skysight-inc/HackerNews huggingface dataset:
Initially, the thesis was that ransomware doesn’t come from installing software that has unfettered access to the file system and that it comes from RDP. As far as I know RDP is not enabled by default on consumer PCs.

I just searched for “ransomware” on Google.

MalwareBytes

“One of the most common methods today is through malicious spam, or malspam, which is unsolicited email that is used to deliver malware. The email might include booby-trapped attachments, such as PDFs or Word documents. It might also contain links to malicious websites.”

PCs and Macs are “insecure by design”. Anything that the user runs has full access to the users files and applications - without administrator access. How could this possibly be more secure than your typical iOS device? We have over 30 years of evidence of what happens when the typical user is able to install software that has free reign on their computer.

“ Malvertising often uses an infected iframe, or invisible webpage element, to do its work. The iframe redirects to an exploit landing page, and malicious code attacks the system from the landing page via exploit kit. All this happens without the user’s knowledge, which is why it’s often referred to as a drive-by-download.”

The browser is also another application that is not sandboxed on personal computers. Any security vulnerability in the browser leaves the computer vulnerable.

Notice that most if not all mobile ransomware affects Android devices?

https://blog.malwarebytes.com/threats/mobile-ransomware/
It could have been an interruption in connectivity with the registry operator(s) for those TLDs. When that happens, most registrars will at least attempt to buy domains they're currently unable to retrieve the status of. You only get charged if the domain actually ends up being created.
For working with a generic laptop that has entirely too much glare:

If you can, sit in complete shade. Against the wall of a building with the sun on the other side of it for instance. Bright surroundings is almost as bad as being directly in the sun, it's still going to make the laptop screen seem to dim. Early morning/evening works best.

If you can't get complete shade, wear black, sit at a 90 degree angle to the sun. Your goal is to minimize both light reflecting off of you onto the screen, and to minimize light hitting the screen/laptop.
Are you suggesting "It's OK to be white" isn't a dogwhistle?
Ask HN: Has anybody shipped a web app at scale with 1 DB per account?
A common way of deploying a web application database at scale is to setup a MySQL or Postgres server, create one table for all customers, and have an account_id or owner_if field and let the application code handle security. This makes it easier to run database migrations and upgrade code per customer all at once.

I’m curious if anybody has taken the approach of provisioning one database per account? This means you’d have to run migrations per account and keep track of all the migration versions and statuses somewhere. Additionally, if an application has custom fields or columns, the differences would have to be tracked somehow and name space collisions managed.

Has anybody done this? Particularly with Rails? What kinda of tools or processes did you learn when you did it? Would you do it again? What are some interesting trade offs between the two approaches?
Infrastructure changes aren't even needed; Google already owns the .google TLD. All they would need to do is attach an A record to the root.
Please don't take HN threads into partisan flamewar. It's not what this site is for.

https://news.ycombinator.com/newsguidelines.html
> The advice I give my non-techie friends is avoid going to any business website that is not a “.com”

Ha. Do you give these friends other advice of the same calibre? I wonder what they think of you.

"If you've got a choice of brands, you can't go wrong with Trump, it's a sign of quality"

"The smaller the house, the bigger the dog you want, if you've got a tiny apartment buy a Great Dane or a Newfoundland, that way it's cosy"

"There's no such thing as too much salt. When cooking don't bother tasting it, just add twice as much as you think you need"
correct me if i'm wrong - i only spent a hours with rust: doesn't dbg! run at compile time? and therefore your example is still compatible with type erasure?
America needs a permanent solution for paid sick leave
Are there other domains hard-locked at the registry level? I haven't heard of this behavior before.
Agreed, the dream of working from a beach with your toes in the sand sipping a pina colada is very much oversold.

I work from an airport or airport cafe on occasion, but the ergonomics and noise don't make it a comfortable experience for long. And of course you are working on a small laptop screen.

