skysight-inc/HackerNews huggingface dataset:
This piece has the feeling of being written by "every Friday is Hawaiian T-shirt day" after his employer went all remote and he needed a new task.

I have worked remotely more than not and it's not ideal. I suspect that if teleportation machines existed, then remote work wouldn't be a thing. Once you leave the office for the day (or leave the house to go to the office) then the logistical problems start (where do I find an affordable place to live.) Logistical problems for employees become logistical issues for employers. Working remotely is a trade-off and much of the time it works well enough.

I'm guessing that most early remote workers get relatively cushy setups with allowances for equipment and good salaries. As remote becomes more common, then I bet that gets squeezed. Employers shouldn't expect that the average person can make it work. If you don't have a dedicated quiet office area then it gets real difficult. Pets are a distraction. Other people in the home are a distraction (and it's not their fault, they have the right to "be at home".) If you have a significant other living at home full time and that person is in a grumpy mood, then good luck.

I feel that people who can make it work are those who either live in a cave with no other living creatures or they have the bread to get a big enough house and funds to create an operations center in a dedicated room. Everyone else should at least get a desk at a co-working space.

There's also a lot which gets lost in the communication of remote working. The communication you do have is much more mercenary. A group of special operators can carry out a mission together and even do so with mostly radio silence. But these people lose out of a lot of the more interesting elements of civilian life. Alice is an avatar and emoji's who can get stuff done in remote space. But you don't get to see her world class key short-cut skills from which you could open up a whole new way of thinking about your own operations. You don't see the real pressure your boss or manager is under and you get far less information about how things work because they won't be casually confiding in you at the water cooler. You don't need a NORAD display to show major events and weather conditions around the world to see what challenges your collaborators will be up against in getting things done the coming day.

Remote work kind of sucks. Where do I take the survey? ;)
> It's Time to Get Serious about Tick-Borne Diseases

I was diagnosed with Lyme disease two years after a tick bite in Nth Germany. A strong course of antibiotics cured me of the disease. At the time I got to learn of the chronic Lyme community (typically self diagnosed) and what the specialist doctors are saying.

It seemed to me that the range of possible symptoms of this disease, and the difficulty in diagnosing it, make it a nice excuse for other problems somebody might be experiencing.

Ultimately, the best evidence I saw - the people in the hospital diagnosed with Lyme disease tended to have identifiable symptoms, e.g arthritic joints, while the self diagnosed complained of feeling unsociable and not motivated to continue with working.
Strange question, but at some point, could the self-sustaining cancer cells taken from Henrietta Lacks be considered a separate species?
"we're uniquely bad at government."

I 100% blame the decades long hollowing of the civil service by republican administrations.

That isn't purely partisanship. It's been a stated goal, publicly, of the republicans, their propaganda wings, think tanks, and most importantly, their noxious donor overlords.
I think there is a large portion of people who already have netflix and a streaming music service. A good portion of those already have Prime as well. I'd imagine most cord cutters would be comfortable doing 2 video+1 music.

I do $15 for netflix (4k, allows 4 streams. mom & bro use extra). I use Youtube Premium as it provides the best value to me (access to google play music & ad-free youtube/originals). That is another $11. I'd love to have CBS All-Access but thats not happening just for Star Trek. Maybe they will be changing their service after the CBS/Viacom merger which would give them a HUGE back catalog of good snack content to appease subscribers as they grow their originals.

The new disney+ bundle (with Hulu ad supported, and espn is $15 i think). Unbundle is $7.

Then you have HBO Max coming which should be AT LEAST $15 (the current price of HBO go).

I'd bet there will be a new crackdown on account sharing with these services to maximize subscriber count. Piracy is going to be coming back in a big way. Access to a friends PLEX account is gonna be the new happiness.
Is that really the thing keep people from making their own rockets? Red tape?

> This action would also enable flexible timeframes, remove unnecessary ground safety regulations, redefine when launch begins to allow specified pre-flight operations prior to license approval, and allow applicants to seek a license to launch from multiple sites.

