skysight-inc/HackerNews huggingface dataset:
For comparison the main internet cable connecting my country, New Zealand, to the USA as 10 tb capacity and the cable connecting us to Australia has around 20 tb, so we have a theoretical maximum of 30 tb of overseas capacity for 4.8 million people (in practice Australian traffic will also be routed over our USA cable). We should have an additional 70+ tb by the end of 2022 after cable upgrades (again, shared with Australia).

Africa has 253x the population of NZ.
Funny i just started reading(half way through, its a hard book to read) Micheal Hudson book "...And forgive them their debts" talks about bronze age economics etc and debt forgiveness and how their number base was usually taken for interests calculations.
You do not want to run such things in an XP VM if you can help it. XP is such a hot mess security wise that flaws in it allowed attackers to break VM sandboxing more than once.
I started a stock forecaster for the London Stock Exchange a couple of years ago although never finished it.

I've now integrated it with a couple of systems which allow me to get OHLC data as well as Regulatory News Service articles. And, in order to improve the quality of the forecasts, I'll soon begin integrating it with other news sources.

I've added it to (Collective 2)[https://collective2.com/details/128426551] and its currently making a loss as a strategy. This is good news because it's allowed me to identify why that loss might be occurring and where I could improve my strategy (I've found quite a few improvements in the last few weeks). The most recent improvements are active on a non-visible strategy on collective2

This forecaster could be applied to any global exchange. And I'm looking forward to the day where I can trade with it myself, sell the signals as a service, or sell it for a tidy sum.
This looks more playful but I guess you are aware of GeoCaching (https://www.geocaching.com/play)
I can't imagine any US party echoing the FSF's statement, even if just in a statement of political intent. It's impressive that the movement has enough public interest to make platitudes worthwhile in Germany.
I have been working on WebGazer (https://www.webgazer.io) since 2015 and even if the stack got bigger with time, it has Django in its foundation :)

It started as a simple website monitoring product and evolved from there. It enables customers to monitor websites, REST APIs and cron jobs on the same platform. I also added status page functionality (e.g. https://status.webgazer.io) some time ago.

I have a day job but I keep building and hustling at the side. We live off of paychecks from our day jobs but live for our side projects, don't we? :P
Such a great tip, thanks!
This is super infuriating. There should be some regulation regarding platforms and access on them if you are big enough.
There are other ways to automate workflow that don't require the tool to do everything for you. IMHO, limiting yourself to what Photoshop can do is a trap, eg "export for web" which doesn't come close to generating production-ready assets. Given a need for workflow automation that's external to the editor, I feel it makes more sense to compose a workflow from tools that follow a less monolithic, more unix-y "do one thing well", kind of approach. But use cases abound. YMMV.
I don't see how that big investment for relative low volume production would make sense for consumer products.

If the fab is located inside the US, AMD and NVIDIA can bid for many US government contracts that would go for Intel. After GlobalFoundries quit the race, US defense contractors have only Intel as supplier for many components.
so what do we call undesirables like anonymous and so on?
Just wanted to drop by saying that trailrouter looks great. One small suggestion. I'd add an option to avoid cemeteries as (at least in some cultures) running through one could be considered ill-mannered.

Here's a link to an example route that I got that includes one: https://trailrouter.com/#wps=52.32928,20.94020%7C52.32805,20...
Here's a link to that cemetery on OSM: https://www.openstreetmap.org/way/60865696
The Save button fails every contrast check it possibly could: https://contrastchecker.com/?c=bcbcbc&b=fcfcfc

If the Accept all button does what you suggest (secretly tick the empty boxes), it is a deeply unethical, and almost definitely illegal design.

