skysight-inc/HackerNews huggingface dataset:
That’s my question. Looks like the perp got shot once, but the cops still died, so how is that example a counter argument?
I sincerely hope that with all of the well documented instances of police abuse and lack of accountability in the last few months that people in the US are starting to wake up to the problem. Additional scrutiny from journalists like this is nice, but there ultimately needs to be powerful legislative changes.
why are only meme databases affected?
Clearly dead trees have some carbon storage capacity, otherwise there would be no fossil fuels in the first place.
Remote work is great for consulting gigs ... nothing like remotely talking to clients and being objective about it . Much better tan spending cycled to take the client out to lunch to build “relationship”. Guess it’s up to each of us but as far as the writer of TFA is concerned it seems he is one of the kinds who just like to throw his weight around and influence everything that moves in his office. Too bad COVID has democratized the situation and he is now exposed for what he is. This is common problem where all the styles and coolness of hipsters are not mattering much any more :)
Bad PR works to an extent, but bad PR can be combatted with good PR, not necessarily with changes. I think an independent regulator would be useful; one that can testify that a company is following best practices for data, etc. Although if the regulators don't have any teeth, or if they don't have a clear benefit for companies to allow a regular, comprehensive, internal audit, it definitely won't gain any adoption.
A carbon tax could make it viable - https://en.wikipedia.org/wiki/Carbon_tax
I kept my office because I just can’t get work done at home.Too many distractions
Barbados Welcome Stamp Program
But...their pricing punishes a spiky neighbor exactly as much as somebody dripping a tiny amount of content steadily for a month.
You don't need to @ the person you're replying to. It's clear from the comment threading and only adds unnecessary noise.
Those chairs don't look very comfortable
The question was posted early Friday morning. If this drove their services, I suspect a lot of us would've known about it a lot sooner than now...
It has already happened in the past. Repeatedly. There's news coverage about this at least once a year. And it doesn't require using Shodan as there are plenty of open-source tools for scanning the Internet nowadays.

For example, this was from the same news website a few years ago:

https://www.bleepingcomputer.com/news/security/massive-wave-...

I've also written about it many times:

https://blog.shodan.io/its-the-data-stupid/

https://blog.shodan.io/its-still-the-data-stupid/

https://blog.shodan.io/the-hdfs-juggernaut/

https://blog.shodan.io/elastic-data-exposure-grows-to-3-2-pb...
overall is a positive thing to consume less and produce more with the time saved by transportation. We should not work jobs only to keep the GDP machine busy.
I do like to have colorized output for my interactive CLI tools, but I will never understand a prompt other than "$" or "#".

Do people really need to continuously see all the noise like the host name, their username, the working directory, the date, or even their current branch?

Is hostname, whoami, pwd, date, git branch, and git status really to cumbersome? At least with hostname and branch I'm usually piping to pbcopy anyway.

FWIW, the -F option for ls is really nice too.
lol im sorry but this is probably not the best go-to example of real world consequences:

> What if one of the databases has a record of credits you've purchased at your local spin studio?

p.s. bobby tables did it first
> Recommend to setup two subnets in your project. One public and one private.

This is very good advice. We recently had a uni project where we had to use a MongoDB database. Somebody just apt-get installed a mongodb onto a DO droplet called it a day. Two days later the only remaining records prompted us to transfer x amount of BTC to a adress that was store in our DB. It just contained dummy data, but it is worrying that something like this apparently happens to lots of companies as well.

The only thing I find weird is that ElasticSearch itself does not offer a way to handle authentication, it was just enabled by a plugin that was paid (it seems like its free now).
> The "70%" herd immunity number is something someone pulled out of their ass in the early days. Recent studies show widespread T-cell immunity, and together with how a virus infection selects people for immunity (it's not the same distribution as a vaccine campaign), it seems that when 10-20% of the population has had it, that's enough for very strong community resistance, causing the virus to die out.