I feel as though we do want careful and deliberate launches. After all, this IS rocket science.

> remove unnecessary ground safety regulations

Hmm.
Currently alpha. It runs on top of the Cloudflare KV store. Its query capability is supported by JOQULAR (JavaScript Object Query Language), which is similar to, but more extensive than, the query language associated with MongoDB.

Like MongoDB, Thunderclap is open-sourced under the Server Side Public License. This means licencees are free to use and modify the code for internal applications or public applications that are not primarily a means of providing Thunderclap as a hosted service.
Apple Card launches today for all US customers
Wurst casing -- you feel it in your guts.
I think they need a special environment?
Good fact presented poorly.
I mean, you did just click on a link to an IP.
I agree too, even though I would like to see more focus on lyme... I wish they gave more convincing evidence of it being a serious yet comparably neglected disease - they compared to zika and west nile but still don't give a good picture of where it sits on the world stage of infectious diseases.
> have they had external security firms try to steal the private key?

Definitely, it's an expensive vulnerability to simply reveal though. YubiKeys are proprietary so they can't be audited by non-contracted third parties. There are FOSS security keys that don't have that problem though.
With SAASPASS Authenticator you can set up recovery in case you lose your or change your phone.
I'd debate the relatively effective piece in light of webmin being backdoored for a year, and of course remember we're only hearing about the ones that have been found, not the ones that haven't.

There's a number of possible technical mitigations, maintaining internal package repositories, code review of key libraries, enforcing package signing and checking signatures etc but all of them increase costs and decrease development speed, so they're not adopted that heavily.

There are also possible mitigations at a legislative/policy level, but they would be so deeply unpopular that I'm sure they'd never pass muster in most countries.
The Responsive Web Design Bootcamp – 15 Hours Interactive Scrimba Course
And yet Germany has missed their climate goals for 2020 (which were already incompatible with the Paris agreement), and has dramatically slashed wind turbine construction (after dramatically slashing solar construction a few years earlier).
That is explained in the very first paragraph of the article (emphasis mine):

"In 2016, elementary moved to a Medium publication to host our official blog. At the time, Medium was touted as a simple, clean, and reader-focused host for writers. They supported custom domains, a robust API, RSS, rich formatting, and great image embedding. We had been largely happy with the experience—as were our readers—but something changed in 2017."
Neat, but what I really want is a dynamic abstraction layer above this, similar to DNS. I'd like a unique code that translates to a physical address (or a system like this, or both), but is adjustable by me.

Verified by sending a physical card to the location, adjustable by the owner, query-able via an API. Post-offices can perform a lookup and calculate postage fees in this way.

Voluntary nomads (techies) could subsidize the service for involuntary ones (refugees).
That was my first thought - it would seem as though releasing on a version that old would be deliberate and why else would you do that if you weren't targeting something specific?
Agreed. I vote to reintroduce wolves.
Because it's a lot cheaper than AWS, whose $500/month customer service is just as bad?
So does every living thing on earth... HeLa cells are remarkably adapted to growing in biology labs, not sure how they'd fare outside...

Edit: it's been proposed as Helacyton gartleri, but not widely accepted because "Van Valen's argument of HeLa being a new species does not fulfill the criteria for an independent unicellular asexually reproducing species because of the notorious instability of HeLa's karyotype and their lack of a strict ancestral-descendant lineage."

https://en.wikipedia.org/wiki/HeLa#New_species_proposal
Forever. I mean, life is a natural consequence of the nature and physics of the universe, and human civilization is a natural consequence of life processes. Existence and progression is the meaning.
Yeah, Woz came to speak at my university about 6 years ago and it was pretty underwhelming as a Computer Science undergraduate. He may have been a brilliant engineer at one point, but now he seems primarily interested in investing his wealth and talking about business. Hardly the nerdy hero of Apple the internet often props him up as.
I believe the only way to combat this as users is to use agnostic tools. When a website, program or other service wants to force you to use a specific thing to access them just view in a web browser with ad/script blocking or choose to not view it at all if that isn't an option.