Edit: Since userpeek appear to have submitted the article themselves, perhaps they have a comment?
The idea that any pdf reader, or indeed any aspect of itself, might require to run as root is ridiculous. We’ve had drag and drop install the entire history of adobe-on-mac os x. What is taking them so long?
The recency of such statements is relevant since it shows their position hasn't waned.
True, that issue has been raised before: https://news.ycombinator.com/item?id=23176527

I will probably just get rid of the features that require write permissions. They aren't essential.
So no one has heard of RFC6648 ?
https://tools.ietf.org/html/rfc6648
As Hip continues to implement more of CUDA, I think we'll see more developers doing it themselves when the barrier to porting is smaller. AMD has a lot of work to do, and I don't know whether they'll succeed or not, but IMO they have the right strategy.
I believe the "security by obscurity doesn't work" people fall into two types:
- those that are coming from a crypto background, where you frame things as "in principle breakable" vs "not breakable, not even in principle" and there's nothing in between, a framework according to which security by obscurity goes into the "in principle breakable" bucket,
- people who just mindlessly parrot people of the first type.

A more nuanced (and more useful) way of viewing this is one of cost vs reward: How much does it cost an attack to break your thing, and what's the maximum cost that an attacker is lilely to be willing to invest before your thing becomes unappealing. According to this view, obscurity can significantly increase the cost of the attack. It's as simple as that.
Not my experience with commodity SD card, power supply and stock settings of Raspbian. They must be using some "secret sauce" to make them run 6 years without outages. I would suspect some industrial grade SD card (SLC or at least AMLC), high quality power supply (e.g. UPS with surge protection) and also some way to limit writes on the SD-card.
So are we pretty certain or very certain that at least one implementation (probably in an IoT device) will no bother with this validity check and accept it anyway?
DNS:*.*,

Is this missing ai and other top level domains?
Can the site indicate when a book has been recommended by more than one person?
Please check your comment again. HN ate some characters:)
> inappropriate doodles

Phrasing!
Sweden Stayed Open. A Deadly Month Shows the Risks
BambooHR is written in PHP and as it is widely known PHP allows incompetent programmers to create insecure websites. The majority of BambooHR pages are loaded by referencing a page ID, for example, you can access this URL [1] to render a form that allows you to send documents to arbitrary e-mail addresses, and this URL [2] allows you to edit your own profile.

So far so good, if you are a competent PHP programmer (or any other programming language) you make sure these IDs are not consecutive to avoid enumeration attacks, but even if they are part of a guessable sequence you can still secure them by restricting access to all pages except the ones associated to the user ID in the session.

The vulnerabilities I found were a combination of Path Traversal [3], Forced Browsing [4] and Stored Cross Site Scripting [5] that allowed anyone to 1) force a specific PHP file to load arbitrary pages, 2) access data associated to other employee identifiers and 3) send all documents associated to these employee IDs to arbitrary emails by accessing the “Email File” page and crafting a simple HTTP request to bypass a rudimentary form validation.

When I told my boss he continued the investigation and found that we could access certain amount of data associated to employees registered in other subdomains. People who are familiar with BambooHR will understand how stupid this specific problem is considering each subdomain is isolated from the others, so one would expect them to isolate the databases as well.

I don’t know anything about the architecture of their system so I cannot explain why these security holes allowed us to access data from other companies. I was very scared to continue digging into it and my boss was super pissed off. We didn’t know if they used soft deletes so instead of removing the company’s data we decided to edit it with garbage information, then we migrated to another system.

And that was the end of our story with them. We never reported the problems because I started my “research” without previous authorization from BambooHR so if we reported our findings they could sue my employer and we would be in bigger problems. Same thing happened when we found a vulnerability on HipChat [6] in 2014 or so, we reported it and they got super angry at us for conducting that penetration test without permission, the company made an agreement with them and we migrated to Slack.

Good luck to anyone whose employer is still using BambooHR to manage their employee database.

[1] /ajax/employees/files/email_file.php?id=19

[2] /employees/employee.php?id=EMPLOYEE_ID&page=PAGE_ID

[3] https://owasp.org/www-community/attacks/Path_Traversal

[4] https://owasp.org/www-community/attacks/Forced_browsing

[5] https://owasp.org/www-community/attacks/xss/

[6] https://en.wikipedia.org/wiki/HipChat
There is another interesting section in the document[1]. The city introduces the "Munich Open Source Sabatical". The city will pay professional programmers for 3 till 6 months to work on open source projects that benefit the community.

