skysight-inc/HackerNews huggingface dataset:
Some more background from John Preskill:

"The idea that quantum effects could have an important role in brain function is not new, but is routinely dismissed as wildly implausible. Matthew Fisher begs to differ. And those who read his paper (as I hope many will) are bound to conclude: This old guy’s not so crazy. He may be onto something. At least he’s raising some very interesting questions."

https://quantumfrontiers.com/2015/11/06/wouldnt-you-like-to-...
I think you can give up and accept that’s what it is, too. Basically continuing doing it, but stopping hating it.
Those Bashing Smart Locks Have Forgotten How Easy It Is to Pick Regular Ones
for those who have not seen it, the "Global population growth, box by box" by the late Hans Rosling is (IMO) a more entertaining introduction on the same subject.

https://www.ted.com/talks/hans_rosling_on_global_population_...
The fact that there was 3 billion people in 1960 is mind-blowing to me.
”Then there are expensive commercial options.”

What applications are most common these days in the publishing industry? Adobe Indesign? Quarkxpress?
I've actually found that Lua is one of the least painful languages to write with voice control, as it has so few symbols - they tend to be only operators so you can switch them out easily enough in your engine. (And a few extras for moving around in your text editor, like "com jump $n upwards").

But you still do need to replace all sorts of brackets, like any language. At the moment I've got:

"bracket" == (

"brace" == {

"index" == [

(And "end $x" for the other side of it.)

Clearly not ideal, but works well enough for now, certainly a lot less painful than trying to maintain indentation in Python with voice only. (com select 20 lines upwards, reverse tab... Followed by swearing as it tabs instead of untabs.)
Funny enough, the site is reporting port 3000 to be running a web server. It is not - according do nmap and my knowledge.

Any ideas on this?
Most users have a modem or router that comes with a web interface, like just about everything in the internet of things.
The Aeternity Fortuna Upgrade Is Coming in June
Jeff Bezos finally gets .Amazon after ICANN run out of excuses to delay decision
> Those that don't will learn.

Sure. What’s the cost of learning?

I have many examples of even smart people not knowing what tech can do. I’m still regularly blowing people’s minds with the AR mode in Google Translate, and the tech behind that is 8.5 years old now.

This isn’t even a new phenomena — back when I was a kid all the adults joked about needing someone under the age of 14 to work the VCR and stop digital clocks flashing 12:00 forever. The jokes didn’t stop until VCRs stopped being a thing.
I also browse with noscript all the time and I get them quite often. Mostly on product landing pages and Show HN demos.
The page doesn't do a great job at explaining the mechanism (which from a quick glance seems to involve WebRTC).

This is a better resource on this topic, which involves DNS rebinding: https://medium.com/@brannondorsey/attacking-private-networks...

DNS-rebinding also gets around the cross origin request issue, which some comments here mention.
LaTeX is nice for some use-cases. It works quite well for academic papers. Especially if the journal has a standard template to use. But probably not so nice in other cases. I’m not sure it would be so convenient to layout a brochure or a book in LaTeX. (And I mean LaTeX, not TeX or ConTeXt.)
Here's a question I've had for a while: WHY in the world do web browsers not block access to localhost? What exactly is the extremely compelling use case that has prevented them from blocking this?
This is a very interesting answer and if it wasn't for the snark I would have upvoted it.
that's awesome, using it!

but to be fair, the point seemed to be more that if you run something that's "only" exposed locally... don't. securing each and every machine with uMatrix doesn't seem the answer to this.
The draft "pinning mechanism" was not like HPKP and insisting on portraying it this way was a recurring part of the bad faith effort to derail the working group efforts earlier.

It's a "pinning mechanism" like HSTS, so it doesn't work as a ransom tool, and the risk of a foot-gun is much more manageable. You're apparently very enthusiastic about MTA-STS, which has roughly the same pinning.
Well he did say "most of the world" which is not "everywhere". I did not read it as if every single country has this requirement. :)
It's 0.000004286% of the human population that would be considered a minimum viable population size, and of course that's considered stable. We know human population was less than that at least twice in history. For the vast majority of human history human population was about 0.000171429% of what it is now.

