skysight-inc/HackerNews huggingface dataset:
Ask HN: What is your best information security war story?
/r/somebodymakethis
My own personal preference is to simply make VM's on each VPS that has some storage space, then enable chroot sftp and rsnapshot. Then on the client side, I used LFTP (sftp mirror sub-system) which is compatible with chroot sftp and behaves like rsync.

Each VPS backs up to the other. RSnapshot makes daily diffs that use hardlinks to avoid taking up space. This also mitigates tampering, as only root have access to the snapshots.

Demo site using anon login for testing: [1]

[1] - https://tinyvpn.org/sftp/#lftp
Well that explains why the youtube trending feed is favored to traditional news media and tv-shows, instead of independent creators.
The future will be recorded, on your smart speaker
People didn't stop overdoing it, they just replaced it with something else.

For example TV usage kept growing until it peaked in 2010 when smartphones became popular: https://imgur.com/SJej6zm
You know, I used to think this way too, but then I noticed something: I never have trouble switching timezones.

Oh oh I’m a nightowl how will I ever wake up before 9am and go to bed before 3am!? Are you all insane for suggesting this? No way jose

Then I travelled to USA, or from usa to Europe. 9 hour time difference. After a week or two I adjusted. Going to bed at 3am and waking up at 9.

Hm that’s odd, if I claim I cannot shift my sleep schedule, how did I just do so by 9 whole freaking hours? And it only took 2 weeks. That’s odd

So i tried shifting without travel. Bed at midnight, up at 7am.

Worked great

Now I have time before work to do stuff I otherwise would’ve done after midnight. Except my mind is fresher so I’m more effective about it
First Looker and Tableau, Which Data Viz Companies Could Be Acquired Next?
ReCAPTCHAv3. It will differ from ReCAPTCHAv2 in one important respect: it will no longer ask you any questions, meaning it will no longer give you the opportunity to appeal it's snap judgement of you.

https://developers.google.com/recaptcha/docs/v3
Is there any real data or other hard evidence of this whitelisting?

Especially in the EU where no favorable treatment is the default (so net neutrality) - as far as I know.
Almost exactly what happens to me the odd periods I manage to sleep early. Fall asleep before 22:30, wake up 04:15-04:30. Then I get a bit spacey between 6-7.

After 2230 I don't wake up until about 9
While I have the conscious ability to create both images and entire 3d animated systems in my head, it also comes with my subconscious flashing images at me, from animal forms through to mandalas (sometimes combined with buzzing noises), having extremely intrusive visual memories that can be triggered unexpectedly off a host of random things, and experiencing fireworks whenever I have a migraine. I think I might be sitting in a tail somewhere too. Hi, how's your tail doing? This one is very brightly coloured but tends to move around a lot.
Property taxes get redistributed in the state of California. The way it works now is that property taxes goes to county and then state and it gets redistributed throughout the state. It is no longer true that wealthy towns get more $$ for better schools.

Further, over 45% of California budget is for schools. A lot more than property taxes goes towards public school. The teachers union is very powerful in CA. There are a lot more factors involved. Not a lot comes to infrastructure. Even tax measures and bond measures for infrastructure improvements gets diverted into affordable housing and usually this is high density. High density degrades existing infrastructure as more resources are spread thin for larger number of people and has the opposite effect of improving infrastructure.

Infrastructure should be in place before high density housing measures are put into action. Right now, the opposite is happening..or infrastructure is not happening. It’s just not rational problem solving.
From the article:

> Consider what is happening: The attack was anonymous and the task was pretty simple: Send $800 to an address and nothing will happen. However if a person is motivated enough to find a Bitcoin source, put $800 into a bitcoin machine, learn how to use the bitcoin machine, and send that money based on a simple email, what else could you ask them to do?

Obligatory Black Mirror reference: https://en.wikipedia.org/wiki/Shut_Up_and_Dance_(Black_Mirro...
A similar evolutionary argument was put forward in "Why We Sleep"[0] by Matthew Walker. Its mention in the book was less specific, so I'm not sure if it's referring to the same study.

