skysight-inc/HackerNews huggingface dataset:
> Without compromising your security - I'd love to know how others approach their personal IT security challenges?

Most of my security is based on OpenPGP keys stored on a Yubikey. In case the first one is broken/lost I've got another one. If both are lost there is a master copy on an offline computer that can be used to provision more Yubikeys.

The key unlocks access to passwords stored in pass. Because pass is based on git and gpg can be used to access SSH then the same yubikey is used to pull/push changes to pass and read encrypted passwords. On both the laptop and the phone (Password Store).

Data on the computer is LUKS-encrypted, unlocked by the Yubikey. Full backup of my laptop's SSD is done via btrfs send/receive to a raid1 array of 3 disks (raid1c3) on a regular intervals. A small subset if very important data (documents) is also backed up via restic to S3 and Backblaze.

I try to "backup" as much of my work as possible by releasing it as open-source (where it's preserved by the Github etc.) or publishing it on a web-site (where it's preserved by archive.org).

> In a similar vein: what happens to my data after I die? How would my (non-technical) family be able to access my pictures and writings? A digital inheritance would be prevented in my security set if I don't prepare.

I've been thinking about this lately and maybe it's not a popular opinion but... would people really need your data when you die? I get access to photos (my SO has the PIN code) but everything else? Maybe this is just digital junk? Who would enjoy browsing terabytes of my data looking for... what exactly?
> The core stage is structurally similar to the Space Shuttle external tank,[24][25] and initial flights will use modified RS-25D engines left over from the Space Shuttle program.[26] Later flights will switch to a cheaper version of the engine not intended for reuse.[27]

https://en.wikipedia.org/wiki/Space_Launch_System

So they reused as much of the space shuttle as possible, down to using left over engines. Developing a new engine from scratch using a new fuel (methane) like SpaceX did would have been a very risky proposition. Like NASA, Blue Origin and ULA both did much more conventional things and have launch costs multiple times those of SpaceX. The relative cost of NASA's more conservative design decisions is more a testament to Space X's remarkable success with the Raptor engine than NASA being somehow incompetent.
This is just so bad for privacy. The people in India don’t care about privacy much, but this will put an end to the attempts of those who did, including me. The worst part is, not many are going to criticise it anyway and it’s gonna happen.
This is why you treat the office wifi connection as any other connection, don't create a 'turtle shell' (hard outside, soft inside) infra and control the DNS configuration of your employee's laptops.
But that's now impossible to know. Any bailed out company by definition had no immediate future. Yet here we are.
For the unfamiliar, OP makes awesome Rails tutorial videos and is really knowledgeable on the subject.
This whole argument is silly. War is dead. China will not conquer your land but they will buy your corporates and leaders souls. Why did the brush fires happen?
I'm now more viscerally aware of the fragility, the vulnerability, of our complex structures, our leaders, our lives. Of the rigidity and inertia that keeps us from responding appropriately, in advance, to threats until they become too real.

This chance has and will cost us a lot. Rather than running from what we've felt and seen, I hope we'll take this chance to reflect and then to make some big, obvious, essential changes. That would be easier than the alternative.
There is talk of implementing per-service bans. They already exist for adsense and google pay. You can today be banned from adsense but allowed to use all other google services.

Customers seem, if anything, more angry about that though...
> Maybe write down my master password and put it in a safe?

Isn't this just moving the goalpost because what if you forget safe combination?
In my opinion it is all down to muscle memory. When you don't even need to think about whether this class will behave one way or another, you just know that if you type it this way it will work without a doubt.
Show HN: Delightful interactive CLI to quickly run NPM scripts
Please be more concerned about China. Why did so extreme brush fires happen? It wasn’t US stealing your water was it?
I don't think 30 to 50 people currently die due to stings from Asian Giant Hornets in Japan. At least not according to these statistics http://www2u.biglobe.ne.jp/~vespa/vespa0562.htm

Wasps and Hornets are just as deadly in the USA https://www.cdc.gov/mmwr/volumes/68/wr/mm6829a5.htm
I don't see how it aligns with their ethical standpoint.
Firmware is just a blob you load into the device. The alternative is to have it already burned into ROM.

