skysight-inc/HackerNews huggingface dataset:
I buy cheaper cars, because I don't really care about any of the high-end features that cars offer, and this has been one legitimate advantage, at least as of the last time I was shopping; cheap cars cheaped out on the display, so they still had physical controls for things like volume. I hope this trend takes off before I buy another.

I think it would be possible to make a decent touch screen, but it seems like the only people who give even a quantum of a damn about latency are the video game folks. A UI with 95th-percentile or 99th-percentile multi-second latency is an active hazard on the road, even if it is normally acceptable, which itself is fairly rare and expensive.
Prisma 2.0 Beta: Type-safe Database Access
UX designer here, I approve.
Those stored key passphrases are visible with the Keychain Access application, Kind: "application password", name: "SSH: /full/path/to/key", in the login & iCloud keychains.
I've said it before, I'll say it again.

Touchscreens CAN BE DONE RIGHT. (or at least better)

I have an aftermarket JVC headunit in my 2003 VW. It has one button, that's the "Menu" button on single press, or Power button when held.

The screen itself is relatively intuitive to control without looking because of a gesture feature it has as well as button placement being useful.

If I want more volume I put one finger on the screen and make a circle gesture in the clockwise direction. Down is counter-clockwise. The play/pause button is in the very bottom right so you can find the button with feel. You can shuffle songs with another gesture (though I never use it).

I really like my touchscreen. And every time I am using a work vehicle (Ford Explorers), or my wife's GMC Sierra, I hate the controls because you have to look up to see what you're doing. Thankfully their steeringwheel controls are generally good.
And the US treasuries won't even keep up with inflation. If you invested yesterday you'd need to lock in for at least 20 years before you got even 1% return.
We instead could compare the number of deaths if we quarantine, vs if we don't, and then choose the path with the least number of deaths.

If for example, we could no longer produce food due to quarantining (not the case, as essential industries are still operating-- but imagine for some reason, we did shut down food production), and 100 million would die vs 200,000-- clearly the better option would be to not quarantine.

So, I don't know if this a debate of semantics, but "economic losses" that would turn into actual loss of human life (e.g., due to starvation) are being accounted for.
If you're talking about the picture with the title "Lens inspection", this wasn't shot by an iPhone, but by one of his Nikon cameras: https://500px.com/photo/17629635/Lens-Inspection-by-Marsel-v...
It has a pre-flight script (which isn't supposed to change anything) that installs it (and its browser extensions, and a kernel extension at some point in the past) in the most widely available place the current user has privileges to (it installs in their home directory if they aren't an admin).

So yes, there is some blame to be laid at the OS for running binaries with the privileges the current user has, but it's clear that the installer doesn't behave like a regular installer would.
> It works.

Crazy theory, so just hear me out for a second. Maybe the fact that they do some things that violate security is the reason that "it just works". I'm not saying Zoom shouldn't do better here, I'm just saying that there are probably legitimate product/business reasons.

From Steve Yegge's platform rant:[0]

Like anything else big and important in life, Accessibility has an evil twin who, jilted by the unbalanced affection displayed by their parents in their youth, has grown into an equally powerful Arch-Nemesis (yes, there's more than one nemesis to accessibility) named Security. And boy howdy are the two ever at odds.

But I'll argue that Accessibility is actually more important than Security because dialing Accessibility to zero means you have no product at all, whereas dialing Security to zero can still get you a reasonably successful product such as the Playstation Network.

[0] - https://gist.github.com/chitchcock/1281611
Show HN: Still Computing, a biweekly newsletter for curious programmers
Well no business end-user or any typical Mac user is going to be bothered about something technical like 'SSH' breaking their system. Only actual devs here would care.

For those business users, it just still works. For developers it's a problem.
For anyone who wishes to explore some of the ideas presented in this article about wilderness, I would recommend Michael Pollan's essay "The Idea of a Garden".

