skysight-inc/HackerNews huggingface dataset:
> yet it's incredibly expensive to develop SW

It _can_ be. At the same time some of the most used software in the world manages just fine without a company running paid subscription plans and locking free users out of critical security components.

ElasticSearch/MongoDB/Redis et al are trying a new model for how to create OSS with a company behind it funding all/most of the development. That's OK, and I'm super interested to see how it works out long term. But there are many many counter examples of similar sized or way bigger software projects that never needed to do this. Pretty much everything that those three databases depend on to be used in applications is OSS that never had a "paid subscription" locking access up. How useful would any of them be without Linux, or Apache/Nginx, or Ruby/Python/PHP/Perl.

My fear is that half-assed-OSS that does a _great_ job of "capturing developer mindshare" but a lousy job of securing free use of their software - is one day going to be the root cause of some _spectacularly expensive_ data breach, after which pointy haired bosses and less technical C suite suits are going to feel the full power of Oracle's golf-course-and-expensive-restaurant marketing army, and nobody in a company bigger than 10 or 12 people will ever be able to use any database with less that a half million a year license because "due diligence!" and "risk mitigation!" (and "Waygu steak with expensive whiskey" and "dirty free software hippies exposing you to data breaches!!!")
What kind of power are you hoping to gain? Power to say anything you want, or power to prevent abuse. I don't think you can have both.
Nice list. There is lots of new stuff here for me.

The obvious miss is John W. Campbell's "Who Goes There?" (1938), which is the inspiration for the movie The Thing.
Absolutely.

Of his novels, I always recommend The Fifth Head of Cerberus as a starting point. It's relatively short (it was expanded from a short story), and it marks the point when Wolfe's fiction matured. It's as deep as anything else he has written. If you end up liking it, you will almost certainly love The Book of the New Sun, his masterpiece.
And what if the thing I'm building isn't intended for the public internet?
I recently heard about a lab using Brainbow in primates to image the activity from a lot of neurons simultaneously at single neuron resolution, using a color camera. The amount of neurons we can map anatomically and record from continues to increase!
I have the first gen, not the model II’s. It doesn’t have the button on the left side.
I have my own domain, my own bind and my own mail servers. I forward all the mail to google for reading and searching and the main value I get out of it is I actually understand how DNS and SMTP work. Which comes in handy once a quarter at work. I book marked TFA because I never got the newer (!) stuff setup like proper TLS and DKIM. It is very old setup from like 2005 or so and I think is grandfathered into Gmail somehow. At least my newest domain I treated worst than my older ones.
Smart glasses.

Apple is rumoured to be announcing their version of the Google Glass some time this year. Their recent efforts around augmented reality seems to confirm that. If the rumour is true, and if it succeeds, then it will be interesting times for wearable tech.
People learn the hard way that kids in school/daycare are very different than kids at home. Even at an age when they can largely fend for themselves there’s a lot of difficulties that come from trying to focus on work while kids are around.
How's Linode on this sort of thing?
Because the open-source version of Elastic does not contain any security (not even a basic auth) and requires at least a reverse-proxy in front of it which adds difficulty of connecting two things together. And Elastic-licensed Elastic with Security needs to be configured by chaning its config file. That is apparently too complicated for most "IT specialists". :) `sudo apt-get install elasticsearch && sudo systemctl start elasticsearch` and they are done.
How about all professionals in every industry being competent before doing anything? Then we wouldn't have any issues in society.
I fail to make it more obvious but this was the idea:

>Exist a kind of self-defeating idea .. (programing langs)

So

> Is pretty weird. Specially from programmers: Why are we building new software (other than programming langs)? Anything we do, "somebody have done before" (I must have put this in quotes!).
I think the Indian one was cheaper, so they probably bought a big batch then sold it in the US for more expensive US prices. Indian model also had dual-SIM, which US phones generally don't have.
Our JIRA and Confluence are working normally so...
I believe a server wriiten in a memory safe language greatly reduces the risk of running such setup. To the point where it is an acceptable trade-off to get simpler maintenance.

Depending on how many targeted attacks you get in a day, you may pull apart the monlithic server and run inbound processing, filtering, IMAP access and outbound queueing as separate processes or even on separate systems.

(Probably i should put a better wording on
https://foxcpp.dev/maddy/faq/)
I agree completely that some people fit that bill; I'd argue however that even for them, the skewed incentives of research success certainly help support that particular approach to fraud. My premise was that most of the people committing research fraud are probably not sociopaths.
Smaller file sizes, less bloat
Absolutely. Laziness isn't an excuse for not caring about security. Security should be the top of your mind any time you connect anything to the internet.

