skysight-inc/HackerNews huggingface dataset:
Fastmail also lets you use wildcards and catchall addresses, giving you infinite email addresses whenever you need them, with no way to tell what “base address” they resolve to internally.

For example, my Twitter address might be twitter@mydomain.com, my Google address google@mydomain.com and so on. All of those go straight to my inbox unless I decide to set up individual filters for them.

The downside is that I can’t easily migrate to a service that doesn’t support this.
It seems that if you set Firefox's privacy.resistFingerprinting to true, it fills those with fake data.

>>> navigator.deviceMemory
undefined
>>> navigator.hardwareConcurrency
2
This is a case study in why you shouldn't expose your self-hosted services to the internet.
Well, paying off debt can often be deferred indefinitely too, as long as you keep paying the interest.

Instead of thinking of it as "debt payments" you could just think of it as high operating expenses for the development team, and invest in reducing them.
If you think that citing a paper by a physics professor in a peer-reviewed physics journal is “quoting some clown” you’ll probably understand that I don’t give much weight to a comment from a random person on HN.
There are other meteoric rises. Facebook is only 15 years old. I wonder if it must feel surreal to Zuck.

Still, Steve Jobs has such a unique comeback story of being in 1996 head of two interesting but commercially mostly failing companies, one of which is shortly later being bought by an Apple skirting on going out of business and riddled by intense technical debt. And only a decade later he presents the iPhone and had Pixars stunning success.
Ask HN: Does the Intercom chat bubble drive you crazy?
I'm so sick of visiting webpages and being pestered by the in-your-face Intercom live chat bubble. Does anyone else feel the same way?

Does anyone have a way to remove them? I might write a browser extension to automatically remove/hide them if it doesn't already exist (I looked and couldn't' find anything).
Care to elaborate? I see fair criticism being leveled at a trash article. Their comment is much more thoughtful and substantial than yours.
Sometimes you have transit to the office but it’s underground. Not that it matters because it’s dark outside when you start and finish work anyway.
7.5M Adobe Accounts Exposed by Security Blunder
I've been working on some projects and offloading as much as I can to the database. https://github.com/jimktrains/jskerp and https://github.com/jimktrains/jskplan being the two I'd like to get further along with.

Working in the DB like this is both very nice and ... very odd? It doesn't feel like most development environments and feels like going back to C or pre-object Ada (I believe Pl/SQL is based on Ada syntax-wise) or Pascal where you're writing lots of global functions that operate on structs.

Once I gain a little more experience developing like this, I'd love to think about that and see if there'd be a way to build a language that feels more "modern" and that can be transpiled to SQL (including building diffs from a current database).
That's how it's interpreted, but of course it is the opposite of a free market as it means they are free to stop new entrants into that very same market.
Can someone confirm, that it will still take 6 days until fedora servers get patched, except if i get it from testing? [1] Is this the norm for CVE's ? How long does it take other distros to patch?

Also: Am I secure if i run PHP 7.2.24 or do I need to change the configs?

[1] https://bodhi.fedoraproject.org/updates/FEDORA-2019-187ae312...
Can you elaborate? I've yet to see Apache + mod_php to be capable of coming even close to <anything> + PHP-FPM so I'm really interested in what you guys are doing.
Yeah, I think the bigger issue with natural gas peaking plants is that it's not an efficient use of capital to build and maintain a plant that only gets used for a few hours a day.
I wish I had known about bitcoin back then. It would have made things a lot easier.

I didn’t learn about bitcoin until 2015, and even then, I had very little disposable income to experiment with. Still don’t have much income. Definitely no salary.
The problem here is the mischaracterization of what technical debt is.

Most of the time I hear programmers talk about technical debt, what they really mean is profiling and performance (because over time requirements change and code size increases) or code "cleanup" which is usually a catch-all for "not how I would have done it".

Performance issues are real, but those should just be scheduled and tackled as needed. Code cleanup is quite often a red herring.

But technical debt is entirely different. It's exactly what the name implies: debt. We would have done X to implement a given feature or customer request, because there are many conditions and other systems to take into account. But there wasn't time to do it that way before the required deadline, so we did something else instead that would get by for now, but we all know won't last.

That is technical debt.

Sadly, often times management just see the issue as done on the schedule and there should therefore be no need to go back and "do it again".

Always pay down technical debt when you can. It will be paid eventually, it's just a question of how painful it will be when you do.
Yes they can. The company I work for does that using a few halls with industrial freezers.
> Most Disney films are not based on fairy tales. Their biggest animated films are original works.

Since 1990, Disney has produced (in terms of animated works):

* 14 films clearly based on classical mythology, fairy tales, or literature.

