skysight-inc/HackerNews huggingface dataset:
I’ve lived in Vietnam for the past 5 years and experienced these issues first hand. I’m also part of the team responsible for maintaining a relatively aggressive set of Cloudflare WAF rules at my current employer.

In these developing countries, great swathes of users are accessing the internet behind carrier-grade NAT.

This makes it increasingly likely that any individual user is sharing a public-facing IP with one or more bad actors.

In my experience, I’ve never had to solve more than one CAPTCHA per domain, and frankly clicking a checkbox isn’t that hard.

As far as discrimination goes, this is a much friendlier solution than just immediately rejecting connection requests from certain CIDRs, which is what would otherwise be happening.
I mean it sounds like you're proposing something like the failed project to put an elevated highway at 30th st

How about CA-480[0]? Bringing down the elevated freeway made the Embarcadero a MUCH nicer area to be in.

0: https://en.wikipedia.org/wiki/California_State_Route_480
NYC needs to dump a lot of work into their rail system, and not slack off in the good times. They keep flipping from having one of the best systems in the US to being plagued by terrible issues, every decade.

Chicago hasn't expanded in a while, but they maintain their tracks, buy new stock and renovate stations. I don't think people appreciate how incredibly important all that maintenance is to the city. I hope Chicago can get enough funding one day to expand and start on the outer loop project, but not at the expense of keeping what's there in good condition.
There is plenty of nice American non-bourbon whiskey. Japanese whiskey is also excellent.

At the same time, if you like the burning hospital taste, there’s no substitute for Islay Scotch.
CERN culture dictates that everyone involved with the team should be listed as contributors. This is due to the fact that experimental result papers, written up by small teams who analyze data, are only made possible by the work of many other scientists who do not themselves produce papers. The contributor list probably includes everyone that would normally be listed as part of any paper published by the group.
Well, I'm Thais.
the story 'bout the judge receive some secret memorandum
from higher ranking judge officer. order him to executed 3 out of 5 suspected Muslim peoples, without clearly evidence.
In the court room after the judge release that 5 people against secret memorandum he then shot himself.
before the court begin he publish 25 page document about the story via Facebook.

here are the copy of document
https://www.facebook.com/GoodLordAbove/posts/241741368164546...
the original post on judge facebook wall got deleted after he shot himself, no idea who access his mobile phone.
Please do not take HN threads further into flamewar.

https://news.ycombinator.com/newsguidelines.html
Scaling Erlang Cluster to 10k Nodes at WhatsApp
I think you're factually correct, but what I've seen is that you have macoS N and when N+1 comes out it's full of vulnerability fixes and there is no vN.M coming out at the same time which fixes the same bugs.

So one has the option of waiting for N.M, but I've never done that. How long does it take usually?
Han Solo was killed by a hokey religion and an ancient weapon.
Looking at the Nifi website, I assume it is aimed at IT professionals and has a steep learning curve.

Easy Data Transform is aimed at people who don't have either the skills, time or inclination to take on something like Nifi (which is most people!).

The aim with Easy Data Transform is that someone can use it to transform their data within a few minutes of first seeing it.
Part of SpreadON's design philosophy is to completely avoid the guess-work of YAML, by explicitly declaring the data type as a type name tag. This also enables extension tags for other formats and features like grids of identically typed data, sheet and named region references, etc. And also to avoid the inconvenient syntax of JSON as much as possible.

It addresses the most-complained-about problems with JavaScript: no comments, and no trailing commas. You can use the unused cells to the right as comments (or even intermediate calculation formulas), and not only is there no inconsistency about not being able to put a comma after the last element of an array or object, but it actually doesn't require any commas at all, no quotation marks around string, no backslashes in strings, no spaces or tabs for indentation, nor any other syntactic syrup of ipecac that JSON requires but YAML foolishly tries to avoid by guessing. Each cell is a separate syntactic token, so you don't need commas or spaces or tabs to separate them.
FCC allowed to kill net neutrality because washing machines can’t make calls
> I talked about it in the 90s and the only tin foil hat accusations ...

To whom? Where? I sure as hell never met anybody who was willing to discuss it.

> It’s the same with any juicy fact involving the government

What is it" in that sentence? MKUltra?

> there’s a core of truth which is widely accepted, surrounded by a halo of speculation generated by people who want to believe they are party to secret knowledge.

Would you say that statement characterizes the situation around MKUltra?
I was under the impression the birth rate in China was already falling quickly when the 1 child policy was introduced. That’s not to say there wasn’t abuse going on but that the over population problem was already solving itself.
This is the thing where if you mistyped an address the ISP would present a “helpful” search (usually full of ads) to you instead of letting the application deal with it appropriately?
Chicago at one time had an underground tunnel system for transporting goods, but it fell into disrepair, and is too small for moving modern trucks/freight. I think most/all of it is closed off today; although the city still uses some of it.

