skysight-inc/HackerNews huggingface dataset:
You wrote something interesting, unfortunately you accidentally hit the "reply" button before you could insert some URLs that would add some substance to your words.

I am sure you know that words without evidence are of no value on the internet and it will kill your reputation, so I am waiting until you get online again and send some examples.

Please post some currently working code for escaping XEN, KVM, also VMWare and Virtualbox may be of interest, thanks!

I could not find any relevant content on the website you publish in your profile - btw it seems to be a bit broken, maybe go into webdev a little bit after you finished the code for the VM exploits?
> Secondly, creator-centric platforms don't pay off. Platforms bring the audience, creators bring the content. Platforms make creators, not the other way around. No creator got from zero to hero without a platform that has attained critical mass. That mass isn't attained by catering to the creators, but to the audience. The audience doesn't care about creators until the platform introduces them.

You are thinking of this as a YouTube alternative. It’s not.

It’s a supplementary platform that is creator focused. They are not making this for discovery. LTT put out a video explaining this.

This is more of a Patreon alternative. A place to support creators - and for creators to fall back to in case YouTube shuts down monetization.
Antirez finally made Disque a Redis Module, too..
I would have expected BuzzFeed to be among the URLs that are banned on HN, or has the approach of banning entire media outlets been discarded? Iirc it was implemented a couple of years ago.

Anyway, the twist is that the original T-Shirt was already a joke.

If it doesn't exist for real, somebody should make it.
That's incorrect. It's trivial If you have a clearly defined API with which to extract or insert data.

It only starts to leak if everyone accesses the the DB through raw sql, mishmashing modules and creating insane dependencies.

Give each module ownership to a table and demand to only access it through there and the backend storage system becomes irrelevant
agree. federation doesn't seem to have been the initial plan of the internet. some sort of POSSE with content-agnostic subscribing mechanism would be far better. (and yes that subscription mechanism could be in a blockchain acting as a discoverability mechanism and a backup).
There's also Notion (notion.so) which is a bit more functional (although not as 'native'). Bear is more for pure writing, Notion - more for tracking, organization etc.
Would duckdns.org provide the steady hostname needed?
If you're using GNU-specific Make features, please, please consider naming the file GNUmakefile instead of Makefile and use $(MAKE) for recursion. GNU make will happily pick up GNUmakefile before Makefile, and using $(MAKE) will remove a lot of headaches when people try to build your project outside of author's $PREFERRED_PLATFORM.
> So it's like YouTube but you have to pay a subscription for every channel? Ugh.

I think it’s more of a Patreon alternative focused on delivering video.
> “We are a victim of a hoax,”
Vinci was the victim of a hoax, Bloomberg was happy to report it without doing enough fact checking, they were spreading and part of the hoax.
Blind People Using Online Forms
Have you somehow missed the fact that the reason we're discussing the beats at all is that they collectively produced some of the most influential works of 20th century literature?

The point of the beat movement, if it's reducible to a single idea, was to escape the prison of an expected life - to be and to experience the possibilities inherent in the final gasp of [white imperialist patriarchal] freedom in colonial America, and then to create art that successfully articulated and perhaps even evangelised that experience.

I don't think anyones denying the misogynistic, sociopathic elements of their behaviour (or indeed of artists throughout history from Carravagio to Cosby). To advocate for the importance of art as cartography of experience is radically different to suggesting the lifestyle of the artist should be one to emulate.

Part of the seductiveness of art is as escapism, as confrontation with darkness, as elegiac vision. There is little space in our contemporary culture for exploring the contradictions inherent in our shadow selves - let alone how they are necessary for light to thrive. It's exactly this resonance: with irresponsibility, with self destruction, with the truth of the moment (irregardless of consequences) that makes the work of the beats still so seductive.
This is buzzfeed, one of the biggest contributors of this shit culture we now experience.

Just watch how they randomly call some arbitrary twitter account a nazi:

> 14. Then suddenly there are Nazis everywhere.