I read Pollan's essay as part of a discussion about wilderness ethics and it has stuck with me for years. It can be found in his book, Second Nature.

If you are still reading this comment, I would also recommend Desert Solitaire by Edward Abbey. It takes a more irascible approach to some of the ideas of wilderness ethics, but is is a damn-good, swashbuckling time.
I'm not at all convinced that voice recognition are better or safer than well designed physical controls.
Another fad that should go away is blue light dashboards. They give horrible afterimages in dark conditions. BMW's red-orange lights are so relaxing to look at in comparison.
Unfortunately we won't get this car in the US. I love my 1st gen Honda Fit and plan to keep it pretty much forever, they're such a great vehicle. Incredible gas mileage and they're actually fun to drive with the short wheelbase. In tune with the article I put the only Carplay receiver with a physical volume knob in it and it's perfectly easy to use.
In other words, the assembly code itself isn't really a good picture of what is happening.
You can achieve a certain amount of type disequality in Haskell. It isn't necessarily easy or sufficient for all purposes. There is a type family that returns a type level Bool for equality here. https://hackage.haskell.org/package/base-4.12.0.0/docs/Data-...

There are some older techniques here http://okmij.org/ftp/Haskell/typeEQ.html
Good. Touch screen controls are a good tool for communicating visual information while having some way to still give users some controls. Tactile controls are good tools for when the operator needs to visually focus on something else and feedback can be sensed in other ways. For cars, the only visual information it should show to the driver are either things that are controlled outside of a touch screen (speedometer, tach) or can't be controlled while the vehicle is in operation anyway (oil temp gauge, etc). Everything else can be intuitively sensed by the driver's other senses and the important part of the control is the feedback saying that you are in fact manipulating the controls properly.
Human habitation might well be natural, but fences aren't.
>I don’t want to end up on Hacker News again bitching about Catalina.
Covid-19 Flat-Packed Intubation Protection Boxes – Covidbox.org
Me in my bit older Mercedes, my gears, lights, whipers all go automatic, im left with radio control and temperature. Audios is easy, it on the steering wheel, so is answering the phone. Two knobs for warm/cold and airco. No need for touchscreen.
https://github.com/theia-ide/theia-apps#theia-desktop
Cruise efficiency increased from 0.7 km/kWh to 2.9 km/kWh (13 nmi/gal AuGas to equivalent 51 nmi/gal AuGas).

Better than ICE car!
Google has messenger and hangouts and another video conferencing solution that I don't recall.

The reason we ditched hangouts for zoom a few years ago was that hangouts only supported up to ten users, including users whose connection had died and so they had to re-enter the room again. This became extremely annoying - having to stop a conference mid-call to ask some people to disconnect so others could enter, or trying to find out how to kick "ghost" users, was definitely not "just works".
I used linux on all my laptops/work machines for about 7 years, then switched to macbook pros 5 years ago. Definitely some things you have to adapt to (I still miss focus-follows-mouse). But for the most part, you'll find it's a smooth ride. When bumps like this happen, they tend to push out a fix quickly - especially when it gets traction on HN like this.
We've been working with an amazing group of Doctors and Volunteers for the past week to prototype and produce a flat-packable plastic box to protect medical workers while intubating COVID-19 patients.

We are starting to mass-produce these boxes and would like to get them out to as many Hospitals as possible.

Thanks to Darrell and TechCrunch for covering the effort so quickly!

covidbox.org
I feel like they are doing random deprecations with replacements that don't work as well as the original. As in, leaving the deprecated thing unmaintained but present in the install would be a better outcome. I wonder why they are wasting so much time doing this when they appear to have a working system. I'm not even talking about big items like 32-bit support or opengl but completely random libraries that work fine.
See also Google's 2011 interactive doodle inspired by The Cyberiad,[1] in particular by the machine that could create anything starting with n.[2]

[1] https://www.google.com/doodles/60th-anniversary-of-stanislaw...