Singapore's Certificate of Entitlement (COE) system works really well to reduce cars in the city (you have to bid on the license to buy a car, which can run S$30k to S$90k depending on the type of vehicle, time of year you try to bid, etc. .. and that doesn't include registration or the actual cost of the car). But that's a situation where the city is small and .. literally its own country. So it obviously wouldn't work in NYC or anywhere in America.
None of which are things I've encountered while driving. I bet if you ran the stats, you would be far more likely to be a victim of crime on bart than while driving in the bay area. There's a reason all of the women at my workplace drive instead of taking bart. They've tried bart and found it incredibly unsafe.

The only disadvantages of driving are traffic and parking.

Edit: You've edited your comment to add links, and they're all discussing crimes in east bay. I don't think most of the articles you linked to happened in places served by bart.
I believe the blocking is done on a domain/host level, so you'd block google.com in that case. That's likely not required, because google.com is generally thought to be okay, but you are correct that even that may be problematic. If your IP has searched for "$governmentBuilding blueprints" and there's a bomb planted at that building a week later, you could become a person of interest (provided that Google saves the ip for queries).

Blocking *.onion on the other hand wouldn't be necessary from a "legal protection" standpoint: hidden services don't see the original IP of the client.
GitHub: Scripts to Rule Them All (2015)
This culture of drugs being cool and acceptable needs to stop. We don't need drug testing. We need education that taking drugs is wrong.
The drug taker is as much as a criminal as the drug provider. I work around these tech-bros who talk about equality and solving world problems but then would go and do drugs. I feel it's a bit hypocritical. No?
JSON can only represent trees. JavaScript data can represent graphs, but JSON is a subset of that.
Any feedback would be gratefully recieved:
https://www.easydatatransform.com/support.html
Free Dynamic DNS Based on Cloudflare
Single Malt Whisky starts out at a high price point. I do not think that anyone that normally would spend $ on this is going to care. Not quite the correct item to tax. Find something that is not a luxury with an equivalent US product.
I bet if you ran the stats, you would be far more likely to be a victim of crime on bart than while driving in the bay area.

Then run the numbers instead of wildly waving your hands. If you'd like anecdotes I've never been robbed at gunpoint on BART, nor have I ever had anyone threaten to stab me on BART.

The only disadvantages of driving are traffic and parking.

And air pollution, risk of a crash or injury, cost of ownership, parking, pedestrian deaths and injuries, etc., etc.

Edit: You've edited your comment to add links, and they're all discussing crimes in east bay. I don't think most of the articles you linked to happened in places served by bart.

If you check a map I think you'll find that BART serves San Francisco, Oakland, and Fremont.
I wouldn't say they're "deregulated" in the US. There are still a number of rules that pilots have to comply with (for instance, no commercial use, limited fuel capacity, limited areas where flight is allowed, etc). Sure, a license is not required, but the US will find a way to complicate things with red tape even if a license isn't required.
>> If all of my remote access can be done via ssh {+ local/remote forwarding}..

> WireGuard .. has higher performance ...

Note there are circumstances where ssh port forwarding (-L, -R, -D) is faster than any L2/L3 vpn because it breaks TCP connections in two segments, so any flaky retransmission causing issues are localized, RTTs are smaller, TCP ramp-up is faster, etc.

On the other hand, ssh tun/tap forwarding will almost certainly be slower.

If you are connecting over a flaky wifi/2g/3g connection, possibly to a flaky/distant counterpart, and have performance issues, I would recommend trying (L4 is it?) ssh/socks or even http forwarding via a stable middle host.
That's a great question. It seems to be a property of the D community wanting the language to get better and being willing to accept change.

In the olden days (1989) people were more willing to accept change in C, such as value-preserving rather than sign-preserving integer promotion rules, and some improvements to the C preprocessor.
I wonder if privacy conscious browsers making their users have to solve more captchas will lead to more people disabling the privacy features... or there will be a time when captchas may become micro transaction based, so for a fee you might be able to skip them. A browser with support for an anonymous cryptocurrency to make the payments should be private and easy to use enough, but it might become an interesting world where you need to pay to remain anonymous.
Thanks - I understand the idea, but I think it would be better suited to an appendix.
It’s amazing how much information we ignore. I used to volunteer at a nursing home and I was pushing a blind lady down the hall and she said “this room is mine.” I asked her “how did you know?” And she explained that she could hear the recessed doorways (and the difference between open doors and closed ones) as we passed them, and knew that hers was the 11th door. She told me I could do it myself. I thought “bullshit, this is some magic power for blind people” but when I just closed my eyes and focused on it, it’s completely easy. Your footstep’s echo off a closed door is completely different than hallway. It took me literally no practice, I could do it on the first try.
I don't see any advantage to making this a SaaS. It would just result in more latency and potential privacy issues.