Both are vastly less than the .1% you claim to be fatal. What is your basis for claiming this number would end the human species ?
Their routers do, along with an ever growing number of IoT devices people happily hook up to their WiFi without a second thought.

Given the long and gory history of companies releasing insecure by default devices methods like this are a legitimate entry point into a network.
I guess it would depend quite heavily on location - particularly re. tax and employment regulation. For example, in London, a lot of the good people historically went the contracting route due to much higher rates and lower taxes. Big banks were (and are) staffed with a lot of contractors who were very happy not to be on payroll.
A lot of family run retail shops all over the world/Asia seem to have this misconception that family labour is free, thus their employees/children/siblings are effectively working for below minimum wage.
I've got a 24Kw Leaf and honestly, it's a blast to drive. You don't need a Tesla to have fun with EVs ;)
If you're on Linux, BSD and macOS, you can run:

sudo lsof -i | grep 3000

To try and see if a process has claimed the port.

On Windows:

netstat -ab

I've forgotten so much Windows I don't know how to filter the result, but it'll give you a list of ports and processes.
Huawei's “Hongmeng” Operating System Is Coming, but Not on June 24
Ask HN: Is Software Development a good career until/past retirement age (~60)?
ECS Secrets Done Right
You may end up with 0xFF items on stock, add/subtract are cool, but not ideal, also negative number is not always more acceptable than exception. I recall FF bug with Civilization https://www.geek.com/games/why-gandhi-is-always-a-warmongeri...
They aren't part timers, they are full time, but employed by temp agencies.
It is legal to crawl Linkedin, BUT this is why it is hard
Sure, why wouldn't it be? Part time is not a status, it's just a different contract.

Maybe you're confusing temps with employees though; in that case, it is possible but the temp agency will demand a fee. It works the same with consultants, for who the fee will be much higher (think 2-3x their annual wage).
It's easy to say, but if you begin, it is very difficult to do.
160KM/h (100MPH in freedom dollars) on the flat.
What about organ meats? That's piqued my interest
Only reason to share this not-so-outstanding library is "it's written in Rust"?

Rust is my favorite language, but it becomes silly - every day some not-so-outstanding copy of existing tool in Rust on the first page of HN.
Digital Illustration Improves User Experience for Web and Mobile
I was talking about PrinceXML mainly, when trying to automate reports etc. There are others.
Pretty simple, if you visit a psychiatrist/psychotherapist you have to pay them somehow. One way of doing so is by using your medical insurance. So you hand over your medical insurance card, and now they know you’ve visited a psychotherapist. If at any later point in time you want to get work disability insurance or switch to private health insurance you have to disclose any preexisting medical conditions, since there is a record of you going to a therapist, they could otherwise retroactively find out that you got treated for depression and deny your claim if you have burn out.
Other approach is to create a useful extension like:

https://addons.mozilla.org/en-US/firefox/addon/yt-adblock/reviews/

disguise that you're inserting an iframe linking to your web server into every single page user opens, by naming variables and your tracking domain incorrectly and by waiting for an hour after installation (this may also help avoid automatic tests mozilla is doing) and then just sit back and wait and log all the referers and ip addresses. It's a bit stealthier too, but needs users to visit their local web servers. But you'll also get the full URL.

Nobody will report you or care about the report and users are banned from fixing the extension code locally even if they're able to review it themselves. Bad reviews with some actual text fade away quickly, so if someone warns your other users, it will be pushed out to page 2 after a while by other useful one word or just empty reviews and it will work out.
We call them Flip Floppers.

We do a lot of integration testing, more so than unit testing, and those tests, which randomly fail, are a real headache.

One thing I learned is that setting up tests correctly, independent of each other, is hard. It is even harder if databases, local and remote services are involved or if your software communicates with other software. You need to start those dependencies and take care of resetting their state, but there's always something: Services sometimes take longer to start, file handles not closing on time, code or applications which keeps running when another test fails... etc, etc...

