skysight-inc/HackerNews huggingface dataset:
The problem with security is that there is never "enough." It's a game of cat and mouse that will consume ever increasing amounts of time, money, and electricity until the end of time. Time, money, and electricity that could be spent on other things. Pretty soon I expect 50% of my electricity to be uselessly devoted to spectre mitigation and other security concerns instead of, you know, computing useful stuff.

Yes, I get we live in a world where bad people take advantage of others, making security necessary.

But if security people had their way, hobbyists wouldn't be allowed to hack together a side project without first hiring a $100k/year security specialist.

> My goal is to make it as hard and annoying as possible for bad guys to do bad things to the systems I'm responsible for.

By making it hard and annoying for the good guys to do their job as well. I know it's all necessary, but you can't deny that. Having to beg and plead with the IT security gatekeepers every time I want to [open a port for a webserver/install some package/etc] is more onerous than me having sudo privileges, especially when IT tickets take 2-3 days to resolve. And that's just one example. Anything security related is usually a pain. HTTPS is much more painful than HTTP, for example.
> In the Apollo program lots of people died for the cause, as they felt that it's worth the risk.

Lots looks to be 4 or 5 depending on how you count.

3 were killed due to a fire in the pure O2 atmosphere during testing of Apollo 1.

1 was killed while working with a high pressure water line on ground support equipment.

1 to be lunar module pilot was killed flying a fighter jet trainer between Cape Kennedy and Houston.

Not to take away from their sacrifices, and not to play down the amount that we've become more cautious, but I think it's an exaggeration to say that lots of people died.

Source: https://en.wikipedia.org/wiki/List_of_spaceflight-related_ac...
It's dissapointing to see how people's stance wrt to this is heavily affected by which political line they follow.
I had a manager who did some of these things, among other worse and it was annoying as hell. Repeating what I said, asking a meaningless question when he wants to cover his ignorance or side track the conversation. Just saying
> You give it some input, and you get an output which is the signature of that input signed by that private key.

My point is, this is technically impossible at the moment with German ID documents because using this function requires a commercial certificate which have not been issued since 2017.
> I never understand why people build things like this out of legos.

Think, Lego chosen because it is really good for prototyping & and widely used for education.

And according such projects like MicroscoPy (or any other Lego-based project) main target is not create "production ready thing", but instead learn how things could be invented using basic building blocks.
What?!? Now I'm canceling that case of Coca Cola I just ordered on Amazon Prime.
Is there an open source S3-compatible component that I could rollout on prem?
so basically the invisible hand will take action and adjust to this more sustainable conditions (and now don't tell me, that a system, where a lot of people are obese and opioid-dependent, is sustainable...)
Nowhere on the website old or new is any info available.

Thanks for pointing out
The Fed can’t keep money printing forever. You’ll see.
Swank. One of the reasons I'm not using Backblaze is because I couldn't find a way to generate a private url which allowed secure upload from the browser. It only allowed (so far as I can tell) a private url that had access to an entire bucket. If they've got an S3 compatibility layer now, this problem is solved. I'm gonna invest some time on this tomorrow.
>>there's enough desperate people EVEN WITH FULL EMPLOYMENT to not raise wages as long as none of the other corporations do.

There is evidence to the contrary, as these companies have infact (or did pre COVID) raise their wages beyond the minimum wage they were doing. Some of it is in response to Retail raise wages (i.e Walmart when to a $11/12 nation wide min wage) in response most fast food also had to raise their wages.
AU ‘in discussion’ with Madagascar over its Covid-19 herbal remedy
Significant reduction in cognitive load for maintaining an application.
If your employer mandates that you take a certain route to work? And that route takes you more time? Then yes, a line is crossed and you should be compensated.
Nothing at all. You just lost the Hacker News lottery.
Are you in Europe perchance? I have a feeling that wiring in the EU is more prone to sparks than in the US, so maybe grounding behaves differently as well, due to some sort of variation in building and wiring codes.
Коробейники (text: Nekrasov 1861, music: Prigozhyj 1898) is not a folk song, because Russian language is not folk language. (Russian language is official language of Great Russian Empire, which was created to replace various folk languages used. Folk language AKA "народная молва" now known as Ukrainian language "украинская мова").

