skysight-inc/HackerNews huggingface dataset:
For the love of God, please stop using SSH keys. Almost every "company X is hacked" title on HN can be traced to leaked SSH credentials.

Use auto-expiring certificates that are issued after a proper SSO+2FA flow:

https://gravitational.com/blog/how-to-ssh-properly/
https://www.washingtonpost.com/graphics/2020/world/mapping-s... you’re gonna have to nav down and play with some toggles but I’ve enjoyed using their data. Also you’re gonna need to tune your radar towards Texas, Florida, Arizona and others, the New York line is only going to have a couple more weeks of legs.
Haha what on earth is this. Every article starts with a bunch of quotes from some crank with no scientific training. Reminds me of https://vixra.org/.
The references there mislead - The article concerning the ships states "minor salvage is still carried out to recover small pieces of steel" - "Primary" is an overstatement.
In reality, a steel manufacturer can produce low background steel by using virgin ore for the smelting, but must know in advance of the run and be advised not to incorporate recycled material (including alloying agents). Some are willing to accommodate such requests for additional cost.
That poses at most a minor roadblock. You just take over the backup-and-restore service for a little while and corrupt the backups as they get made. If anybody tries to verify the backups they just restore them correctly until they make their demand. Would probably add between $10K and $100K to the cost of attack (probably closer to $10K), so would probably be immaterial to the profitability of this attack. Therefore, even if they did it they would almost absolutely still be attacked with exactly the same consequences if they did not pay the ransom.

Simple "common sense" solutions are pretty close to useless in these scenarios since they provide no meaningful impediment to halfway competent attackers. They stop children and script kiddies which is helpful in that there are a lot more of them, but essentially every actual economically-motivated attack remains viable.

To provide an analogy, the fence around a military base does good work stopping people from just walking onto base, but it does not stop the enemy tanks. That does not mean the fence is useless, it stops one kind of threat, but if tanks might actually attack the base you either need to have a way to stop them or be willing to take the loss. Throwing up more fences so it takes longer for the tanks to roll over all of them is not really meaningful if losing the base is still an unacceptable loss.
There were three large patches that were integrated into the Linux kernel in version 4.0 (2014) that make it so that you can live patch the kernel easily. [0][1][2]

(Before these arrived there were already some tool's for it, for some distros. But now everyone should be able to, unless the distro intentionally cripples the ability).

[0] https://lwn.net/Articles/619390/

[1] https://lwn.net/Articles/622936/

[2] https://lwn.net/Articles/634649/
Thanks, yes that's very helpful. In my experience (scientific and web backend programming, no games and no industry compiled) there's a large number of people who are not aware of this definition of scripting. For them, a "script" is a program written in a procedural style that runs and does some stuff and exits.

So, for example, web backend python programmers might "write a script to run on prod to fix the messed up data", but they would not refer to their flask/django HTTP handler code as scripts (whether they defer to numpy or anything else).

In research labs, scripts (sensu me) are often the only category of code that is written. They fit the definition you gave in that they probably delegate to things, and the one I gave in that they are typically procedural and linear.
I don't grind my teeth, but one thing I do is that I hold my breath when I'm thinking or doing something irritating like reading bad docs. When I started programming two years ago, I thought that it would be impossible for me to continue because I was stuck too often and didn't breathe. It got a little better since then.
There are all sorts of open-source alternatives!

Here's a list:
https://github.com/paladin-t/fantasy

My personal favorite is the TIC-80:
https://tic.computer/

And if you're looking for a straight clone of the PICO-8, check out PicoLove:
https://github.com/picolove/picolove
In my experience teeth grinding is cause by too much coffee and alcohol. My clenching/grinding always eases up when I abstain from those
Ehh, a decent backup service (https://www.tarsnap.com/) will give you the ability to make write-only backups over time, i.e. you should be able to roll back to 6 months ago without any chance of something corrupting the backup process.

