skysight-inc/HackerNews huggingface dataset:
At the video conference, the eurobond motion came up against the eurozone’s “frugal four” – Germany, the Netherlands, Austria and Finland – who argued that the issuance of a common debt instrument would punish the countries that had saved for such a rainy day, and encourage further fiscal mismanagement by those who did not.

Politically this seems impossible to fix. Even though those countries gain by the weakness of the Euro they will never agree to the transfers necessary to fix it. It's unpalatable to their electorates.
Unrelated, but this line stood out, and now I have a question:

> Honda’s decision to return to physical controls will be popular with some - including, no doubt, its ageing owner base in the UK

Ageing? Is there some stat showing Honda owners are older than owners of other models? Or that young people aren't buying Hondas?
TRUE.

As I know, JP & Singapore are not 100% masked. Maybe around 80% or something but that still helps!

now I'm worrying people to say Singapore & Hong Kong rate increasing and without understanding WHY. Then give another conclusion: Useless
(The TRUE is most of the new identified cases are Foreigners)
Ideally, that's how SELinux would work as well. The application developer can be the one writing the SELinux config... it's just that in practice, few of them do, so it's up to the community to do instead.

The rub being that SELinux is mandatory, so if you don't provide some kind of profile, it simply won't run.
It massively reduces the number of script kiddie attacks. It's not hard to find SSH on a non-standard port but most SKs don't know or don't bother.

Other possible reason is NAT. If you've got several machines or VMs but only one public IP you can port forward different public ports to port 22 on different machines. Not the only solution by a long way but a relatively straightforward one.
Review: Kill Chain-The Cyber War on America's Elections
Product page: https://theia-ide.org/

Release blog post: https://dev.to/svenefftinge/theia-1-0-finally-a-good-browser...

They claim it's a framework for building domain-specific IDEs that uses the same extension framework and language server protocols developed by the VS team.

However VS Code already offers a desktop installer and runs in the cloud like VSOnline and CodeSandbox. And I'm not sure why a "neutral" extension marketplace matters because you can always download and install the extensions separately.
OoO and the fact that CPUs really are free to do whatever transformations they deem fit, as long as the end result within limits of memory model is same.
Surveyors seems to use Gradian/gon often.

There is still another circle measurement, the mil which is 6400 for one turn.
But I just learned by reading the wikipedia page, that there is not only the 6400 NATO mils I knew, but also 6000 Warsaw Pact mils or 6300 Swedish "streck"
Apple includes a customized version of OpenSSH. From what I recall from the last time I looked at it, the changes were mostly integrating the key retrieval mechanisms with the rest of macOS. For example, Apple's ssh-add can store key passphrase in Keychain with the -K option, and then later access those passphrase with the -A flag.
Sure, but you can also run non-trivial code in the web browser.

I wasn't being super-precise with my comment, and my point is that there is no one thing that "is the computer". There are many computers in your computer, and many definitions of what a computer is.

I've never had to go below the HAL, or inside the JIT, but to some people that's where "the" computer really is. If that's where the computer really is, then I'm not a computer programmer (HINT: I'm not, but I do write code sometimes and get paid for it).

So if I write code, but it doesn't tell the computer what to do, what am I even doing?

Well, I write code that gets consumed by pre-processors and lexers and parsers and compilers and linkers and build agents and I don't know how the soup works, and you probably don't either, you may know more or less of the of the alpha-bits in the soup, but it's still soup. The soup is turned into jello and fed to a virtual machine, which is a fake computer, but it works well enough.

---

If I were to be more precise, I would say that there's a von Neumann machine C0 that is represented by some hardware abstraction layer C1 by a operating system kernel. There may be a virtual machine C2 running in the C1 context.

But, inside that C0 von Neumann machine there are a bunch of microprocessors that may be called computers that may have Turing complete instruction sets.