> Die Stadt München unterstützt die Entwicklung von Open Source-Projekten mit einem "Munich Open Source Sabbatical". Professionelle Programmierer*innen, die sich für drei oder sechs Monate ganz auf die Fortentwicklung eines Open Source-Projektes kon-zentrieren möchten, können sich dafür auf ein städtisches bezahltes Stipendium bewerben. Die Projekte müssen einen kommunalen Nutzen haben.

[1]: https://www.gruene-muenchen.de/wp-content/uploads/2020/04/Dr...
These days I would say you should get into OS development and learn about unikernels. Linux should be a solved problem right now and the future would be in OSes that don't have interrupts enabled and you have full control over the CPU cores.
I'm not hugely fond of the earlier books but I loved Cryptonomicon and all of the later novels apart from Reamde - Fall, or Dodge in Hell is pretty good in my view and ties up some loose ends from earlier books in satisfying ways.

I still think The Baroque Cycle would make a wonderful sprawling multi-series show (Jack Shaftoe being one of my favourite fictional characters).
Assuming a vacuum, the larger market is always fair, but I don’t see how it’s at all possible to value the presence or absence of conflict without a context.
T-Rex (2008) [Playstation Tech Demo]
Why the LVRN record label launched a mental-health division
I actually like the ending of Seveneves - not as great as the first part but still pretty good.
Disinformation researchers saw the coronavirus infodemic coming
There is no going back. Viruses are not going to disappear, we just lived in our urbanization bubble for a very long time. On the nature scale of things it's extremely short.

Cheap flights and ludicrous interconnectedness are not that necessary and are barely more than disease vectors.

Local food, local communities, and work in your basement on anything via the internet is a development for quite some time now.

Goods can stay transported as before, but shuffling tourists around the globe via government financing said industries out from bancruptcy every ten years is dumb, corona or no corona.
But that is not what is going to happen. Jobs that can't be done remotely will be +/- constant — that's a simplification as there will be some second-order consequences like movements in real estate prices in both directions. Jobs that can be done remotely will become less lucrative [reasons above]. [There may be some second-order consequences like the unlocking of innovation, but that's speculative and hard to estimate economic impact here].

I have a personal, sad and rather extreme theory — anything that can be done remotely will be commoditized. But that's another story.
Nonfunctional with adblock enabled. Bad content. Self-submission. Lipsum and a thispersondoesnotexist.com persona used for a testimonial on the pricing page: https://files.catbox.moe/9wt8hz.png

Go away.
From what I can see, 450mm is dead. It has been years since I’ve seen any action on this.
Sharing an append only log can be quite treacherous for users that are unaware of it. For example, when accidentally including some confidential stuff. A not so security aware person may think a quick delete fixes it and depending on the situation this might event be true, but its still in the log... Not familiar with Hyperdrive so please somebody correct me if I am wrong and this case is handled.
Ask HN: Aggregator focused on interesting, well written articles?
I love finding well written articles about things I've never even thought before, such as this: https://news.ycombinator.com/item?id=23089782

Is there any aggregator similar to HN, but focused on this kind of submission?
The mystery of the great naked mole-rat migration
Just please don't create your own distro this time.

I'm sure Canonical would happily hier some devs from Munich to make this look local.
OnePlus’ 8 Pro has an X-ray vision filter that sees through plastic and clothes
Maybe the news here is that there is nothing interesting in the pipeline. Capital is abundant and has a lot of trouble finding valuable places to work.

