SSH commands. The flaws with agent forwarding are well documented.

I use agent forwarding daily and had no idea it contained well known security holes. If that's the case, why is the feature available by default?
Because they were reinterpreted.

https://en.wikipedia.org/wiki/The_Antitrust_Paradox
I know how the opinion changed. There was relentless push by media and other organizations to create a narrative that there were some wizards that influenced the US elections. We still don't have any evidence on that by the way.

Using this as a justification to omit the governments responsibility in war crimes, people really shouldn't vote for anything associated with your politic platform. And maybe they just didn't. That would actually be an explanation that is far more probable.
When WikiLeaks published their big "collateral murder" and this while shitstorm started, I happened to be in Melbourne. I came across a "free assange" petition manned by student activist types... and I assume WikiLeaks people. It think it's near their offices.

My take was that WikiLeaks is just doing what journalists do. Sourcing newsworthy information and publishing it. All the major papers, channels and such were republishing, in my mind proving the point. Meanwhile, assange was/is an Australian citizen and the efforts against him are clearly two faced. The charges against him weren't the reason for the charges against him.

Anyway... I walked over and read the petition, intending to sign it. Free Afghanistan! US out of Saudi Arabia. Down with the patriarchy! Capitalism must go! Fuck the zionist-imperialist deep state Etc^... it also had some stuff about assange.

My (long winded) point is that this is a microcosm of the wider affair.

WikiLeaks, assange and the leaks that got him in trouble are journalistic. I don't think he sees it that way though. I think he sees it in more political-activism terms. The journalism defense is mostly made by other people, for him.

I still think he should go free though.

^Made up specifics. I don't remember what all the stuff was. Just that it was typical left-radical student politics of the time and place. Iircc, voluntary student unionism was the (sort of parochial-australian-student issue of the day).
It's easy, once you get it

Take a look at the man page (linux)

grep [OPTIONS] PATTERN [FILE...]

grep [OPTIONS] -e PATTERN ... [FILE...]

grep [OPTIONS] -f FILE ... [FILE...]

Now -f does not specify the file to grep, it specifies a file where to read patterns from (and they have the same "variable" name there, confusing)

Not to mention globbing and other shell escapes (which is not grep's fault, of course, but you might end up hitting in some situations)
It's just a screenshot of the same info shown on the archive.org page linked by the title.

https://web.archive.org/web/20190412060115/http://matrix.org...

If you can't get to archive.org, just respond and I'll imgur it.
Glint offers a debit card for gold.
Luckily yeah. So much wisdom in those comments. /s
Similar functionality called PowerPivot/PowerQuery[1][2] exists in Excel. It's hands down one of my favorite things to use Excel for, and also one of the least understood/known features by most Excel users.

I can't wait to see how Google's flavor of it for Sheets works.

[1] It's officially called "Get & Transform" now, but when it came out one Excel 2010 it was called PowerQuery, and still gets referenced that way everywhere (including the official help docs).

[2] https://support.office.com/en-us/article/get-transform-in-ex...
> the potential ability to avoid third parties taking a cut of all of your digital transactions

Other than mining fees?
So does Ketamine have any other ways of action besides neurogenesis?

There are compounds like NSI-189 that are going towards this path, but they come up short in trails.
Professional developers don't write "at the first place".
They didn't host production and the website on the same server. The attacker had access to the whole network. After that was detected and cleared, the attacker was still able to change DNS records. The domain was redirected to an attacker controlled site (https://github.com/matrixnotorg/matrixnotorg.github.io) where some logs of the production servers where posted.
SSH agent forwarding makes your ssh-agent available to (possibly some subset of) hosts you SSH into. This is its purpose. Unfortunately, it also makes your ssh-agent available to (possibly some subset of) hosts you SSH into.
> Takes too long for them to get there, and the incentive for them to abandon your request and pick up a fare they find on the way is too strong.

The few times I've reserved a taxi for someone the estimation was accurate and the driver very friendly. Same for the company I work for, no real issues with taxis. Company wise it's often easier to just take public transport though (quickest to/from airport).
No.

But they could make frameworks like Bootstrap much easier to use.

CSS is the top.
WC are the bottom.

React, Angular, Vue and company are the "between".
Beyond the point made by siblings comments about selling fractions of stocks I also want to point out that selling small amount of bitcoins or ethereum on-chain is also prohibitively expensive. I'm sure those debit card transactions won't be directly settled on the actual cryptocurrency, they'll just keep a balance internally and make big transactions on the blockchain if they need to balance their accounts. You know, like a bank.
"agents with agency" are people like Snowden.