* 7 films clearly original works

* 4 sequels

* Pocahontas, which is (loosely) based on historical events

* Moana, which I'm not sufficiently well-versed in Polynesian mythology to know if it's based on an actual mythical event or merely draws inspiration from it

* The Lion King, which is allegedly inspired or directly ripped off of Kimba the White Lion (although Disney vehemently denies it)

* Wreck-it Ralph, although technically original, relies on a lot of explicit video game references.
Hmm, so looking at the exploit and the patch... do I read it right: There is a buffer underflow in php-fpm if the environment variables SCRIPT_FILENAME and PATH_INFO have a state that violates an assumption. And currently a widespread configuration of nginx + php-fpm is configured such that the URL can be suffiently mangled such that nginx sets these parameters in a violating manner.

However, that means anything utilizing php-fpm in this version remains vulnerable, and it's just unknown if or how apache + php-fpm, or other reverse proxies for php-fpm are vulnerable - right?

So while I don't need to panic right now, I'll certainly have to take a look at our setups running php-fpm on monday.
Shout-out to my new mail provider Migadu [0] whose model is “pay for the number of emails you send, not the number of mailboxes you have”. This opens up all sorts of interesting opportunities.

Not affiliated, just a happy customer.

[0]: https://www.migadu.com/en/index.html
Not quite. He single-handedly re-wrote the company's core framework from one platform to support multi-platform.
Five Worlds
Show HN: I made a Chrome extension that helps you focus with ambient noise
Meego, Jolla, Puzzlephone, Firefox phone, Ubuntu phone, Librem, etc... Is there really that little demand that it's a nearly impossible task to get any "alternative" phone going?
Hi HN! Been spending the last week or so hacking away at this side project. I'm hoping it might be useful to some!

I'm really big into ambient sounds when working (e.g. listening to sounds of cafés / rain / etc) and I find that they help me focus, since they don't distract me as much as music. I typically use a number of sites (e.g. coffitivity, brainfm) or find a youtube playlist. Though, I thought this experience could be improved upon + I wanted to learn how to make a Chrome extension, so I made this.

If you have a moment to try it out, I'd love some feedback! Do you see it being helpful? What's it missing?

This was meant to be a small project to get a bit of a break and scratch my itch to design/code something, but I ended up getting really into it and can see this growing into something bigger (e.g. a productivity suite of tools) - any ideas on where I could take this would be awesome too!

P.S. made a quick landing page that has more details too - feel free to have a look here: https://rofocus.com

Thanks!
I bike the streets of NYC daily. I can tell you with absolute certainty* that delivery trucks frequently park in bike lanes (which this article talks about), which directly causes the deaths of several cyclists per year. You want their names? There's articles written every time a cyclist is run over, and often enough it's because someone was illegally parked in the bike lane and they were forced into a vehicle lane and then run down. As an interesting side note, emergency vehicles like ambulances and fire trucks will use bike lanes when necessary to bypass vehicle congestion, but of course this doesn't work when the bike lane is blocked by an illegally parked vehicle. The cyclists who happen to be in the lane can of course simply pull their bikes up onto the sidewalk to let the emergency vehicle(s) through.

* Here's an example of 5 trucks parked in the bike lane in as many blocks from one of my morning commutes earlier this week: https://twitter.com/CydeWeys/status/1187386128288174080 This is not an extreme outlier; it's typical.
You assume my life savings is substantial enough for me to care
That's cool! Thanks for sharing
I think a great antidote for this, specifically for people who are lonely, is to move into a multi bedroom apartment with 3+ other people or even find a coliving space. There are some of these on NYC and from my experience it's comparable to living in a dorm - which is the kind of healthy experience the author says he missed most. You get to meet and interact with a variety of people on a daily basis, some of whom could lead to deeper connections. Plus its cheaper than a studio or 1br apartment!!
> What should a large company do in this case?

If you pay, it's "sinister". If you don't pay, it's "parasitic". If you get your own, it's "mercenary". In all cases it is "dystopian".
Women and slaves couldn't vote, so it's a fairly exclusive system.
I've known a lot of remote sales people and they usually work a geographical region and spend time on client/customer sites or golfing.
> Hydro plants are going to be running at full output during the peak demand time when solar is not working.

How do you know that?

During drought periods surely it's not true (if there's not enough water to run them).

The flow of rivers is controlled to some extent (which may prevent saving during the day and generating in evening).

And presumably it might be true in one country, but not another, depending on a raft of factors.

I'm guessing there is data somewhere showing utilisation of hydro during evening.
Electric cars add storage at almost no cost to the utility.

Consumers in North America bought 260,000 battery electric vehicles in 2018. This is over 15 GWh of storage. And utilities paid $0 for it. As many others pointed out in this thread, EV penetration is minimal--so imagine how much storage potential will be added as adoption grows exponentially in the next 5 years.

