skysight-inc/HackerNews huggingface dataset:
I've got a way of doing it, where the server is basically just consisting of 4 types of endpoints:

- CRUD on table records, which makes the data schema independent

- Actions which can update multiple tables, call 3rd party etc

- Queries which can go more complex things than GET or GET list, such a search, or filtering, or sorting

- Selections, which are gets or queries run over multiple tables and combining the results

I'm addition each endpoint returns in JSON, but can have a

/with/:view

suffix attached to template that into HTML

I find this organizes well and covers all use cases

If anyone wants to see a Node template of this, it's

https://github.com/cris691/servedata
I've been importing all Maine addresses into Open Street Map. I wrote the tools I'm using and open source published parts that I thought could be reused.

https://wiki.openstreetmap.org/wiki/Import/Maine_E911_Addres...
I one little sentence, you answered a lifelong question. Why 60?

Thank you!
Settings > Passwords & Accounts > Autofill Passwords

Select BitWarden

—-

Or, in apps with a share button like Safari, Share > BitWarden > Select Account > Boom
This sounds like an extremely high resolution description of a group/category of people that likely numbers in the millions. If you encountered someone doing the same but based on a different categorization, you'd likely see the obvious epistemic problems involved, but seeing the same in oneself is difficult, especially when criticizing your personal out-group. That's just one aspect.

> This hypothetical "free person" is then also responsible for the results of their actions and for any oversights or vulnerabilities caused by their "free" status.

Is this a two way street? Are the authoritarians and experts who decide policy on highly uncertain data, at best, going to be held responsible for the fallout of their actions? I see little historic precedent for this in the US, and plenty of counter-examples.

> There are very good reasons we allow ourselves to be part of a society or country - people are always better equipped to survive in groups.

Does the group have to consent to authoritarian rule? How about we try transparent & honest, evidence-based reasoning and negotiation first. Maybe people would be a little less resistant then.

> They usually have an ego that...

Be careful when discussing matters involving the ego, they can be very mischievous and deceptive, often leading one to believe things like they possess extraordinary abilities in perception, when the exact opposite is actually the case, just as one example.
It reads like debt funding that turns into a SAFE if you decide bootstrapping isn't for you after all. That sounds reasonable to me, but the devil is in the details.

As a founder, it's nice to have options though. Fundraising is a series of pros and cons. As we're seeing in this downturn, SAFE's aren't that safe either, but I'd still choose that over the hassle of a priced seed round.

Ideally investors would provide multiple options, and one could choose the vehicle that aligns with your goals the best.
This is super neat! Looking forward to seeing it in use.
I noticed during the signup flow where the user enters their email and accepts the terms, it won't actually open the terms – the confirmation screen hijacks it. Cheers!
It seems to me like you are agreeing with the parent. Amazon increased their risk by closing the phone side and increasing the resources allocated to Alexa and hence the double down.
This is because when comparing manufacturing outputs, you should look at it in PPP terms, not in absolute dollar terms, due to devaluing and other factors. When you want to calculate how many tanks, missiles, bombs and airplanes, PPP output is what matters. Or if you want to take a page out of the Soviet playbook, Gross Material Product.

The US manufacturing sector is 11.6% of GDP, so 2.33 trillion dollars PPP. In China, it accounts for 40% of the GDP, so more or less 10 trillion dollars of manufacturing output PPP (!). This is a manifold advantage.

The reason why this is to be done is because if you wanted to build say, a tank in the US vs China or Russia, you would need many more dollars for the exact same tank. So measuring manufacturing output must be done PPP.
I can't believe the discussion is this long and someone hasn't said 'security by obscurity' yet.

Personally, if I was trying to prevent a break-in to a building, I would think it was a great advantage if the attackers had to work hard to even figure out where the doors and windows were.
It’s not a zero sum game. Facebook making profit doesn’t mean that other companies and people won’t also profit from it.
> which include sleeping with an investor to get money

Again, unless this came forward in legal proceedings, you're making an assumption.