> or a subject flopping around helplessly complaining?

Good thing, people like Stallman, Assange, DJB, Washington, Jefferson, etc did not flop around helplessly complain, they actually acted.

Without DJB specifically it would still be unlawful for you to publish your dosycrypt library for example.
“Group chat is like being in an all-day meeting with random participants and no agenda.”

That. So true.
> I use agent forwarding daily

That's why. It's useful, but you have to be mindful of the security risks involved in using it.
Just like Slack!
This "holy" law is cleverly circumvented in the quest for war crimes. So any appeal only gets you so far. We are back to square one. Government will hide crimes, people will try to call them out. Law is as useful and error prone, as we want it to be.
What it's like to interview at Gitlab
Hi, thanks for sharing this! I've applied by mining the block but I was wondering if my application has gone through. I got an alert saying "Thanks for applying!" but the form stays as is and I did not get the automated e-mail from Lever. I'd really appreciate any kind of help with this.

Also, I think it's a fun way of applying for engineering positions and I loved it!
It's not just appetites. The laws themselves have been reinterpreted, and the AT&T breakup happened right as it was going on - it might have not happened 10 years later.

https://www.theamericanconservative.com/articles/robert-bork...
Proliferation of hydrocarbon-degrading microbes at the bottom of Mariana Trench
Is there a secure alternative that achieves the same outcome?
If I paid monthly for a server and then spent time configuring it, now I would be able to talk to people who pay monthly for their servers and spent time configuring them.
You think this is weird. Then realize kids get put on their school group based on the birth year in the west anyway.

I wonder how a biological age based school grouping system would work out.
How is discussing cracking a DOD database password relevant to the prosecution? We’re discussing the cracking of a password in this comment thread, does that make us criminals?

By nature, I don’t think discussing password cracks, without a ton more context than what has been shared, is not criminal. There are many forum posts with system and programming questions that are purely hypothetical (eg, “so I’m trying to determine if my security is appropriate, is it as easy to crack as this dod password, etc etc”).

I think criminal acts and conspiracy to commit criminal acts require quite a bit of information and would like to learn more how you would use this as a claim of journalism.

To my knowledge, Wikileaks has never actively participated in the hacking or cracking required to access restricted info. They serve as a Dropbox for others who do that.
Why does the no heap requirement preclude C++? Obviously, you couldn't use much of the STL (not really a loss in constrained environments), but I don't see a reason to write off the language itself?
Yup, you can implement the whole ordeal in C++ like this:

int main(int argc, char** argv) {
std::vector<std::string> strings{
"apple", "cAt", "cat", "Dog", "apple", "dog", "Cat",
"Apple", "dOg", "banana", "cat", "dog", "apple",
};

strings.erase(
std::remove_if(
std::begin(strings),
std::end(strings),
[seen = std::unordered_set<std::string>{}](std::string_view str) mutable {
std::string lower = "";
std::transform(std::begin(str), std::end(str), std::back_inserter(lower), ::tolower);
if (seen.find(lower) == std::end(seen)) {
seen.insert(lower);
return false;
}
return true;
}
),
std::end(strings)
);

for (auto& str : strings) {
std::cout << str << "\n";
};
}
Those maximum payloads are in expendable mode, though. SpaceX wants to reduce expendable launches as much as possible. For a reusable FH the numbers are substantially lower and the satellite might not have that much more mass to still fit.
Wish we could as well, but I don't see our management giving up Slack any time soon. "So connected! So collaborative!" Ugh.
Bit harder for me as I ride with clipless pedals so I waddle like a duck when using cycling shoes.

I think next time I'll look at MTB style where the clip is recessed so you can walk normally off the bike.
As the parent comment suggests, most people are right eye dominant so from a safety perspective keeping the dominant eye closer to the oncoming traffic is preferable. And even before cars, most right handed people mount horses from their right side, especially if they've a big sword on their left, and it is safer to mount from the side rather than the middle of the road. The story I learned when I was younger was that most of continental Europe, and the (at the time) pro-French US, shifted to the right because Napoleon was left handed, although it isn't quite that simple - see "Why do some countries drive on the left and others on the right?"[0].

[0] https://news.ycombinator.com/item?id=9869812 .
For context, across the UK we have similar systems for speed limits.