Granted, the 70% number is based on an R0 of 3.5 and homogeneous transmission. It's probably lower than that in many cases. In some cases it like prisons or close contact workplaces or other close contact activities it's going to be even higher as some incidents show.

The T-cell immunity is something we don't understand very well yet.

I hope that only 20% of the population will be enough to stop it, i really do, but right now i don't think it's very likely. We may have the first solid data points after the winter.

Yes, we get better at treatment and protective measures. As long as the hospitals are not overrun this may lower the fatalities a great deal. In Sweden it's looking quite good right now. In some areas in the US not so much for the coming weeks. When the hospitals are overrun, you can't help much and the fatalities will increase a lot.

Until next summer I will not judge which strategy works best. But I'd rather err on the safe side health wise and advocate for stronger protective measures even if it may mean a higher economic cost (that won't crash the economy completely). If we err on the wrong side, we could lose both, health and economy at the same time. After the numbers are in, we can say with hindsight what would have been the best course of action.
> with more than enough minerals to go around

I think we actually agree on most things except for this. China is hoarding rare Earth minerals, mostly the kind you need to develop batteries to transition away from our dependency on oil.

https://www.forbes.com/sites/kensilverstein/2019/07/10/china...

So no, we absolutely do not have enough minerals to go around, at least if you want to transition to alternative energy resources.
> Moving it back to AWS from GCP bumped the AWS bill to an average of $23/month. Not too bad given the site’s traffic.

I've checked the traffic, it was 2.3k users for entire June, like 75 user per day at average. It is effectively nothing, why author thinks it's okay to pay 1 cent per user per month to hosting provider? $5/mo VPS can handle two orders of magnitude more.
Ambiguity Machines: An Examination, by Vandana Singh

https://www.tor.com/2015/04/29/ambiguity-machines-an-examina...

Salto Mortal, by Nick T. Chan
http://www.lightspeedmagazine.com/fiction/salto-mortal/
Agreed, password is the bare minimum.
The CEO's quote doesn't suggest an "exit from manufacturing chips", contrary to the sensational headline. Rather, he talks about outsourcing production in exceptional situations. This is what he said:

> “To the extent that we need to use somebody else’s process technology and we call those contingency plans, we will be prepared to do that. That gives us much more optionality and flexibility. So in the event there is a process slip, we can try something rather than make it all ourselves.”
Motivational Code
It's actually a hard problem.
Think of CO2 like ping pong balls.

If you have a cube of balls 100 * 100 * 100 you've got a million balls. Then mark 400 random balls. Then lets them all fall to the floor. Find the marked balls.

That's what sifting though 400 parts per million looks like and c02 molecules are smaller than ping pong balls.
about hostname in the prompt: if you are logged in to a bunch of server debugging a problem, it's good to see from the first sight on which system you are executing a command.
It's definitely fashionable to hate on PHP but its modern incarnation has no more warts than JavaScript and the two languages are probably abused by developers at about the same rate.

Still, it would have been neat to see this headline read "Run Scheme in the browser through Babel" or similar.
I agree. How about just reading the text? The human brain is excellent at quickly skimming through text and recognizing patterns. We don't need colors.
I agree with you. The software culture is full of general and conflicting claims like "functional programming is better", "object orientation is bad", etc. Most of that is just useless noise.
I don't know anything about paleontology or zoology, but this general class of problem resonates with me. What do you do about people who are good at saying things confidently and quickly while you, in accordance with the norms of reliable science, want to say things slowly and tentatively after lots of research?