It is true that a desktop system may not be suitable for transorming million row datasets or processing that is running 24x7 - but that is not the market we are aiming for.
The biggest problem is that instead of vendors submitting drivers for their devices in the mainline kernel and profit for all the fixes being done there, everyone makes a fork and there continues to work.
Obviously, when merging updates from mainline kernel in the forked one, something is discarded or lost.
Microsoft Surface Laptop 3
Pretty much every modern European mains powered device is double insulated so it doesn't matter which pole is live and which is neutral.

Some countries do have polarized connectors (UK, some Polish, France, Belgium, etc.) but many do not. However supposedly competent electricians sometimes connect them the wrong way round anyway or omit the earth or both as I discovered in France last year.

See this web page for a convenient list of mains connectors and countries that use them: https://www.worldstandards.eu/electricity/plugs-and-sockets/
There are people I know who will not take BART alone. I agree that the perceived safety definitely effects ridership. I can't believe this is not taken more seriously by those who wish to encourage more people to take transit! After all, subways are normally considered better than buses which really is what could be implemented more easily!
By the way you can have multiple A records on a domain name. So you should add the .2 address before removing the .1

Not that this excuses the crummy ISPs
There is no 'Linux core team'
E-Scooter, car sharing and bike sharing are still not regulated everywhere
Is it uncommon to be threatened on BART? I thought that was just normal.
Modern devices are normally double insulated, it makes no difference which pole is live. Many European countries use unpolarised Schuko connectors.
Did it solve any of the privacy problems of WHOIS?
Patch management best practices to close the door on attackers
So in Germany you can, since the 80, probably also longer, fill out a small (standardized) form, bring it to your bank (possibly by mail) and they will transfer amount x from your account to the recipients.

Since the 90, this can be done electronically, so you don’t need anything physical.

This is now further harmonized by SEPA all across Europe. Where apparently something similar existed in most countries.

I find it difficult to see the benefit of checks over the above process.
I'm sure some of the people parroting that got it from their professors in college. I know mine sure did.
"Bionics"
Can confirm. I live in Hungary and I can still ride my scooter even on the road.
Just wanted to point out something you may not be aware of. I was confused about this which is why I feel the need to mention it - since my first instinct was to assume this mod was in the wrong.

The first discussions of this issue, from a few days ago, made it seem as if the moderator in question opposed a preferred pronoun policy. On further reading about this, the moderator claims that she doesn't oppose a preferred pronoun policy and would not misgender someone, but rather, wanted to clarify whether she could continue to use pronoun-neutral language as she does this out of custom anyway.

At least in my mind, if what the mod is saying is true (and a few other people have backed her up on her account), not only wasn't she opposing the standard preferred-pronoun policy most people are familiar with, she wasn't even opposing anything but rather asking legitimate "edge case" questions to help clarify a policy before it is decided on.

(SE hasn't really given concrete details at the moment about why she was fired, so it's entirely possible the mod did something else problematic, though again, her account seems to be backed up by other mods).
Maybe you're just a bigger asshole than I am? vOv
Plenty, plenty of startups will have options that are worth 0.
I wrote some stuff in previous HN discussions about outliners and spreadsheets, and also some stuff about Dave Winer's Frontier, which I'll quote and link to here:
Couldn't the parking be organized by just putting roboticized "air garages" to the top of sky scrapers? Carriers operate a fleet of aircraft in a very constrained space. With purely VTOL craft there is no need for that to be horizontal, it all could be put to vertical.

So you would have

1. Landing bay (helicopter pad or an enclosed bay).For enclosed bays those could be stacked on top of one another.

2. Robotic parking

3. Air control system to facilitate traffic and parking.

I'm not saying this is a necessarily a good idea. But I would love to know why it would not work.
https://news.ycombinator.com/item?id=20773851

DonHopkins 44 days ago [-]

I love the collaborative features of Google Docs and Google Sheets.

The thing that's missing from "Google Docs" is a decent collaborative outliner called "Google Trees", that does to "NLS" and "Frontier" what "Google Sheets" did to "VisiCalc" and "Excel".

And I don't mean "Google Wave", I mean a truly collaborative extensible visually programmable spreadsheet-like outliner with expressions, constraints, absolute and relative xpath-like addressing, and scripting like Google Sheets, but with a tree instead of a grid. That eats drinks scripts and shits JSON and XML or any other structured data.

Of course you should be able to link and embed outlines in spreadsheets, and spreadsheets in outlines, but "Google Maps" should also be invited to the party (along with its plus-one, "Google Mind Maps").

More on Douglass Engelbart's NLS and Dave Winer's Frontier:

https://news.ycombinator.com/item?id=20425970
> such as women "really" want to be treated poorly

This depends how you define “poorly”. Some progressives would say all sex work is harmful to women. Some sex workers who are women would ask how you dare try to rob them of their agency.