To be properly productive, I need a quiet space, a desk at the proper height, a comfortable chair, and ideally 2 good-sized monitors.
It's more like calling a company who builds a remote work product and touts the advantages of remote work in their blog and marketing, but frowns upon it internally, as hypocrites...

Not to mention that this is a bad choice of example, as the verbatim suggestion to "eat your own dog food" is an old-time best practice in the software world.
The Old New Thing blog [1] has a fair amount of Microsoft folklore.

[1]: https://devblogs.microsoft.com/oldnewthing/
I used to work for a Big Media Company. They used to scramble to by BigMediaCompany.<new tld> whenever there was a new tld.

Then one day they stopped. The legal department decided that if someone were to buy it and use it in a way that infringed on their trademark, it would be cheaper/easier to sue or file an injunction.

For a while it was an extortion game. A new .tld like ".mobi" or ".music" would start, and they'd offer the names to fortune 500 trademark holders for $$$$$.
I wish he'd been in charge of Metro, UWP, Univeral apps and all of its reincarnations. They'd have been fast, lean, worked better with keyboard (even keyboard only). And wouldn't have so much whitespace.

Wonder if he'd have made Explorer better.
Yes, I read his initial comments and the ones here. Those very comments are the reason I am not as willing to turn a blind eye as others are. Those comments showed blatant intent to minimize the privacy violations and TripleByte's dishonest tactics. The follow up reads just like an excuse that sounds plausible to those with an engineering mindset. Given the audience of the blunder, and this site, I'd say that many users' capacities for forgiveness and second option bias are being taken advantage of.

Again, it will take a lot more than some words on the internet to gain back trust from people who care about the fact that they were tricked for financial gain.
yep. https://www.businessinsider.com/surprising-ways-nature-impro...
Under the Hood: Linear Regression
What I can see, of these 72 solutions, there are at most 9 distinct solutions when symmetries are removed (rotation, transpose, flipping). I might have missed some solution.

Though, of these 9 solutions there are more similarities, i.e. some of them are the same rows except that the positions are switched.

Some other thing. if the lines are sorted, there are only 4 distinct variants.

Also, the solution of the original Miracle Sudoku instance has some invariants, for example the rows are rotations of these numbers 1,5,9,4,8,3,7,2,6 and the columns are (when rows are sorted) rotations of the numbers 1..9.

I've added comments about this in my Picat model: http://hakank.org/picat/miracle_sudoku.pi
Oh neat! Coincidental timing for me too seeing this as I'm procrastinating finishing up my own similar thing but built on totally different infrastructure (Ruby, Lambda, DynamoDB, S3, so far..) and for a different set of feeds (several hundred tech engineering blogs). GitHub Actions is something I did consider, but I'm trying to go AWS for everything recently to learn the ecosystem more. (The initial results of my own experiment are at http://engblogs.s3-eu-west-1.amazonaws.com/index.html but it's going to become a 'proper' site as part of the next step.)
UDRP typically rules in favor of the holder of the unambiguous trademark in these kinds of cases. As an example, "Exxon Mobil" refers unambiguously to a single entity only, and has no other possible uses, so anyone registering exxonmobil.{anything} would lose if the company came after them. No one else has any right to that trademark, and ICANN enforces trademark rights on domains.

If the trademark already existed when you bought the domain, and especially if it's widely used and ambiguous, you're gonna lose that domain if the company comes after you.

Contrast this with the case of, e.g., McDonald, which is a widely used surname that predates the existence of the trademark. So long as you specifically aren't trying to cause confusion with the McDonalds restaurant trademark, you can use "mcdonalds" in a domain name.
Companies like Mark Monitor will buy all of the <yourbrand>.tld's for you-- and continually grab new ones (as the set of TLDs is constantly growing). At Netflix's size, I would assume they would've paid for such a service.
Thanks, Zapatos looks really nice. That library seems to be basically what I want (aside from writing SQL for joins, but I think it's just not possible in the way I imagined). The documentation is really nice. Much of what is written in it aligns with my thinking. I'll definitely give it a try!
So you think iPad's new keyboard is not worth it?

