skysight-inc/HackerNews huggingface dataset:
FTPS is also placed in a DMZ as it is internet facing and you can use any layer 4 reverse proxy for it. And DNS load balancers have serious downsides, like clients resolving IP adresses on which the service is down (removing servers takes time due to DNS caching down the line)

The whole point of a DMZ is to have another layer keeping your data as far as possible from the Internet. In the unlikely case a Reverse proxy is exploited remotely, the potential damage is most likely limited to it. After getting in the RP you would need to go through another firewall that is normally tuned to allow only connections to the application server containers.

Worst thing you can do is connect your insecure DB to the public Internet and leak the data of one billion people: https://www.cisomag.com/elasticsearch-server-exposed-1-2-bil...

The insecure Elasticsearch server could have had a nice green padlock, but if the default admin/admin credentials weren't changed it will not help at all. It is better to just assume that everything is not configured right and treat it accordingly and do layering so you basically need to hack everything to reach the most improtant prize.

TLS and x509 certs solve only the encryption and trust problems, making them easy is very good, but there are other security issues to consider.
Better sanitation and hygiene would help with that as well, though. People would no longer get sick with lots of infections that can easily be prevented in other ways, and the habit of overprescribing antibiotics would disappear.
Just start coding. C++/Java/Python - whatever. The only real consideration you should have is picking something where the tool chain stays out of your way and works for you as opposed to you working for it.
Poorly crafted regulation tends to cause more harm than good. That's why turning to regulation as the solution must be done with care.

On the other side. Unrestrained markets tend to do more harm than good. That's why turning away from regulation must be done with care.
>Yes, and cheaper to build!
You can achieve the same efficiency with DC and AC do not directly effect efficiency across the line contrary to popular belief.

In fact there are higher loses with AC power transport (specially in long distances) due to the parasitic capacitance of the lines, that’s why some countries use DC power transport lines now.
Status tones made me immediately think of Star Trek. Imagine what if everything around you used status tones - the ambience will start to resemble that of a starship bridge in Star Trek - lots of things constantly humming and beeping in the background in a calming way (until there's some emergency, that is).
I wonder if American agencies provide similar semi-official cover to US criminals who hack into foreign systems...
Should've let this thing die. Do you actually have devices hooked up to this.. the speeds you're getting and the likely security holes you have (especially if you don't have this properly behind some other device) are concerning me.
Actual paper:

https://plundervolt.com/doc/plundervolt.pdf
“If it sounds too good to be true, it’s probably a scam.”
- src: My cooperation’s IT scam awareness flyers
The van life (well, mostly RV life) is really taking over Silicon Valley. Many streets now have a row of RVs parked at the curb. For example, El Camino right in front of Stanford. The wealth disparity is dramatic, but so is the rent in the area...

Palo Alto tried to accommodate the RVs with a parking lot in the civic center, but stopped after a couple of incidents at the nearby school.

Will RV/van parking become compulsory?
Can you please cut out the lower/boring segment of trolling? (like this and https://news.ycombinator.com/item?id=21804133)
> All the time.

Then I am sure you can give us some recent examples in the media where the manufacturer is blamed for bad modifications by users.

If I pour a gallon of gasoline on a tractor and set it on fire, and the media reported "man sets farm on fire after torching a tractor", no tractor buyer is going to blame John Deere.

Your argument relies on the false premise that informed consumers (tractor operating farmers) would react negitivly to a brand if something happened involving a modified tractor. When in reality farmers are crying out to be able to repair and mod their tractors.

Compare to the tech industry. How often do PC gamers mod CPUs out of spec and end up shortening thr lifespan, or killing them? All the time. Nobody blames Intel.

> That are used internally... Are your internal docs customer friendly enough to help them repair the most minute problem?