---

Or you could say, anything that can be Turing complete is a computer, in which case your web browser is a computer (among many others).
Feel free to peruse the Twitter feed that I linked; if most bugs are due to memory corruption, then literally rewriting in place may still be a net negative in terms of total bug count! This is the main argument of Zig [0]; they offer technologies to incrementally rewrite C projects in Zig without losing compatibility. Their compiler can compile C code [1] just like GCC or Clang can.

[0] https://ziglang.org/

[1] https://andrewkelley.me/post/zig-cc-powerful-drop-in-replace...
Thank god they fired them.
Hi HN! I'm Gabe, the creator of Songcraft.

I shared early versions of Songcraft on HN, and I'm so grateful to the community for the feedback. I've incorporated a ton of these ideas and others. Songcraft is now fully collaborative as well :)

I'd love to hear your thoughts and answer any questions you may have. Please drop a line here or via Intercom on the site, or shoot me an email @ gabe@songcraft.io!
This may be a bad interpretation but-

If a company functioning is a matter of national security, it should be significantly more controlled by the nation.
IntelliJ is not entirely free, and VS Community Edition is not "equivalent" to the Professional Edition.
Right - if you have used signal - I have - zoom is obviously not that. The pain to do call mixing, call recording, join a call late and do playback, join a call at all - does E2E even work in telehealth? I do virtual visits in the US and it doesn't look at all E2E to me.
I'm pretty sure it's generally not advisable to use ports this high since they are used for other purposes.
> I changed the server to listen on standard port 22 and tried connecting via the hostname once again. Holy crap, it worked.

Shocking!

Granted high ports shouldn't be broken, but running SSH on a non-standard port is security (read obscurity) theater at best.

There's really not much benefit, unless you need multiple sshds on the same IP, but at that point I'd question the sanity of the approach.
Security-through-obscurity isn't a bad thing. It's just bad to overestimate what it can do, or for it to be your only security.

I have my publicly-accessible SSH port on not-22, just to avoid the log messages from scanners. I'm well aware it does not, on its own, actually "secure" anything, but it brings more convenience to me for it to be a bit obscure, and it certainly isn't hurting anything.
Yup, grew up in rural-ish burb, lived in VT, spent many, many, many miles on my road bike, both workouts, point-point rides, and racing.

But traffic has changed so much that I haven't been on it in years, so my Mtn bike & trail running shoes get all the action
Here is the key point Amazon claims he was exposed to the worker on March 11th. Over the weekened he said he is organizing a strike, so over the weekend they order him and only him into quarantine. A full 18 days after his 5 min exposure. From my reading of it, this almost certainly looks like retaliatory action due to the strike, and a company using the excuse of quarantine to cover it up.

Key excerpts from a much clearer article. And yet again, why you never 100% believe a company's PR response when they're trying to cover themselves. They tell just enough truth, but use it to intentionally mislead.

https://www.theguardian.com/us-news/2020/mar/31/amazon-strik...

> According to the company’s previous statements, the infected co-worker in question last reported for work on 11 March. Had Smalls been exposed that day, a 14-day mandatory quarantine would have made him eligible to return as soon as 25 March.

> Smalls said Amazon did not send him home until 28 March, three weeks after the exposure.

> “No one else was put on quarantine,” he said, even as the infected person worked alongside “associates for 10-plus hours a week”.

> “You put me on quarantine for coming into contact with somebody, but I was around [that person] for less than five minutes,” he told Vice.

> According to Amazon, no one else was fired. Smalls said he was considering legal action, calling it “a no-brainer”.
That concerned pictures taken by the monkey. This is pictures taken by a photographer, with his own camera, by his own will. Nothing remotely disputable.
Not a C expert, just reading what I can find online:

This page says value is indeterminate, which is either unspecified or a trap, as you say: https://wiki.sei.cmu.edu/confluence/display/c/EXP33-C.+Do+no...

But.

This part says that reading an indeterminate value is, in fact, undefined behavior (line 11 in the table): https://wiki.sei.cmu.edu/confluence/display/c/CC.+Undefined+...
> stage.getIcons().add()

Doesn't work and never did on MacOS.