What exactly do you achieve by refusing to load it? Are you more free in one case and not the other?
In SF, maybe. In most places, hardly. And keep in mind that entry level SWEs usually don't have kids that are at the age of heading off to Harvard, so they'd earn that income for a decade or two. That would probably put them somewhere in the range of the average income with their dividends alone.
Really neat tool.

So the way Ply works is it deletes each CSS property and looks for visual regression; but what if the deletion of a CSS property introduces visual differences only under certain screen sizes due to the use of media query?
Why? I wrote it, I know exactly what it means. Maybe you should take a closer look? If everyone who uses OOP moves the complexity in the same way because they're adhering to OOP, then it is a distinction without a difference because the complexity is moved regardless. It's a nuanced concept so don't beat yourself up if you don't understand.
> The beauty of this fiction that journalists are not making a judgment call in choosing who to quote, on what topic,

What are you talking about? Careful language regarding certainty of a statement has got nothing to do with choice of interviewee or subject matter.

Of course journalists make judgement calls about what subjects to cover and of course this shapes news coverage.

You present this as some super-secret conspiracy, ‘broken wide open’ by the Internet. Did you really not know before then? Did you not read differing newspapers and spot that the choice of story and spin differed.

Historically , what is pejoratively described as the ‘Main Stream Media’ has hosted journalists who care deeply about quality of reporting and getting the story straight, fact-checking and making sure that quotes are obtained from opposing points of view.

It’s the internet and rolling news which has put a strain on the consensus.
There is no "Google Takein"...

If you backup regularly, you should also restore to test it works properly, and the reality is there is no decent way to restore a google takeout archive to another google account, or any competing service. The closest you'll find is a hodgepodge of scripts to incompletely restore some data...
Thank you! I will fix that!
> Is this really news worthy? A $50bln loss for Berkshire Hathaway is a joke after decades of relentless compounding growth.

It's quite obvious you're just headline reading here & don't understand why its newsworthy. With the loss, He goes into extensive detail about these losses in his shareholders letters.
Yeah, a lot slower and more expensive as well. It adds up quick. I think pretty much every social media & dating site stores images publicly.
> It's like computing got utterly corrupted post-2008 and there's yet to be a fix.

The ironic thing is that OP's posted article were news from 2009. Now, a decade later, we almost expect another total Intel CPU failure every year due to all the problems the architecture had while still promising sandboxed security.

But, as with all self-claimed "secure systems". If there's no audit, it cannot be seen as unsecure. Security through obscurity is pretty much the definition of how the hardware sector protects their IP these days.

And, of course, RISC V will be the solution. But honestly, I stopped believing in it years ago. As long as there's no computer system available in the same price range as the market leaders (aka Intel and AMD), you can forget about it.
I wonder if they have to take turns on my PC. Maybe they kick each other off for a laugh.
As long as the password you used isn't in popular password dumps, you'll still be able to log in fine.

Check your password here: https://haveibeenpwned.com/Passwords

For very old accounts, they'll normally force you to add a phone number or recovery email address though.
Understanding the investments, having at least a rough idea of their future potential, is one of Buffett’s things.

That’s why it should be no surprise he’s pulled out of this sector.
Refusal to treat AIDS and HIV positive patients (1987)
If an account is deleted can an account with the sane name be created afterwards ? Because in some ways that would be worse.
Now that he’s shown his hand, will everyone else that own airline stocks head for the exits? And effectively cause a “bank run” on the equities.

This coming Monday might be an interesting day in history.
Airbnb Gift Card Coupon Code Generator
Another way to cut costs (at least in the US) would be to decrease the portion size. Honestly, food in the US is too big, sometimes comically so. I think I would be willing to pay the same price for less food; it would help out the restaurants and help my waistline as well.
>The quicker they spread it and create herd immunity, the less time we have to wait.