Of course, it depends how much data you're backing up.
Um. CSS isn’t loading on safari mobile. I hope this isn’t the actual experience ?
At the very least, it should be non-negotiable government policy for no government, government agency or public body at any level to pay ransoms.
Why isn't paying ransom illegal?

Points:

* Anytime any ransom is paid it is in the most literal sense funding ransom, even more directly than funding terror in the most direct way possible: when you send a check to ISIS that may or may not actually fund terror. Maybe whoever you sent it to is just good at making an ISIS recruitment page and doesn't do much real terror, just marketing.

* But paying a ransom by definition directly funds ransom, far more directly than sending money to ISIS directly funds terror.

* Whoever gets the money at ISIS might spend it at a brothel, there's no proof of terror.

* But whoever gets your ransom when you are ransomed by definition engages in ransom.

* You are funding ransom by definition.

* Additionally, since all rich nations are generally pretty law-abiding, making paying a ransom strongly illegal means that the companies have no choice. They're simply not able to write the check or wire the funds.

* Finally, another strong reason to make it illegal: anyone could claim falsely to be ransomed. If I wanted to fund ISIS I could literally write on a piece of paper which messages to send me in what sequence, and then I could send them money and claim falsely to be ransomed by them.

* Paying a ransom should be strongly illegal.

* Also note that this is a good analogy with "possession of stolen goods" - the fact that such is a crime largely destroys the market for stolen goods. The market would be much stronger if possession of stolen goods weren't a crime.

* There is an argument made about direct consequences: "But if we don't pay they will actually kill my daughter!" The same argument applies directly to paying bribes: "But if we don't pay, we actually can't get a license to sell in that country!" Still, paying bribes abroad for routine administrative work is illegal. Companies can't do it. If they do it, they get fined. Result? 1) (immediately) companies stop doing it. 2) administrators stop requiring it.

The world becomes free of bribery. This proves that making paying bribes illegal works.

Why wouldn't it work for making ransoms illegal? UCSF just funded a ransomist $1M. That should be illegal.

The going rate for a thug in a third world country might be $800 per month. UCSF just paid for one thousand two hundred and fifty man-months of abduction.
> That's right, and that's a consequence of free markets and the astounding rise in overall standard of living in countries with free markets.

Let's talk about the end result in 2020:

- the chronic diabetes pandemic: half of American adults, 100 million, are pre-diabetic or worse because of HFCS (corn syrup). By 2026 it's estimated hospital budgets will almost entirely be spent on mgmt. of diabetes patients.

- the US outsourced so much of its pharma and PPE mfg. to China that is was unable to defend itself against a pandemic - we reverted to Roman times in terms of public health policy

- tens of millions of Americans don't have health insurance

You might hand-wave this away as complaints, but US society is rotten to the very core. Our standard of living is medieval for many.
Q: Why did you build that super-car, Mr. Ferrari?

A: Because I can.

Q: Why did you build those tractors, Mr. Lamborghini?

A: Because people are hungry and need food.

Q: Mr. Lamborghini, then why did you build a super-car?

A: Because fuck Mr. Ferrari.
That's a nice set of ad hominem attacks there. Do you have anything to say about his arguments, or just your interpretation of unrelated views he might hold?

Yes, Pinker has views that others find objectionable. But that has no bearing on whether poverty has increased worldwide.

Incidentally, The Guardian lists Enlightenment Now as one of its "Books to Buy in 2018", at least according to the Amazon page [0]. (I mention The Guardian because that's who the article is from)

0: https://www.amazon.com/Enlightenment-Now-Science-Humanism-Pr...
> First you had to have the productivity gains before you could have the labor movement.

That's, just, like, your opinion, man.

If the labor movement is considered one way of fighting for human rights, then, it's been around a long time, my friend.