There are obvious solutions: Mocking everything, removing global state, writing more robust test setup code... But who has time for this? Fixing things correctly can even take more time and usually does not guarantee that some new change in the future disregards your correct code...
Instrumentation code is a first citizen in a codebase
I'd rather avoid LaTex pain points...

Also CSS has gotten a whole lot better.
Some browsers apparently do, which is why this demo isn't working for some HN users.
If I key in the same password "PAssword123" for site A and site B, it makes absolutely zero difference if it's hashed before sending on site A if site B is storing it in plain text, because once retrieved from site B it can be used to log in to site A regardless of A's password handling process.

The only way round this is to make sure that B doesn't have any information which can be used to compromise A, by sending the password from an external program.

(You could just about achieve this from client-side salt+hash as an external program instead of a password manager, but then it's a big pain to change passwords when B is compromised.)
"Making bad assumptions about DB ordering"
That's caught me out before. Postgres is just weird, I had to run the same test in a loop for an hour before it'd randomly change the order.
Firejail allows for the creation of sandboxed interfaces, which include the ability to block local network access.
While this is cool to harden your transactions, as more locks you add as more deadlocks and blocks appear, and it becomes harder and harder to keep transactions fast and isolated from each other. For example if you do select for update and record is not found, DB should lock key space to prevent adding such records, did you suppose to do this and block other inserts/updates? It's often easy to find problem with transactions in code, but very hard to fix all consequences.

By the way because of this instead of select for update for single record I prefer update with no change. If there is no record, nothing will be locked.
I studied this as part of my degree. It's mostly the ice cream vendors problem, where apparently the franchises would prefer to saturate a smaller area with competitors than a larger area with no competition.

It's probably an oversimplification but it is painfully evident when walking around metro areas of Japan.
I used to scan the company network for Selenium servers and remotely open "inappropriate" pages. Always nice to see a coworker wonder why a browser window with images of Pooh opened up.
edit: I am a dolt. Thank you :)

I got this address as well, do you have anything running on .4?

It's just weird because I have .1 router, .2 AP, .3 pi-hole

then .10 is when I start my static IPs

and .100 is where my dhcp starts

nmap says that host is down as well
The death of UK coal in five charts
Obviously, you're right. And I can imagine any developer can imagine the same thing :).

But I couldn't find a better way to check if I am online than making a request to any server. In fact, I'm using two over different protocols just in case.
Makes you wonder what other apps are accepting local HTTP connections (e.g. vendor bloatware [1]).

[1] https://support.lenovo.com/th/th/product_security/len_4326
This functionality is covered by netcat on Unix but I am not sure how to do this easily on Windows. I am also not sure if this tool would compile on Windows though.
Timely. From today:

http://www.smbc-comics.com/comic/life-tip
I share GP's worry. Long descriptions are only proof they spend more on content. Given the sleaziness of on-line retailers in general, how can I tell this is a genuine signal and not faked one?
Judging by "ReferenceError: webkitRTCPeerConnection is not defined" message in my browser it probably uses WebRTC to get your local IP subnet. I installed an add-on to block WebRTC after I watched a presentation on this tool [1][2] and I recommend you also do this, unless you actively use WebRTC (and don't want the hassle of toggling a switch).

Unfortunately the protocol is vulnerable by design. :(

[1] https://portswigger.net/daily-swig/new-tool-enables-dns-rebi...

[2] https://www.blackhat.com/asia-19/arsenal/schedule/#redtunnel...
Most people seem to have slept through their civics classes where the mechanism of how this works was detailed. A startling number of people are under the mistaken assumption that it is or was intended to be, a direct democracy.
Aoltechsupport
you'd need at least

localhost localhost * allow

to be able to open sites on localhost directly.
Don't forget to always roll up your sleeves and carry around some papers.
This was an interesting article and the author has strong data. I would want to know about the Younger Dryas [1] period though. This is a warming period about 12,000 years ago when some of the most devastating geological events we know of happen. This includes the outburst floods of glaciers holding back bodies of water larger than Lake Erie (Lake Agassiz [2] for example) and a temperature differential in Greenland of 27 degrees Fahrenheit cooler compared to today.

