skysight-inc/HackerNews huggingface dataset:
> So how are you, with your publically routed IP of (for example) 56.10.10.100 planning to connect to the GP, who has (for example) a public egress IP of 73.100.100.10, but is in fact using NAT, and his desktop's real IP is 192.168.1.20?

By sending a packet to them that has the destination address 192.168.1.20?

You seem to be making the assumption that the only way to send a packet to the WAN interface of a NAT router is through the public internet. While being able to do that widens the attack surface, it absolutely is not the only way, and your threat model is broken if you assume that it is.

> I realise NAT is unpopular with networking purists, but trying to claim that it doesn't prevent inbound connections seems to be overstating your case quite severely.

No, that belief is one of the big myths that keeps people configuring insecure networks.

> I'd also note that if your firewall is stateful or not is irrelevant for the point you were trying to make - oldfashioned stateless firewalls can also block inbound connections just fine.

That's true and it's not. Of course, you can block all connections with a stateless firewall, and thus obviously also block all inbound connections. But a stateless firewall is very limited in selectively blocking specifically inbound connections across random protocols, and especially so if it doesn't know detailed information about your network and services to infer what constitutes a packet establishing a connection, while with a stateful firewall you can essentially just say "drop inbound connections" without any further details about your networks, and it'll do a good job at it.

Plus, you could argue about whether, for example, dropping TCP SYNs but forwarding all other TCP packets actually counts as "blocking inbound connections", given that tons of potential "inbound packets" will be forwarded to your internal systems and you really rely on your internal systems not accepting any of them as "establishing a connection" or possibly just being vulnerable to those "inbound but not establishing a connection" sort of packets.
Also don’t foist your own desires and dreams upon your children. It is good to expose your kids to quality stuff, but be aware when this is more about your desire than theirs.
A stick and a puddle.
Your startup is probably just a variation of CRUD.
The relatively small company I work for makes me fill out some forms by hand, because they receive them from vendors as a PDF. So I print it out, sign it, and return it to my company by hand.

If someone could make a service that lets you upload a PDF that contains a form, and then let users fill out that form and e-sign it and collect the results, and then print them out all at once, it would be great.

It's not a billion dollar idea but there are a lot of little companies that would save a lot of time using it.
How is offering your child toys that they can learn from stopping them from enjoying their childhood, and what does it have to do with sports?

I grew up loving k'nex, I don't see how that i wasn't enjoying my childhood
A task management template for novice developers
There is a set of 4 toys that can be assembled and dissassembled using a supplied plastic screw driver. 3 are dinosaurs and one is a horse. I forget the name though.
So it starts
Python Monthly
I suspect you misunderstood the article:

The component in question should not render content during build time, it is a UI element that represents the login state, which you certainly do not want to have pre-rendered at all, let alone be indexed.
As a meta point, it's really nice to see such a well-written, well-researched article that is obviously used as a form of lead generation for the company, and yet no in your face "call to actions" which try to stop you reading the article you came for and get out your wallet instead.
The Hough Transform
Universities skew younger even more than the internet does.

I think there is an element of the left wanting to "fix" the world which appeals to young people, and the right wanting to "protect" the world from bad changes, which appeals to older more cautious people.
I'm not saying that borders are always wrong, but you are using a horrible example as an argument in favor of borders.

There are no borders in any of the examples in Josef Müller-Brockmann's Grid Systems except for in the pictographic signs used by the the Swiss Federal Railwaws, but they are not part of a grid.

Well, there are also borders, or rather literal guidelines, in all the sketches visualizing the grid, but they are of course only there as a tool. In all the grid layout examples the grid is implicit. All of them.
Getting Started with .NET and C# at the Command-line
Duplo - larger Lego that they mostly can't put in their mouth.

Be prepared for about a decade of being bored with kids toys. Also realize that your child may not be interested in anything you are interested in, its ok. They are their own person.
80% of the value of notes is the act of writing them down by hand. (I don't have a citation for it, but I tend to believe it). That is notes are primarily a tool to help you not fall asleep, start daydreaming, or whatever distraction keeps you from listening.

The fact that you cannot write everything down forces you to think about what you are hearing and find the important part to write down. Now that you have found the important part the writing helps you remember it.

When you are done with the above throw your notes in the recycling... Note that the above system works for me because I can't read my own writing anyway. (Probably a case of dysgraphia but I've never been formally diagnosed)
Their closest competitor seems to be https://smsprivacy.org who are similarly anonymity friendly (supporting Tor and cryptocurrency, and not requiring personal data for signup) and don't filter incoming registration messages. Price: 0.0015 BTC per day(!), which is ~$400 per month at the moment. And they don't support outgoing messages.