This is the old "A lie can get halfway around the world before the truth gets its pants on" problem, but exacerbated, I think, by modern communication. While it's genuinely good for science and for human knowledge that anyone can type up something on their blog and have it instantly readable to everyone around the world, and while it does open the possibility of a more meritocratic approach to science than journals controlled by established academics, we haven't really figured out how to apply our own skeptical eye to everything that we see in place of the traditional systems of review. And while others in the community technically can respond with "I'm not sure this is true yet, but my gut says it might not be, I'll spend a few days investigating it and let people know," it's unlikely to get anywhere near as much attention as the original flashy claim.
The watermelon is less debunked than you might think, due to black seeds in the painting. https://www.vox.com/2015/7/28/9050469/watermelon-breeding-pa...
This is a good point. I often "misspell" private information if its not an official form. If someone had more motivation, they could do a "different-secure-number-per-provider" trick and work out who leaked the information.
I myself have really enjoyed `delta` and the variety of configuration it has: https://github.com/dandavison/delta
You have the option to do AOSP at least. What do you have with Apple ? Why don't you apply the same yardstick to them ? Can you flash your own bits on an iPhone ?
Harry Eng, the Master of the “Impossible Bottle”
A really good, full-featured (Heroku-level) PaaS you can deploy to your own Kubernetes cluster.
I'd still have to have a mail server somewhere that receives the messages your service forwards to me though? Your service just provides one level of indirection, correct? Edit: and what about outbound email?
I'm guessing you're talking about Azolla[1]. That process was still on the scale of thousands or millions of years.
The real problem that humanity is facing here is the rate of increase. Even during what was probably the worst extinction event during the Permian-Triassic boundary, where the ppm of CO2 was eventually in the thousands, it still happened orders of magnitude slower than what we are doing artificially releasing the masses of geologically stored carbon. So, Azolla or other natural carbon sinks may simply not work fast enough to counter the rate of increase, let alone the existing extra carbon backlog in the atmosphere. Even if we manage to break even and stop the increase, the planet will continue warming because we've already exceeded the equalibrium that was in place for at least the entire length of existence of our species previously. There would still be ecosystem disruption and ice loss and flooding, but hopefully on a manageable timescale. The sheer quantities here are daunting.

1. https://www.scientificamerican.com/article/can-the-fern-that...
There is a fundamental difference between dynamically typed and statically typed languages though. And if you want to AOT compile a dynamically typed language, then you're going to need to include code that looks awfully like an interpreter in the final binary.
Oh, please, no "color codes".

Some of us prefer a monochrome terminal, with the only distinction being bright/bold and regular text. I'm all for modernizing the classical unix tools, but turning them into kitsch Christmas trees is maybe not the best way.
I have the Bose Quiet Comfort 35 II. I use them with a MacBook Pro through Bluetooth pairing. I never installed any app and never connected the headphones physically to anything.

What is the OP talking about? And why would anyone install an app to use headphones?
And the Hippocratic oath applies to online vigilantes how, exactly? Right now, I think these actions are causing more good than twenty years of lacklustre legislation have done, worldwide.
> It is, if you screw up with TOFU.

If you simply forget to check the fingerprint, you've got a problem, yes, and this is a risk if it's expected to be done manually. Most users simply can't be bothered, despite that their SSH security depends on it.

As I said though, if you screw up the TOFU check, it's game-over either way: you've failed to verify the identity of the server. If you perform the TOFU check properly, then you have verified the identity of the server. Again, this is regardless of whether you use a password or a public key to authenticate the user.

> This has different ramifications depending on how you authenticate.

Right. With public key authentication, the server is never sent the user's secret (their private key), unlike with password authentication, where the server is entrusted with the user's secret (their password).

This could of course be significant if the attacker is able to capture the user's password, perhaps for the purposes of setting up a man-in-the-middle attack, but I think it's reasonable to treat it as game-over if an attacker has tricked a user into connecting to a machine under the attacker's control. HTTPS works this way; we should apply the same thinking to SSH.
Putin says Russian Navy to get hypersonic nuclear strike weapons
Ah! I love it when I hope something exists then find it does.
We are going to release outbound/inbound SMTP feature soon, so you can use our service outside of Gmail (and others') 'Send Mail As' features. If you sign up (and don't add any domains or anything) I will send you an email when it's live. Or you can follow me on Twitter or subscribe to the GitHub releases. Or I guess you could just email niftylettuce@gmail.com and I will put you on the list to send to, haha.
Assessing Israel’s tactical laser breakthrough
I got started in SF by reading the anthologies. Typically vetted by people with a reputation. Fine way to find new favorite authors.