Think: serfdom, indentured service, slavery.
Plus JavaScript is interpreted and JITed, it can detect and decide at runtime whether to use SSE or x87.
There is one made by previous Reddit admin/dev who understands how reddit works. It is nonprofit, developed in open and all policy discussions go through community.

https://tildes.net/
Also curious to know if you can get slightly better color spread by looking at it from far away; I assumed the misaligned light or distortion through the glass might be enough to throw things off if you're working with tolerances as small as it looks.

Or, maybe the electron beam scatters more as it's deflected to hit the the outer pixels, possibly giving you a signal too muddy for your magic potato pixels to work with.
(these are obviously just vague guesses, I didn't even know this was possible before today)
It sounds like I misread it - my apologies.
I feel like this article is simply premature. I think its headline is likely accurate, but all it can really do is cite the events we have been and are living through, not give any concrete suggestion of the consequences. I'm eager to see what kind of interesting theses economists will devise from studying this time period, but I don't think the article offers any in this moment.
One of the cliches of modern business is: don't outsource your core competencies.

If you are developing a text editor, you should put the time into your text editor. It's the thing that distinguishes you from your competitors. And it's the part that users interact with the most. Your users are likely to ask for features, like vi keybindings, that you can't easily build with the OS-native text field anyway.

Incidental forms, like your preferences screen? Unless you have a lot of time and money to burn, the OS widgets will probably be better than yours.
The Golden Suicides (2007)
There's also this place with very high (naturally caused) background radiation, and the residents have also remained quite healthy: https://en.wikipedia.org/wiki/Ramsar,_Mazandaran#Radioactivi...
a * * * * * *
Do you have any sources for people who are interested in reading more on that?
Deep Dive into JavaScript Object Property Accessors
I do not object to publishing a better result. Like the paper said serious craft goes into that and there's nothing wrong with typing it up and having it published. But it's not science; one day one time some how some way the black boxes have got to open up to address why. This is a very valid question and on point criticism. Even in basic software development why (eg requirements) should be known. It's not consequence free free to proceed otherwise.
My partner and I both work kind of an inverted schedule so it could be our body clocks. I’d bet the searches just have more to do with laying in bed quietly freaking out into google.
Reading the article, I took it that it's hard to get a smooth UI with a combination of async and a frontend/core split. No one likes laggy UIs, but I assume emacs/vim users can live with that.
Major data leak exposes secret FBI and US police documents online
DE⫶TR: End-to-End Object Detection with Transformers
For me it's about stopping me from myself. Willpower is nice but not giving yourself the chance is even better. A drug addict with willpower can keep some coke and not use it, but it's better to not have it in the first place.

To that end, the biggest single thing I have done is to remove the web browser and all entertainment apps from my phone. That has done wonders for me and my ADD. I never reach for my phone unless someone calls/texts me or I need to accomplish a task. Try it out for a month I doubt you will want to go back. My mind definitely has improved as a result.

I also put my laptop away in a drawer when I am not using it.
I currently use this to host https://emulator.news/ the docker support is on point :D
>One of those was learning about the xray project. I probably shouldn’t have taken this personally, ...

I've run into that phenomenon a lot with various startup projects over the years. It's soul crushing, and often an immediate reaction is to assume certain projects are direct competition, rendering your project fruitless.

In retrospect, this ends up almost never being the case. In a way, you become your own worst enemy. The correct solution is to simply ignore it and press on, but this is certainly easier said than done—especially when morale is already low, and without the benefit of hindsight.

>Perhaps more important, because these projects are more ambitious than one person could really take on, the community started around xi-editor is evolving into one that can sustain GUI in Rust.

In the end, I still think that counts as a success. Perhaps it will prove to be an even greater success than the original goal.

Thanks for all these write-ups, they're excellent. Like other commenters, I've been watching at a distance for years now. Your work is much appreciated.
Another popular story today was about parler, a twitter clone which allows mostly all legal speech besides obscenity. It may be a conservative safe space, but its not ban happy.

You can read their speech policy: https://legal.parler.com/documents/guidelines.pdf
Ones and zeroes on a hard drive and humans lives are fungible.