[0] https://en.wikipedia.org/wiki/Why_We_Sleep
FYI. Title is misleading. This experience has nothing to do Firefox vs Chrome. Result is because of 3rd party cookie and tracker blocking. I had same and even worse (I was not able to get through captcha) experience on chrome itself because I have 3rd party cookies disabled and couple privacy oriented extensions running.
Yeah, that'd really put me off reporting anything.
(author of the blogpost here)

> It's not clear whether the asshole in question is being dogmatic about some ninety-day disclosure-to-publication deadline or whether they're maybe being rude about the project having security bugs.

Being dogmatic with 90days disclosure, would get you a "hardline security reporter", but not an "asshole".

Notably, because there has been no reporter that refused to extend by a reasonable amount of days, for us. "Hey, can we get 120 days, because we got other bugfixes and we want to do all of them together".

No, we're talking about actual assholery here:

- requesting answer and reproducibility in 24hours, and sending 10 mails in the mean time;

- sending the same issues more than 10 times, because the stacktrace he has is slightly different, but refusing to listen when told that this was the same issue, and therefore only one bounty;

- refusing to read the guidelines, and refusing to test the good version, and then insulting us;

- agressivity, or insults, to the point where the HackerOne team had to intervene several times;

- plugging the output of his fuzzer to HackerOne without checking if it actually crashes or if it is a different bug;

- submitting the same bug to a different program (Google Android Apps) to get 2 times the bounty, while the bug DID NOT apply on Android, but he did not even check;

- a few others that I forgot.

So yeah, this is not about dogmatic or hardliners: we know how to deal with those in the open source communities.
A Story of Chernobyl plant liquidator that wasn`t included in the HBO series
HBO cancels 'Vice News Tonight'
iMac Pro has a 18-core Xeon W option.
Interestingly I had to enable JS to see the checksum for the file download (?!).

Reproducible builds + a signed list of hashes would be a nice move for security.
Excellent point: yes, we fixed (actually worked-around) that bug in this release.

Sorry about forgetting about it: I cared more about the FOSSA project here, and forgot about this.
We use plenv after trying perlbrew. It's shell based, doesn't require perl. The Perl-Build plugin does, however. It has straightforward documentation and creates shims instead of relying on aliases.
Or the time Tuttle (a city in Oklahoma) threatened to sue call the FBI on CentOS: https://www.theregister.co.uk/2006/03/24/tuttle_centos/

(I'm somewhat amused that the website in question still doesn't seem to work 13 years later.)
While relatable, this is just a low effort post more suited for Twitter or Reddit.

For a fair comparison OP would need to use clean browser profiles on fresh IPs. Like this it is just fan-service for Google Captcha victims (like me).
An attempt to build a font database with opentype.js
If your emails are in anything other than mbox format, then notmuch will not modify your email files - it merely builds an index for them so you can query. That should take care of your search needs.

As for HTML email, if you mean HTML converted to text, then notmuch will do it. If you mean show it as proper HTML, it won't. It can also show images inline (although my setup stopped years ago and I haven't debugged why). To be frank, I don't like how it converts an HTML email to text - it doesn't even preserve links (i.e. it shows the text only, and not the URL it links to). I need to look into how I can improve it.

But despite these headaches, I still use it. It's good.
But Fios in Philly is $40 a month (and then $55) for 100Mbps with no installation fees or contracts, so it will take your customers more than three years to break even for probably worse speeds. The net neutrality promise is nice, but do you have other selling points?
Because they own their own platform, they can't handle HN traffic. Idealism, meet harsh reality.
You're not supposed to figure out the traffic light riddle, you're not a human if you do.
https://www.investopedia.com/articles/investing/050715/can-b...
I understand that your experience is yours but I also believe that you might be going about it the wrong way.

First, you don't REALLY need to know anything but Meta-X and Control-XS, Control-XF, Control-XC to get going. Those aren't really that hard to remember or make muscle memory for, IMO. It IS hard to have to go back a bit to re-integrate how to do things in a new way if you're already happy with your existing workflow, so if there's no value for you, then... don't use it. Use whatever works for you.
You're essentially paying your employer so that you can have more free time. One could argue that if you feel the need to pay for your own life, you're in a sense the property of another person. If you do X amount of work, why shouldn't you be entitled to the fruits of that labor? Why does anybody have the right to take the value that you created away from you?
> isn't an attractive thing to do when you have _actual_ work to do.