This outrage culture is horrible, Buzzfeed is a heavy contributor which makes them horrible and I wish people would just stop.
iDevices finally get key-based protection against account takeovers
You can even just set NS records for _acme-challenge subdomain to your own DNS server.

And then have your acme client auth against that one.

No need for a new domain.
home internet router/modems running a minimal server with some sort of publishing program to seed the content would be ideal
How to split Geo Time Series according to speed or distance traveled?
"Safest" here being the approach that physics and enfineering say is most likely to succeed: project risk, not actual safety risk.

(Ironically it was so large that until it shaken up, the project nearly sank for the usual "megaproject drama" reasons)
I'm giving away 6 games for your help on getting our game known
> Hardware gets outdated and needs replacing

Irrelevant. Low traffic static website.

> at which point you cannot postpone the kernel update anymore because you need the new device drivers, etc. etc

Irrelevant as I didn't upgrade the hardware

>You also don't want to stop updating your HTTP server, CVEs get discovered quite frequently

it's a server for serving a single static page from 1998, nothing bad will happen if that machine is compromised, well, nothing worse that what could be done for not having HTTPs
> macs don't have a recent bash

Macs don't have GNU make 4, only 3.81, so it's outright not portable with that > thingie.
I'm not sure if this is satirical, but the user they called a Nazi has a Hitler pepe avatar and uses the "echo" meme. That's about as straightforward as you can get.

Otherwise, yeah. Buzzfeed often acts as an outrage factory - it gets clicks. Much of our media landscape is moving in that direction now because it's the most profitable form of "news".
The root of this puzzle is described by Descartes' "I think, therefore I am." 'Thinking' here does not need to be rational thought. Perhaps it does not even need to be the ability to form new memories. It is hard to say anything meaningful about the dichotomy of one's personal existence but for the purpose of my question it should not matter. In altered states of awareness such as dissociation or 'ego death' this conscious 'eye' which observes one's experiences remains unchanged. It is not the idea of the self described by "I am I", but the self which only asserts its own existence as "I am".
Cached: https://web.archive.org/web/20191217093210/https://java.chri...

(Google hasn't cached it yet as of this writing)
> Having the DNS credentials laying around on the server is not a good idea. So creating wildcard certs via letsencrypt is a huge pain in the ass.

That's absolutely unnecessary

Set a NS record for _acme-challenge.domain.tld to your own nameservers, e.g. ns1.myowndomain.tld

And have your own name servers only serve the _acme-challenge.domain.tld zone.

Now you can just use the RFC DNS updater with your ACME client without any need for credentials for the actual domain.tld zone.

I use this currently with my own kuschku.de domain, you can check it out.

dig +trace @8.8.8.8 _acme-challenge.kuschku.de ANY
>Wether your pro or anti-gun no one wants the reality we have now where kids grow up with this kind of fear.

The level of fear instilled into the population is wildly disconnected from the realities of risk and we've known this for decades. Whether it's the security theater at the airport, modern day duck-and-cover, or whatever the 6pm news is scaring old people with this week; the line of reasoning that goes something like "we taught people to fear risk X, the way to alleviate the fear is to reduce the likelihood of X" is the most asinine bullshit in the world.
Introducing our cloud lock-in guidance and case study
Zero Server
are there any practical impacts (direct or indirect) of these results?
AWS certificates are free. Cloudflare will also put SSL in front of your origin for free.

So if you’re using AWS you get it for free. Or you can slap CloudFront or Cloudflare in front of your origin.

I think the barrier is low enough that I SSL all the things (including my small side projects).
So Bloomberg got caught out by a fake press release and got fined - what happened to the originator of the fake press release?

France has a problem /history with anonymous poison pen letters.