I don't get this alternate point of view outside of perhaps a belief in god and god may control things without a soul like a hard drive and can't control things with a soul.
And conversely it's more likely the culprit when things aren't working.
Original/parent comment for this conversation said:

> There's a worrying trend in the conversation these days that has shifted from "there's a serious problem with racism in how police go about their job" to "we need less police". Folks in neighborhoods living with the constant threat of gang violence don't have the luxury to sit in their aeron chairs and argue about defunding the police. They face the very real threat of themselves or their loved ones being shot on the streets and statistically not by police.

The contrary part:

> The threat of gang violence is not mitigated by police response. The threat of gang violence is mitigated by providing much better options for people who would otherwise join gangs. Police presence is immaterial to the lack of gangs in affluent neighborhoods.

Original comment basically said "police are important to protect against violence in neighborhoods where there's a lot of it. W/the implication that said violence is gang violence.

The response argued that if we want to decrease or eliminate gang violence, we have to address the root issue, which is basically criminal neglect of neighborhoods (lack of schools, hospitals, entire communities systematically oppressed, disenfranchised, and neglected, etc) b/c of systemic racism.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3698742/

'Conclusions. Relative “trauma deserts” with decreased access to immediate care were found in certain areas of Chicago and adversely affected mortality from GSWs. These results may inform decisions about trauma systems planning and funding.'

Where's the funding for hospitals where it's needed?

Or.

Let's look at the LA uprising (aka the LA riots). Let's look at Ferguson. Let's look at the riots in Baltimore. Those communities clearly had very strong feelings about the police.
1) Good luck with getting informed consent from every patient on all the myriad drugs and treatments that the FDA approves in a year. The bureaucracy that ensures that will make the FDA look like a fleet-footed fox.

2) Informed consent only holds until someone's child dies. Then you're in court no matter how good your contract is.

3) Who defines the informed consent boundaries? It's turtles all the way down. All you did was push the complexity around--you didn't get rid of it.

The FDA is where ethics and economics intersect. The problems don't have easy, magical answers.
The actual quote is

>Only 26% of members had an email address.

That is to say 74% didn't have an email address

Also

>of senators who voted for his legislation, 52% had no Internet connection.

It's not objectionable to propose that they hadn't bothered to use the thing they were trying to regulate out of existence.

The decentralized, global, many to many nature of the internet is why its just not possible to regulate like TV.

Whose norms? Just like you don't care for my idea of norms France doesn't care for the United States who doesn't care for Zimbabwes.

Even if we could agree how do you review content created by billions? Sisyphean doesn't begin to describe it.

In short if you don't want your kids to see boobies please install boobie blocking software on your own computers rather than expecting billions of people in 100 odd nations to conform to your households standards.
The Patagonia vests are quite nice though. Fortunately for me I live in a very non-hip locale where nobody else wears them or is aware of their association.
And thus the overwhelming challenge of UX becomes clear. People like different things. I don't maximise any of my windows.
I thought that was a stereotype of "wall street bros" and/or billionaires.
> Whereas he's proposing regular (dark as in color) matter

Wouldn't that kind of matter be easily detectable because it would block EM radiation, including visible light?
Theoretically it could crash at startup and not share much info (just IP address of the user).
I noticed cough popped up (when it did, because it didn't often) when I was going to sleep or first thing when I woke up. Low-grade fever randomly on and off during afternoon or evenings. Loss of taste/smell the duration of a few weeks. Random diarrhea throughout.

Loss of smell wasn't one of the more noticeable symptoms but it persisted for far longer and when smell suddenly 'turned on' and I could all of a sudden smell cinnamon when I sprinkled it onto morning oatmeal the smell seemed insanely noticeable due to its long absence.
I hope that this will democratise political discourse. At the moment, people having opposing view to the main stream opinion are having exceedingly difficult time sharing their content.