Is Safari on iOS good enough for intensive browsing, and is the window manager fluent for context switching back and forth to Blink? I'm not a web developer so I don't need too many bells and whistles.
>Exactly this. I work for a company that specializes in helping to scale business websites that have moved past the out of the box limits of things like WooCommerce and Shopify.

Sure, but most of them wont move "past the out of the box limits of things like WooCommerce and Shopify". For the 1 that gets bigger or has special needs and does there would be other 9 that are just fine using those platforms...

And of course WooCommerce and Shopify can always add more customizability and capture those features eventually, so those devs who help companies "move past the out of the box limits of things like WooCommerce and Shopify", become comoditized glorified configurators (or the owner or admin of the company can even do it themselves).
>Plenty of wealthy people and plenty of intelligent people have addiction problems. Wealth and intelligence are bad predictors of addiction. A far better predictor is family history.

Family history is strongly correlated with wealth and intelligence, though. [0]

Studies comprising "adults in Britain" consist almost exclusively of mostly relatively well-to-do and highly educated people, compared to the rest of the world. [1]

Britain basically controlled the world during the entirety of the 1800s. They're a lot better off than most still as a result of that extremely long reign.

[0] https://en.wikipedia.org/wiki/List_of_banking_families

[1] https://en.wikipedia.org/wiki/Human_Development_Index
An interview with a psychologist from New Zealand on CoVid
"In DOS I believe that %var% expansion only works in batch files, not at the command line directly."[1] That worked for me in an emulator.[2]

[1] https://stackoverflow.com/questions/28021862/echo-variable-s...

[2] https://jamesfriend.com.au/pce-js/ibmpc-games/
Believing you should have the right to own possessions, a home or a business doesn’t put you on the right, it places you firmly in the vast center.
Or do something like charge one phone from another.
As an American, this doesn't seem any stranger than our dual-units-of-measure system. One is defined in terms of the other. One is what we (mostly) use locally, and the other is what we use with anyone from any other country in the world. People living here know from experience and context which system is implicitly attached to a bare number.
Syncthing?
>... and not all regulations are created equal.

Which is why I doubt no-code solutions will prosper since needs and regulations vary so much that they'll be either so many different solutions or monsters to configure.
Support for -flto was added in libtool about the time I was working with this (I want to say 2012 or 2013), which also means you get to run into the fun situation where it's fixed in the upstream codebase, but the repository you're working with has a checked-in stale version of it.
Northern Ontario would probably be akin to Tahoe; folks with permanent setups in the backyard of a second house.

An RV with a retractable shade might be large and portable-ish, but RV ownership/maintenance is complicated by the current situation.

Are you thinking more Dolores Park, though? Or the big parks?
Funny thing is - this is exactly what happens many millions times every single clock cycle inside pretty much any modern(-ish) digital CMOS CPU/ASIC, with the right-hand-side capacitor being parasitic gate capacitance in the driven gate.
Yes, but reality also has a lot of established patterns for minimizing that latency so people can play together live.

Musicians in an orchestra pit or on a football field visually synchronize to a shared clock -- the conductor visibly keeping time. In a live setting, musicians use monitors (in-ear or wedges) that zip the sound of their bandmates to them via the speed of light.

I've never seen virtual jamming over a network without a shared clock actually work, because once you get to 200ms round-trip it just doesn't work.
> I've yet to see any discussion

Discussions isn't the point though. Articles in big newspapers and TV stations, not forum chitchat.
This is pretty sweet. Only fault is I can’t seem to find lists.
No I mean send someone a sine wave speech file and via another method the transcription of the speech. Would you hear it after reading it?
Working from home, and more importantly the increased likelihood of having a remote position in the future, has inspired me to eventually take on the life of a digital nomad.