Have you seen car repair manuals? They are very detailed and complete and third party dealers have access to them.
If you care about the right to repair the software in devices like that, please don't ship closed-source code on your company's devices. Once your company decides to drop support, the paying customers are faced with a hard choice anyway: reverse-engineer it or throw it out.
ITER has been working on this problem for almost a decade now, and with more money available to them. What are the odds some startup can beat them to the punch?
Yes that makes sense, but that's something completely different than targeting people because of their race and keeping them there "indefinitely".
Pro tip: make sure to load RAM Doubler via HIMEM.SYS.
There is a part 2 video where he addresses this: theoretically, yes, practically, you would have to compose 99 original (original/unique enough for ContentID to match them) tracks and include a 20 seconds snippet of each for it to work. He stuck with a single one, because he started using it for his outro. Theoretically he could compose another for the intro and make it 66:33, but after that, I have a feeling the viewers would start dropping off rather quickly.
Usually when you use a service to manage domain names for you, you have a contract with the managing party, which puts your relationship on much firmer legal grounds than when you use a random service provided for free and without legal guarantees.
Poor sanitation is a separate, important and usually overlooked issue that contributes to this issue in its own right. It isn't all about how antibiotics are used.

That's my primary point: Antibiotic resistance is not just about antibiotic use.

"An ounce of prevention is worth a pound of cure."

Open defecation is still widely practiced in sometimes densely populated parts of the world where it is known to cause and spread illness. Building toilets (and the infrastructure that goes with them) is known to reduce incidence of illness.
No he also has a running joke about the the SEC’s seeming view that “everything is fraud”.

He has said that for some topics like WeWork he’d like to stop writing about them yet they continue to have absurdist revelations that can even be enlightening, or at least amusing. Hovinian was like that for a few months.
You forgot to mention that many analysts are full of BS anyway: https://www.inc.com/geoffrey-james/financial-analysts-are-ut...
>You should get ~7 years of update.

Interesting. Thanks for the link.

It appears that the hardware is older than I assumed (yet perfectly capable for browsing the web), which begs another question: I bought this thing brand new a few years ago. Should it be up to the consumer to ensure that there is life left for updates? I will be certain to now, going forward. But I can't expect less-savvy consumers to do the same. It looks like there are models on that list that will stop receiving updates in less than 2 years for sale as new computers on Amazon...
Is shelter A responsible for the state arresting homeless people?

Should not the state stop this practice?

What if shelter A says I will close if you don't allow me to practice religion?
No, because several different American companies would represent several differing viewpoints.

A bunch of Chinese companies is essentially the viewpoint of the current dictator of China, should he choose to weigh in.
Many people do think like that, and it is likely a significant contributing factor to the cost of health insurance.

I do pay for my insurance personally. Health insurance law is somewhat different than most other forms of insurance in that the premium cannot be increased no matter my frequency or magnitude of previous claims. [0]

My marginal use is a merely a rounding error in the context of my health insurer's outlays. Nothing I could do would personally affect my rate. The aggregate of many thousands of people's use determines my rate, and for that, the tragedy of the commons is fully in charge.

[0]: https://www.healthcare.gov/how-plans-set-your-premiums/
Ah, reminds me of investing (poorly) in Amplify Biosciences in late 2017...

Since acquired by Armata pharma, which trades around 4 a share, cap of 40M.... I lost 90% of my investment, oh darn, was a bad investment in hindsight.

Looking at that chart in the article, not too surprised the rest of the market in big red territory.
Ok conspiracy guy, here:
https://www.mouthhealthy.org/en/nutrition/food-tips/sugary-d...

"Brought to you by the ADA, the American Dental Association".
Seems like the Green New Deal (since they mention it in the article) is more about socialism than not the environment..?

I'm wondering why people are still using that term.
>> Can there exist such a search engine that can stay objective in the long haul?

Yes, if it's distributed: https://yacy.net
Sad story
bet365
While not on the Garonne itself, Airbus Toulouse is pretty close (3km), however it's way farther inland from the sea, on a smaller river, and IIRC there are pretty low lying bridges on the way, so they have to move the parts to river barges.
Offtopic, sorry: How does everyone read these paywalled articles? Surely you all dont subscribe to bloomberg?
I wonder though how many open source apps will go through the mandatory security audit process (15-75K annually) since IMAP via OAuth is a restricted API scope [1].