> We have expressions like the casting couch for a reason.

It's not an expression, it's a literal thing in porn.
I literally bought 5 boxes of Capt'n'Crunch to try to figure out what the hell he was talking about. He spent so long trying to get us to grok the process and experience the joy too.

I tried, Neil, I really did.

But I came up with bupkiss. It just cuts the roof of your mouth, Neil. There is no magic in them. No joy, just oral soreness.

Also, the card deck cypher is really cool, but when your little cousin comes over and then ruins the cypher to play solitaire, yeah, that sucks.
For sizzle.
Hmm, I'm not sure. Not because I want to "preserve my karma value" or anything but I am fearful of tricks like these because they seem to be somewhat close to "engagement" hacks. I do enjoy seeing new users and would like for there to be ways for them to contribute, but I am not really a fan of outright gamification. Personally, when I started contributing I was a bit hesitant because I didn't know how to "do it right"–it takes a bit getting used to commenting here, so I actually think a bit more detailed FAQ would be really nice. It's always fun to discover something new about Hacker News and share it around once you've been here for a while, and I think you could still keep some of those little secrets for people to find, but I think at least some of https://github.com/minimaxir/hacker-news-undocumented would be nice to know upon joining.

Speaking of the leaderboard, I was actually curious how it was organized: there are some people missing from it that I would expect to be there, like 'pg. How is that list generated?
The thing is WI is already mad at Foxconn for doing that. AZ is even more of swing state so I don't know if same trick will work twice
Yes, that's right - you'd leave your public services open by default and the knock would simply open up tcp22 ...
In the website's own words:
https://donotdrawapenis.com/colophon

"Do not draw a penis?

In 2018 Google open-sourced the Quickdraw data set. “The world's largest doodling data set”. The set consists of 345 categories and over 15 million drawings. For obvious reasons the data set was missing a few specific categories that people enjoy drawing. This made us at Moniker think about the moral reality big tech companies are imposing on our global community and that most people willingly accept this. Therefore we decided to publish an appendix to the Google Quickdraw data set.

Do Not Draw a Penis functions as an agent to collect inappropriate doodles from people who are not willing to stay within the moral guidelines set by our social network providers.

So far we have collected 10K doodles formatted the same way as Google's dataset. We are happy to announce you can download them here."
So, does HBO Max mean I need to subscribe to a different thing if I already have HBO? It's so confusing. I have HBO via Amazon Prime channels and it's not at all clear if this will be available there or not.
It is just like overland routes. Imagine you have a bunch of delivery trucks on a highway and you are paying tolls along the way. At some number of trucks it makes sense to just pave your own road next to the highway.

FB is planning 10-15 years ahead because Africa is the next part of the world that will develop a middle class.
from personal experience, simply moving ssh off of port 22 cuts your drive-by log noise by 99.9%, which makes auditing clean logs much much easier.

failed login attempts with ssh on 22: hundreds per week, after: 0. i imagine with knockd it would go negative.
Too bad the tea towels are out of stock!
HBO doesn't have advertisers.
This is only tangentially related to the current administration. Onshoring manufacturing has been a supposed policy goal of the President since 2016, and that hasn’t amounted to squat.

The tectonic shift is that it has suddenly become a priority for the permanent, unelected (i.e. real) US government for a different set of reasons.
Housemates are allergic to cats and the dog owned by one of said housemates has killed cats in the past. And even if that were not the case, I happen to like the songbirds in my area, which would mean the cat would have to stay indoors.
I noticed the broken down-arrow scrolling too, in both Chrome and Firefox. Shame on Google for this anti-accessibility. Up-arrow, page-up/down still work, which is strangely asymmetric.
Right next to the Foxconn plant. /s

There is precedent for fabs though, so its not totally out there.
I port knocked called a friend once while traveling overseas when a second friend decided to act like an idiot and got us both some attention by the local authorities.