Sounds to me like some one was settling scores and Bloomberg got caught I doubt that a French equivalent of Bloomberg would have been fined.
Ask HN: Best practice for distributing OpenAPI generated modules?
Hello everybody,

Currently we are storing our yml-API definition inside of an git repository. Any build which depends on these definitions (e.g. webapp and server) will download the source and genereates the specific necessary code.

I asked myself if there could be a better way of distributing these definitions using our internal GitLab CI/CD and package repositories, but I am not sure if this idea would be some kind of an antipattern.

My idea is that we could use the GitLab CI/CD to trigger automatic builds/code generations after each change for the different necessary modules. The generated code could be automatically pushed into different package repositories (our internal maven or internal npm package repository). The applications could then just import the generated code by using the pushed modules as dependencies.

For me this approach seems good on paper, but as I said before: I am not sure if this is the best way to deal with OpenAPI generated code. I researched a little bit (google and colleagues), but was not able to find a good answer. Maybe someone here could help me figuring out if this approach is a good way to handle it.
Thanks :)
If we have fusion reactors we will get more helium. That is indisputable. Helium is a byproduct of hydrogen fusion.

We might not be able to make enough to continue our current level of helium usage, but that's a completely different problem.
One potentially good reason to not force SSL:
https://meyerweb.com/eric/thoughts/2018/08/07/securing-sites...

TL;DR: Secure websites can make the web less accessible for those who rely on metered satellite internet (and I'm sure plenty of other cases).
Because HTTPS is not as easy as HTTP.

Sure there is Let's Encrypt and if you are facing Internet you are probably good to go.

If you are on an internal network, then good luck. You need to build a PKI, and then put into your devices the right certificate so that it is trusted.

If it was simpler, Apache would sing out its "It works!" in HTTPS and not HTTP.
If we migrate to HTTPS everywhere we can get rid of HTTP for general use and switch to a different UI, where HTTPS websites don't have any special icon but HTTP ones get a warning icon.

It's already effectively how password form submissions work in many browsers.
Deciding how to host your service
Documents are best thought about in terms of being the unit of ingestion and history - they do not have strong implications for queries asides from having a 1:1 mapping with entities.

Each transaction may contain multiple operations and each operation is typically only relating to one document. A document represents a single version of an entity and is decomposed during ingestion into an arbitrary set of attribute-value datoms that get updated atomically and fully replace all the previous attribute-value associations of the given entity.

For more on the semantic differences with datoms see the FAQ: https://www.opencrux.com/docs#faq-comparisons
Sorry, this is wrong. They mainly use the US keyboard layout for input, typing in pinyin (mainland China. Taiwan etc. are indeed different). Every person using a computer not only has to know the Latin alphabet, but also has to know how the characters they want to input are translated into pinyin. Even on the smartphone where thanks to the touch screen you could easily come up with new flexible input methods, they simply ported that concept over.

This article doesn't appear well informed, or tries to make the Chinese look stupid. On a similar note there is the common belief that Chinese people, having simplified characters for well over 50 years now, couldn't read the traditional characters still in use in Taiwan and Hong Kong. They are still used for artistic reasons and in calligraphy, which a lot of Chinese people have practiced at some point in their lives. Based on my very limited sample size, I'd argue that a Taiwanese person has more issues reading the simplified characters than vice versa, but then again it's not like all the characters look totally different, so given at least minimal context it shouldn't be too hard going either direction. (end OT rant)
Tell me that after some shitbird takes a dump on your sidewalk.

God I hate retards like you. It’s the real reason SF and Seattle are going to burn.
Nothing prevents you from compiling your Python code to JavaScript blob and run it without really bothering with JavaScript. You don't need wasm for that.
Let's Encrypt works on internal networks too.

Fun fact: TLS doesn't require certificates, and some browsers even used to support HTTPS in these TLS modes many moons ago. See eg https://security.stackexchange.com/questions/23024/can-diffi...
I'm not sure I fully understand. What do you mean by step 2? If I entered "myemaıl@example.com" into the reset field, are you saying that step 2 would be the process of doing some normalization to try to find a matching account? If I reset a password, don't I only provide an email address by means of doing so? Therefore, doesn't the service merely attempt to match an email to an existing account within the DB?

