skysight-inc/HackerNews huggingface dataset:
There are a ton of fees added on to rental cars, especially when you rent at the airport, in addition to taxes. I wouldn't have said 2x the base rate but you can definitely hit 30-40% uplift. When comparison shopping rental car pricing, you absolutely have to know if it's the base rate or the all-in price.

Hotels have some of this but the overall uplift is usually a lot less--at least until they start adding "resort fees" to otherwise discounted rooms.
Online Dating Events
"Are you looking to participate in some of our Dating events through our virtual platform? Are you sick and tired to be wasting so much time driving to work everyday, stuck in traffic for hours and then having to drive some more to attend Singles events?

From the comfort of your own home or office or wherever you are, you can attend our online dating events via zoom. Go ahead, take a quick peek, you just have to click so you can meet your special someone. https://bit.ly/30Qytqa

What are your thoughts about online dating.
Deeper Than Disposition: Aristotelian Virtue
In the US you typically pay for masters programs but not for PhD. (And most if not all PhD programs don't require a masters degree. Sometimes a masters degree is given during the PhD, depending on the school).
Currently there is crypto mining malware infecting exposed Redis servers (kdevtmpfsi)
What the government needs to do is do it's job of providing national security and mandate serious security protocols and help deployment funded by progressive income and wealth tax or steep fines covered by insurance with rates set by appraisers.
If the attacker can write to the DB, then they can add entries to every table with the string "Hey your database is unsecured!"
“Program” can refer to executables if you’re talking in the context of old programming languages such as Pascal and COBOL as they’d literally have a “Program” statement. But I don’t recall anyone calling individual executables anything other than exes on Windows.

As for the API naming conventions, Wikipedia describes the use of “Application” pretty well: https://en.wikipedia.org/wiki/Application_software#Metonymy
Introduction to PostGIS
I think this is a little simplistic. Depending on what data is being deleted, it may have real life economic consequences for individual people. What if one of the databases has a record of credits you've purchased at your local spin studio? Hopefully they have a back up, but if they don't, you and/or the owners stand to make significant losses. Are there databases that could be lost without consequence except to their owner? Sure. But that is far from all of them.

I also just think it is a little uncharitable to wish harm on people simply because whoever did their IT was inexpert at their job? Like, how does the local mom and pop correctly evaluate a person's IT chops? The nephew says they can set up their website for cheap, and they want to be nice, so they give him the job. Turns out he's a newb and later their database gets deleted and you are on here saying that's a good thing? Hrm. I don't agree.
A donation does. But paying a university for admission for your children isn't a donation.
Probably because a bunch of stoners are putting a password on their database right meow.
I have said it over and over and will repeat it happily:

IF your Services doesn't has a proper limit, you do make yourself suddenly liable to a much higher risk than before and you have to be aware of this.

It is the same shit when you rent a car: Do NEVER rent a Car without proper insurance.

I'm working with GCP professionally and i have used AWS in the prev company. I do ask my manager if i can use it to try a few things out and its fine but i will not put my credit card behind an account with unlimited cost risk (its limited probably but you know what i mean).

And its not even simple; Everything costs you money. Storing data, receiving data, pushing data, making api requests etc.

And what i find always quite surprising: How often people, even on hn, present simple file based apis where you can upload images and edit them or upload files and download them again or offering free services and that with AWS as a backend.

I just might be to long in this industry to see all those pitfalls of exploits and risks everywhere but i have the feeling that obvious respect against cloud service billing is neglected by most.
You can say the same thing without insulting everybody. "Just saying" is a value-free non-apology; if you find yourself using it, you might want to reconsider your delivery instead.

Practices like this are why I disabled google play store at first (why does the play store demand access to my camera, mic and body sensors???); and later got frustrated with the number of apps that were fundamentally broken without it. This prompted me to look for alternatives, which is why I use lineageos today.
This is an ineffective solution that will likely never even be a blip on the scale, much less approach the critical mass it would need to have any real effect. You're really only fooling yourself if you think the average person is going to go through any of that trouble, especially with the prevalence of locked bootloaders.
Would you send or let people venture out into the Wild West in its heyday unprepared and unequipped?

Why aren't we applying this same logic to CS topics? It's a vast world out there and much of it's out to get you. Be prepared or die.
Thanks for mentioning that, one of mine has been doing that for months and I'm contacting support now that I know that it's a common thing.
> overall it is a cost

What does this mean? Seems like it is a cost from some perspectives and a positive from other perspectives.

From the perspective of green businesses, likely a positive. From the perspective of society, removing the negative externality is likely a positive.

The only cost it imposes is on those who were previously externalizing their costs on to society.
That's what people said about Japanese back in the '80s; you practically couldn't open a newspaper without seeing somebody mention it. Didn't happen.
"...a major concern about the studies which argued that grit has a strong impact on success is that they were based on selected samples such as West Point cadets (Duckworth et al., 2007), employees in technology companies (Jachimowiczet al., 2018) or students in inner city schools (Eskreis-Winkleret al., 2014). These samples were drawn from institutions which are characterized by a homogeneous socioeconomic population (and perhaps even by population that are homogenous in their intelligence)—a characteristic which is likely to impose a range restriction on important predictors of success."

Ow!
A favorite sci-fi speculation of mine is that all that goofy geomancy and similar "edge of seeming like it means something" stuff in occultism is some alien intelligence attempting to send us the knowledge required to come visit them. They've found some exotic way to influence minds at a distance, or to transmit information such that minds might "resonate" with it, or something. What we end up getting are distorted glimpses of theories of quantum gravity, how to build an Alcubierre drive, etc., but we think its angels, demons, and ghosts and basically construct a cargo cult around it.
If you have noise cancelling there is allready mics right?
Seems to me like intelligence and drive ("grit") are multiplicative factors. Saying either is more important sounds wrong because if either is zero, you have nothing. And if intelligence is fixed, then working harder is the only way to improve your chances. From that perspective, "grit" is the only thing that matters.
The GitHub link to Generic Colouriser points to an outdated and unofficial fork. The canonical one is at https://github.com/garabik/grc.
I've thought this about Maven Central before (not familiar with Leiningen, but it seems it's trying to do a similar thing).