First friend-a local-is the type who doesn’t answer his phone from numbers he doesn’t know/isn’t saved as a contact-which I knew, so I dialed him, then dialed his wife (who also doesn’t answer unknown numbers), then dialed him again. He picked up the second time and after some explaining he chuckled and goes “yeah I figured it must be important when the same number called $wife immediately after calling me”.

He was there to pick us (including drunk mutual friend) up within the hour. And yes, he’s a network engineer heh.
Maybe an underappreciated benefit on the normalization of face mask wearing is that it stops unwanted or unknown attempts at facial recognition.
I’m not sure which brands TSMC makes for. But I can promise you if there is an option to buy an USA made AMD, I’d pay a premium for that.
‘More Than Moore’ Reality Check
> The South was afraid the North would enact tariffs on cotton, thus crippling the only significant product of the Southern economy - cotton. It was about tariffs on cotton. Not anything else.

So not free trade and you were completely wrong in your original comment.

> The reservations and Indian nations within the US suggests the former, not the latter.

Actually it doesn't. Nice little pathetic attempt at denying native genocide.

> They didn't give their conquered territories back. They installed puppet governments that obeyed the conquerors. Japan and Germany are not puppets of the US.

Actually Japan and Germany are puppets. As a matter of fact we installed the governments that they current have and they are firmly within our sphere of influence. Maybe this reality makes you uncomfortable because it doesn't align wtih your agenda, but once again, you don't get to dismiss reality just because you feel like it.

> "By 1650, hereditary enslavement based upon color, not upon religion, was a bitter reality in the older Catholic colonies of the New World."

Since the catholic world gave us capitalism, what's your point?

"Capitalism in its modern form can be traced to the emergence of agrarian capitalism and mercantilism in the early Renaissance, in city-states like Florence."

https://en.wikipedia.org/wiki/Capitalism

> Also, the slave economy collapsed during the Civil War, while the northern free economy thrived.

What's your bizarre agenda? "Free economy"? Why are you being so sneaky and using weasel terminology? The "free economy" of protectionism and tariffs?

> The reason Lee was even at Gettysburg was because the Confederate army was shoeless and nearby Harrisburg had a shoe factory.

Yes, the shoe factory existed thanks to a non-free trade protectionist policy supported by the north.

To HN's credit, it's rare to come across such a dishonest and blatantly agenda driven comment. Even rarer to see one double down and continue to lie when confronted with facts and evidence.
You can quibble about a specific food, but I think the general point stands. Habits are powerful and they can change. Every adult in the country (world?) is now forcibly learning how to cook or practicing a few new recipes. It turns out that some of those recipes are delicious, dead simple and once you know how to do it, having someone else do it for you looses it's convenience factor.

For myself:

I love cappuccino and bought several per week from cafes near me. I was missing them, so did a bit of research into home espresso and bought a nespresso and semi-automatic milk frother. My homemade cappuccino is excellent. It takes 2 minutes to make with just about zero cleanup. I have had better cappuccino, but seriously the extra time, money and hassle are no longer worth it for me. I will make it at home. It's also 6x cheaper.

I like to treat myself to steak every now and then, but only ever at a restaurant. I recently bought a package of strip steaks and did some trial and error on a George Foreman grill I found in the back of the cupboard I hadn't used in years. I figured out a process that works with that piece of equipment, and now I can knock out an amazing steak in exactly 4 minutes. It's cooked exactly how I like it. Why bother with the hassle and expense of going out for one? Plus it's 4x cheaper.

I doubt I'll completely stop going out or getting delivery, but if I reduce by 10% and everybody else does too, we're talking a lot of businesses that will close.
Nice write-up with some interesting findings! I might have to start poking around headers more often...
Eh, mythical man-month and all that. As always, the answer is somewhere in the middle, but I'd be surprised if most companies didn't see effects from median employee quality dropping.
Why do they agree everywhere else then?
Thank you. Still feels like and endless set of features to add: tournaments, hot keys, animations, etc.