The fact it's not, is why we're seeing major attacks/leaks/etc almost every single day now.
If meant as a public service, it would have been much less destructive to use the change passwords API [0] to set random passwords for all of the users.

[0] https://www.elastic.co/guide/en/elasticsearch/reference/curr...
I mean, I'm early in my career and I feel the same way.
A large tree expands, puts down new wood, at a far faster rate than the tiny saplings making these chairs. Per acre, a forest growing naturally would product far more wood. So, for a given acreage, a managed forest would product more wood per year, more chairs, than these art pieces.
Deadlines aren't an issue for me.

The problem are artificial deadlines that are too soon.
They don't.

But let's say you are:

- on holidays

- sleeping

- sick

- on a party

- etc.

Having setup alerts would still have reduced the bill.

Still assuming that something like 2h pass before you can react to an email is quite reasonable which would still have been ~150$ on the big day, which is ~6x of the normal _monthly_ cost in 2h...

And that is assuming the alerts are send real-time, which they are not.
My first introduction to sci-fi, I think, at the tender age of maybe eight, was Ray Bradbury’s All Summer In A Day. It uses the fantastical setting of human colonies on Venus to starkly illustrate both the thoughtless cruelty of children and their ability to later understand what they’ve done. I don’t think of it often, but it was formative. So thanks OP for the reminder. At that age, with my experience then, it had the same effect that The Lottery had on a lot of older people, I think.

An engaging novella by a now-dead luminary is The Fifth Head of Cerberus by Gene Wolfe, 1972. It’s a book of three short stories, written in three different styles, all interrelated and containing a central mystery.

Wolfe is well-known for hiding puzzles in his books that deepen your understanding and appreciation of his stories without detracting at all from a more casual reading. He’s my favorite author, and I’ll freely admit that he’s hit-or-miss sometimes. His best works, this one included, are in worlds (usually some iteration of our own) where long-established systems are in a state of decay. More like an ill-maintained shed that’s still used while being slowly pulled apart by a beautiful trumpet vine than some catastrophic dystopia, and not without hope. He also has a knack for making sci-fi look like fantasy until you pay closer attention that I really like.

If you’re someone who likes to re-read your books, check him out. I’m still holding out for Book of the Long Sun to be made into a miniseries; it’s one of the reasons I bring him up so often. Someday, the right set of eyes may read this =)
PhotoStructure is absolutely designed for self-hosted family-and-friends access of local photos and videos. You'll get installation instructions emailed to you shortly after you subscribe to the beta. https://PhotoStructure.com

(Disclaimer: I'm the author, and wished the same thing you did, so I quit my job to build it).
If only one parent is working they might get roped into helping out the parent who normally stays at home. At least that's how co-workers in that situation have described it to me; small children don't understand why daddy is home but can't play with them, plus you feel guilty not helping your spouse if they're having a rough day.
First off, I say the following as kindly-spoken words :)

I'm grateful that you and I both know to be critically-minded, and we understand the difference between essential features and data-grabs, but honestly... my Dad needed me standing over the sketchy wifi thermostat (that required an app and Facebook login), loudly complaining about how invasive it was, to even understand that this was not OK and worth returning the product. And he's spent years osmosing conversations with his tech-savvy, upper-middle class son. Further, many people take for granted that they can trust a brand like Sony, so they're not in critical-thinking mode about this stuff -- it's quite confusing to know what is reasonable when you're just trying to get the thing done that was literally just a male-female plug before.

I do believe you're a caring person (most ppl are), but the practical effect of your position would lead someone to judge that you don't actually care about the data of the vast majority of normal people across many demographics. I kinda suspect that isn't true, so I'm wondering if maybe you'd find some dissonance in your own views on closer inspection <3
CS PhDs are normally 4-5 years long. I powered through bachelors to PhD in 7 years (the short duration mostly motivated on keeping costs down). What you are describing is possible. I'm not convinced it is the best idea. A strong CS university undergrad may be 95% redundant, but that 5% matters. I expect your colleagues with degrees might have gotten less from their educations then you might in the same classrooms. We teach a lot more than people actually seem to remember. Don't discount going back for the bachelors. It might be worth it. A lot of your classwork for your PhD will be forcing you to take many of the same classes anyway.
What if your shop door was locked but was laughably easy to open with lockpicks? I get to victim blame you for choosing an insecure lock and browbeat you into purchasing more expensive and onerous security.
But then it only takes one person trusting a bad guy to bring down the network.
This hit the nail on the head for me. I belong to the same generation and have felt pretty alienated by the expectancy to let my life revolve around work to the point where my company expect that I am going to hang out at work a couple of nights a month and hang out with co-workers inbetween that.

The world is so social, I have large circles of friends/aquaintences from my hobbies, from university, and from back home. I have my apetite of kind of, but not too close, friends more than satisfied, and would rather have alone time or time with the most important people of my life.