As programmers we can refuse to implement such nagware. There's not much worker solidarity in our field so quitting is usually the only option if the company has made up their mind on the matter.

Overall I don't believe it can be stopped at this point. This process is called privatizing the commons and it will continue to happen to every common good as long as capitalism is the system which we work under.
Actually, Google professes in their "BeyondCorp" security model a zero-trust architecture. You shouldn't be assuming that just because your instance isn't publicly accessible that it is secure. (See: https://cloud.google.com/beyondcorp/)

Which makes this move even more surprising, because GCP reference architectures have traditionally been focused around public facing Internet access. Unless, it is a sign that GCP is getting more traction and Google is running out of public IPs to be handing out like candy. This could be an economic incentive to encourage people to conserve these IPs.
But in startups that whole "work somewhere or on something you enjoy" is a front. Programming is programming, as long as you find a challenging problem. Everything else is ego.

Some of the most gratifying work I've done is on extremely tedious problems for majorly boring products. The fact that the product is boring and technical lowers the amount of drama around it, allowing you to focus on the programming you love.

The most stressful and least gratifying work I've ever done was on the multiple "sexy" and "ground breaking" products I've worked on. Those products attract snake oil salesmen and shady execs looking to make a quick buck, and who make daily life at the company a nightmare.

Another thing is the $250k/$150k numbers you give. That shows a very valley-centric view. There are parts of the US where you can work for tier 1-2 companies and where that same $150k is the equivalent of $300k in the valley.
The World Has a Germany Problem: Debt Obsession Ate the Economy
Last year I got the Google Titan security keys and connected it with all of my work + personal accounts that support it.

The #1 weakness is the simple fact that many services don't allow you to disable alternate forms of 2fa.

Github is an example, you can always trigger the fallback SMS 2fa code.

Dashlane is another example (and arguably the most important). It's impossible to make your security key the only form of 2-FA. If you have a security key on your account, you must also have regular app-based 2-FA enabled as a fall back.

What's the point of using security keys with services that require regular SMS or app-based 2-FA as a fallback?

Edit: G Suite is one of the few services that got it right. G Suite has an optional security control that when enabled, forces authentication using security keys (explicitly forbidding alternate 2-fa methods).
Haven't read the update yet, but with the olde version Ishkur's tongue was pretty much piercing his cheeks. His knowledge of the old scene still was good and valuable.

However, it's rather clear from the update timing that he's not getting younger, and you can't really follow all the micro-scenes these days unless it's a full-time job, so I won't be surprised if the guide's spirit is not the same.
You mean you don't eat for 4 days and you lose weight? What magic is this?
A woman won the overall/men's title at the 2018 New York City Marathon. It only had 55,000 runners and is the biggest marathon in the world, but don't let facts get in your way.

You must be massively confused. Confused by the name of the overall winner, perhaps? In Ethiopia, that’s apparently a man’s name. I don’t know how we’re talking past each other, but a person with a penis crossed the line first at NY in 2018.

EDIT: mm, I see; stealth edit. Well, I already typed a reply...
It's only a matter of time before this will happen. Once any one of the big players (rubygems, npm, Maven central, PyPi) enforces 2FA, all other repos will soon have to follow suit or risk giving appearance of haphazard attitude towards user security.

2FA is generally trivial for maintainers to take into use. There is simply no excuse to not require it at this point for all new uploads. The status quo of hoping maintainers never re-use their passwords / use weak passwords / have their machines hacked is clearly not working since security incidents like this keep happening every other week with Rubygems/npm/etc.
Continuously Deploying Django to DigitalOcean with Docker and Gitlab
From https://en.wikipedia.org/wiki/Henrietta_Lacks