So Crypton.sh looks like an excellent deal. Wish they didn't require an e-mail address.
My kids loved this 'learn binary' toy: https://www.quercettistore.com/en/toys/educational/1014-rami

Site is in Italian but I ordered it off Amazon, the box is in Italian but that wasn't a problem.
Got a few leads in the past year from two personal submissions to the freelancer seeking work topic. They ended in nothing massive (or life changing, as some are reporting on here, well done to you!) because onsite still seems a pre-requisite for anything non-software and, more than that, real life teams cannot outsource IP trust or strategic responsibility for heavy-impact r&d decisions.
I doubt it'll work. If the business is profitable, capital will find a way to flow to it.
Yup, I believe in the rest of Spain it's any time. Also it's not a strict rule in Valencia or anything, it's just a common recommendation:

https://www.20minutos.es/noticia/3305118/0/protocolo-comer-p...
Sorry but that's not even remotely close to being the same. The Windows builds were notoriously badly supported and were never equivalent from a debugging perspective. Microsoft made a genius move by providing its IE VMs, and if Apple didn't want to force developers into its ecosystem they'd have done the same.

I agree that it's obnoxious, but I'd rather do that than deal with Safari users complaining about bugs on my sites that I have no intention of buying a Mac or breaking the law to fix. I'd rather avoid the bug reports and let the users know that it's Apple fixing it. The sites I run are entirely free and paid for out of my own pocket anyway, so I don't want my money going towards people who support Safari. I've considered blocking Chrome, too, for other reasons.
New York (Apple Font)
Would DocuSign work? I’ve signed for lease documents several times that way.
For those who haven't read the linked article, it states that unregistered and anonymous users create the vast majority of Wikipedia content; the registered editors mostly move things around, delete commas and the like.
Titan != Ti. RTX 2080Ti is ~$1200 vs $2500 for the Titan RTX. One is aimed at gamers with too much money the other is geared towards serious professionals with too much money.
I don’t see how it could stop that from happening unless some front-end language requires features that the binary format or platform just can’t support. The fact that they are going to support Clang/Flang already shows that to be the case.
Will you leave it to your heirs?
Biblical Literalism is a biggest plague on modern Christianity. Nothing else has done as much damage. It drains the Bible of its real meaning, and forces Christians to choose between rejecting reality and rejecting faith.

It is a relatively recent development; in the Middle Ages, the literal interpretation was only one of four levels of interpretation, and generally seen as the least important one. It's about the last 2 or 3 centuries that Biblical Literalism became big.
SEEKING WORK | Europe or Remote

Location: London, UK, Europe

Remote: Yes

Skills: .NET Core, Google Cloud Platform (GCP), Devops, Kubernetes, Docker, PostgreSQL, Python, Node.JS, React, TypeScript.

Previous industries: Aerospace, Data Science, Startups, Universities.

Website: https://datadyne.io

Email: At the bottom of the website

Resume: https://datadyne.io/assets/cv.pdf
This is quite a gross generalization. Do you often get judged for the sins of your predecessors?

And if you buy anything from Ford, Mercedes, Porsche, Siemens, IBM, Kodak, Volkswagen, Bayer, Allianz, Coca Cola (yes, that Coca Cola), Chase, Standard Oil (Exxon, BP, Chevron) and many, many others what does that say about your principles?
Theatre.js | Onsite & REMOTE (We're in Berlin & Helsinki) | VISA | Full-Time | https://www.theatrejs.com

Tags: Design tools, HCI, PL, Visual programming, Procedural design, Constraint solving, Graphics programming, Animation, React, TypeScript, Node.js, Rust, SwiftUI

We are building a design/development environment that:

- Empowers designers to create dynamic graphics, with motion and behaviors, to design web/mobile apps, visualizations, generative art, explorable explanations, XR content, and more.

- Helps developers by doing away with the design-to-code conversion step.

Our long-term goal is to evolve this into a collaboration environment not just for designers and developers, but scientists, journalists, and even end-users. We often say that we aim to blur the line between designer/developer, author/consumer, and artist/scientist.

Our inspiration comes from the work of Ivan Sutherland, Seymour Papert, Bret Victor, and others.

Positions:

- Principal software engineer / CTO: You'll be leading a small team of senior and junior developers, through rapid product iteration, and ambitious, one-of-a-kind technical challenges. Current challenges range from a real-time multiplayer editing environment with branching history, to a high-performance graphics/animation engine for web and mobile.

- UI/UX designer: You'll be joining two HCI researchers, elevating their designs with great UX and gorgeous aesthetics. You will be designing a tool for power users,

(If you don't fit the above profiles, but this stuff is your cup of tea, then reach out anyway. While we don't have internships or junior positions open yet, it's likely that we will in a few months.)