It took about 2 weeks of nights/weekends to have something functional I could play with friends. The engine was the hardest part. Then another week to open to the public and then it’s been a few weeks of bug fixes before it started to feel pretty stable.

What about you?
Port knocking was somewhat silly when it was introduced ~20 years ago --- at most, on a reasonably designed network, it was saving you from your own misconfigurations, but at least in 2005 it was reasonable to imagine a highly diverse network of machines that people logged into using multiple protocols, where those misconfigurations were likely.

In 2020, it's gone past "silly" and is now a design smell, in the same way that actually relying on fail2ban would be. Whatever port knocking is doing to help you is a a description of something you're doing wrong with your architecture.

We're not even comfortable with long-lived keys anymore; modern networks are built with short-lived certificates issued off 2FA from an IdP. We have good VPNs right now for the other weird cases. Our networks default to all-ports all-hosts closed. Arguably, port knocking is literally setting your security back, by making it harder for automated tooling to scream bloody murder if you've managed to expose a dev instance unexpectedly to the Internet.

Don't bother. If you've got a single system you're managing outside of a cloud provider with its own decent network firewall, just set up WireGuard and filter everything but that. If it helps, think of WireGuard as the evolution of SPA port knocking.
In this case the statistics specifically refer to pedestrians and cyclists, I just shortened it to “non driver” here, which wasn’t an accurate way to summarize the stats.
Some guys in our city are doing this on a larger scale, schools in the area collect all plastic bottles and in return they get 3d filament: https://www.greenbatch.com/
More concerning is their asking for police powers and the ability to use the surveillance data they collect for sentencing:

> The book mentions both the data-collection opportunities for police forces (Sidewalk notes it would ask for local policing powers similar to those granted to universities) and the possibility of “an alternative approach to jail,” using data from so-called “root-cause assessment tools.” This would guide officials in determining a response when someone is arrested, such as sending someone to a substance abuse centre.
that's really cool
Except sidewalk labs is dead now.
> moving ssh off of port 22 cuts your drive-by log noise

I didn't know logs made me unsafe! I'm turning off all logging immediately.
Same.

"Manufactured by TSMC-USA in Arizona". Super exciting to be quite honest.
Wouldn't a reasonable rebuttal be that the log filtering rule that discards these failed login attempts would accomplish the same security goal, with less mechanism?
It's too simple to be interesting. You could obviously divide up the world into some other halves where the half with less land ended up with the sundials and say "even though it predicts the wrong outcome, this explanation is obviously right."
If you go to the store instead of the website, you can arrange delivery of anything. I think it's cheaper than the website delivery as well. You still need to gather your purchases, whether that's picking from the first-floor warehouse or waiting for the fetching from the closed stock part of the warehouse and then move it to another part of the store for delivery.
Doubling down on the tech, no matter what that means quantitatively, would mean qualitatively increasing your bet on the actual product. E.g. you’d fire every last milin if that meant you could keep a LiDAR engineer on staff.

Cruise won’t work out. GM is dead.
I find it interesting that, according to the chart, the Roman's were not only comfortable flexing their pinkie finger without their ring finger, but so comfortable they did it rather than flexing their index finger for 1.
It is a riddle that uses a pun as a critical component to throw the person answering off the trail.
I am sure you have already seen this, but for reference to anyone else who wants to start their own ISP: https://startyourownisp.com/

Note: not sure how correct this information is outside of US
Wow, I guess you must feel compelled to call out unnecessary male gendering all the time!
Easily the best Western action film I’ve seen in a decade (maybe best period, I’d have to think about it) so... yes? I mean just using action for anything other than spectacle, which it does constantly for just about the whole run-time, would put it in rare company, but then the spectacle is also great. Action aside “is well-constructed“ plus “respects the audience” aren’t even individually common traits, especially in an action flick, but it manages those, too.