Reddit's main fault is their willingness to participate in politically motivated banning. I'm talking about the fate of The_Donald. (There are also other examples.) Reddit first persecuted and then effectively banned The_Donald because, in my opinion, Reddit is run by people who hate president Trump.

It's important to understand that the hate is not something that will go away after Trump but it will be replaced by hate for the next guy. It's driven by political tribalism, not Trump.

As basically all social media platforms are doing the exactly same thing as Reddit, we are not in a good place. We really can't allow our political discourse and views to be dictated by a handful of group thinking denizens of Silicon Valley blinded by political tribalism.
The described curriculum has very little to do with tax policy. It's mainly the history of applied science and engineering:

"This program will explore: what problems, challenges and hardships in life and work were faced by people in earlier generations and centuries? And how did we solve those problems through science, technology, and invention?

Learn about manufacturing from blacksmiths to assembly lines; about power from water wheels to combustion to electricity; about food from famine to industrial agriculture and genetically modified crops; about disease from basic sanitation to scientific medicine—and the struggles and circumstances of the men and women who worked to bend the arc of humanity upward."
Are you really wearing a mask which is tight enough that _all_ of your respiration is going in and out through the material? If not, your argument/question about filtration isn't very relevant.
I was also put off by the casual assertion that if business A is successful it necessarily means some other business B is less successful. It’s a false premise.
> that causes racism.
Elaborate?
Can't you just not let your kids use the internet if it's that bad?

If lots of people feel like you can't they just have their own network without blackjack or hookers.

Call it the ckeanernet and allow selective content like Wikipedia from the broader internet.
hmm, interesting question. should be. Windows Hello generates RSA keypairs I think.
Can you just use those as SSH keys ? The OS will take care of securing them in TPM if available.

If you wanted to use conventional file-based keypairs and secure the "passphrase" instead, maybe use the Hello private key to encrypt the passphrase into the credential store ? I am not up-to-date on whether there's a newer more secure way to store credentials, but seems like forcing a Windows Hello action to decrypt the data in the store should be sufficient.

I could be missing something though. Otherwise you'd think there'd be a solution from Microsoft already.
Professor leads a review of every drug being tried against Covid-19
Kind of ... https://hbr.org/2016/01/income-inequality-makes-whole-countr...
The grandparent post was calling for internet censorship.
I love the minimal API, but this would really be awesome if it was a hosted fantasy console style environment with zero boiler plate and shareable links. I know that sounds like a minor difference, but having to write even a little bit of boilerplate in a minimalist environment is a source of friction. Also, as said by many people in this thread, a simple sound API (PC speaker style sounds, sfxr, 10 hard-coded effects, etc) should be added.
There are GitLab, Automattic, Zapier, and Mozilla according to Amur Software [0]. They define the companies that are on the list with this method.

> To qualify as a distributed company work must be done primarily online and in a remote-first, remote-friendly fashion. Periodic employee meet-ups or corporate retreats are okay, and having office location(s) is okay, but leadership and corporate decision-making cannot run out of a centralized face-to-face headquarters while some percentage of employees opt-in to working remotely.

Recently, they released a new list of distributed companies for 2020 [1].

[0]: https://www.amursoftware.com/blog/what-are-the-biggest-distr...

[1]: https://www.amursoftware.com/biggest-distributed-companies
1. try lots of night guards, don’t stop just when you find one you can sleep with. Some offer even more comfort, etc. that can reduce clenching or soreness beyond just preventing grinding.

2. muscle relaxers if your doctor thinks it can help.

3. reducing stress

4. improve sleep posture and quality of bedding

5. establish rigorous sleep habits, like when you stop eating at night, when you stop using devices, adequate darkness, temperature control

No solution is guaranteed, it will be different for everyone. For me personally the main thing was trying many night guards even after finding one I could sleep with.

The most frustrating thing for me is that clenching recurs with work stress. I’ve talked to endless doctors and counselors about it, basically nothing anyone can do to help.