Human being play a huge role in climate change, but I don’t want to also write off the absolute enormous shifts than can occur naturally. We need to take those just as seriously for our own security.

[1] https://en.wikipedia.org/wiki/Younger_Dryas

[2] https://www.dmr.nd.gov/ndgs/ndnotes/agassiz/
The sheer mass of people that India and China has. If they wanted to, they could send a fraction of their population to pretty much any country and double the head count. It would be a pretty effective method to invade peacefully.
You shouldn't be in that situation. Antibiotics are not supposed to be discretionary medicine that you take until you feel better. Your son should have finished the prescription. Stopping antibiotics prematurely is one of the ways that antibiotic resistant bacteria develop.
It's really just an ORM if I'm looking at the project.
You will have to disclose the treatment if you apply for work disability insurance or switch to private health insurance later.
Well LA you typically have a car. Though not as convenient as japan there are definitely 24/7 convenience stores or supermarket spots within short driving distance to where I use to live.
Choose the Right CNC Machined Parts Manufacturer for Your Needs
Big media has always had a lot of power to influence election. This is mostly about FB being the new kid on this block, and traditional big media not liking it, and firing at FB from all barrels.

I do not like Facebook at all, but I can recognize a sustained media smear campaign when it's smacking me in the eyeballs every day.
I recently have accidentally learned that my entire family is seriously deficient in vitamin D (even despite it's summer). A big surprise, and one that could have stayed undetected for many more years.
Scroll snapping only seems to work on webkit.

It doesn't work for me on Firefox desktop either, but Firefox Focus uses webkit by default afaik.
Well I think the governments are not doing enough to stop Facebook. EU just passed GDPR last year but still, based on recent developments (like the Crossfit case) it should be obvious to everybody that FB is damaging to society on many levels. I would go even further with government actions and start to block their IP ranges on the national level.
Nobody walks in LA or most of california. You drive everywhere you need to go. CA is suburban with the exception of SF. A mile is a short drive. A convenience store every 100m is kind of excessive.
No non-developer author or editor is going to look at this and think "Wow, that is amazing. This is the future of publishing."

And I wouldn't bet on unquestioning support from developer authors/editors either.

To be harsh, this is one of those projects where someone who doesn't understand how key parts of an industry work has decided that their "I made a command-line content build system in $interesting_language!" solution is superior to absolutely everything that already exists - based solely on their own opinion.

Professional peer review would not be kind about this.
Do you have any locked down policy on them though? I assume this would only work if you gave blanket access.

I noticed in my tests it found one on port 3000 with blanket access, but didn't see one on port 9999 with restricted access( policy => allow from *.mydomains )
Invade? Don't you mean culturally enriching?
We tore up our terms and conditions
I've seen multiple shitty IT contracting firms failing projects over and over and still get contracts.
Oh, so it's people like you I have to thank for not being able to buy quality items anymore. I thought it was a trend driven by companies, but it turns out the population of people who prefer disposable, short-lived items is real after all :/.
Doubtful considering how much work is being done around WASM.
About the first page of HN I agree, it's crazy xD. I wrote it as my second crate to learn about the environment.

But I truly believe in this micro modules way of building things. If it reduces complexity it's welcome. :)
I think Zuckerberg has both the financial means and the time to fly to every country where he operates. Not all the countries requested hearings so the number of countries he needs to show up is probably less than the number of countries he visits on pleasure trips.
Forgiveness, the Secret of Successful Teamwork
Another anecdote: Local friend works for Google in Asia. She is basically forced to relocate to SF for 1-3 years and work at a rather low salary (for SF standards) there on something unrelated to her current job.