---

Note that this is an early-stage startup and we're in the middle of raising our first round. You'll be part of the core team of 6, with all the excitement/responsibility/growth that entails :)

Reach out with a paragraph or two about yourself, and how you see our work relevant to your interests.

hello@theatrejs.com
No command line allowed

It's easier to tell someone what keys to press than to find and manipulate UI elements.

on the same PC

On a PC, everyone already has access by default, so "sharing" doesn't involve anything additional.
That was amazing, thanks so much!
Earth’s Deepest River Conceals an Evolutionary Mystery
I second that recommendation. It's a good book, and very, very useful.

----

I'm just starting to consolidate my notes, plans, and other documentation into an Emacs org-roam instance. I've got the workflow pretty well defined, now I'm just adding more and more "knowledge" to the instance.

Org-roam is a recent Emacs-based implementation of https://roamresearch.com/ where you link notes to other notes, and the system automatically creates backlinks for you. Thus creating the context for the "in what context do I want to view this note?" question.

https://blog.jethro.dev/posts/how_to_take_smart_notes_org/

https://org-roam.readthedocs.io/en/develop/

https://github.com/jethrokuan/org-roam
I suppose this is one way to answer my question

I asked (on m.d.s.policy) on the 29th how many issuances were affected, Jacob replied saying they intended to spend that day figuring out the answer, but then there was nothing further from him. The incident doesn't seem drastic enough to prompt urgent answers so I intended to revisit later this week if I heard nothing further.

Now we have a complete list of affected certificates instead, (the answer to my original question is about 3 million)

I was sort of hoping the answer was going to be like five thousand or something manageable. Alas. In hindsight I guess this was to be expected.
I wonder if he can then license his likeness and name for a nominal cost to anyone who wants to use it.
Community Health Network | Indianapolis, IN USA | FT ONSITE, REMOTE possibility

Community is a large healthcare organization with over 300 sites of care in central Indiana. We are looking for 2 PeopleSoft Analysts. Thanks so much for your consideration!

PeopleSoft FSCM Analyst https://www.ecommunity.com/careers/jobs/peoplesoft-fscm-anal...
and
Sr. PeopleSoft HCM Analyst
https://www.ecommunity.com/careers/jobs/sr-peoplesoft-hcm-an...

Please contact me at lslawta@ecommunity.com
"Somewhat evidenced" seems like an overstatement to be honest.
While it’s specifically Li t for PDF tables, I’ve found Tabula to be pretty robust. I use it to convert banking statements to CSV.

It’s still a pretty manual process, but it does the most difficult part good enough.

http://tabula.technology/
For an article of such importance, to botch the visualisations so badly, to the point of being unreadable, is absurd. Can they not afford to get a designer or data viz person to spend a day and put the data in a decent choropleth map so we can actually see the maps clearly?
I reckon HIBP adds at least (far more, tbh) as much value over 'text search of data that is already available' ad Dropbox does over 'FTP dump'.
Nice, I'm sure many people will appreciate being out of a job.
This reminds me of a story I heard from Charlie Munger of Berkshire Hathaway about asking Mozart for advice.

One man came to Mozart and asked him how to write a symphony. Mozart replied, “You are too young to write a symphony.” The man said, “You were writing symphonies when you were 10 years of age, and I am 21.” Mozart said, “Yes, but I didn’t run around asking people how to do it.”
A reminder that whenever any cybersecurity-related company gets acquired, any trust you have on them ought to be reset.
There are some LEGO Education products that may be relevant.

Maybe something like the STEAM Park set. It uses DUPLO bricks.

Disclaimer, I work there.
I don't believe so.

I hope they add support for that soon.
Yeah the reason I tested Nvidia instead of Stadia is because Nvidia lets you just use the games you already bought on steam. But you may have a point on performance. Not sure given the trade-offs in ownership that it represents a win either though. Maybe someone will get it right eventually, but for now I'll just stick with a local gaming rig. As hobbies go, even with my overbuilt and often refreshed setup, given the low cost of the games themselves and the number of hours I typically get out of each title I find interesting my dollar cost per hour of entertainment is still quite low compared to other hobbies. shrug
This. Three years old is a good time to build an intuitive understanding of the simple machines (lever, wheel and axle, pulley, inclined plane, wedge, screw). Hands-on play with this kind of thing will set up a solid foundation for more complicated STEM when they're older, and the kid won't even know they're being educated.
It's a free service. I understand your frustration, but CAA is a well known DNS record type. If you read the description of the problem, it explains it.
Postulating about how things should be by non-experts has become a new e-sport. Then they try to apply it to software or startups as if its a apples to apples comparison.
Coming from a documents format world (publishing), there are a lot of cases like this.