[1] https://support.google.com/cloud/answer/9110914?hl=en
Use Bash Strict Mode (Unless You Love Debugging)
I worked for Fedex ground for a while and I can't blame Amazon for this decision. Fedex contracts their ground delivery out and the quality of service is greatly affected by that. Some areas are great and some are awful. My experience was working under an awful contractor who was near abusive in his work requirements. If anyone has any questions I'm open to answer.
Given the size of Singapore, I think you are far better off with the research facility safely nestled in some corner of British Columbia rather than in your back yard.
Ask HN: How can I bootstrap a bio-pharma company?
Hi. I’m very interested in the bio-pharma space. I’m asking this question from a position of ignorance: How can I bootstrap a bio-pharma company?

If I draw a parallel to software, I know enough about enough companies to be able to essentially create and run a company of my own using no original tech and other people’s components.

What’re the current “rails” of biotech? How can I “bootstrap” this from start to finish assuming money isn’t an issue. I have some targets in mind. What’s the chain going from 0 to 1 using other company’s tech?

Thanks!
For me, personally, "Built to Last: Successful Habits of Visionary Companies" by Jim Collins, still stands as THE canon to read for a business book. His research based style resonates with me and makes me trust the findings much more.
The removal of barriers favors those who can take advantage of the newly acquired access and information.

Your life reflects this capacity as much as the environment that let it manifest itself:)
You can side-load firefox and just use the bank's mobile site.
Happens all the time with other kinds of startups. The main thing with this is having a good skillset and a good idea.
I take my UK credit card to the US and can't pay for gas at the pump as I don't have a valid zip code.

I have to go inside and pre-auth. This process sometimes only requires a swipe, sometimes chip and pin - but never a zip code.

Could they just fix that?
Google doesn't make chips and therefore doesn't own the SoC IP - Qualcomm does. Google may not make unilaterally decide to avail those drivers. They could theoretically play hardball with Qualcomm on the licensing, but I doubt the Pixel line brings in enough revenue for Qualcomm to even consider that threat for more than half a second.
Of course, in Amazon's race to the bottom the employ contractor drivers who are terrible at delivering packages.

I've stopped ordering on Amazon since they've started doing this.
>until the antibiotic washes out.

This is part of the problem. If animals are given the antibiotics, then their waste products contain them, and piles of manure or water runoff/storm drains/wastewater ponds form a giant evolutionary experiment for development of drug resistant organisms.

They're not just a problem while they're in animals, they're a problem if they're used at all.
Thanks. Correct, it’s not rechargeable. Rather, primary (non-re-chargeable) lithium-based electrochemistry in very tiny amounts on thin films. We do have some energy harvesting stuff up our sleeves here too, but that’s down the road a bit.
AI for helping you design and test UX, perhaps. I could see ML being used to 'simulate' eye tracking (and I'll bet some startup is working on that already).

But morphing UI based on subconcious behaviour, I'm not buying it. Short of actual mind reading, there isn't enough information in those to make a change in UI be consistent. Is my heart rate increasing a sign that I want the lasso tool in Photoshop? I don't think so.
An economist would say that when considering buying this machinery the farmer would also consider the cost and availability of repairs and that the competition in the machinery market (the primary market) would police the secondary market for repairs. In reality, this kind of policing is hard to come by because of the time and expense of figuring out which company has the cheapest lifecycle1 costs for the equipment (do you figure out how much the blades will cost when you buy the razor). But the real reason is that lots of people just don't think about the long-term costs attached to a purchase.
This bothered me as well. Modding to a non-illegal condition should be as equally unencumbered as a restoration of hardware to it's original intended function.
Someone in the Discord server said they were successful with this approach. - Manually keeping track of the state, basically.
True, but UPS/USPS/Fedex all helped to enable that expectation. It pains me (almost physically) to give the benefit of the doubt to Amazon, but if the carriers couldn't reasonably fulfill the 2-day delivery expectation the way Amazon wanted, they wouldn't have attempted it, and the expectation wouldn't be set.
This is a pretty awful take.