I would suspect that part of the reason for such a "program" is to save on wages, which would be much higher for locally-hired staff. Her field is admin/marketing. Should be easy enough to find local talent for that. At a higher price.

I'm sure there are upsides to this exchange program, but having no real choice (except quitting) and working at a lower salary don't leave the best impression.
I hope you're not in China!
That just the example in the description, not the scan results.
"Hurt" is completely subjective, so when you say "I value that person's statement that they are hurt by something, but I don't value this person's statement", you're just saying that "that person good, this person bad". Which is fine, of course, it's your site, it's just not as easy as saying "those who don't care are assholes, and you don't need to care about assholes".

> "What kind of relationships, conversations, and communities do we want to create?"

You're absolutely right, it's just that the answer to this question is different for most people. There's no objective answer and in the end, you end up saying "these people here are more important than those people there". Which is fine of course, I just prefer that to be clear and not pretend like there's some absolute moral guidance we can turn to.
Chlorine is available in every super market, and chemically impossible to distinguish from the type of chlorine used in attacks. Same chemical. Although it is hardly ever used as a weapon, since there are far more effective chemical weapons than Chlorine. Basically, you need a lot of chlorine to kill people.
Which probably accounts for a lot of people's behaviours, but the real cost of most products is going to be more like 100-500% markup, not a flat $5, especially once you get into cheap flights or items that have been shipped large distances.

I'm not someone who believes that changes in individual consumer behaviour is going to keep up under 5 degrees of global warming, but if we don't start getting used to some of this, then there will never be the political will to enact the policies that will head off the worst of climate change.
The point of dnssec-chain-extension is to enable browsers to use DANE without performing additional DNS record lookups and incurring the associated latency penalty. We can invalidate all the counter points if DNS servers supported additional answers or push.

With DoH we get DNS push and a browser could do DANE without incurring the associated latency penalty. They could peak ahead in the stream and see if a DANE (or SRV) record exist. No latency, no middle box, no additional secure connection, no dnssec-chain-extension, no certificate pinning. DANE support in the browser would then be purely a optimistic code path that improves the security if the DoH server happens to send it.
I think that's just the hardcoded example in the text, considering it's still there when I viewed with no scripts enabled (and I'm on a network that doesn't have anything assigned in 192.168.0.0/16).
OpenBSD is a sum of its parts. The individual differences between it and Linux seem minute, but together they provide such a remarkably saner experience. I can't imagine using anything else these days.
Seems like by 2100, Nigeria will be the third "population power" in the world:
https://ourworldindata.org/grapher/projected-population-by-c...
US-Centric:

With a CS degree: SF or Seattle or wherever I could find a FAANG/MS type highly regarded big tech company to recruit me to, since the entry level market is soft among startups and a lot of non-tech BigCos seem to be a path to stagnation (based on my experience interviewing candidates from such backgrounds).

Software developer without a CS degree: best chance of being hired is probably at a startup or agency. I’d go somewhere with a startup scene but lower CoL than SF or NY. Probably Seattle or Austin.

Other fields: follow the jobs. To break into publishing, New York. Film, LA. Anything that’s not specific to an industry (say, marketing), I’d probably find somewhere with moderate CoL that’s undergoing an economic boom. Then consider moving somewhere with higher CoL but also higher salaries once you’re established - since if you can save the same percentage of your salary you’ll save more total dollars and reach financial targets faster.
I don't know of any IP addresses that it's safe to hardcode in software like this.

However, there are hostnames that it's safe to hardcode: the DNS root servers, a.root-servers.net etc.

If you have working hostname resolution, even if intermittently, you could in principle resolve those, and then check connectivity. However, it's probably not a good idea to use these crucial public resources for something so pointless!

Interestingly, all of the root servers except G also have a companion website, ${letter}.root-servers.org, which could perhaps be used for an HTTP connectivity check. Those websites aren't hosted on the same machines as the nameservers.
An Indispensable Part of Acceleration – GPU Computing