It’s not that simple.

> or the slaves really prefer subservience as it's their destined station in life

Again, this depends on how you define “slavery”. To some, all factory workers are slaves in an evil Capitalist machine, subservient to the guy with the capital; all the guy did was start the company, right? But to the factory worker, he might be very happy with the opportunity to work and provide for his family, and for a multitude of reasons might prefer this to whatever else a typical Socialist might believe all people should want to do with their time.

It’s not that simple.
I’m using Safari on iOS 13.2. I can help debug I’d you’d like, but I’m no expert ;)
Make the world a better place by brushing your teeth
An AS with an /8 is decidedly different from an AS with a /24. There could easily be millions of complete strangers behind a single ISP AS. Not saying you can’t choose whatever criteria for your service, but trying to pass off five-different-attacker-IPs-per-AS as fair is silly.

Edit: Even the CIDR block size isn’t a good indicator of the actual network size, due to NAT.
You act as if we don't have an experiment about exactly this going on for decades that says the exact opposite, but we do. It's called OpenBSD. The average consumer doesn't care, because it's less performant in some cases and certain software doesn't work or work as well.

It's not even a choice between better security and real-time audio, since the average consumer doesn't even know about that unless specifically called out by marketing. For phones it's about what looks better, both physically and digitally. It's about how the emojis look, how good the pictures the camera takes look (or how good you're told they look), and how responsive and smooth the screen movements are.

The average consumer goes off what they can immediately see and what they're told by marketing, and by what they feel social pressure to buy. The discerning technical expert goes off marketing (but a different set of claims), and a bit more of a discerning eye, and while far more knowledgeable than the average consumer, is still mostly driven by hearsay.

The number of people with enough knowledge to actually make a real data driven choice is probably much less than 0.0001% of people, and that's far from average. I'm not one of them, but I can look at the systems often affected, make some assumptions about how many people know enough about them to speak usefully on risks they actually have, and do some napkin statistics to know almost nobody else is either, even here.

It's easy to call out the average consumer, but truthfully, the last time you bought a phone or computer, how deeply did you analyze the actual security considerations to do with the different aspects of the system, and how much did you rely on what some site told you, trusted recommendations, what you already preferred, and your hunch was which was better? How many millions of lines of code are involved in these systems now? How could you, or any of us actually do anything other than that?
AFAIK continuous glucose monitors are regulated by the FDA because of the microneedles: breaking the skin puts them under extra scrutiny. I don't think they need to be behind a prescription, but I 100% support regulation to at least ensure that the devices are safe and sterile.
> It's like some shared delusion or psychopathy that people seem to believe, because it's in their self-interest to believe it.

A business is not an individual, it's a collection of individuals each doing a specialized task that collectively make up a large system. Applying moral principles that are generally applied to individuals to organizations just doesn't work. There needs to be a different set or prioritization of moral principles to be effective in a large organization or system.

In my example (highly paid attorneys spending inordinate amounts of time negotiating a tiny contract), the attorneys themselves were not bad, they were instructed to zealously negotiate every contract. The finance folks that paid late are not bad, they were charged with keeping high cash reserves and to tolerate a certain level of legal risk.

As a straightforward example for reducing out-right fraud: Most individuals already know that fraud, lying and cheating is bad. If an individual scams someone, they are bad. In contrast, for a business to be "moral", it must routinely audit their work processes to make sure that fraud cannot accidentally occur, and also provide safeguards when "bad" individuals do it intentionally. If there are no safeguards (regardless of whether fraud occurs or not), the company is "bad". Conversely, if stringent and proper safeguards are in place, and yet someone within the organization is nevertheless able to devilishly get around them and commit fraud, then it's possible that the business is still moral.

The point here is that individual morality is not the same as organizational or systems morality. Lots of moral people can come together and become an immoral organization. Similarly, a moral organization can withstand lots of bad people within their ranks.
Haha, alright. Hopefully you can make your case to someone else.
And considering Scotch whisky, it comes at a very peculiar time. The EU might be stopping to export Scotch whisky in 4 weeks from now :p. Not sure how this applies to Irish whisky though. As a consequence of the whisky boom of the recent years, the Irish whisky industry had a rebirth.
Was anything mentioned about stock grants in "New Pixar" to the wronged employees?

I presume something must have been done to right the wrong at least with the important people, otherwise they would just walk out at that point.
Microsoft’s new custom Surface processors with AMD and Qualcomm: an inside look
>>> Everything you mention can be born out of individualism, not just by blind conformity and having any fixed social structure.

Can it really? I feel like this would require further discussion and is not as obvious as you seem to think.
I found Levine's article which was posted by someone else shorter and clearer.

Had to give up 1/4th of the article in for this one, it just goes on and on for something that can be summarized in two paragraphs.