If we are going to allow most people to become infected anyway, such that we encourage people to go to large gatherings without even wearing masks, then surely there is no reason to have any quarantine at all, so we wouldn't be waiting to lift it. But you seem to think we would still be waiting, just for a shorter amount of time, so you are clearly very confused about this whole situation.

>I'm certainly not advocating, merely analyzing.

So am I.
There's little sample code because some parts of the problem are disproportionately harder than others.

For example, in saas, if you have a serious product then you'll soon find that some of your tenants want to use SSO. So you need not only the stuff you mentioned already but also admin screens for setting up e.g saml for individual tenants. Add that to your points and you don't need sample code, you need a whole product (we use keycloak, there are plenty of other options).

As to billing, that's a whole gigantic separate area and again something where you don't want sample code, you want a complete product (I have heard jbilling talked of favorably).

In short, the problem space is too big to be addressed with some sample code.
Not a bad use.
That is definitely true in Germany. You can buy a sim at Aldi without ID, but you still need to activate it before using it. For that you need an ID.
No, they aren't. That's why those two were called out. Not sure how IHME's mistakes come in to play here. If they are making mistakes, they should be called out as well.
Reading this and then getting mad at web developers is such a funny reaction.
Multitenancy with Rails - 2nd edition

If you are doing Rails by any chance this is just what you need. https://leanpub.com/multi-tenancy-rails-2
You’re right! I would never have guessed that. Learn something new every day.
Podcasts for Entrepreneurs – Episode Directory
The Wiki instructions are outdated and WireGuard has since (March 2020) come to buster-backports.
Yes, because they still have a voice left.
This sounds like my dream setup. Have you written about it somewhere in more detail or could you recommend some resources that you've used for implementing the solution?
Check out the DeskMini A300. The AMD integrated graphics are vastly superior to Intel.
It's useful to compare the desktop and mobile versions. On desktop it's nice. On mobile it's unreadable for many people - so much so that I think it'd be breaking some disability accessibility laws.
Does most of what you listed matter? Yeah - I know, it matters to make money(!). But it all looks really similar to me. If, instead, a new language taught you more about recursion or typing or a different way to view program structure, isn't that more valuable than learning the latest JS framework? or Azure? What does Azure really offer from a learning perspective? You know, I use TypeScript a lot, but it has taught me absolutely nothing fundamental, and has not made really made me better at anything other than Typescript. Playing around with something like Haskell made me think about some pretty fundamental structural and domain modelling questions, which I feel, although perhaps cannot prove, has been much more valuable.
The Internet has exposed them.

Memory corruption in C is a well known problem since the Morris Worm, 40 years ago.

What has changed is the acknowledgement that the myth that good C developers never write memory corruption code, it nothing more than that, a myth.

Companies like Oracle, Apple, Google and Microsoft are now pursing other means to fix C, including hardware memory tagging on the hardware platforms that they ship.
Blood-clotting complication is killing coronavirus patients, doctors say
1) Long UUID are generally considered safe if you don’t allow parties to list the contents of the bucket
2) You can encrypt the asset and include the key with the asset URL (mentioned in the article)
3) Use pre-signed URL (infra load, but smaller than you serving it)
4) Implement your logic in Lambda@Edge (AWS) and link it with CloudFront distribution. You can deny or allow access based on that (Auth, Tokens, etc.)

4) I would say is the best and the safest solution at really low cost. Followed by 1) at price/value ratio.
we aren't going to 'get moving again' nowhere near the levels we were before
How did you explicitly make it into an object literal?

({}) + []
-> "[object Object]"

will correctly make it "[object Object]"

Did you try to do this?