IMHO, descendants of Nekrasov, if any, should contest this copyright claim and collect damages.
That's what I already tried and got:

Error during parsing: getting DNS provider module named 'cloudflare': module not registered: tls.dns.cloudflare

Using latest docker image.
Martin's robot was definitely an inspiration. As far as I know he was the first one to figure out how to make cheap, nonbackdrivable servo motors work for dynamic quadruped movement. Wouldn't have started the project without seeing his videos.
Come on, HN is about weaving a tapestry from tangents to tangents :)
Or maybe GPT2 strikes again!
As a millennial renter, part of me wants to see lower home prices, but that also means other people being underwater. It's a tough generational predicament we've placed ourselves in. We want to encourage homeownership, but millennials aren't buying. We want homeownership to be profitable, because for most middle class families, the home is the largest financial asset. It's impossible to make all of these promises to people. If a 2008 repeat occurs again, it will only further reduce personal home ownership and increase institutional ownership.
So you’re saying that even if your app compiles to a single binary, that’s a requirement?

I understand why, but it’s indeed quite a pain.
No, I was thinking of designing and 3D-printing a magnet holder clip -- didn't realize someone else thought of it too. I guess what they say is true, there is no unique new ideas.

Is what you saw just a couple clip on magnets (like what I was thinking), or is it a two-piece cord held together by magnets (like the previous comment mentioned)? That would be cool if someone already makes this as a product.
Yes but degrees aren't needed, that's the point. I'm talking about the gatekeeping aspect, specifically, in that part. I know that doesn't hold for every degree or cert, for sure.
Thanks for sharing this! Apache Kylin is an awesome project. It has been around for a few years and has been getting a lot of attention in Europe and Asia, but still seems to be relatively unknown by a lot of folks I talk to in the US.

If people are interested in getting involved with the community, or just want to check Kylin out, you can find the page for the project here: http://kylin.apache.org/
Also, many of the lost jobs are in consumption and service industries. I'm not going to get extra haircuts, eat extra meals, or drive extra miles.

So business owners and workers in those industries aren't going to catch up.
> Do "normal people" ever refresh a website?

College football fans on national signing day.
Maybe. More likely a false positive? Hopefully they repeated and followed up with tests from other providers to confirm.
the string '02' is not the same as '2'. I'm not sure I see a problem with the syntax grammar in parsing the string '102'.
So what? 'They're doing it too' doesn't excuse bad behavior, whether in the schoolyard or the multinational business world.
Hi!

We’ve done this exact same thing and have a technical writeup here: https://ohdear.app/blog/how-we-used-caddy-and-laravels-subdo...

Tl:dr: very easy to do, Caddy takes care of 90% of the complexity.
Why would you expect rust or C? D has a garbage collector, a better comparison would be Java or Go
> Why doesn't Dell open a store in every neighborhood that has an Apple store?

How would they manage to keep any competitive pricing if they do that? They have cheap prices because they hire totally cheap support labors doing crappy support.
> The Fed can’t keep money printing forever.

Based on Japan, this does not appear to be the case (Bank of Japan holdings are ~110% of GDP). We can print until we can't, and from economic indicators, we have a ways to go before inflation (hyper or otherwise) is going to be cause for concern (education and healthcare aren't inflating because of currency devaluation, but because of regulatory capture).
There is no painless way out of this mess. The first option is to inflate housing prices away. A $600k starter home would become reasonable and a loaf of bread would be $8-$10. The second option is to let housing crash and burn. The first option is politically more palatable but pretty hard to do against such powerful deflationary headwinds, so my money is on the second when the boomers dump their real estate.