225 examples : https://www.goodreads.com/list/show/7967.Best_Science_Fictio...

'Escape Pod' reads new short SF, now up to its 740s; it was a 2020 Hugo finalist : https://escapepod.org/
> It isn't clear neither

What?
First thing I always do on any new VPS is to sort out SSH (disable root login, disable password login), set up fail2ban, install and configure ufw... and if I need to set up something like redis or similar, make sure it only listens to internal connections and also that it is decently auth'd. For deployment and other things I make users that can only write to certain directories; no sudo. It's nothing new or special but it gets lost in distributed systems.

It's a lot more work when doing it in the cloud and spinning up these things from docker containers in K8S...but you're entirely to blame if you don't know what you're deploying and don't understand any of the potential threats.
I don't think you are actually disagreeing with the author's point- you could easily replace "JS" in your statement with Java, C#, Haskell or a number of other "fast" languages and it would still be an accurate statement.

I, at least, have had the displeasure of using slow gui and other programs written in those languages.
At this time, the first link in that story is bad:

https://jacquesmattheij.com/content/story-behind-wwcom-camar...

This seems to work:

https://jacquesmattheij.com/story-behind-wwcom-camaradescom/
> this site was being used to host the spam payloads

Calling these "spam payloads" is incorrect. The spam payloads are on Faceboot's servers. These are sites that are linked to by the spam, ostensibly for the purpose of funneling to whatever the spam is trying to market. Trying to police generic web pages, rather than the spam itself, seems like an exercise in futility given the basic philosophy of the Internet.

> And this is how a lot of the early spam fighting worked: by finding hosts that allowed sending spam and publishing their IPs on blocklists

The situation has a similar shape, but there is a distinction as Dreamwidth is not actively sending spam but rather responding to requests from viewers. Still, we can look at the outcome of what happened to the email ecosystem - increased centralization of providers - for a warning of what's to come.
> The recent cancellations[1] for (arguably) non-hateful behavior creates a chilling effect.

I guess it might depend on what sorts of things you're used to saying. I haven't felt chilled at work, and haven't felt any need to adjust my behavior or the things I say in any way.

> One wrong word and you’re cancelled.

I think many of those words have always been wrong, and it's only now that people are correctly catching flack for it, because people are willing to go to HR with their complaints.
There is no suggestion that Google stopped said practice as well. But the indignation on HN (at least) is usually left for anything but Google.

You can see what information (broadly) Microsoft collects through Windows 10 in the opt-in screen for telemetry. More detailed information has been published here: https://docs.microsoft.com/en-us/windows/privacy/required-wi...
Welp, here it is - from https://www.garmin.com/en-CA/outage/ :

> Garmin has no indication that this outage has affected your data, including activity, payment or other personal information.
How do you prefer to read these?

They mostly seem to be free to read directly from the websites of their online magazines, like http://www.tor.com, http://strangehorizons.com, http://apex-magazine.com, http://uncannymagazine.com, http://clarkesworldmagazine.com.

So you would read them on your tablet or notebook? How would you read them on e.g. the Kindle? Print as PDF, and copy the PDF to the Kindle? Or some better way?
What about all the people who are considered "sinners" ? There's no love for them in the Bible
If it can run well on bad hardware then it will run even better on good hardware.
Actually, it's not just that it was unknown, it's also that it was particularly weird. It's not just a pattern, it's a cool pattern. Not just previously unknown, but of a previously unknown type.

That's what made it especially interesting.
There is a lot of incorrect use of word spam in this thread. But it is technically incorrect.