In theory it sounds like it should be straightforward but it hinges so much on how well the document is structured underneath the surface.

Being that these tools were primarily designed for non-technical users first the priority is in the visual and printed outcome and not the underlying structure.

One document can look much the same as another in form—uses black borders to outline fields, similar or same field names, etc, but may be structured entirely differently and that can be a madhouse of frustrating problems.

It can be complex enough to write a solution for one specific document source. Writing a universal tool that could take in any form like that would probably be a pretty decent moneymaker.

My first intuition, though, would be it may be more successful (though no less simple) to develop a model that can read from the visual of the document rather than parsing it successfully.

Open to learning something here, though!
One thing that has crossed my mind a few times when dealing with bounding box tests (for non-interactive purposes by the way, but that's besides the point) is whether it would be worth using oriented bounding boxes instead of axis-aligned bounding boxes. The idea would be to fit an efficient bounding box to my object-space meshes once, and then use the mesh transform on each bounding box before the tests. This obviously takes computation type (to do the transform, and because the bounding box test will be a lot more expensive compared to an AABB), but the number of false positives would be way lower for certain shapes.

In which scenario's would you think this could be worth it?
The blog post only says they halted issuance within minutes of confirming the bug - not that they confirmed the bug within minutes of receiving a bug report.
Exactly. People try to make the Bible into something it was never meant to be. It's a spiritual book about the relationship between humans and God. Although much of it takes place in history, it's not meant to be a historical treatise, and certainly not a scientific one. It has to be read and interpreted in the context in which it was written, not our modern context. Many things may still apply to us, but many don't, or need to be reinterpreted from that context to ours.
I misinterpreted your comment. Thought you were talking of SSR pattern in general.
Something like that would work for signing, but the hard part is "turn this pdf into an online form". That way after a user finishes a form, you can perform some basic error checking like, did they fill out everything, is this field a valid format, etc. After 100 employees turn in a multi-page printed out form, someone has to go through it and make sure they signed everywhere, filled out all the fields, etc.

Again, not sexy, but it is so stupid I have to fill out a direct deposit form by hand and turn it into my company, who checks it, then hands it off to the payroll vendor, who has to check it, just to enter the damn data into a form on their end.
Relativity Space has big dreams. Is the company for real?
and Apple is using slave labor TODAY https://news.ycombinator.com/item?id=22457389
I have an 18 month old. The delta that's occurred over the last year is immeasurable. I can't imagine how much more is going to happen between now and 4 years old. I optimize my day to ensure that I spend as much time as possible with him. It's definitely paying off for him, but selfishly, it's the most fun I've had in a long time.
There is always the risk of failure in this risky business world but there is no denying that cloud gaming is the future. Whether anyone agree or not, it's coming. Maybe not this year or even 5 but when it does, having a foot in the game from the beginning is gonna make a huge difference for Google. Gaming industry has made more profit than movie and music industry combined in tje past years and that's why I don't think google is gonna drop this. With Google and Microsoft both promoting their cloud gaming and with Google penetrating the market first, I think we're gonna see some interesting and innovative developments over the years to come.
In terms of investment risk and returns:

The more honest approach is to admit that shifting your investments will make you marginally less diversified and exposed to marginally greater idiosyncratic risk, but to weigh the tradeoffs and to do it anyway. The tradeoffs include the possibility that the remaining investors who do not choose to starve the industry have greater investment upside by being able to buy at a less competitive/lower price.
Small, Freestanding Windows Executables (2016)
Show HN: Slide to Subscribe
On a personal project, I had a good experience extracting PDF text using Tabula[1]. You specify the bounding boxes where desired data is, and it spits out the content it finds.

It still hits the issues mentioned in this article (surprise spaces appearing in middle of words, etc)

[1] https://tabula.technology/
Creator here. I initially built this as a challenge to myself to make a better signup form. The purpose was to simplify email collection: placing a signup form in an article should be as easy as placing an image. Conversely, subscribing should be as easy as a swipe. I wanted something that looked cool, without being flashy, and also adaptable to different types of websites. This is what came out of it.

A couple of things that you might find pretty cool:
- Everyone gets a subscribe.to/brandname URL
- Works natively on Medium: just type https://subscribe.to/me and press Enter
Because otherwise Rostelecom won't peer with them.
wrt #2, you are right.

but i have read and learned crazy things like you can't have part of their name in your own products or company names. or again, you can't use their main colors for branding.

ridiculous!