Anyone who bought at these prices is already underwater. The thing to look at is housing as a multiple of median income. If it looks insane, it is insane.
Yev here -> unsure how those are related, but you certainly don't NEED to use Cloudflare if you're using B2 Cloud Storage as the data origination point, it's just an option that was brought up in the thread!
I don't think calling out people for having privilege is a good way to win someone to your side unless the person has had the opportunity to hear other perspectives and has chosen to ignore them. It turns an otherwise productive educational conversation (on both sides) into combat.

I don't blame anyone for having a (relatively) sheltered life, as there's plenty in our life that all of us being on this forum are sheltered from. I consider it a good thing to be sheltered from a lot of traumas growing up. Our children need not feel the same pains we did. But by using a combative tone you're lessening the change for empathy to win out.

Finally, thats not to say that combat (rhetorical, physical) isn't the solution in some cases.
There's a git plugin for v2 here: https://github.com/vrongmeal/caddygit
Looks really cool! One thing I noticed was the generated code seemed to have fairly poor register allocation, looking more like it was just pulling things straight out from locals into registers and immediately storing them back. From the talk, it looks like that was what was being provided to libgccjit, but surely it could optimize that further?
It's mentioned on the "Install" page in the "Documentation" part of the website https://caddyserver.com/docs/install#debian-ubuntu-raspbian :)
Maintainable Infrastructure as Code in Pure Python with Pulumi
cloudflare is not charging different amount for different storage providers, some storage providers are waiving the fee when the upstream is cloudflare.

disclaimer: ex-cloudflare
Everyone whined about the touchbar and keyboard of the more recent models a lot. But personally, I was fine with them. I don't really have a preference between the non-touchbar vs. touchbar models. Same goes for butterfly vs. scissor keyboards. They were all fine for me.

My person MBP is from 2015 and I've had a 2018 and 2017 15" MBP (with touchbar/butterfly switches) for work and they've all been thoroughly acceptable.
happy customer of backblaze. Love how transparent they are with everything (especially the Harddisk statistics) and how the CEO takes time to respond to a lot questions only confirms how down to earth they are.
Cumulus Linux isn’t free software, if anything this might increase the chances of them releasing public version of this.
Enterprise Data Operations and Orchestration at Infoworks – Episode 131
This is also where the world records for 40 line sprint happen. I've probably put 100's of hours into 40 line sprint at this point, it's exhilarating to play zero finesse games, or just get into a groove dropping multiple pieces/second.
The way I like to describe it is that people want home values to go up but home prices to go down, and never seem to realize that this is impossible by definition.
I've been slowly building up the tech I need to create a low friction publishing process (Static site fed by CI/CD type deal).

So yeah definitely planning on blogging more
I mean, we want one too, but it's ridiculously hard: https://news.ycombinator.com/item?id=23072385

Help? :D
There are alternatives though. You tend to get paid a lot if the work is very dangerous, soul-devouring, only very few people can do it, or you're expected to look the other way.

When you pass on working on the new team that uses ML to predict the likelihood of workers knowing their rights based on resume and application cover letter, you may not make the $400k total comp next year, but it's not like you'll be unemployed either. There's plenty of work at pretty normal companies to be done. They won't pay as good, it may not sounds as impressive and you may have to explain at family dinners what your company does, but it's an option.
What will Covid-19 Immunity Certificates really look like?
This part of your your comment hits on the one thing I try to teach younger people, "It's just exploitation, and I work my current job with fear of having to go back to that."

The difference between a job and a career is portability. If you have a career, you can switch employers and they will value your experience. You will make the same or more. If you have a job, when you switch employers you start back at the bottom. Sometimes there is a small premium for experience, but it's nowhere near what you can make at a good employer for longevity.
> The reason I don’t agree is SEO is effective where it has moved into the areas of analytics, PR and content marketing, not in its distinct practices (backlink building and on-page optimizations.)

I would say that backlinks are still a hugely important part of "SEO" (with or without the scare quotes).