Maybe the news is the end of the booming period of everyone getting connected. Historical eras often get named after the fact, when we can see how they were anomalous.
One of the old Tesla company buildings is now the Brno Museum of Technology and the have (among many other) an exposition about the history of electron microcopy in Brno. One of the mashines that is part of the exposition (a huge experimental electron beam litography machine) is pretty much bolted in place in the same spot the old Tesla company built it all those years ago. There are even some "legends" about how they built it so well, that it is still holding vacuum inside today.

Another legend says that they once could not get a new model of electron microscope working before showing it on an international exposition. The image was always blurry. They ran out of time, so they just took it to the exposition to fix it there. But it worked flawlessly there! Turns out this was due to the tram troley lines running next to the company building interferring with the electron optics. :)
We released Modern, a clean and responsive Keycloak theme
There is no warranty that these img files do not contain malware or vulnerabilities. Why the Dockerfiles are not public?
NuShell: Shell where traditional Unix meets modern development, written in Rust
Not parent, but back when I was young and couldn’t afford a sports watch, I kept track of distance while running by counting steps. I would count up a hundred step pairs in my head, and increment a counter on my fingers on each hundred. (I also used a simple system of my own devising to allow counting up to 99 on my fingers.)
Impact Protection by Mammalian Facial Hair: Testing the Pugilism Hypothesis
Who will give a shit, really? Russia is marching into all neighboring countries since what, 60s? and nobody raises a voice. Hell, I think they could march into Czech republic and EU would still be debating if they should continue buying Russian gas. Rapid geopolitical shifts between the West and China are unlikely, IMHO.
Well, considerations like these are typical for more or less any kind of software you will ever write. Because of this all but the very simplest software needs automated tests.

But one may also note that your particular usage of CSV may be a bit simpler than supporting all of the possible complications. Especially if one is not reading CSVs that could come from anywhere.

It depends, having dependencies is always a risk and a nuisance as well. The library you are using may have bugs, acquire bugs in the future, change in incompatible ways and so on.
You are right, I was thinking more from a programmers practical perspective and started with the word «varations» and changed it to «permutations» without thinking it through.

Thanks for the correction!
https://github.com/moxon6/cobol-js-emscripten/commit/0278590...
Berliners, Londoners and New Yorkers Are in a Battle for the Streets
I found this article informative. The descriptive part showing the problem is very interesting. The proscriptive part explaining the researchers’ proposed solutions I am unsure about but think it is a valuable discussion.
The FOSS movement in Germany always seemed to me a tiny bit more mainstream than the one in the US. Tech publications report more on Linux happenings (as opposed to the sometimes intense Apple focus of US tech publications).

Linux also has more market share in Germany than any other western country, I think.
Facebook’s Future Rack and Microserver Iron
Motel Industry Turmoil Blocks Indian-American Path to Prosperity
China probably can't win decisively in Taiwan in the short term.
From my personal experience most times the hardest part is to convince the users. You can throw a lot of resources at the migration, money, good technical experts, and get it done right. But making the regular users happy? That's a whole different subject. Truth is most users still run Windows at home and are familiar with it. Getting used to something else will meet some resistance. Then you have the minor compatibility issues especially in a people facing institution.

To this day eventually this attrition pushes many back to the more compatible and familiar solution.

I've seen (usually very small) companies going to Linux and other FOSS solutions without actually understanding this beyond "they're free". Migration went great. Later on I came back to do the migration the other way around once they faced that attrition and realized that support costs were dwarfing the license cost.
A Proposed Method to Assess the Mechanical Properties of Treadmill Surfaces
The real problem with that is weight. Because SAAB is -- well -- SAAB. Great company, great car btw.
I don’t know where everyone is getting the free time.
They've waited seventy years for the right president. How many more decades will they wait and how will they react when they discover the military can probably force any president's hand?
Kyma: A platform for extending applications with functions and microservices
> In the not-too-distant future an EV may cost way less, require far less maintenance, be cheaper (and greener!) per mile, be faster and safer, and have a longer usable lifespan, than a gas car.