- AI surely has a place in design tooling, but designing UIs from the ground-up without human intervention would require a deep understanding of both human psychology and the domain at hand, which I really think would require artificial general intelligence.

- We're still leagues away from AGI.

- Is the author suggesting that UIs will restructure themselves in real time under subconscious feedback from the user? There is nothing that makes a UI more anxiety-inducing than unpredictability and inconsistency. The idea of a UI that's constantly in flux by design is, in a word, hilarious.

- That Autodesk feature doesn't even have anything to do with AI, from what I can tell. It's just a fancy constraint solver.
After running the numbers from Amazon's presentation on starting your own delivery company, I came away thinking its a nice JOB. In order for it to be a good profitable business that allows you a life of leisure, you end up having to manage around 400 drivers and 200 trucks, and I'm not sure if that is possible to scale that high with their model.
Billboard is changing its albums chart to count YouTube streams
Once you really get into IPv6 you tend to find that the addresses are not actually that bad or at least not as bad as you might expect. For starters, your prefix stays the same and probably looks like this 2001:wwww:xxxx::/48 ISP is wwww and your allocation is xxxx. There are lots of ways you can break up your allocation: yyzz. For me yy is the first dot1Q and zz is the second tag. yy = 00 is for single tagged 802.1Q VLANs. I have quite a lot of "spare" space for expansion, VPNs or whatever. So using the https://tools.ietf.org/html/rfc3849 documentation prefix 2001:DB8::/32 - that's my "ISP". Let's say I am :2d1:, I give my routers ::1 ie the first address and therefore on my default VLAN with no tags, I get an address of:

2001:db8:2d1::1 for the router on that VLAN (10.10.0.1)

My DNS servers are on a single tagged vlan 10 (they are 10.10.10.11 and 10.10.10.12):

2001:db8:2d1:a::11 and 2001:db8:2d1:a::12

I wont be using that site or anything like it. DNS does the trick for me along with documentation, just as it does for IPv4. I toyed with ULA addresses (a bit like RFC 1918) but dropped it because it adds complexity. You only need a few addresses to bootstrap a network and a change of ISP will have more hassles to deal with than a prefix change.
I've often wondered if our government has some massive stores of grain somewhere to feed the nation for a few years in the event of a near total crop failure. Seems irresponsible not to have it.

Update: I sometimes wonder what it would take for me to have a year of food in reserve here at home, but I worry that its just the crazy Prepper in me trying to come out.
I love the beluga paint job.

Given its use for transporting large plane parts I’d think an airship would more cost effective. For wind turbine places and the like too, as in both cases size is a bigger barrier than weight.

I know there have been some airship projects in the past few years: why have they not succeeded?
Since you're uploading them to the cloud do keep in mind that given 60 years of computer advancement, today's encryption standards will be unlikely to withstand tomorrow's hardware...
Not the OP, but my company also makes something similar for pets. The problem with Android is that Google severely crippled BLE to a point where you can only perform a single BLE scan every 15 minutes when the app is in the background. The only other option is enabling a foreground service to always run, which really ruins Android battery life.
Yes Amazon has upped the game and everyone has to match them. You seem to think it's a bad thing?
What's the indexing/performance like? When I select an ID from a collection is it going to reprocess the entire history to filter on a matching ID?
im definitely nitpicking but earthquakes should be yellow and wildfires red. are earthquakes actually impacted by climate change?
And if laws against vagrancy were better-enforced, businesses wouldn't find it possible to employ people for poverty wages. They'd have to raise wages to the point that people can afford housing. This idea that we need to allow people to camp all over public space because the employment market is malfunctioning in some way is indicative of a "caring" mindset that's making it impossible to actually solve the real, underlying problems of resource misallocation.

Our inability to address the homeless problem is a direct result of "caring" and "nurturing" eclipsing all other values. We've become incapable of enacting any policy that someone might call "harsh", even if that policy would be better for everyone in the long term. Sometimes the right approach really is tough love.
You can view oldest first by choosing "Show more messages" from the hamburger above the message list and then clicking the "1-50 of ..." and choosing "Oldest". Unfortunately it's not apparently able to be made default.