> Henrietta Lacks (born Loretta Pleasant; August 1, 1920 – October 4, 1951)[2] was an African-American woman[3] whose cancer cells are the source of the HeLa cell line, the first immortalized human cell line[4] and one of the most important cell lines in medical research. An immortalized cell line reproduces indefinitely under specific conditions, and the HeLa cell line continues to be a source of invaluable medical data to the present day.[5]
Yes we've spent a shitton of money, our power is ridiculously expensive, and we still have way worse co2 emission than France. But hey we're saving the world I hear!
A little bit of (self-)hypnosis goes a long way with these, for picking up the motor patterns and then using them automatically (touch typing). Because you don't have to move your hands you can go really fast, achieve the illusion of direct mind-to-machine input. YMMV.
It was vanquished. We pulled the vaccine off the market.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2870557/#idm140...
On another note: $7/mo for an unused static IP...???

The public instance fee feels like the plastic bag fee at the grocery store - ipv4 space is indeed finite. It is reasonable to assume it costs more to run a VM with public access than without, but to charge for it?
The headline "Trump Urges Unity vs. Racism" was fine for the speech Trump gave after the shootings, but some NYT readers and reporters think the paper is obliged to always report on Trump in a negative way. I think the Wall Street Journal tries to be fair in its news pages and is becoming a better general-interest newspaper.
Is it better to just present falsehoods as facts in a polished manner? Or downplay woman's accomplishments as niche, when its clearly the harder accomplishment? What causes one to do those things?
In a previous discussion about the topic it was mentioned that an earthquake can move a road a few meters to a side. Tectonic shift might be less important but physical relocation could be. A road could be moved du to a large urban work in the area for example.
Actually, the Amish demonstrate that all those things are practical, just inconvenient. Having a community helps.
Technically, all life does.

According to Wikipedia, the cells have a tendency to contaminate pretty much any suitable environment around and proliferate easily. Seems almost more like a fungal or bacterial growth than what we’d typically consider cancer.
I don't think nightly builds are the same thing as releases - you can have CI publish a build but to create a versioned public release it should require manual auth.
San Francisco homeless: city blames big business, residents blame officials
There's already a self-hosted version of Bitbucket which is fairly decent aside from being as slow as molasses (which, let's face it, is an 'Atlassian thing' at this point).

I used to use Jira extensively for my own internal projects (and, hilariously, my personal TODO list), but I'm moving away from that. I'm moving from my own personal server to a couple of Droplets, and I realised in moving JIRA across just how bloated it is. Most of the SCM integration tools I use are pay-for now, so for $10/yr, I'm getting less than I'd get with a Mantis or Bugzilla install.

I need to have a look for a new bugtracker. Custom Workflow support would be nice, that's really the only feature which kept me on JIRA for so long!
We Can’t Waste a Drop.’ India Is Running Out of Water
"There are subgenres of Deep House that get even deeper, jazzier, and more soulful. One of my favorites is something I like to call "Dad House", because its liberal employment of walking basslines and saxophone solos evoke images of your dad walking around the house in his bathrobe on a Sunday morning before settling into his favorite chesterfield chair to smoke a pipe and read the newspaper in front of a roaring fire. Well, mine anyway."

Provided link: http://ishkur.com/oldmixtapes/Jeffro%20-%20Five%20In%20Da%20...

I know what I'm doing this Sunday morning.
There's also Phabricator as a self-hosted (and open source) solution for Mercurial (and Git and SVN) repositories.

https://phacility.com/
> since women haven’t been allowed to compete in sports for thousands of years, what will happen to their bodies when they are allowed to compete?

I am not sure I get it. Are you suggesting that the reason men dominate almost all sports is not due to their undoubtedly greater physical capacity, but due to some societal discrimination?

Also, are your suggesting that evolution works such that appreciable biological differences show up in just a few thousand years?
Show HN: Resumable file upload (TUS protocol implementation) using pure bash
Security keys are two factor as well. In fact there are multiple different types of 2FA with different security levels. SMS 2FA is one of the weakest. Push Login is moderate. Scanning encrypted barcodes is highest and also phishing proof like FIDO keys.
There's a plugin [1] for that, but I haven't used it before. It creates plain old html files.