Everyone is different, but before I could work from home I stopped going to lunch because I just needed that time alone as the rest of the day was full of people. I'm not bragging, because I'm not sure if this really is better than "just" having your work and your few work-pals in life than the endless social circles and the hundreds of people you are strangely intimate with through FB, IG, snap updates.

But it is what is and I hope I never have to go back to office life, in that case I have to cut out some social media, some friends and/or a hobby from my life to survive.
According to this source [0] the factor is closer to 1.25x - 1.4x or 1.18x - 1.26x depending on which source you listen to.

[0] https://beebole.com/blog/how-to-calculate-the-real-cost-of-a...
According to Apple’s show Home, they grew a massive house out of bamboo in 5 years.

https://www.archdaily.com/937954/new-documentary-series-expl...
The childcare situation is most likely a pandemic related problem. In a more normal world you'd arrange school and childcare just as if you had to commute to work.

Having a private room, at least for me is always a very important aspect of getting stuff done from home. I make all the effort I can to make it not look or feel like a corporate office, though.
They go over multiple topics. Check the top comment for timestamps.

If you want to hear the full story I suggest listening to this podcast episode: https://www.youtube.com/watch?v=JLb5hZLw44s.

It's long, but I found it very interesting.
Quick App Generation for Test by Quick App IDE
Blogging with Shell Scripts and Markdown
I hate to laugh when people's hard work is being destroyed, but this is some impressive trolling by the attacker:

> An interesting theory as to why the attacker used the term "meow" is because cats like to drop (or knock) items from tables.
I love that there’s no open office anymore which I hated. It had nothing good to offer other than saving rent for my employer.

I hate that meetings have already started to spill into Saturdays, Sundays, and beyond 6pm and attendance in those meetings are now being subtly demanded which began as requests because someone’s calendar would be “full”.
If you're referring to the WFH situation staying with us forever, it definitely will not. Things may change somewhat, but in discussing WFH with a variety of execs who employee tens of thousands of engineers collectively, there is a very strong majority of engineers who would come back to the office tomorrow if able.
There's no such thing as fully open debate, there is a vast multitude of potential opinions out-there, and even in these Internet times, between platform limitations and personal limits, and few legal limitations, virtually no one gets all possibilities. Which is to say, "cancel culture" isn't anything new. People have been denying platforms to other people forever.

The thing is that the US has a long history of ordinary liberal democracy coexisting with white supremacy. Not just in opinions but in actual reality - Jim Crow was the law in a large minority of the country 'till the 1960s in significant minority of the country. This situation looms large in efforts to deny a platform to white supremacy.

"Should we allow free speech for white supremacists" has been a constant question of civic class but with the tacit and generally disingenuous implication that none of the people in such effete debates would ever subscribe to such things but that this is what happens in an "oh-so-wide-open-and-tolerant" society as the US. When the reality was loud speech favoring white supremacy been just below the surface in a fair portion of American society.

Consider how Charles Murray's soft racist positions get a wide display at US college financed by a large network of right wing racists. Charles Murray has appeared in large university ballrooms, not because of academic credentials but because of money - protests by the student and faculty have periodically forced this racist to retreat.

That's the fight to allow or deny people platforms has been going on as long as platforms exist. Not every fight the left or right engages in hear is reasonable. But the fight deplatform misogynists and racists in particularly from socially significant platforms seems good and the push back seems disingenuous. "Free speech for anyone, even Nazis" is frequently "free speech for the pure mainstream and for Nazis but no one else" - remember Milo Yiannopoulos.
Did you reply to the wrong post?

> You shouldn't spread false information.

Curious about which part of my post you think is false. Perhaps you didn’t read my entire post and just blindly posted before you got the the second paragraph?
This is a sad story but I really like the idea of “decrying the mainstream palaeontological world as if it’s part of a conspiratorial cabal of blinkered elites”.

I mean I can at least understand the internal logic of, say the climate conspiracists who think that climate scientists somehow stand to profit from their reports. But paleontologists...seem beyond the pale, so to speak.
This might be right, but it’s also true that most Common Lisp program can be compiled to machine code that’s very similar to what a C compiler would produce, except for the occasional runtime type check.
> Why do people keep making the same mistake?

Because there are always new developers showing up that haven't been taught. (Eternal September if you will)

The real solution would be:

1. We are past the point were our practice needs professional licensure. We need standards, a governing body, and ethics.

2. Those above items need to be taught to new developers. How long has security been an after thought to CS degree programs? I know I never touched it in an academic setting. We didn't even have a class that covered it. You wanted to learn about it you had to seek it out.