[2] https://english.lem.pl/works/novels/the-cyberiad/146-how-the...
It does not "just work" for me. First, it required a separate client, when even Skype does not.

Second, it does not support my browser.
Or you know, knobs and buttons which don't require any user on-boarding or discovery process.
They're the best way to stay secured and receive new features.

The issue with them is lack of testing before deploying them.
> Is there nobody there that connects by hostname to a ssh server with a port > 8192?

I use alternative port but < 1023 since binding to those ports requires root. And I've never seen it being used. I'm not saying it's not, just that I did not see it in 10 years.

So it probably really is not that common.
There are pros and cons. It does mean that you should get less ssh bot spam but it also means that you run ssh on a non privileged port - one that a malicious application running as non-root might attempt to exploit.
> You should know that cheerleading Amazon's continued abuse of employees is not a good look.

That's true, but that doesn't appear to be what happened here. It doesn't appear to be abuse.

> This is someone's livelihood you're talking about.

And, if I'm understanding it correctly, that person intentionally effectively brought a deadly weapon to the workplace after being told not to. Their response doesn't seem like abuse, it seems within reason, even if maybe there were other, better options.
Indeed. In fact it's hammered so bad that it made my home machine crawl at times. By changing ports it went from several thousands attempts per hour to a few per day.
For me SSH on a standard port get connection attempts and every few minutes. SSH on a non-standard port get connections attempts every few weeks.
This is a great decision by Honda. Touchscreens are a terrible UX when driving. Its difficult to be accurate with the touchscreen in a car when its moving, even as the passenger. Physical controls are much easier to control, less distracting, and we develop muscle memory for knobs dials and switches easily.

As an example, I personally am not a fan of the extreme minimalism in Tesla cars. A fully touchscreen experience makes sense only after a car is capable of fully autonomous self driving. As long as a human is responsible for controlling/monitoring the car, physical controls are better than touch controls.

To be fair, touch screens are better for changing settings, monitoring the health of the car, and any other action that we do while the car is parked.
And Tyler "end(ed) up on Hacker News again bitching about Catalina"
Can you quote any practicing constitutional lawyers who believe the courts will stop the federal government from restricting cross state movement during the worst pandemic of our lifetime?

Everyone I've read has basically said as long as it's necessary and temporary in a time of emergency it will fly.
As long as my fingertips cannot read touchscreens, touchscreens in cars are all inferior to physical dials and buttons.
There's actually a good reason to not use SSH on a non-privileged port: It allows an unprivileged user to bind their own binary to the port when SSH restarts or otherwise stops listening.
They're not. For a variety of reasons, many deaths are not being reported as caused by Covid-19, but rather other preexisting conditions which may have been complicated by Covid-19. Additionally, as I understand it, some number of deaths require post-mortem testing to confirm that the victim was indeed infected. Given the varied backlog of testing, the morgue backlog (or soon-to-be) and the lack of testing kits, I'd conservatively expect death counts to be lower than actual by anywhere from 10% to 150%. I wouldn't be surprised if a year from now we realize we were off by a factor of 2 or more.
One issue with that is the lack of encryption and/or security between UI and the local server. Also I always forget the port for the local host style apps. If PWA's were easier on desktops that'd help.
Thanks for sharing. I'm not too concerned about engineering happening in China but data storage seems problematic, especially because of the lack of encryption on their side.

The post or the CNBC link don't seem to have the word Tianjin in them (comments do). Can you provide more details or another source?