I believe I understand the rest (the take-away being, however you match A to B, send the reset email to the email address stored in the DB?), just not sure about the flow beforehand.
It it's cheap, sure.

It's probably not going to be that cheap, so it will instead replace all that fossil power.

Renewables are also quick to scale out, and low impact to decommission, so there's no loss in keeping on accelerating wind farm deployment.
> But Tim Palmer turned out to not only be a climate physicist with an interest in the foundations of quantum mechanics, he also turned out to be remarkably persistent. He wasn’t remotely deterred by my evident lack of interest. Indeed, I later noticed he had sent me an email already two years earlier. Just that I dumped it unceremoniously in my crackpot folder. Worse, I seem to vaguely recall telling my husband that even the climate people now have ideas for how to revolutionize quantum mechanics, hahaha.

> Cough.

My favourite crackpot sent her his theory about gravity because she published a bimetric model of gravity a decade earlier. She accused him of plagiarism. Full story (french, bad subtitles): https://www.youtube.com/watch?v=CKWqh75ErNI&t=40m54s

Also she made a few music-videos (the music is her own it seems):

https://www.youtube.com/watch?v=NrswlFxEiV4

https://www.youtube.com/watch?v=FDkfXCMDzZs
Surge in Funding Is Propelling Growth of the Global Dialysis Market
The simplest interpretation is that there is no such thing as matter. Physicists are studying consciousness.

It is actually the only explanation that is consistent with experience, since there is no experience outside of consciousness.
> you can include /dev/stdin in C code compiled with gcc. This is, to say the very least, surprising.

Why?
Biking in a foot of snow, on roads with pot holes large enough to swallow a tire, or that flood, or turn to black ice, is dangerous and sucks. Add the lack of actual bike lanes on all but a few block long stretches and biking becomes a death wish. Sure I can get a studded fat tire bike, and bike down the middle of the lane with dozens of pissed off people behind me honking and screaming at me, but that still doesn't solve the other problem of rampant unprosecuted bike theft in my city. Nor do I have a place to shower once I get to work.

So I'd need two bikes, one with specialized winter tires, that I'm replacing frequently when they get stolen.

Another gym membership to shower at before I go to work.

Better health insurance to lessen the financial blow of the inevitable hit and run.

More time to account for the longer commute. In my case it's 4-6x longer to bike than drive. Time I'm not making any money and time I'm at substantially greater risk of getting seriously injured.

The politics of it certainly do suck. There's too much money pushing for the jobs that our car dependence create.
Everyone get your thinking hats on. Based on this model, increasing building efficiency is the #1 way that we as entrepreneurs can have an impact. Passivhaus anyone?
Doesn't this violate the freedom of speech?
We observe the power of a carbon tax
On Compassion
Not OP, but we do something similar it our startup. PostgREST (http://postgrest.org) definitely helps if you want to go down this path as it exposes everything in the database (including functions etc) via a RestFUL api.

A bit outdated now, but some details here: https://paul.copplest.one/blog/nimbus-tech-2019-04.html#tech...
Trading security for convenience is rarely a good idea. The rest of the world should not conform the to failures of certain areas to provide internet.
Did you try this on an up2date Linux OS, like eg Debian or Ubuntu? What was your result?

Certainly as a real hacker you are not only re-posting "things from the news" but validate everything before posting any comments? Are you?

I did not see any relevant content on the websites you mention in your HN profile, I expected some in-depth security publications - maybe update it with some real code that shows us how you are using the mentioned CVE-2019-14378 to perform escapes on any KVM host? Thanks!
Drawbacks of Recursion
I realize I'm well late to this discussion, but Huginn seems to be a good tool for this: https://github.com/huginn/huginn
Why not just continue using it for heating/cooking/whatever then...
My dad spent his entire career at GE research. One day he arranged for Bill Lorensen to give me a tour of their computer graphics lab. Great guy! Sad to hear that he has passed.
Here's a non-paywalled version via Reuters (who, it should be said, is a Bloomberg competitor in the financial news space): https://www.reuters.com/article/us-france-amf-bloomberg/fran...