{a: 1} + []
-> 0

That's interpreted as the statement 1 labeled a, not as an object. This makes it obvious it's not an object:

{a: 1, b: 2} + []
-> Uncaught SyntaxError: Unexpected token ':'

JavaScript supports labels so you can continue/break multiple levels at once:

{
a: while (true)
while (true)
break a;
}
Serious question: how? I had been a google avoider for years already when I upgraded to a smartphone, and a mandatory part of the setup was creating an @gmail for it, that I couldn't steer around or find an alternative to. I only use that account to "forward stuff to my phone" but I did still need to create it, afaik.
Thank you very much, that was my goal to make it gradual so that anyone with just a bit of understanding could get through and have an overview of the topic.

I've read a lot on this topic and couldn't find a page that explained things properly so I created one.

I hope if I've made typos, technical mistakes, or that my writing isn't clear enough in some places that the online community can help with fixes so that this can become a better resource.
Why should they be, from Google’s perspective (which obviously skews towards “our algorithm is perfect”)? If you’ve done something banworthy on one of their properties you’re obviously not worth keeping around anyway as you’re likely to violate policies elsewhere.
Make sure you don't implement cuckoo hashing!
This reminds me of a recent NPR story-telling guest from a PhD student at UCLA who hacked one of the major dating apps (match or eharmony?) matching algorithm and he was going into detail of his exploits; he used the Lab to run tons of simulations of desirable answers to the profile questions to garner the attention of women in his surrounding area and on the site internationally.

In the process revealing how erroneously so many put stock in matching via a system with a very clearly vulnerable system (compatibility rating algorithm) and went out of his way to optimize the system further with less than desirable results: he was the most desired Male profile and was going out on several dates a day and rejecting women he'd have coffee dates with in more and more absurd ways as he got more and more requests.

It was really funny, albeit cautionary, and I only caught like 65% of it, so if anyone finds it can you post it here?

Jack Dorsey's recent interview on the AI podcast hinted at how perilous this could be, too. The 'why' part of Machine learning/data Science/AI has to be just as tightly examined as the optimization development when deployed into Society.
I think this depends a lot on the developer.

Some Devs I work with want to dabble with many tools and solve problems by picking (or creating) a new tool rather than learning how to solve problem with existing tool. They learn, and are talking about (and trying to get team to adopt) other languages all the time.

Personally, I want to totally master a small number of tools. (perhaps just my inability to master many). So, it's not that I find it hard to learn new lang. It's I'm unwilling to waste effort on it unless there is advantage. And to overcome the mastery I have attained after 25 years of Python that advantage has to be large. [btw Past langs include VisualBasic, Pascal, PHP, C, C++, and PERL. But only PERL did I use long enough for mastery]

Neither is obviously better/correct. Like I said, it depends on how the developer best works.
How to Earn Money/Monetize a Website/Blog
The first solution for MAU has the wrong sign for the percentage change column:

Previous MAU 1000 Current MAU 2000 Percent Change -100
Too many people here live in a bubble if they find common sense nonsensical.

Gimmicky apps might be sufficient to pitch VCs but actual effectiveness against an epidemic is obviously different and requires government leadership.
In Azure at least it's possible to set the blobs to private, then generate time limited tokens which can be appended to the URL which will grant access.
> t. C++ developer with a mixed std::string/QString/BSTR codebase.

This has absolutely nothing to do with generics.

None of std::string or QString are generics. They are just an example of historical alternative implementations for 'reasons' ( portability/speed) that create a lesson the long term
Ukraine isn't, Britain is, Germany is, Austria is, Poland is, Czech is. Montenegro was about to ascend into it.
One saving grace of inequality, which I think doesn't get enough love, is that fractional trillionaires are spending lots of money right now to get humanity into space. The governments can't do it. Apollo was an off-by-one success, followed by decades of failure. Boeing used to do this contracting work, now they can't build jets, can't build tankers, can't build rockets, and can't build crewed orbital vehicles. Blue Origin and SpaceX are kicking the * of the US governmental space development effort, while taking the cash the US spends on access to space. Without those fractional trillionaires, we'd be stuck with leaky Boeing rockets sending crews to their deaths.
I think it's amusing that you mention this, because 'time traveling' appears to be a huge sticking point among fans, with some coming out vigorously against it, almost violently, and 100% in earnest. I've seen people say things like "If you time travel in AC, please unfollow me now." and going as far as writing articles about how time traveling makes you a bad person.