They are not used for enforcement or prosecution. They are informational boards. Actual speed cameras are different (usually a yellow or blue box that doesn't give any feedback).

It's basically a sort of 'big brother is watching' reminder.

Some of them show your actual speed on a big LED board, leading to individuals attempting to get a "high score".

It sounds from the article like this would be the same. A board that flashes a mobile phone if you might be using one.

As far as I'm concerned, it's a complete waste of time (because I know these boards are meaningless), but the other side of the coin is that a decent number of people actually are afraid of enforcement action due to the signs and slow down.
apart from where you actually have html formatted text. not plain text.
Such a serious downside anyway, for these once a year long distance trips.
Assuming there is some correlation between illegal substance use/abuse, the test could be used to identify people with underlying issues that affect their work. No one really cares about your personal life, just use that as a proxy for your ability and risk mitigation. If it doesn't affect your work and you are a strong performer, the test results are not enforced. I think this is a reasonable response.
This is not right at all, the hack was due to an outdated Jenkins instance and could have happened regardless of what other software was running on the infrastructure.
> Works fine here. Terminal.app + bash 5.0.3 from homebrew.?

Doesn't work for me. Maybe I've broken something on my build? Or maybe you've redefined your keys to emulate the [alt] key?

> Also, isn't that special variable $_ and not $! ?

Sorry I meant `!$` not `$!` (updated my post accordingly).

Yes, $_ does the same thing too.
The only competition is BlueOrigin really. They are optimistically only 3-4 year behind. Then they should have a rocket comparable to Falcon Heavy.

The Russians are not really playing other then cheap mass production of old tech.

The European spent 4 years arguing and then came up with a something to compete with at the point when they started arguing. Now it will take another 4 years and then they are still far behind what SpaceX had 10 years ago. And that is totally without re-usability, in that they are another 5-10 years behind.

China is doing lots of things, but not as advanced or impressive and while they grind ahead consistently they are not close to SpaceX right now. At least they progress forward.

ULA is like Europe, targeting what SpaceX had 7 years ago and they will get there in 2-3 years. And then it will be far less impressive still in terms of re-usability.

India is just deploying cheap old tech.

That's basically it. SpaceX owns 50% of the US government launches, 50% of global commercial launches (large once at least). All the survives are 100% government depended, the commercial launch market is basically not close to profitable for anybody but SpaceX.

In terms of engine technology, its the same SpaceX and BlueOrigin are about to surpass the old glory of the US and the Russians and are moving into a new area.
That’s amazing. What’s your secret to keeping it under control?
>IMO this is a killer product compared to everything else I've experienced with Bitcoin and cryptocurrency this far, it really bridges the gap.

So it solves the usability problem of cryptocurrency by... working like a regular bank, more or less? And mostly getting rid of the actual blockchain to use off-chain transactions while having the convenience of the centralized Visa system?

This might be the killer product for cryptocurrency, but in a more literal sense. It shows that the market seems to inexorably converge towards the good old solutions, and the cryptocurrency ecosystem slowly (and rather inefficiently) reinvents the modern banking system.

I wonder when Coinbase will start doing fractional-reserve banking with they off-chain "cryptocurrency" accounts.

This is no more "cryptocurrency technology" than if I set up a script to sell some of my Bitcoins to replenish my bank account when its balance reaches a certain value.
Clean Code Guidelines Cheat-Sheet: Summary of “Clean Code” by Robert C. Martin
I guess it's more the thought that counts. I'm not sure it would have been very practical even if the thing hadn't crashed.
Maybe forcing separation of content providing companies and advertising companies should be the modern equivalent of separating State from Church.

An advertising company would always want to get more and more infos about the users that it sees as "resources" instead of customers. A content providing company would be forced to treat its users as actual customers and respect their rights at least a bit, and would push back against the advertising company asking for more surveillance data.

Now, unfortunately this can't actually work because the more an advertising company makes, the more it can afford to pay the content creators/channels/providers, and everyone just wants more $.

But if anyone has any idea how to make it work, do share!
Well, first you need to realize how many Mandarins[0] there is ...

[0] https://en.wikipedia.org/wiki/Mandarin_Chinese
> I think it only makes sense to test for harder drugs e.g. opiates and amphetamines.

Why? Why is it any of my employer's business what I do outside of work?
Get instead a Revolut multicurrency app and card with https://revolut.com/r/nicolav7 without paying for the shipping fees.
> I want my hiring manager to take a drug test too.