Here's a more in-depth explanation from 2017 (the incident happened in 2016): https://www.complianceweek.com/the-vinci-code-fake-news-pres...
The combined wealth of workers is usually more than enough to start a company. The only reason it doesn't happen is that the workers don't want to risk their hard earned cash.
Zhang Haitao was a basketball-loving teenager who dreamed of going to a specialized sports high school when he got a pain in his right arm that just wouldn’t go away. It turned out to be acute lymphoblastic leukemia.

The discovery set Zhang and his family, from a village deep in the mountains of southwestern China's Sichuan province, on a journey familiar to most cancer patients — a revolving door of hospital visits, blood tests and three rounds of chemotherapy. It was then that Zhang’s doctor suggested a last-ditch option: an experimental gene therapy being trialed by a Chinese startup called Gracell Biotechnology Ltd.

After spending three weeks in the hospital in May — during which white blood cells were removed from his body, genetically engineered, and then infused back in — an analysis of Zhang’s bone marrow in June showed his body was clear of cancer.

Seven months later, monthly medical tests conducted at a hospital in the nearby Chinese metropolis of Chongqing show he remains cancer free.

“I don’t remember much about the treatment as I had a fever throughout,” said Zhang, who’s now almost 16 and spends his days playing video games and texting his friends. “It seems like a new solution that will give people hope.”

The therapy Zhang received was Chimeric Antigen Receptor-T cells, known as CAR-T, and it’s being hailed as one of the most exciting developments in the quest to cure cancer. First developed by Israeli scientist Zelig Eshhar in the 1980s, CAR-T re-works the genes of the body’s own immune cells so that they actively seek out and destroy cancer cells. While it’s been embraced by researchers and drugmakers around the world, perhaps nowhere is CAR-T having more impact — and being pushed dangerously close to its limits — than in China, home to the world’s biggest cancer population and some of the most ambitious experiments.

CAR-T works by supercharging T-cells, the body’s main line of defense against disease, so that they latch onto and destroy cancer. In clinical trials, leukemia patients who failed to respond to other therapies have shown remission rates of over 90% within two months of treatment.
It's crazy how every reply to this comment is arguing a complete strawman.

The other comment is arguing you could accidentally cancel payroll, which tells me they've never had to worry about payroll before.

This one is claiming I'm advocating making a "security decision based on...".

-

It's making a sanity check based on a few seconds of conversation.

If you didn't know, confirming a withdrawal for many times your normal payroll from your payroll account to an unknown account at the wrong time is fraudulent takes very little effort past a phone call.

That effort is easily worth it based on an off-the-cuff risk assessment.
Otherwise known "BBC Micro MODE 7" font :-), see
https://retrocomputing.stackexchange.com/questions/9203/why-... for details.
Not really. Gödel's theorem only proved that the specific kind of "mechanization of mathematics" that's implied by Hilbert's program as originally devised is impossible. The wiki has a nice section on varieties of Hilbert's program after Gödel https://en.wikipedia.org/wiki/Hilbert%27s_program#Hilbert%27... , citing (Zach, 2006) https://arxiv.org/abs/math/0508572

Of course from a slightly different POV there are plenty of practical implications, since e.g. unsolvability of the Halting problem can be viewed as a close variant of Gödel's results.
I can’t imagine it mattered much, anyone they were sharing times with would be in the same city.
I still need to pass weird flags for Tomcat to make it work under Java 9+, almost 6 years later. Modules were a mistake. If not for modules, a lot of people would have migrated to 9+.
Uses for CSS Custom Properties