There is no way for utilities to access this storage yet--but this is what we are building (at least the software part of the equation).

I agree that nuclear should be taken way more seriously.

But V2G is also game-changing since it lets utilities "rent" capacity instead of "owning" it.
I don't think they would have lasted long using a private API.
The one making the claim is the one burdened with the justification.
Bringing It All Back Together
Delivery cyclists tend to only use the sidewalk for part of the last block when that's the only way to get to their destination. They're definitely not using the sidewalk for the entire trip; that's way too slow. Especially not on e-bikes!
Yes, it's extremely strange that people are looking for new terminology because they've been using the existing, perfectly good, terminology incorrectly.
Windows 10 update at Aussie border force borks access to its Cargo System
This is something that could be mutual opportunity, instead it has become a conflict.

What does a bicycle cost F13?
What is preventing F13 from providing bikes and shopping carts to the community , as a service?

Why would F13 want to pass up the opportunity for data?
Please add some text at the top explaining what it is.
I'm not sure what colour your "friends of colour" are, but if we assume black, I'm sure a properly dressed black person (which is what I'd expect from a Facebook employee) won't receive as much scrutiny as one that wears baggy pants.
Returning JSON might be recent, but multi-tier apps where one tier talks to the data storage and applies business logic served up to a presentation tier dates back to long before the web. The rise of the web caused a lot of developers without any history with multi-tier applications to push "flatter" apps, that is true, but in terms of software development in general it's not new.

Even in terms of web dev, well over a decade ago I worked on a system where we had a middleware layer that consisted of a service that handled the business logic and talked to the database. This middleware layer took requests from a web frontend layer did most of the presentation and served up in various formats. The web frontend never talked directly to the databases. It gave us flexibility in how we sharded things, and in applying different extents of access control (e.g. we could put different frontend services in front of the middleware) as well as use it to enforce constraints that were impractical to express in the database. How important that is certainly depends on the database you use.

It wasn't a new thing then either - I took inspiration for that system from much older systems.
Nobody is going to rewrite thousands of applications not to use Play Services either, so open-source Android doesn't actually get you much in the way of app support. Many of Android's features actually exist in a binary blob shipped by Google.

Building a free-as-in-freedom ecosystem for phone software, that isn't connected to a single company, is really important as a goal. Purism's work is/was largely being upstreamed to major community projects like GNOME, where others can build on it and influence its direction.
> I believe we should at-least be having conversations on safe and trust worthy surveillance.

Yeah, we should, but we aren't. Or, at least, the people actually involved in advancing the state of surveillance either aren't participating in such conversations, or are there for appearances only and don't really give a shit what the other participants have to say.

You don't have to be paying much attention to see that there's basically zero accountability and zero effort to protect the public in what I guess I might call the surveillance-industrial complex.

Believe me, I see the theoretical potential and value of surveillance for keeping people safe, but it's sort of like the idea of a benevolent robot dictator who makes perfect decisions to maximize good and minimize bad. Even a shaky first-pass implementation of such a thing is way beyond our capabilities, and if done even slightly wrong it could be a global catastrophe. Surveillance is a bit different because we're starting to have the technology to make it happen, but we don't have the social machinery necessary to do it effectively or responsibly.
They do this on desktop Outlook as well. It's really great when you work at a company where two people have the same name, and you have to click seven buttons to see who sent the mail. Or you get added to a forward chain and you really can't tell.
I'm not sure it's demand so much as extremely high barriers to entry. Android and iOS are both mature and have a lot of features, plus manufacturers like Apple and Samsung have a lot invested into the latest and greatest SoCs and other hardware features. Matching all that right out of the gate and building competitive hardware and an OS is hard, making it difficult to make something that the average consumer will notice.
We have some split-phase protected bike lane intersections here in NYC (e.g. 8th Ave north of 14th St), but not nearly enough. Most protected bike lane intersections are not split-phase; we're relying on drivers seeing us and yielding to us as is required of a vehicle trying to turn across others going straight. In practice though, a lot of drivers just bully you and don't yield as required, because it's gonna hurt you a lot more than them if you collide.
One of my previous employers was based in a WeWork for a bit. The beer was something we took advantage of once every couple of weeks, having a pint or two after work. It was nice to have easily available beer and a bit of free space without the effort of having to plan or organise anything more formal, particularly in a city where every pub is absolutely rammed in the evening. No productivity compromise whatsoever.
I have for the most part stopped using the term technical debt, especially when talking to non engineers. There are many reasons why I believe it is an exceptionally poor term, not the least of which being that, unlike monetary debt, technical debt is not quantifiable. Imagine approaching your CFO and convincing him to take out financing to fund an upcoming project, and bring completely unable to tell him the principal amount, the interest or the terms of repayment. I’ve certainly never seen any organization buy into the metaphor deeply enough that they were capable of reasoning about it with anything close to such financial permission.