"I thought these guys (google et al) were smarter than this." -- Google user Roxane McLean
> it shouldn't be too hard to figure out a way to convert ASCII to the right letters.

Just a one-line sed script.

$ echo 'Laux Ludoviko Zamenhof bongustas fresxa cxehxa mangxajxo kun spicoj.' | sed 's/cx/ĉ/g; s/Cx/Ĉ/g; s/gx/ĝ/g; s/Gx/Ĝ/g; s/hx/ĥ/g; s/Hx/Ĥ/g; s/jx/ĵ/g; s/Jx/Ĵ/g; s/sx/ŝ/g; s/Sx/Ŝ/g; s/ux/ŭ/g; s/Ux/Ŭ/g;'
Laŭ Ludoviko Zamenhof bongustas freŝa ĉeĥa manĝaĵo kun spicoj.
Radical candor by Kim Scott. Was an eye opener for me.
Thanks for your advice - especially regarding not buying plug-ins until you fully understand the DAW.
Haven't you heard? Everything is impacted by climate change now /s
> One consequence of this, is that parts are manufactured in multiple countries, at a considerable distance from one another, as opposed to the more consolidated approach taken by Boeing.

FWIW Boeing built a similar plane (the 747-400 LCF / 747 Dreamlifter) to move 787 parts from suppliers, as they were considered too large for marine shipping and existing cargo planes. The biggest difference is LCF is a conversion from regular 747s (though according to wikipedia the program cost the same $1bn, being built from a much heavier plane the Dreamlifter has much higher capacity but somewhat lower volume in its similarly unpressurised hold).
Great to see. Our tax money subsidizes car ownership (quite massively) already, glad to see some equity here. Everyone kicks and screams about transit systems "paying for themselves" but nobody asks the same of huge highways in the middle of nowhere.
It's my feeling and a widely felt sentiment among the locals. Certainly the surrounding 300m area is a higher-crime area.

A few weeks ago, I had to walk through and witnessed a woman pull down her pants and defecate on the sidewalk, about 50m from the library entrance. This wasn't in an alley or something--it was the main sidewalk, easily visible from the library entrance.

I would not bring kids there.
How climate change will affect the frequence or intensity of eartquakes?

I agree that, on current predictions taking already know effects, heat, floods and hurricanes should increase.

And, as we are getting into new global conditions compared with historic records, we may face other negative effects due to feedback loops and unexpected interactions, but I don't know how that will affect eartquakes, unless it forces people to move to areas where they are more common.
Not in the current job climate, but if (say) successfully shepherding something through FDA approval were treated like a Nature paper, I bet you'd see a lot more researchers trying it.

The problem with the prize idea is that this stuff is expensive. Most academic institutions don't have a mechanism for doing something "on credit" and hoping to win a prize that covers the costs and then some. Some companies can, but the optics of giving prizes to BigPharma also aren't great.
Looks like its back up!
I think you get that with any language. People are very attached to how they’ve learned to solve problems and the set of tradeoffs they tend to value. I like Go and I can’t tell you how often I see even outlandish criticism (for a long time on r/programming, commenting “it is impossible to build a software product in Go because the type system is too weak” was a great way to get upvotes, especially if you followed it with “but I really like <fully dynamic language>”). You just have to try to understand which parts of the criticism are valid and improve your own understanding.
> That's not an argument. Any regressive policy could and has been justified in those terms.

Yes, it is. The US government has an institutional history of overseeing ICAAN, so it's the most practical organization to take on that role on short notice.

I think you're letting the perfect be the enemy of the good. Your preferred multi-national solution would likely take years to negotiate, which means it's not really even a solution at all, as far as .org is concerned.
While I’ve found hammerspoon works great for window management, I’ve recently explored trying to create semi advanced automation workflows with it and I agree that it’s not really fleshed out for this type of work (although it seems doable)