[1] https://github.com/BarryMode/grav-plugin-blackhole
I always liked this comic as an explanation https://www.smbc-comics.com/comic/the-talk-3
My solution to that was to have a command mode that separates out the individual keys. So you'd stroke Command/Meta/Shift/[/Command and it would send them all together.

A bit cumbersome, but for conflicting sequences like that you use often you'd bind it to it's own separate chord (or bind Meta+Shift to a chord).
I like mercurial not because I am fan, but pragmatic and my team can work well with it. I still use it on daily basis. Indeed my team use hg-git and also git to work with GitHub for synchronizing some upstream repository of libraries we are using.

Also you bring a topic of BSD, I used it since 1993 along with Linux and still use both of them. These days I don't use Solaris and other Unix though.

In early years used various flavors of Unix like IRIX, AIX, HP-UX, Tru64 Unix and settled on BSD and Linux.
I was looking into something like this, and while this probably works fine these aren't allowed under the USB spec, so you're hoping whoever designed these did it right and its not going to misbehave with some devices.
With regards to Rubygems, the challenge is likely to be where they get the resources for additional security measures.

All the major language repo's are free at point of use, and I don't get the impression the maintainers are exactly rolling in money, so it doesn't seem likely that they can easily ramp up on that front.
One-liner to change the URL of the upstream repo:

git remote set-url origin <new URL>
It would be deeply frustrating if Yubico were to spend years coming up with a 2FA product that works with iDevices, and then a few months later Apple were to throw out the interface that product depends on and thus instantly make it completely obsolete.

(One would hope that Yubico and Apple have been in touch with each other at least the minimal amount that would be required to avoid such a fiasco. But given Apple's penchant for secrecy, who knows?)
Seems like a pointless, false sense of security.

What about all the attacks where the malicious actor is someone with publish rights, like friendly package takeover? Your proposal makes that even more effective since now the attacker gets a nice "published with mfa" badge.
Order of my exposure to SCM

Shared windows mount
Visual Source Safe
CVS
SVN
Perforce
ClearCase
Git
Team Foundation Server

Of those I still use Git and SVN. Aside from the shared network drive, VSS and ClearCase are in a dead heat for the worst SCM I have been exposed to.
The Sports News Site Haters Love to Dunk on Keeps Signing Up Subscribers
I/O has always been a happy-path-only adventure in mainstream software and hardware.

Attempting consistent I/O (kernel and hardware will try their best to thwart any attempt) etc. may help in some cases, but ultimately there are hardly any guarantees when it comes to power loss, and your data may be gone or corrupted no matter what you did.
"Vanquished" is a bit too strong, but I agree, it's really frustrating that we know how to make a vaccine but have decided to not manufacture it anymore.
This is a pretty limited definition of "vanquished":

>The available Lyme vaccine came with several immediately apparent limitations. First, the vaccine efficacy of <80% meant that 20% of fully vaccinated individuals could still get Lyme disease [20]. Second, achieving full protection required three vaccine doses given at the time of the initial dose and 1 month and 12 months after the initial dose. Third, the vaccine safety and efficacy database lacked tests in young children, a population at high risk of developing Lyme disease [3]. Also the vaccine was effective only against the predominant North American Borrelia strain without necessarily conferring protection against international subspecies [16, 22]. Finally, uncertainty about the length of vaccine-induced immunity implied that recipients might need booster vaccine doses as often as every year to prevent waning immunity.
There's a really good starter set in the Git manual:

https://git-scm.com/book/en/v2/Git-Basics-Git-Aliases

I'm so used to "git co" and "git br" at this point (which are effectively analogues of the same commands on Hg) that I have to think for a minute when I SSH into a machine which doesn't have these set up.
Doubly funny, since the paper is from Lancaster PA and the article doesn’t once mention how Lancaster is surveilled by hundreds of cameras in a public-private partnership, with unclear oversight.

http://lancastercsc.org/our-programs/camera-map/
> higher pain tolerance

Are there any scientific studies confirming this?