EDIT: bug (closed as won't fix!!): https://bugs.openjdk.java.net/browse/JDK-8095033

> opening some URL in the system browser

HostServices also does not work in all but Oracle's distribution of JDK 8, which is abandoned now: https://github.com/javafxports/openjdk-jfx/issues/540
Good ol throwaway. Make your case on a normal account.
Valid reason:

Testing something that uses ssh, but the test host already has a sshd running on port 22, and one does not want to disrupt that setup for the test. Or running tests as a local, non admin, user and one does not want to bother the admin with modifying the system sshd setup for those tests.

Other reasons:

Those doing it /instead/ of running on port 22 are usually doing it for one of at least two reasons:

1) a false sense of security. If you do an internet search, you'll find plenty of blog posts boasting that using an alternate port is a security feature (it is not, it is security via obscurity); or

2) to reduce the log growth from all the script kiddie scans that target port 22 (note, no security is added here, but one's log files don't grow quite as rapidly either).
I am still able to access it. So I don't think it's doing so bad.
> I'd like to see Bezos risk his life commuting to work on unsafe public transit, working in some of Amazon's warehouses where he'd be exposed to other workers who might be sick, handling hundreds of potentially infected packages, and doing deliveries... all this with crappy if any health insurance and virtually no safety net.

Amazon operates within an existing system, defined by government regulation, and competes within that system exceedingly well. If you're upset with the outcomes, blame the real culprit: utterly ineffective government policies. Corporations are by definition not altruistic entities. They're not supposed to be, and it's the job of government policy to tame the negative possibilities of their profit-driven pursuits.

Why can't corporations seek profit and altruism at the same time? Because you can model your business as a function that optimizes for profit, which is easily quantifiable. I've never seen any way to optimize for altruism.

Say you wanted to optimize for altruism and profit: how would that work? Is 3x wages really enough if employees still have shitty health insurance? Should Amazon provide its own medical services in warehouses so they don't depend on bad private insurance? How many doctors should they hire? Should they treat non-workplace health issues? What if they find someone has cancer? You get into fuzzy, grey territory very quickly with this line of thinking. Profit is always a number and it's better when it's higher. How do you measure altruistic behavior?

If you're upset with the outcomes, change the system that's incentivizing that behavior. Don't penalize the players for succeeding. This is the role that government is supposed to play.
I have a 2015 Fit (Jazz in the not US), and it has the +/- on the touch screen, but also physical buttons on the steering wheel. I guess the compromise is that the driver doesn't need to use the touch buttons because they have the ones on the wheel, and the passenger can take their eyes off the road.
I think a lot of charisma really boils down to enthusiasm and positivity; hence why sometimes the most charismatic people can also be fairly awkward and sometimes even kind of stupid in a lot of senses. I think it boils down to most people wanting to believe their efforts are at least towards something, and a person that can give them the feeling that that's true is going to be well liked.
I think they are trying to shorten the number to “one thousand five hundred billion million”
Yes, but maybe I've mucked around with my ssh too much.
Wind and solar is less than 1% of the worlds energy consumption AND they are unreliable.

They will never be the solution to our energy needs.
Amazon was unable to appropriately document a man who was dead in a warehouse enough to get them medical help for a significant length of time.
Linux is the only option IMO, but I have a very high yakshaving tolerance. That said, if you run a recent Ubuntu, most stuff "just works" as long as you don't need Photoshop or the Office suite.
lg(1000 * 1000 * 1000) - lg(1000) = 6
> People care.

They really don't. If people cared, Nike wouldn't use child slave labor.
I agree with this, it's basically just a more sophisticated version of gambling.
It's generally legal to fire employees for "free speech" activities done outside the workplace.

More morally hazardous of course, but I don't think anyone would really even challenge the cause here (it's trivially easy to argue that this behavior shows they would endanger workers within the workplace as well).
Significantly less log spam.
They literally call it "an end to end encrypted connection" and "secure with end to end encryption".