I want to travel the United States seeing and living in as many places as possible. Unlike several people posting here I wouldn’t mind working out of coffee shops or with just a laptop.

I see opportunity for adventure while I am still young. I don’t mind the squalor of living out of my car and showering in gyms if it means I get to experience more from life.

What’s the catch? I have no idea what this lifestyle would actually bring. If anyone knows what it is like please share your experiences.
On Communist Bandits ( 共匪)
According to this[0] blog post Lambda@Edge has significantly longer latency (due in part to a smaller number of locations). Cloudflare also uses V8 isolates instead of whole VMs, so much lower overhead. Disadvantage is that you can only run JavaScript and WASM.

[0]: https://blog.cloudflare.com/cloud-computing-without-containe...
If only I could upvote this multiple times.
We're here for a while and then we're gone. The highest high or the lowest low, nothing is as serious as it seems, because in the grand scheme of things, nothing really does matter.

Look at the size of our solar system compared to our galaxy, compared to our cluster, compared to the observable universe. Put it all in perspective and don't let things bother you so much.
I've got it open 24/7. There's enough misbehaving stuff that I have to use day-to-day that spikes off the CPU or runaway leaking memory on a regular basis...

I miss the Vista/7 desktop widgets that you used to be able to use to keep an eye on this stuff without having TaskManager open.
Forcing young females to sleep in your bed barely clothed is sex abuse.
Yes, there are many such registry-locked domains. Verisign and most other TLD operators sell it as a service. More info:

https://www.verisign.com/en_US/channel-resources/domain-regi...
https://krebsonsecurity.com/2020/01/does-your-domain-have-a-...

It's a recommended best-practice for high-value sites, which the main website of any Fortune 500 company certainly falls under.
I'm fortunate that I can access all work resources from my personal computer, especially now that my workplace has been more liberal in providing VPN access to certain resources, about which they were previously reluctant (Well, they funneled many people to a poorly performing Citrix "Workspace", especially overloaded at the moment. It hurts to have to spend 7 or 8 minutes waiting for a remote-hosted version of Excel to load, navigate to a network drive, just to open a file)

In any case, I'm set now, and my home setup is significantly faster than work-issued laptops. Even with multi monitors, it will be tough going back to a slow setup. Maybe I'll start RDP'ing into my home computer to "work from home" while at the office when everything opens up again.
Seems impractical and slow at scale to manage even a few hundred separate databases. You lose all the advantages of the relational model — asking simple questions like “Which customers ordered more than $100 last month” require more application code. You might as well store the customer info in separate files on disk, each with a different possible format and version.
HideAway VPN consistently 2x faster than WireGuard clients
I redirect www. to ns. And the same happened to me... That leads me to believe that old. and ns. won't be there for much longer.
I don’t really see why though? I’m a socialist (the Scandinavian kind), but that seems a petty good description of what happened back then.
I am a huge FreeBSD nerd, but bro, that isn't even remotely true. Telling people BS like this actively harms FreeBSD and the community that uses/supports it.
Qualcomm Adreno 650 and 640 GPUs to Be Supported by Mainline Linux 5.8 Kernel
I'm just excited that hyperphysics is still going strong. It looked outdated in 2010!
Keto Crispy Pork Belly with Kimchi Collard Greens
As a work around for taking unpaid leave-- I see no reason to deny someone pay because they ran out of sick time if they're able to be productive from home.
great thought, but (!) I have to say from personal experience, you can bring practically any system, of any horsepower, to a crawl, with overweight layering and dispatching..
I’m curious to know from anyone who has hired through triplebyte - has the quality of candidates been consistently better in terms of success at the company post-hire than it has through your previous recruiting efforts? Also, for a candidate that comes to you through triplebyte do you consider them vetted and are just interviewing for cultural fit at that point or do you still put them through your own hiring process?
The main problem seemed to be that the rich there demand that the homeless be housed, but they're unwilling to have low-cost, high-density dwellings in "their neighborhood" because that might lower their property value. The net result is as you see, programs upon programs "for the homeless". Ever increasing taxes. But no affordable housing anywhere, because no one is willing to allow a vote for it to be built.
The USB-C laptops just use straight up USB-PD, thankfully, and don't have any DRM or other controls. I've charged my USB-C XPS 13 off an assortment of Apple, Dell, and generic chargers.
The whole engine was driven by Peruvian and Mexican silver.