While this sounds great I seriously doubt that this is going to happen as it is directly against interests of car manufacturers. As confirmation I like to bring Nissan Leaf example as it is on the market for a long time and is suffering from battery degradation - and guess what - despite fact that car is working fine battery replacement is not easily obtainable and not cheap, examples:

https://www.autonews.com/sales/nissan-leaf-buyers-dealers-wo...

https://www.reddit.com/r/leaf/comments/9l0pjo/first_gen_leaf...
Hi dang,
Honestly I don't know how to say this other than I am so thankful that you take your job so seriously.

I can honestly say that I've never seen you act on HN other than in a positive way, and reading your contributions is part of the delight of visiting this site =)...

Sorry, it's just I can think of so few other sites where my first thought on seeing a mod post is not, "Oh what happened now..." and I just wanted to thank you for all the effort that you put in.
The statement is in the language of the agreement as reported: "Where it is technologically and financially possible, the city will put emphasis on open standards and free open-source licensed software,"

Which in practice binds absolutely no one to absolutely anything.
I think at this point AMD wants anything Compute to concentrate on CDNA, and graphics remain on RDNA.
The methodology to reproduce experiments is available at https://cTuning.org/ae/submission_extra.html .
> Should I subsidize my employer by reducing the need for them to rent an office space?

Bob working from home, costs $salary, say $10k a month

Carl, working from office, costs $salary + office space

Office space costs say $5k a month, so total $15k a month

If all things are equal, who would be employed? Maybe Bob charges $14k a month, still undercutting Carl's $15k/month total.
Implementing your own CSV parser is one of the first lessons a green software engineer will learn in how to NOT try to re-invent the wheel.

Still, please don't import packages with just one goddamned 3-line function in it.
Question: It was my understanding that a lawyer could sue the cloud provider for customer details of the cloud service in detail? It would be relevant information in determining liability for leaking this PII.
> From my personal experience most times the hardest part is to convince the users.

Former actual LiMux team member here, so I can speak from experience (almost a decade ago though). The hardest part was convince users to be happy on utterly inadequate and aged hardware. No, 1 GB of RAM won't cut it when you have to have Firefox, Thunderbird, OpenOffice and some fucking Java crap open at the same time, and 1024x768 screens won't do so either.
I don't know how y'all are getting so much free time? I'm out here trying to get a job, does that count?
> Although it works for that, it is too restrictive for my taste. I am looking for less restrictive forms of weakening that allow creation of a broader range of algorithms (including "imperative") that we can still guarantee will terminate.

How is it weak? Surely it's equivalent to any other approach: given a function and any form of termination guarantee for that function, you can encode that guarantee as a phantom type and then you have an expression of that function in a total functional language.
https://youtu.be/st6-DgWeuos
>Some countries use a comma as decimal separator instead of a colon.

I kind of wish we could all just pick something and stick with it.
Space station leaves 'microbial fingerprint' on astronauts
Katy Perry Went Nude on Her New Music Video Caption “Daisies”
This should be on top since the title can be confusing. I thought someone found a vulnerability but it's indeed just a script to generate a certificate without having to care which common name or alternative names you give it.
Points 1, 2, 4 happen also when you have a deadline culture. It's almost like having a culture that rushes people to results will always compromise on quality.
Storage would be some combination of diurnal storage (batteries, say) and long term storage (hydrogen). The former benefits from high efficiency; the latter from lower capital cost. There is also thermal storage (an order of magnitude cheaper than batteries) for any application involving heating or cooling, including industrial users of heat.
"series" definitely suggests they meant Baroque Cycle since it is 3 books, even if "Victorian" misses the mark by a few hundred years.

Diamond Age is a single book, and one of the "phyles" (cultures / pseudo nation states) is called the Neo-Victorians
Easy, just create a software ecosystem that is superior to or at least on-par with the commercial offerings (being open source is not by itself valuable for the users), then grow a generation of non-technical users into that ecosystem
Of course, for the majority of people, moving country is generally impossible. Borders are a thing.
As France reopens, just 4.4% of population infected by coronavirus