Leaning any new tool when you have work to do is never an attractive thing. Whether that's an editor, a language, an issue tracker, or any tool. There is always a period of learning that is less productive, but the hope is that after learning the new tool your overall productivity is higher, resulting is more gains in the long run.

Emacs out of box comes with menus and toolbars (underrated features) to accomplish most basic commands, so you shouldn't have to memorize a whole bunch of stuff to start being modestly productive. I think it's way ahead of vim in these regards, you don't have to learn a whole new paradigm of "modal editing" to get even the basics done.
HttpMate
> Not to mention how much they push AMP and they whitelist which ad networks are allowed to serve ads on AMP

One can only hope that AMP will be the court case of the digital century. Whether Google's obscenely obvious anti-competitive projects are allowed to flourish or wither will have a major impact in the development of the World Wide Web going forward.
Please forgive me for being unnecessarily obtuse this early on a Monday morning.

Where does Apple say that GPL code isn’t allowed on the App Store? I ask entirely out of my selfish need to avoid unpleasant surprises later on.
No. We're too little to be a financial concern to them. Also, anything they might do would be a bad PR move for them. Then again, I'm sure we'd get more business from the Streisand effect. :-)
The user is complaining about the slow CSS animations. It's definitely a bug though not something they did on purpose. I remember having the same issue on Chrome as well.
> at a reasonable hour

This is an odd thing to say, since the core point of this entire topic is that "a reasonable hour" differs based on a person's physiology.
I agree about RAID5, but personally I don't think RAIDZ2 really works as an alternative. Everyone should use RAID10.

The reason for this actually has nothing to do with data protection (although not having to read your entire disc set to rebuild is nice). The reason is that it's hard to figure out who RAID5/6 are actually for. The enterprise is all on RAID10 (hence no one fixing the BTRFS write hole). So you'd think it would be for enthusiasts who don't want to purchase as many discs, right? Well, in my case at least, parity disc modes are useless for me because it means I would have to buy discs of exactly the same size into the indefinite future!

I started with 4TB discs, then I've added 8TB discs, and now I'm looking at newer Western Digital 10TB helium discs, which are actually much lower power than the 8TB ones. But none of those 4TB or 8TB discs have failed! So while in theory if stick to the drive size you start out with, you can save money with RAIDZ by using parity discs and adding a drive when you need more storage (at the cost of a decreased parity %), practically speaking a lot of that money is wasted since you either have to neglect larger more efficient drives, or replace working older drives when you want to upgrade.
We have two "monopoly" problems here... the legal, and the political. Even for companies that are probably not legally monopolies, like Facebook, consumers are very uncomfortable with them, and politicians are leveraging that consumer fear. So if antitrust doesn't work, think about where politicians might turn next.

Or they may just go on making blathering promises with no intent to keep them, like they do about, say, Citizens United.
We don't need to be cured; we need to be respected.

How would the larks like it if we just stayed up until they were in phase 3 of non-REM sleep and just smothered them all in their beds? That's just as offensive as forcing us to wake up at the same time they do, just because they don't want to wait for us to finish sleeping.
Yes, it's the most obvious internet rage trigger.

But I can't figure out why they make a 'delay'? Why not just show the next dam image?
All the chargers, cables, iPhone sockets?
Include the traffic light poles.
> and he brushed it off and dismissed my bug report, telling me simply not to do that.

I did not do that. That's totally not true. You are confusing me with someone else.

And the bug is fixed.

> after the author of VLC won't even admit there's a problem.