Companies run things called "Private Blog Networks" so that properties under their control can backlink to each other and get the PageRank bumped. Discerning PBN's place on the spectrum between Public Relations and just outright "link buying" basically depends on how charitable you're feeling that day.

This is the shtick of every big SEO business: "Of course SEO doesn't work, so we don't do SEO! We optimize your position in search engines through good old-fashioned $UNTAINTED_TASK_NAMES!" The point is that it's activity explicitly targeted at gaming search results, and thus, "Search Engine Optimization".

The only way to make it more difficult for dishonest people to make a buck on this would be for Google to get a lot more explicit about how it formulates its rankings, which, for obvious reasons, they don't. As long as there's no objective measurement or standard, there will be no real way to be sure that the techniques employed by a specific vendor 1) work at all; and 2) are ethically satisfactory. Someone with a backdoor at Google, after all, could make a pretty penny. It'd be naive to pretend like such things are never attempted at an org the size of Google.

People will take advantage of every hack they can to get Google to rank them more highly; as long as that's true, not only will the SEO marketplace thrive, but people will be identifying and exploiting those hacks.
When you say performance, do you mean upload, download, or both? I can deal with poorer upload performance, and mitigate poorer download performance by leveraging a decent CDN like Cloudflare.
I think this is what you're looking for: https://min.io/
In this case the language of the Contracts Clause is entirely clear that it applies to the states.
Tokei: Count Your Code, Quickly
That's perfectly easy to accomplish while remote, too.
It usually works , but we have had some issues with high loads, please check my other reply in this thread.
Er, yes -- I had written that it was a USB ethernet dongle plugged into the monitor, but I seem to have edited that out.
Looks great! Any chances of curses or other TUI integration, or is that out of scope for the project?
Still WIP but very promising, and pure Go too!
Interesting how it's turned around. A few weeks ago one of my HN accounts was banned for a neutral note that the lab hypothesis shouldn't be disregarded. Now it's openly talked about on WaPo.
That's really cool, I'ma give it a shot!
If housing is profitable, in the sense of offering appreciation above the general rate of inflation, then it becomes less affordable to the next buyer, who has to fork over a larger percentage of their lifetime earnings to live there.

It's unfortunate that this appreciation has progressed to the point where nearly all of a family's wealth is tied up in their home, as it is not a risk-free asset to hold.
The fact that you remapped Esc to Caps Lock and don't miss the latter just indicates the non-essentiality of Caps Lock.

Guess which key Apple will remove next :)
This is curated? I look at "starting points" and still can't see the wood for the trees. And I'm far from a beginner since I've been doing the whole container thing for several years now.
Generally speaking, you should be able to use your browser's "print" function to print to a printer called something like "Print to a file". Most OSes ship that now; failing that, you can search the web for a driver that does it for you.
As a renter and voter, my preferred policy solution is to suspend rental evictions, let the foreclosures go forward as mortgages are a risky asset, then let the market sort it out at auction. That sounds like a more market-oriented solution to me.
Well, your take on the infamous puck mouse perfectly summarizes my attitude toward the Touch Bar: who thought this was a good idea?
Mid-Range OnePlus Z Rumoured to Launch in July
Yup. It's a bummer. https://go-team.pages.debian.net/packaging.html
>Yet nobody cares.

People care about each and every one of those. It's disingenuous to pretend that Caddy was singled out.
I really like Caddy and use it e.g. in Try Playwright: https://github.com/mxschmitt/try-playwright/blob/master/fron...

For me as a user, the documentation is sometimes not very clear if it comes to Caddyfile syntax vs. JSON. It would be maybe better to always provide both or configurable via some switch e.g. (maybe its only for me not always fully clear).

-> Great product, nice security settings by default and for me definitely the way to go.
This is kind of scary that companies can patent an interface.

So google cloud is actually expected to also have this potential legal time bomb?