[edit] to be clear that doesn’t mean everyone has to or should like it, of course, but it’s possible to recognize the things a work does right and understand why a lot of people might like it as a result, even if it’s not to one’s taste, and so not to be surprised when people like it. It’s certainly possible to recognize when one likes something that’s kind of terrible—I like lots of things to which that apply. These perspectives are useful particularly when making recommendations to others.
I wonder if it would be interesting to load a ssh honeypot that would feed from the logs so it would add the logins and then just dump the ip + input to a file.

Honeypot could basically run in a some sort of isolation layer (like Sandboxie or jails) and then self-destruct after the automated script is gone... and then you slam the door on that user/ip combo for good.

I can't help but think this would be interesting...
Why is it meaningless in the context of inequality? Inequality is a relative measure, so if higher-paying jobs become more lucrative, while lower-paying remain the same, inequality has increased.

You can argue that inequality stemming from that doesn't actually matter, because nobody is worse off - but that's a different argument from whether remote work creates inequality or not.
This logic is broken.

If you take 1 as the initial value, and run the operation n ≥ 1 times, the initial value is used at least once.

But if you run the operation zero times, the initial value is never used, so the result is undefined.
Yeah Intel has quite a few I hear
i prefer knowing that nothing is happening rather than filtering things i dont like.

also, lots of people sing the praises of fail2ban, which needs to watch log files to operate, but you can get most of its utility by simply rate-limiting using iptables' session tracking without any additional mechanisms.

https://selivan.github.io/2018/07/07/limit-new-connections-f...
How is nothing multiplied nothing times 1? I feel dumb asking this,but, why is it not 0 or NaN.

2^4 == 2222 == 16

0^0 == 0000 == 0

Why is it not that simple?
I don't think front-to-back or back-to-front are correct. From my experience, it's always from what I've seen outside-in

This means understanding the problem domain. What does the app solve? Better yet, how does the app either (1) save money/resources for the problem, or (2) generate revenue streams?

When you start from this approach, things become much more clear. Generally speaking, start with the UX low fidelity wireframes first. What are the user-stories for the user? Can they log in? Can they do some CRUD functionality relative to the problem domain?

Okay, what data does this user need for these pages? What sort of user-activity are they going under? Create a set of datatables describing the problem domain.

It needs a user table? check. It needs a license table? Just map out all the data needed, and group them into appropiate tables.

Fromo there, map out the relationships in a relational format to get a better prospective on the bigger feature

Are these features even needed according to the frontend? Okay, go from there. What is the cost to implement each feature, and how does this impact the development velocity / budget of the project? Go and find the sweet point of what's defined as a MVP, and then proceed to figure out what a stage 2 looks like.

Does the original data model have a migrationary upgrade path? Imagine if your developing the backend. Do you forsee problems running the migrations?

Now you need to think about scalability and whether that actually matters here. Changes are it doesn't for the vast majority of apps.

Do you need subscribers to aggregate bulkInsertions to the database? Do you need a redis cache to prevent unnecessary calls to database? Or do you need something more complex, because the end user is a developer and your providing a high scalable Web API service?

Just keep cycling outside-> in until you've satisfied all the results into a proper MVP database and a MVP UX pen paper design.

At this point, you'll want to define the API and how the frontend will consume it. How will the backend handle it? For instance, if you spec it graphql, prepare for a world of pain on the backend and an easy life on the frontend.

You should think about your API design, and use design patterns to think about how you can keep the frontend as simple as possible. The state of truth should of an application should live closest to its data source(s), so tread with this path in mind. Sometimes the frontend does the same work (e.g. financial calculations) to reduce the total number of calls to the backend. You might want to consider everything else here at this point, e.g. whether websockets are needed etc. And other factors in the application such as third party providers.

There's many right solutions to a problem domain, but there are just as many wrong solutions as well. Go from the business side first, and go outside-in. The best answer is the simplest one that satisfies all criteria, both in UX and how scalable it needs to be