The opium trade is notable for being one of the only times in recorded history when China had a negative balance of trade.
> I also wrote Space Cadet pinball

Talk about burying the lede!
Oh, this is available to anyone with a .com using a major registrar. I had misunderstood this to be some special feature only available to the domains that make up massive amounts of internet traffic like google.com.
> the way they handled Reiser4, Tux3 and Reiserfs

Reiserfs is in-tree. Reiser4 failed after losing its lead dev, but my impression was that it was on-track to become the next Linux filesystem of choice. I have no clue about Tux3.

> Basically, any filesystem not made by the filesystem establishment (and their friends) gets bullied.

Linux has XFS from IRIX and JFS from AIX; the only way to have that and a "filesystem establishment" conspiracy is to resort to no-true-scotsman.

> Of course, the only filesystems they can make are all crap like ext4 and btrfs.

I'll agree that BTRFS is ... suboptimal, but what do you have against ext4? I'd like it to have data checksums and maybe CoW, but it's been the workhorse of the Linux world for ages and performs quite well, and even has some nice new features like encryption in recent times.
Four Golden Lessons (2003)
They are in no way equivalent. Countries generally do not modify the conversion between metric and imperial for the purpose of obfuscating measurements of things,
For me it falls into the IPD category (Internet Psychiatric Diagnosis), which is generally a no-go on HN. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

Thanks for responding so nicely about the accounts thing.
Yeah had a couple. Flakey as hell and tend to die after a few months if they even work at all.
But communism doesn't care about human lives... You could always talk to my ex landlords wife if you like, she will be dead silent if kids walk past because thanks to communism saying the wrong thing when kids were around got you murdered (Cambodia)
> it could be that Ammon was given a choice: triple profits by end of year or sell his share

That seems unbelievably unlikely.
Luke 17:4 and if he sins against you seven times in the day, and turns to you seven times, saying, ‘I repent,’ you must forgive him.”
> He believes that human lives are more important than property rights.

How do you justify creating a total ordering of rights in this way? And why do you think that there is no intersection between these two sets: "human rights" and "property rights"?
This is kind of my point, I've never heard the term "type erasure" used with static dispatch (and Rust code, for better or worse, overwhelmingly prefers static dispatch to dynamic dispatch).

Rust does guarantee type erasure on lifetimes, but lifetimes are only used for semantic analysis, and are completely separate from and unrelated to code generation/type layout.
Now I'd like to know why Task Manager got rewritten in Windows 8. I liked the old one better; it was lighter and faster than the current one.

Disclosure: I work at Microsoft, on the Windows accessibility team. But I didn't join until a couple years after Windows 10's initial release.
I have no idea what this lifestyle would actually bring. If anyone knows what it is like please share your experiences.

https://www.amazon.com/Road-Jack-Kerouac/dp/0140283293
China set to launch Mars probe and rover mission in July
For any paywalled site on HN, click on the "web" link directly below the title.
This will be very inefficient due to the way DBMS commonly lay out data in pages. And if you want to do any kind of aggregate queries (e.g. analytics) you're probably in for some royal pain.

If you want to do this for security, why not layer the DB behind some system that requires and verifies the users access tokens for each request?

The only situation where such a setup might make sense is when you actually need per-user migrations to cater to specific customer's needs, but then you'll make it very hard to work with all customer's data through a generic interface.
what's the difference between ask {<askcode>} and eval(<jscode>)?