Amazon can sue you and retroactively force you to pay them right? So all they need to do is to wait for the alternatives to become popular
It's possible that the owner is being exploited too, but the franchise corporation, or financial interests. That doesn't make it ok for them to exploit others.
Couple learned of pandemic after returning from 25-day river-rafting trip
I came here exactly for this reason - to find out details that may have changed from RCs, and specifically for impression on the mac version, which I would install in a heartbeat if the concerns that were blocking RC have been eased.

We could also talk about how the servers seem flooded and what that means about the popularity and future of Inkscape.

To see totally relevant discussions killed like this is disheartening.
There is no faster way to stagnate an industry and destroy innovation than by workers unionizing. Enjoy more outsourcing of jobs than before.
> but pretty great for most everyone else

Honestly I think most people would rather save $200-300 than have the touchbar.

If you look at the average mac user, not pros but regular office people, they use stuff like Launchpad and rarely use keyboard shortcuts. You'd be surprised how many macOS users don't even use Spotlight for instance.
Back then, Apple hardware only differentiated in hard disk spaces for the different prices and provided equal experience to users and now their lineup is such a mess and if you want 4 ports, you have to take 512GB space which is typically way too big and no clear distinction between Air and Pro but more like Pro is Air + all sorts of random options.

Sadly, Jobs' vision is fading out.
Over 62.5 percent of American homeowners have a mortgage, worth collectively over $10 trillion dollars (total equity is ~$18 trillion). You are entitled to your opinion, but are in the minority.
I would be comfortable advocating for an intervention if it were a Pareto improvement. Unfortunately, such an alternative is not readily apparent.
I dont think that is a good enough reason to add touch screen. Do you have a better reason for adding one?

One of the reasons for me to keep using a Mac has been not having a touch screen. It has become very difficult to find non-Mac laptops without a touch screen now. I for one hope they never add it.
Is it really scarce, and how would you measure that objectively?
There's a lot to like in this article. I like how the author tries to remove manipulative motions (correspondingly paranoia) from the context in hopes people can see truer. Nontheless (I am 25+ years in software dev),

- some 20pct of people think the office is where politics and games are played. Thus they try to play it better. That's because openness at the office is usually quite low. Such people are unmoved by push back thinking themselves the smarter, grayer haired guy. Survivors of this kind of BS actually are smart, and do have experience with effective but distorting coping skills

- software should be a formal science. It's not almost all the time

- the chief issue unaddressed here but smartly lead up to is the management function: as the normal scenario is that resources are vastly drwafed by problems what do we say no to?

The management question when examined is complex and when it unfolds to systemic issues that are chiefly human not technical viz any of the corporate histories on quality improvement in the 80s/90s esp with company turnarounds. Ex. Detroit, Xerox, IBM under gerstner. While technical issues remain on the table, sustained under performance is ultimately rooted in management and company culture.
Papers please.
"Latest", as in "1 hour ago" latest, or "15 minutes ago" latest? Because the 2.0 image (not RCs) is needed and I think it only got published a few minutes ago.

Edit: You also need to plug it in.

xcaddy build --with github.com/caddy-dns/cloudflare
To put it more bluntly, it literally starts with the words "No State shall...."

If you want to go all originalist, the point was to prohibit private bills benefiting a specific person, which is almost the opposite of what's proposed here.
You're right. I assumed mentioning static site with Hugo or Jekyll was enough.

To clarify, it would be a static site with hosting on something like netlify or github or gitlab pages, where you don't have access to the server.
And being a small business. Things run very differently when there are ten people and you know everyone vs when there are ten thousand people and you only vaguely know what 1/10th of the departments actually do.
? Under the CARES act, low-wage workers "earn" more on unemployment than from working.
Because contracts aren't the highest form of value, they are just a construct we agree to follow as a tool to help create a society that aligns to our values? If contracts are creating results that are not aligned with our values as a society, we should be willing to modify them or do away with the concept of a contract entirely if that allows us to get to a better outcome that we collectively agree upon.