There is no "the author of VLC". There are many persons, and some of them are nicer than others; but spitting on the project for that is not normal. If you have any bugreport that were closed while they should not (transform related), please mail me.
I'm both a programmer and a pedant, so my opinion is that he's allowed to make this point and be an active Twitter user if his domain is OwnYourPlatform.com, but not if his domain is AlwaysOwnYourPlatform.com. :)
This sounds like what Phil Knight did in Shoe Dogs...haha. This is good advice. I have traveled to Iceland, China, and I'm going to Europe this summer. Granted those were more like vacations than long term travel. Thanks for the exception comment, I know this statistically, but I also know I'm so far behind some people on HN, /r/personalfinance, and indie hackers. I know, I know... Comparison is the thief of joy. I'm living, I guess I just want more. I want to work on something I'm truly passionate about and be great.
Nils Meyer: there are advantages to containers, but fairly easy to get wrong
Inside the growing climate rebellion at Amazon
I find dark backgrounds and low brightness make floaters in my vision much less visible working on a computer. Please take your condescension and put it where it belongs.
I used duplicity in the past, but the main problem with its incremental backups is that in order to be able to prune the backup history, you need to do full backups regularly to start a new backup chain. That means transferring a full copy of the data.

I switched to restic now, which allows to take incremental backups, but can also remove any snapshot to prune the history. Although it does not support compression, due to its deduplication and removing the need to store multiple full backups, the restic repository takes less space now than duplicity before.
I think calling this "offensive" is a bit silly. Pushing everything into the box of "marginalized minority oppressed by uncaring majority" is getting old. In our society, waking up early-ish is advantageous. And not just in terms of work. It's nice to be awake in the morning when everything is still. Mornings are peaceful and beautiful.

I've always been a "night owl" and I could come in at 10 or 11 and work until 6-7 if I wanted to - no one I work with cares as long as I'm communicative and get things done. But adjusting my sleep schedule and getting in around 8-8:30 (wake at 6:30-7) has improved my quality of life. I'm also most productive before noon.

Getting sun seems important. I have a Hacker News Health Theory (TM) about melanin content: why would human skin color vary so reliably based on distance from equator if sun wasn't really, really important? I think that, maybe, getting enough sun is much more important to our health than we realize.
IIRC, it is something they do on purpose, to make it clear to the user something is happening while rate-limiting challenges given to the user.
If you can, skip the visual CAPTCHA and just go for the audio version. You’ll help train Google’s speech recognition bots, but you’ll get through the CAPTCHA faster.
But I never touch cookies in FF and never install any privacy features. I have been facing the same for years.
Not planning on having kids for the time being
'My allergies drove me to create beauty firm Skin Inc'
How much would you pay for Firefox per year?
Define resilient. In one month that snapshot will be gone.
That’s a weak assumption. Are you telling me that it’s a ‘fact’ that those who make less than 51k do not move away from NYC?
Robots break out of cages on the factory floor, but it's a good thing
MPL does allow closed source extensions, Netscape wanting to create a proprietary browser on top of Mozilla was the main reason MPL was created and they didn't use something like GPL.
They’re slow because it’s live-challenging two or more recaptcha users at once with an unknown image, right?
David and Victoria Beckham paid £12.7m tax in the last year. Facebook, which collected £1.3bn in UK sales, paid £15m...
To make it more expensive for bots to try this at scale, obviously. Unfortunately it's making it more expensive for humans too.
I kept looking for the article. Surprised to see such a low-effort post submitted to HN.
Bear in mind that we had so many pianos in the UK that in the 50s and 60's you'd regularly get piano smashing parties.

I shudder at the thought, but it was no surprise that a large swathe of the populous could either play or sing along.
I was going through the same ordeal as a Firefox user, so I've made Buster to solve challenges and reclaim some of that lost time: https://github.com/dessant/buster

If you're a developer, please consider replacing reCAPTCHA on your site with an alternative. reCAPTCHA discriminates against people with disabilities and those who seek privacy, and it gaslights you into thinking you did not solve the challenge correctly, which is plain cruel.