I think it's absolutely fascinating. I'm not by any means a person with credentials to be doing psychoanalysis, but what it seems like is some people are hurt by the fact that other people are able to accomplish more and benefit from it while they are playing 'fair and square' for almost no practical benefit. It seems like a mix of jealousy and harm to their own feeling of accomplishment.

Which relates to this comment for this reason: I'd argue nothing in this game is really fun on its own. It's a busy work simulator. The only real reward is the end result of having done the work. So I think people derive fun from this game in ways that are unusual for video games. Cheating here feels more like "cheating" in real life, to some.

And if you watch different people play this game, you will see that kind of thing play out. Different people get entirely different things out of Animal Crossing games.

I'd argue folks who are ending friendships and getting genuinely angry over time traveling have an unhealthy attachment, but it feels like unhealthy attachment over fiction and leisure has been on the rise over the past ...decade? or so, and so maybe that's not anything in particular to do with Animal Crossing (though, maybe it is partially to do with quarantine, right now.)
For a bank safe, you might access the vault with your id and a key. But I see what you mean. It's not perfect.

If the Youtube videos I've seen are to be believed then many domestic safes can be broken rather quickly with the right tools,
Same here. Same pattern as experienced by others in this thread. I've gone on and off for about 3/4 weeks. Ended up with anosmia for a good 5 days. My gf still hasn't fully recovered after a month, still has problems smelling light flavours.

We both started almost immediately to take vitamin D, but no idea how much that helped.
And I'm saying it's all fooey. A real 'oracle' in a free market would have pulled out in January. The government is not going to let the airlines fail. To be clear, I'm not insulting or saying I know better than Buffet, just that the Fed throws a wrench in all logic.
Indeed and I think that people here are unfortunately not interested in reasonable assessments...
using an ORM it's very simple. once you setup the relationships between models, you always use the highest level model as the entry point of your query and the ORM will scope the query for you. ie in Rails, if your highest level model is Account you just always use @account.customer.find(18). the Rails ORM will automatically scope the query to the current account.

using multiple schemas becomes a nightmare when you want to perform a migration to alter the database schema. you have to somehow perform a migration across every single schema without breaking anything. god forbid you need to rollback. have everything in one database makes it really easy. as please, don't talk how using a single database restricts scaling later on. with how far databases have come and how cheap cloud computing is, scaling isn't an issue anymore.
In what sense the market performs better than expert predictions? Isn't it like saying that the weather performs better than the forecasts?
Trolling? By removing what shouldn’t be standing? We have right for that since it’s our country.
It’s the Russians that get angry when we remove something that’s on our land.
Skewing history in their favor and threatening us is okay?
This is particularly prevalent where you have software teams working in a non software business. That’s an environment where you get execs pushing for ‘unity’, whatever that is, and every team must use jira (or Monday/notion etc).

Even worse, often they’ll expect you to use jira without the software specific features.

When my org tried this, it was a good test of my influence outside the dev team.
Hats off to these students. Great job under time pressures and in realities of an environment in which one can't just spend your way to a solution. If only more people spent time building useful things like this instead of yet another cat monitor, new ways to waste more money without leaving the house, and other non-life-enhancing trivia. The collective skills out there are almost unlimited.....especially the incredible people who post and comment on HN.

Please everyone reconsider the uses to which you put your amazing abilities. Code could change the world if we built more useful things, less blogs, less shopping carts.

Closing point.... Once a project is dealing with hardware it's 20x harder. But the outcome is better. In code as in life, when faced with easy choice or hard, always take the hard one. It's how we grow as people and extend our skills.