3. Vendors to do the right thing and stop offering default passwords. That isn't going to happen, so we have to force them to, either trough legislation or through other means.
Because you're completely wrong; what you're advocating is nothing more than security by obscurity. An address is just an address; it tells you where something is. If you don't have a firewall in place, then any attacker who cares enough to actually route a packet to your internal servers can access them. If you do have a firewall in place, then an attacker gains nothing from knowing the address of a server they can't send any packets to. Private networks add a huge amount of complexity with its own security holes (they're easy to scan once you're inside them, a lot of operating systems treat them as somehow "safer" than the public internet...). They do more harm than good.
Eric Weinstein: The Mathematician Turned Physicist and Economist
Right, well now we know why secure by default isn't a thing. If your product is super onerous to use, people will switch to a competitor that is easier to work with.

A secure by default product is a dead on arrival product.
A new Ethereum DeFi token is literally up 100k% in a week: VC
I didn't just invent this idea that businesses are careless with data their customers would prefer to be kept private. Basically every breach we ever hear about features this prominently. Somehow we've created an economy in which there exists a vast asymmetry between corporations who pad their books a few percentage points by abusing their position and the humans who suffer such abuses. The fact that the publicity of small bits of data about a human can cause that human massive harms is itself a contingent creation of our screwed-up system, which benefits the giant companies whose lobbyists write the laws. It's as if someone decided we should all live under the "protect your True Name at all costs" system from the Earthsea novels, without giving any of us any way to do that.

There's very little a customer can do to determine how or even whether her confidential data is protected. Even if she had this knowledge, in many cases she can't just decide to do business elsewhere. In many cases she was never a customer in the first place! In this context, an open database is like a shoddily constructed tall building that will collapse at the first stiff breeze. It shouldn't exist, and anyone who destroys it upon discovering it is doing humanity a service. Even if the building's owners had somehow kept the general public out (which you'd like us to assume), those owners themselves increased their danger with every bit of data added. Now, since the building has been destroyed, its owners and occupants are no longer in steadily increasing danger.
huh, my Sennheiser headphones can control the noise cancelling with buttons on the headphones. Some limitations were annoying (2 connected devices at once, it gets very confused by my dual boot machine) but sounds like I dodged a bullet with brands requiring custom apps
Installing the terminfo also works: https://github.com/alacritty/alacritty/blob/master/INSTALL.m...
I think you might be conflating these (or maybe I should say the gp is). Nevertheless.

Do you have a reference to the history of key combos like ctrl f, b, n, p and a and e? Those are typically referred to as emacs style navigation and I am genuinely unaware of history of those as common tty control codes outside of emacs for cursor movement. They weren’t dec vt control codes. Ctrl-U was though and even has ASCII assignment as “NAK”. Ctrl-H and C are similar.. but people don’t typically refer to those as “emacs” keys.
Yes. Why does it matter than the particular example I chose had a cutoff date 2008? It's the same issue with any language, program, platform, OS, etc. Even if you implement the latest stable version of any of these things for any project, tech debt begins immediately. In fact if you're dealing with established enterprise software, you know right away what the roadmap & minimum end-of-life is from the day it's released. (as side topic, that's part of why mediocre enterprise software is often chosen over newer better options: because predictability is valued over the newest/best/fastest that may be subject to disruption if the vendor goes away or gets acquired-- something I've seen happen a few times. A vendor gets acquired, we get a "Hey Great News!" message from them along with an "Oh by the way our new parent company is transitioning everyone off our platform to their own completely different offering over the next 6 months, hope you have the capacity/bandwidth to deal it #sorry-not-sorry"
> Many companies are only willing to enter into research agreements with a lab providing that lab is willing to sign an NDA. This would prevent companies like Google, NVIDIA, Apple, and Facebook from working with research labs. This is especially short-sighted since a student who is working at a federally funded university will have to publish their work.

There are different types of NDAs. I'm more concerned about the ones which are used to silence whistleblowers than the types used to protect pre-release product information, PII, or partner trade secrets. That's not a difficult split to make. Tools include: (1) Time bounds on NDAs. (2) Domain bounds on NDAs. (3) Publishing the agreements themselves.

This goes for a broader set of abuses too -- not just research fraud, but also sexual abuse, gross negligence, corruption, etc. A lot of this stuff goes on at elite schools, and lots of people are bullied or bribed into signing their rights to talk about this stuff away.

> This is already true. I have known many faculty whose emails were FOIA-able and as a result, they preferred in-person communication for sensitive topics.

This is not true in general, but it is on some specific government projects. Most normal grants (NSF, etc.), it's definitely not true on.

As a footnote, odds are if faculty weren't willing to conduct business by email, something improper was going on. That thought process is common in a corporate setting, but not in an academic setting.
The Rise of the Netflix Hit