How is this "clear" that it is not E2E?
This is a rather massive exaggeration. Amazon isn't the sole distributor of goods, it's certainly not too big to fail.
Ok, how does Steve Keen feel about the USA reverting to pre-1792 colonial currencies?
This is a great example of when "perfect is the enemy of good".

Humans have pretty good spatial reasoning (proprioception); the notion that touch controls should replace tactile well-spaced controls is dependent on the fact that both senses (sight, spatial awareness) are uncontested.

I would argue the point that sight is already in-use and must not be interfered with, if there's an alternative that does not use the same resources.

I think of it like hardware acceleration and parrelelisation; the brain has a hardware accelerator for sight, but only one, and has a bunch of cores ready for other tasks, and those other tasks can happen in parallel.
Do technical communities have a consensus on how to classify these behaviors or scenarios? Then what anchor do we have?
https://www.xkcd.com/1292/
> There are nearly risk-free methods of making investment returns

Do you have suggestions for these?
That's the way I think it _should_ work, but sadly does not.
For instance, see https://godbolt.org/z/ent-xp
Slighty reduces your risk from all the automated spam. Most things that are scanning the entire internet trying to brute force weak passwords and stuff aren't trying 65,000 ports on each host. Any sort of worm/botnet will probably be in the same situation.

The only hosts we have with any SSH exposed to the world at all are a couple of bastion hosts. Day-to-day we access everything else through a VPN, so its only exposed at all as an emergency backup in case the VPN breaks. Really no inconvenience to having it moved to a high port.
This is so true, I wish I could upvote this twice. I've been on the receiving end of this too, where something I wrote in the moment without much thought ended up at the top of HN with a whole lot of criticism.
Citation:
"Unfortunately, Microsoft prohibits non-Visual Studio products from installing any binaries downloaded from their marketplace".
Etc...
Based on your username, have to laugh a bit when you tell us to take what the other guy says with a grain of salt.
Show HN: Coronavirus cases spread across USA
I wouldn’t trip at all. There are great folks on HN, and you can tell from comments who are the sour ones just because. I personally enjoy reading your posts. I worked at Apple for a long time, loved it. I still use their products and want to understand what bugs exist. I use SSH daily for many things.
I haven't in ten or twenty years, no.
Real-Time Room Reverb in Large Scenes Using Transport Path Precomputation
> Honda has done what no other car maker is doing,

Huh? The author is not familiar with Mazda - their latest models of the CX line (possibly others) have full control of the interface with a very functional physical knob / dial along with other tactile controls.

Also, the headline is a bit misleading - they aren't removing touchscreen controls entirely - only removing them from "some" controls as their preface text indicates, which to be clear is solely A/C controls.
Sounds like a recipe for disaster for many
It's the most likely explanation, despite Amazon's obfuscations.
What's the spin of an electron?
I don't have the patience to go fix Wikipedia, but microcode is a patching system (it's what "processor microcode updates" means). Most of the time, that's adjusting chicken bits and other flags. Instructions can be implemented in microcode, but they are really, really slow so it's typically done for security reasons or to emulate some new features that don't require fast performance.

Micro-ops are part of the micro-architecture of the processor, and are in hardware. They are not patchable and are not software.
Show HN: I'm Feeling Lucky browser extension. Skip search. Just go
He didn't put anyone at risk. His last exposure was over 2 weeks ago. Amazon is just using the pandemic as an excuse for strike-breaking.
> to be quarantined without anything arriving to your house is a quick recipe for riots on the streets...

Target, Walmart, grocery stores, etc. all are able to do curbside pickup and in many cases deliveries via stuff like Instacart.

Amazon isn't the only option.
Not all touchscreens are same. There are few touchscreens that are good. Most Honda touchscreens are bad.
Show HN: Adblock list that blocks email pixels and read-receipt trackers
I fail to see the connection.
I can only conclude from the situation you describe, as well as the fact that most cameras (as cameras, not phones) still lack GPS and sometimes Wi-Fi, that a great many industrial designers are trend-following, uncreative bores.