You can choose to work in an organization that has strict testing policies, including the hiring managers. Or you can ask your recruiter to take a test. I'll admit its a weird request, but considering the commissions on finding an employee are so high (1 to 2 months annual salary) and tight labor market, I wouldn't be surprised if they did it. I would take a drug test for much less. I don't see the asymmetry here.
Good citizens on HN don't throw snarky comments around.
Not with that attitude ;)
Alternatively, if you paid monthly to any hosting provider, you could be talking with customers of any other hosting providers.

And if there were any other hosting providers that came doing such shoddy things in their production systems, they would be wiped out of the ecosystem, but the ecosystem would still be alive.

Just like email, or phone lines... antifragile.
> There is no way to define a set of rules that prevents people from advocating pedophilia without sacrificing freedom of speech.

I disagree. The problem is just that people interpret "freedom of speech" as "I'm free to say whatever I want [period]". There are some limits however, that most fail to recognize. One of them which is both the letter and the spirit of freedom of speech ever since its first proclamation: the speaker shall be responsible for any abuse as defined by law. Being allowed to speak freely doesn't absolve you of supporting the consequences.

This is why you can speak state secrets or instigate violence against refugees but will be prosecuted (there are corner cases as in every other legal area).

In your example you are perfectly free to support that case. There's no actual "censorship office" to physically close your mouth while you do it. You may even escape any kind of legal prosecution. But in the court of public opinion you will not fare well.
This is a bit like saying that English is a language superior to Danish, because there are better books out there in English.

I don't think this has anything to do with the language, it just happens that C++ ships with a much bigger standard library than Go.
Well, that settles that then. Just another distracting flashing sign for the driver to deal with.
The problem is that Assange repeatedly angers and alienates his friends. The journalistic establishment won't support him because they don't like him.

An unliked person is the worst thing for a constitutional test, because almost no one can separate their ideals from their emotions. There were similar likability problems with Larry Flint.
How about the name: Manuevering Characteristics Augmentation System. There's nothing about stall. There's nothing about alpha protection.
This is often impossible when bike lanes are adjacent to parked cars.
Yeah, articles that proclaim the end of frameworks due to Web Components always revolve around a misunderstanding of what those frameworks bring. This article, likewise, starts out on the same incorrect premise:

> [Frameworks like Angular and React] have enabled us to do what we always wanted but never were able to: creating reusable autonomous frontend components

That's not what we always wanted to do, and not why people are using these frameworks. How often do you re-use your Angular and React application?
`ProxyJump`
Right, which is why public transport should be funded via taxation.

The way to achieve a reasonable service is actually to tax driving at a higher rate (to account for the externalities; pollution, congestion etc) and put the funds into infrastructure like buses/trains.

I often drive because it's more efficient and comfortable than using the bus. It's more efficient and comfortable than using the bus because the externalities are not priced in.

We can address that balance by taxing cars higher and putting on more buses / paying for more cleaners, etc.
I never quite understand why there’s not a confirm version. ForwardWithConfirmation or something. I’m active when I need forwarding - would be happy to simply be prompted before it’s allowed.
Cancelled by Netflix: Why Streaming Giant Might Not Be Best Home for New Series
Something scary about the current surge in IPOs.... Kinda feels like PEs are deciding the time to cash-out is now.
checking in as an internet weird person here, any time you have a platform that synthesizes anonymity with collaboration/social interaction, weirdos like us are gonna pop out like clockwork because we find a safe haven for our, uh, weird stuff. a place to not be judged or whatever. i think the sjw type terminology for it is a safe space. and of course due to the human element being so easily corruptible, many people do also tend to use such things for illicit purposes.

hey anybody else remember the days of T-Philez?
Presumably, employers aren’t experts at knowing what results in lower healthcare costs, plus it would avoid health data from being shared with another entity unnecessarily. It would also be better PR since health insurance needs your health data anyway, so nothing is changing other than people paying less for being healthier.
Currently when you have crate A with a deprecated function there is no warning until crate B tries to actually use that deprecated function, so clearly there is some place that crate B can look at to see whether a particular method is deprecated, there is even place for a note field that will get printed when crate B tries to access it.

Why would it not be possible to have some additional information that says "from rust edition 2021 onwards this is actually obsolete". Whether crate B merely gives a warning on compilation or an error then depends on crate B's edition.

Sure that means you can still use the method if you really want to (by using older editions), and it also means that if some of your dependencies are still on an older edition you can't prevent it from being used by them, but it would be a higher hurdle to accidental usage.