If that's indeed true I won't be hopping on a Zoom call later this week with my bank for instance.
The post was excellent, I’ve been locked away from Catalina updates now that my work mac is my primary Mac so I like keeping abreast of all the little gotchas I might be hitting. And it’s a great debugging chain for something that is truly weird. Sorry you’ve had bad past experiences here, the quote gave me quite a chuckle
You dont need to go to physics for that, a datasheet on any real transister will tell you that.
My parents retired a year ago. If they'd kept all their money in the stock market until this month they'd be in a lot of trouble, and probably will be for the foreseeable future - how is that not a gamble? "You need to diversify" would be an argument against gambling in the stock market, and getting into something safer.
Why not ? You have a problem with extra options that you don't have to use ?
Whenever there is anti-Amazon or pro-Union discussion, the first comment on HN will always be siding with management. Why is that?

This obviously an illegal retaliatory firing. Amazon is running domestic sweatshops where they don't even provide basic PPE during a global pandemic, and he was the leader trying to get that gear.

Seriously - what goes through the head of somebody who posts a comment siding with management in a situation like this? I literally can't understand why you'd think to post something like this, unless you're an Amazon executive or shareholder and only care about short term face/profit. Otherwise - why the reactionary take?

I just find this level of obedience to authority baffling. It's endemic in the United States, which otherwise prides itself on it's "maverick" status - except when it comes to shocking levels of obedience and servitude to the police and to market forces.

EDIT: I looked up this user and he is an Amazon employee, which explains this bizarre take. Given Amazon's policy of paying employees to say nice things about the company online, even when they work in unrelated departments, I think we should seriously consider warning/banning users who engage in astroturfing for their employers on HackerNews.
I'm not. Not all 'testers' actually try to test edge cases. The /good/ testers do try edge cases, but for every /good/ tester you have, you'll have hired 100+ testers who do little more than check that the standard happy-path works correctly and sign off as "passes tests".

The good testers all tend to fall into what Bruce Schneier calls the 'Security Mindset' way of thinking: https://www.schneier.com/blog/archives/2008/03/the_security_...
I'm confused by their description of the ecliptic..

"
For them, Venus was a single object and they observed its changing position, along with the other planets and the moon. These positions all lie on the same great circle, called the ecliptic, defined by the apparent motion of the sun as seen from the earth during the course of a year.
"

Isnt the ecliptic basically a line (or very very skinny ellipse) from Earths perspective as we are on that great disc ourselves?

Also "For them, Venus was a single object" so for us its not??
I use Chrome SSH to ssh into my WSL2 debian instance on Windows 10. Native terminals don't support mouse events. But port 22 can already be in use by the host system, so I have WSL2 configured to listen on port 222
The coinmarketcap volume is not legit at all. They created the adjusted volume metric but it's still plain wrong. They currently show a 24h volume of $112Bn and a total market cap of $182Bn - that's just ridiculous.
Intellij community is the open source IDE that has by far the most features.
So even if you can pay for the premium version, I would argue that jetbrains is in it's own league.
difficult to operate intuitively is exactly right.
With respect, Amazon publicly claims the employee violated quarantine. The employee publicly claims that Amazon fired them out of retaliation.

From this distance, while we may all have our respective sympathies, both stories are plausible and we don't really know. It is abundantly obvious that companies generally find reasons (legitimate or otherwise) to fire those advocating for a union, but it isn't exactly unheard of for an employee knowing they are facing termination or disciplinary action for legitimate reasons to cover that over with some socially-acceptable reason like various claims of discrimination or starting a union like this, etc. It's not a secret hack nobody's ever heard of.

Edit: See boiled cabbage's comment: https://news.ycombinator.com/item?id=22739059 More data can bring more clarity.
It's the future they chose.

You can't both clamp down on freedom, and then complain when people pick other alternatives.
I'm young and I love tech, but I'd rather feel for the volume control knob while I'm watching the road than stare at a touch screen and try to position my finger to hit an icon in a moving car. Those interfaces were just a terrible idea.

In my brother's old Prius it would randomly switch to a diagram showing how cool its power train system was/energy transfer etc. Just what I need while I'm driving - a useless distraction which I have to close before I get access to the controls I need!