Most modern car interior controls are horrible (Tesla’s giant laggy touchscreen included).
This is hilariously wrong. I brought up Zoom issues at our enterprise client - no one gives a shit (this is in Germany, so rather privacy focused). As a consultant I felt a need to bring the issues up, backed with sources of course.

So why does no one care? Because Zoom UI/UX apparently works 100x better than most other solutions. People dont even REACT when I mentions Jitsi or just using the Teams solution that every Microsoft customer has anyways.

The enterprise I was talking about is using a mix of Microsoft Teams and Zoom. Our team started with Teams, now we are using Zoom because I don't even know. Others also move from Teams to Zoom.

I bring this up to lots of people and the response is rolling eyes and "shut the fuck up" in business euphemisms. Zoom is viral now and privacy has no say in its success.
So, some quick debugging here...

In his screenshot the bad login hangs at "Connecting to clickontyler.com port" (noting that no port number appears and no period at the end).

While I can’t be sure exactly which "ssh" patch Apple may have, this seems to be the relevant file and logging code (starting at line 448):

https://github.com/openssh/openssh-portable/blob/master/sshc...

In that code, the only thing that can set the "strport" value that is used in the log is a call to getnameinfo().

If that string is corrupted in any way, e.g. not terminated or perhaps has invisible characters that trigger bad terminal behavior (such as invisibility), the act of logging it might produce the apparent hang seen here.

Again, a guess but it is possible that getnameinfo() is not necessarily processing the record correctly (for whatever reason). One such example is in the "getnameinfo" man page at the end, under CAVEATS, where they show an example of not simply trusting the result of the first call.
And relatively few people are going to voluntarily stay confined to their small city apartment for weeks. I live in a semi-rural house and I can easily go out my door and walk in the woods for an hour or two. (Or drive somewhere else quiet which I mostly haven't been doing.)

The only real contact I've had with people is having gone to the grocery store a couple of times--and I could probably have used delivery for that (although with the lack of stock, that might have been challenging).
IMHO, this isn't "security through obscurity" but it's a way of weeding out automated attacks and reducing logs filling up with completely avoidable entries. I'd say it has valid "sysadmin" reasons but not "security" ones.

Given 2 boxes with the exact same SSH setup (key auth, fail2ban, or whatever else you use) I'd prefer to admin the one with a non-standard port solely for the fact that it's not undergoing constant attack which uses resources (albeit tiny).
Taking your hand off the steering wheel isn't so bad. It's loss of attention, even for 1 second, that's extremely dangerous. Touch screens make you look away from the road. Knobs and buttons do not. However, jamming them all into the steering wheel may then cause the same problem, as if there's too many things in the same area you'd have to look down to find what you're looking for.
For the most part, the standard strategy still works fine; spend less than you earn, keep an emergency fund, invest in low-fee stock/bond funds like the ones recommended here https://www.bogleheads.org/wiki/Three-fund_portfolio.

As real interest rates go lower, the cost of capital goes down. That would make some capital intensive businesses possible/profitable that wouldn't be otherwise.
They are written in C
Problems in FBI Wiretap Applications Go Beyond Surveillance, Review Finds
Yeah, imagine taking the word of a multi-billion dollar company's PR people with a grain of salt. They don't have agendas unlike throwaway accounts. At least in this case we know what both sides' interests are here!
Thank god I did not upgrade. Software upgrades are the best way to waste time.
And in what sense VSCode isn't a "true" open source app? Just because the installer isnt open sourced?

> Theia relies on Visual Studio Code’s Language Server Protocol to provide language-specific code completion and the other features we expect in a modern code editor.
https://www.infoworld.com/article/3342624/cloud-ide-shoot-ou...

Okay, they reuse parts from VSCode in true open source spirit and make claims like that.

> Theia 1.0 also has a marketplace that is available today and, in the spirit of true open source community, allows for even non-VS Code applications to use these extensions

What does that mean? Looked up and appears that IDE is built with extensions and you can use those APIs to customize IDE. + provides APIs from VSCode to maintain compatibility. Ok thats neat.