The term I prefer and use quite frequently these days is “technical health.” As in, choosing to continue to the next project without refactoring the new features that we rushed to deliver will negative impact technical health. Technically unhealthy code or services are slow, complex, unreliable, not performant and cumbersome. Technically healthy services allow us to be nimble, to make changes with ease and speed. They are easy to work with and easy to reason about, particularly when things go wrong.
Just use uBlock or another script/adblocker and block it using that, if your defaults don't kill it already.
https://hellogoodbye.app/ Didn't tried it yet but it will remove the annoying chat bubbles.
No, you don't claim a refund. She showed me that her Amazon tracking number showed that the package she didn't sign for was listed as returned with no signature, and she was given a refund.

It seems like something that can easily happen by accident. I can understand why she was frustrated. After being on a crowded subway, I hated having to go into a crowded store and wait on line to get my package. But I did not agree with her knowingly exploiting this to get free stuff. I know that she told other people in our building how to do this. I don't know if this led directly to the bodega not receiving packages anymore, but I'm sure that someone had to pay for it.

I would not be surprised if these access points were a major vector for mail fraud. At this particular bodega, not just did we have to wait on line, but sometimes we'd have to wait for the clerk to deal with other customers on a different line. So I can easily see how she would have made off without signing.

I never had a choice in the matter. I think it was theoretically possible to opt out, but I would have had to make a UPS account, and even then it was not a guarantee. I personally really resented how the shipping status would be changed to something like "For your convenience, we will be delivering to an access point instead". Even on Saturdays when I was home and able to receive, they didn't even bother sometimes and would just drop it off at 7PM at the bodega. Not convenient.
Do you want to do something about this? I suggest joining the Sunrise Movement. Go to https://www.sunrisemovement.org/ to join.
I don't know about "most" but we are remote first and no we don't. We do ask people about it during the interview tho, so I guess people who have done it before will be at an advantage. But we certainly don't require experience. Research a lot so you can talk about it during interviews, I guess, and good luck!
YMMV, but I'm not sure that would be the case. As a teen, I had early morning seminary before high school each morning with other teens for church and we all had to get up between 4:30 and 5:00 but very few of us would go to bed before midnight. It was rough, but this anecdata fuels my bias for believing that most people feel like there aren't enough hours in the day and will stay up as late as they can in order to do what they please with whatever small amount of time is afforded to them each day.

To be clear, this wasn't just my seminary class- this is the way teens in the seminary program have handled it for years and years, so it may not be the biggest but it's definitely not the smallest sample size available.

Again, YMMV. I openly admit that I'm biased in my thinking because of the anecdata.
I’ve been spending bitcoin as long as I’ve been accumulating it.

Can’t say the same about most other hodlers, however
Made a comment below to this effect, I don't think it's mere demand, there are possibly bigger hurdles to making an appealing product that can rival cheapo mobile phones.
> that capitalism just allows people to realise their preferences

That is by no means "just" what it does.
In NYC it's highly likely the person going to the store is walking. I've pretty much got everything I need within walking distance; there's only a very few specialized stores I'd go farther than that for (e.g. B&H).
100% this. The article is alarmist, but there are no simple solutions here. Why should NYC devote public space to guarantee access for a business model that primarily extracts wealth from the city? Maybe Amazon should lease parking spaces to stage its deliveries, at appropriate rates. It could even install equipment (e.g. mobile pallette depos) that made the delivery process more efficient.
On the other hand, the restriction that scientific publications must be renderable onto reconstituted dead trees makes it that authors often spend multiple “pages” explaining what a single interactive chart would explain far better. This makes science less accessible than it should be and in my view is part of the reason media so often misrepresent scientific findings.
I have been using this system for about a year, and it works great. I generally use the pattern yourdomain.com@accounts.mydomain.net. However, I have found from time to time that I never get account signup/confirmation emails to these addresses. It seems like they're being silently rejected. Does anyone know if there's some kind of email validation service that might be filtering these?

I guess I could use a hash of the domain (eg asdffdsa@accounts.mydomain.net) to make my strategy less visible, but that feels like I'm probably overthinking it.
I have been thinking about this a lot lately. What is the best alternative, only accessing your services through a VPN?
It can be private but paid and supported simultaneously
And Amazon is also promoting the concept of a "Delivery Day", presumably to encourage batching deliveries.
thanks for the feedback! Do you mean in the actual Hero or to elaborate more within the 'what it is' section on the home page?
uh, idk, try and look for it on Craigslist, eBay, and the local flee market? If they cared about justice this is something that they would do. I’ve seen cops laugh at property crime, even with specifics on who stole it and where they are. They can never be bothered unless you are powerful.