Spam means unsolicited email. There is nothing about this that means you have to send unsolicited email. An people who genuinely spam wont use a tool like this, as they would prefer a network of compromised machines and email accounts to using Amazon SES.

There is a middle ground, a grey area, as others have mentioned with dark patterns to trick you into opting in for things. I am not a fan of these, but this tool isn't really for encouraging that practice.
> I will never understand a prompt other than "$" or "#"

I agree with that, but some legit useful information in the prompt is the exit status of the previous command. So you may have a slightly less minimalist PS1='$?\$ ' which is typically seen as "0$" unless something went wrong. Another legit and useful information is the number of background jobs (set up to the empty string for the common case of zero jobs). Other information like the cwd, the time or the git branch are of course idiotic.
Hi, could you provide some details as to how you soundproofed your room? Which equipment, rough cost, time spent for setup, etc?

Would that also make the room ideal for meetings and produce audio quality without echo, etc?
For my local machines I don’t bother with hostname, whoami or date but the former two is essential on remote servers, so it’s good to have as defaults.

pwd is really useful since I’ve tons of terminals on tmux and typing pwd gets repetitive real quick.
I'd bet it has less to do with the cool CEO and more with the plethora of useful devtools and tech released by Microsoft lately.

Also, being able to reach a person on the phone regarding my Azure billing was radically different to being in contact (or lack thereof) with Google.
Another, lower-risk option: at some universities, it's quite possible for undergraduates to take graduate classes, especially if they've had the relevant background. So you could try applying to be an undergrad at such an institution. And you might not need to take that many gen ed. requirements if you find a university with flexible requirements (e.g., google 'open curriculum')

This is likely to be the easiest way to learn more theoretical math-and-CS subjects, though it'll probably be more expensive than just getting into a phd program.
In Re Twitter, Inc. Securities Litigation
It’s a good list. I have a copy of “The 100 best short short science fiction stories” somewhere in the attic. Pretty old now, but some classics from a variety of authors. I’m sure there’s cheaper options than amazon but it has the book details
https://www.amazon.co.uk/Great-Science-Fiction-Short-Stories...
I Migrated to JAMStack: Next.js, Vercel, and Contentful
With respect to interactive programs in a pipeline, this can already work today if the software is written to allow it. While it is common for interactive software to use the standard descriptors for I/O they are not required to. You can instead open the magic device, /dev/tty, which gets you new handles to the controlling terminal for the process.
It's all relative... Have you seen the size of an American oven, fridge, or microwave? Absolutely insane
I can relate to this so much. I am so afraid that something I say could be misinterpreted that I prefer to talk only formally. English is not my native language. And my communication skills aren't the best, which makes me even more hesitant.

So I end up speaking more with co-workers from the same country I am from because it becomes easier. This ends up forming bubbles :(. I wish I was able to speak freely and make friends with people from other countries also. But the risk seems much more than the reward.
Plenty of stuff to make that’s not on the cutting edge.
TLDR: Stupid is as stupid does.
I was surprised not to see Ken Liu on there, given just how many really good short stories he's written. If I had to pick just one, _Paper Menagerie_ deserves to be on this list.
Actually, you're better off with a modern AMD processor and artificially throttling it to a lower TDP. Or you can go with Ryzen APUs that are available for laptops with TDPs as low as 15W for 8 cores. The secret is that the all core frequency is 1.8GHz.
Setting up a custom 404 page with Caddy v2
Shodan Monitor will do it and if you're only keeping track of <= 16 IPs then you would just need the membership which is a one-time payment of $49 (i.e. no subscription cost) for a lifetime account upgrade (https://www.shodan.io/store/member). You just provide an IP/ network/ domain and we'll notify you if anything changes or becomes vulnerable. It's basically Google Alerts but for network ports:

https://monitor.shodan.io

Disclaimer: I'm the founder of Shodan.