Here are some reCAPTCHA alternatives: https://www.w3.org/TR/turingtest/
maybe do some reading 4:15-5:00 and sleep another two hours or so after?
Discovery of a new class of vertebrates: Crocodiles aren't reptiles. Crocodiles are a separate class which have been derived from reptiles such as birds & mammals
https://www.amazon.com/Discovery-new-class-vertebrates-Croco...
Lesson no 2: Cache, cache, cache. Close that connection as quickly as you can.
Similar story here. I use pelican to generate my site. I wrote a very lightweight theme for it too (under 10k per page). I can host it anywhere that serves html.
NotoSans also has strong language and character set support, though I like it for its single story "g".

https://www.google.com/get/noto/
Glad to hear it went well for you.

I didn't appreciate how awful health insurance is until this experience. I'm fortunate to have an awesome employer with generous leave and benefits.

When I was in recovery, hearing the personal stories of my fellow patients was heartbreaking. I was paying $20 copays while these folks were selling possessions to keep their homes. In one case, a guy had to shell out $5,000 for a back brace, and then fight workers compensation for reimbursement.

My only surprise was after surgery, I received a $350k invoice, because my insurer decided that my back injuries were due to a car accident I didn't have, which was tied to an ER admission for food poisoning 5 years prior. That was resolved in a few weeks.
Yeah it takes a lot less time to have a conversation than to build an app.

Makings the cold calls and cold emails felt a lot easier with an app built but at least in my experience didn't make a big difference in response rate.
You're likely being downvoted because your comment is implying that risk of errors is a feature of GUI vs. CLI rather than about sound interface design.

You're conflating two entirely separate issues: Making it harder to trigger dangerous functionality vs. how the functionality is presented to a user. Nothing prevents hiding dangerous options behind extra steps in a CLI either.

I work mostly in text mode, but I also do use various simple GUI tools, and I half-way sympathise with what you want, though. What I've found is that in fact there are lots of nice little tools written to support minimal WMs or systems without desktop environments that are very useful in that respect. E.g. tools like rofi, dmenu and the like are great to wrap tiny GUIs around functionality that is hard to remember how to use correctly.

I work mostly in my own text-editor, and instead of writing a UI from scratch for it, I depend on the IPC support for the bspwm window manager to implement multiple windows/panes (the editor buffers are maintained in a server process, so I can have multiple views to the same buffer), and use rofi to bring up UI's. E.g. I have little scripts that bring up rofi with suitable input to select a server to ssh to, open a file in my editor, run a yarn/npm/make target, select a theme for my editor, switch buffers in my editors etc. Most of them are a handful of lines at most.

I'd love to see more tools like that, which makes building simple tool-specific GUIs for scripts easy.
I there any anti reCaptcha or anti Google, that I can donate to? I want to donate a small amount every time Google forces me to solve their problems.
Swift: The differences between structs and classes
Logging into "work" systems and typing "emacs" == "command not found". Typing "vi" opens a useful editor.

It's not that I hate emacs or have some aversion to anything except vi/vim. The problem is that vi is everywhere, and by mastering the always-available editor, I always have my tools at hand. On foreign systems, or highly regulated systems that I can't add software to, this is a huge advantage.
I find it hilarious that I peer with them for a total of 2 players.

The thing about a lot of residential connections is that probably a not-insignificant amount of the problems are very close to last mile, as opposed to bandwidth availability at backbone or major interconnection points
for free reports sharing take a look to https://www.seektable.com
The captcha has nothing to do with Google the search engine. Google's catpcha is used on a lot of websites which are not connected with Google.

On a different note, this also makes it difficult to use such websites if you block google domains in your adblocker for non-Google sites.
it's like a pyramid scheme - web firms stripping value from news companies until there is none left - and then what? Most of the interesting content on the internet is, in fact, generated by professional newsgatherers. Take that away and the web itself loses enormous, enormous value.
> I was on the bus to work when somebody uttered "what's that?" I looked and I saw the destroyed block, - one of the #Chernobyl disaster liquidators Oleksiy Breus[0]

[0] https://twitter.com/Hromadske/status/1137764228771852289
Wow, $959,000? Why don't I try running one of those phishing campaigns myself sometime...
> now it's either the iMac Pro or, I dunno, the mini

What about the 5K iMac? With an i9 it becomes a very powerful machine that describes your use case perfectly.

It's not as repairable as a tower though, but neither are the iMac Pro or the Mini.