(I don't remember exactly how it worked though because I haven't driven it in a while.)
If the strike is not effective then there is no point to reinvestment into the worker demand.
Security through obscurity shouldn’t be used as an edict that something is not effective. You are talking about the fact that it doesn’t increase the security of the protocol itself or the passphrases/keys used. This is true. However, there are tons of bots out there that scan 22 and try to exploit common logins. There are presumably quite a few less that are port scanning every machine for every possible high port and attempting to handshake ssh and then try logins. Do you disagree with that? If not, this is not security through obscurity, it has a very real impact on the volume of bots that have knowledge that this service is running and are actively exploiting it. It’s just a different type of security, it’s discoverability of the service.

Here’s another example. Say you have a web server running that is only for internal employee use. But you want to expose it externally so that they can reach it without a VPN. Even if you follow proper security protocols, why would you not turn off search engine indexing on this page, and limit the pages that link to it? It will not increase the inherent security of the protocol or the user accounts, but it will drastically lower the # of bots using up CPU and iptables entries trying to fail2ban or blacklist them.

Security is a spectrum and you want to have defense in depth. Moving ssh to a nonstandard port is a security best practice and you shouldn’t be advising people not to use it. But should they also have good key setting, fail2ban, ip whitelisting/blacklisting, etc? Of course they should.
Yes this sucks. Do you remember the Amazon store integration in Ubuntu?
This is very far away from a cure. The team does not even appear to have done animal efficacy studies, never mind the usual animal tox studies:

> We are sending [the antibodies] to the military for confirmation testing and to Charles River Laboratories for safety and tox characterization.

The article does a very poor job of conveying just how far away this is from a cure. More likely than not, it will fall out either due to tox or low efficacy before it even gets to Phase 1.
I think you can be contagious 18 days after exposure, isn't the incubation period around 2 weeks? And we know there are asymptomatic cases so a lack of symptoms after that period doesn't mean he isn't contagious. However if he was indeed the only employee asked to quarantine that is highly suspicious.
The way my brains works, it’s hard for me to even read road signs when I’m driving (excepting simple ones like speed limits and one-word signs). Switching contexts is just really slow. If I try to use voice recognition I basically go blind for three seconds.
I recall Mazda doing this a while back. [1]

[1] - https://news.ycombinator.com/item?id=20200335
Touch screens are cheap and very easy to develop for. They also de-couple the software development from the device development.

It also allows updates and changes after the car is in production.
What physical controls are an ABSOLUTE MUST for you?

Leaving aside Legally mandated: Wipers, Headlights, Gear Selector, Brake, Accelerator, Horn, Hazards.

Me: Required: Mute Music, HVAC temperature and fan speed. Strongly preferred: All audio controls, Cruise control.
These here are the important details about this and it looks pretty egregious on Amazon's behalf. Imagine the sort of leverage they could wield over their employees if they are able to get away with this kind of behavior?
I completely disabled everything to do with sleep. “Solved” the problem for me.
Wasted human resources and talents. Progress would be more prevalent if HRs were better allocated.
But they are indeed free to work on whatever they like even if I will not benefit from their work, sadly.
I always do this.

I'm not sure what's the current state, but there are features on SSH I wasn't able to use due to the version provided being old.

I know that `Include` on `config` is/was one.

Include "some/path"

This is something I use frequently that wasn't available on previous built in versions.
The only thing important and is the practice in civilized countries is universal health care and payed lives for sickness, child birth etc. The USA is a hell hole and this is why people need to fear loosing their livelihoods or their lives. These should not be the only two options available in any civilized country.
Yeah, I don't see the point of this, either.

If you're looking for an alternative to Visual Studio Code, isn't that what VS Codium is for?
Yeah, I think I'm going to refuse to believe that it's just some coincidence that 360 is a highly-composite number AND a specially chosen number. Especially with how societies have made use of all the others below it throughout history (12, 24, 60, etc). Extraordinary claims require extraordinary evidence, and all.