Maven Central has PGP signatures for all uploaded artifacts - but they are in fact useless, because anyone can create a PGP key that claims to be (say) maven-releases@google.com and upload that to a keyserver. There appears to be no mechanism by which a consumer can know whether the signing key should be trusted, so an attacker uploading a malicious artifact can easily upload a malicious signature with it.

I'm not going to argue with any of the criticisms of PGP in the linked article, but they don't seem hugely relevant to the problem here; the fundamental trust problem is much deeper than "GPG has janky code" (and it's not like there aren't any other options at all).
Sounds expensive, but how much does the average salesman spend on their car to look the part? Or a banker on their suits? Or a founder on their bicycle?

Seems a reasonable expense to reflect Troy's commitment to IT, encourage people to take him seriously, and eventually - pay him more.
Made me smile. The colors are great! :)
So if you are in a building held hostage by a terrorist they deserve your basic respect? You’d never use violence or abuse against them? Or a mugger? Or a Nazi camp guard? Or a gay conversion therapist? Or a rapist who violated you? Or someone who falsely accused you of rape? Or someone who murdered someone you love?
So what does this really help?

Do i get now a higher liablility because the alert alerted me and i now need to be aware of it?

so i'm going on holiday and i'm fucked?

You know, a billig alert is a nice thing, its not the solution. Host a few things on AWS, tell me your endpoints and your bill just might be already in deep shit before you read your bill.
I linked to the paper is another comment. They used the Armed Forces Qualifying Test (AFQT) for intelligence.

>The AFQT score in the NLSY is the sum of the standardized scores of four tests: arithmetic reasoning, paragraph comprehension, word knowledge, and mathematics knowledge, and is expressed as a percentile score out of the general population

To my non-expert perception this does seem like a test that benefits from studying and general schoolwork (ie: reading books).

They used the The Short Grit Scale to determine grit (http://www.sjdm.org/dmidi/files/Grit-8-item.pdf) which seems like it biases toward un-creativity and "OCD completionism."
Travelling During Covid
Online dating events for all singles|Take a peek
I think that depends on how severe they are. If that's 12 thousand reports of covered up beatings, that's extremely alarming. If it's 12 thousand reports of "showed up five minutes late to work", that's less alarming.
I believe it's the same effect as micro-transactions in mobile games.

It's really easy to justify paying $1 for a small upgrade while you're playing. And only afterwards you notice that those $1 added up and have financially ruined you.

In the same way, $0.08 per GB (the effective price in the article) sounds really small and easy to justify. And we forget how they can accumulate...
A simple API which allows you to spy what people searches on search engines etc.
Nice to see a mid-90's page still up: http://mrob.com/pub/comp/xmorphia/
Glad I've been using analog earbuds under non-connected noise-cancelling 'over-earphones'.
The paper is behind a paywall and not open-access, so here are some pieces of information I thought were interesting:

"Intelligence" was measured by an individual's performance on the "Armed Forces Qualifying Test" (AFQT).

"Grit" is self-reported on the "Short Grit Scale" which asks participants to rate themselves from 1 to 5 on statements like "I am diligent."

"Success" was measured by level of education attained and hourly wage rate in 2015.

Control variables include: Gender, household income as a child and level of education by parents. Study participants were born in the early 1980's.

Top-level findings:

> Although in our representative sample of the American population grit does explain educational and job-market success
over and beyond other predictor variables such as socioeconomic status, intelligence, and the Big Five personality characteristics, its absolute effects are rather minimal. In particular, its effects are negligible in comparison to the effect of intelligence. Finally, the effects of grit were also considerably weaker than the effects of conscientiousness.
It can definitely have real world consequences, but couldn't the same be said for somebody being a whistleblower for a company that doesn't following building codes? The company could take a huge financial hit and people might lose their jobs because of their practices being exposed.
20-30 years from now, over 10% of the earth will be uninhabitable, so we need to start cutting emissions drastically last year to avoid catastrophe.

The outlook is getting exponentially worse each year. But, yeah, we need to be strongly net negative in a few decades.
Here is one example of a coincidence/synchronicity that may fit the “twin” bill in regards to the birth and death info of two notable persons found on their respective wikipedia pages:
—Thomas Fitzalan, 5th Earl of Arundel (13 October 1381 – 13 October 1415)
—Tommy Whittle (13 October 1926 – 13 October 2013) was a British jazz saxophonist.
Not only had they both died and were born on the same day— October 13, their first name Thomas means “twin” in origin.
I think in this day and age we should be making bigger jumps than wanting color in our CLI.

We should have more than one font, we should have pictures. We're visual creatures, us humans. I think something like Jupyter, with in-line images et al is the future, or should be, at least.
They care. It exudes as a cynicism about the world and continual jokes about talking to the FBI agent assigned to watch them. They (as are we) are just powerless to prevent it as every single service and every single platform and apparently every single product is collecting data on us. And since the value of services and platforms and, sadly, even products goes up as more people are using them, the arguments of "don't use these products and vote with your dollars" that people constantly push are nonsensical: you can value your privacy but also value having a romantic partner, and most people these days use dating apps to date; you can value your privacy but also value getting invited to the birthday party, and most people these days invite everyone to their party on a social network; you can value your privacy but also value being able to travel, and so unless you want to be the one insane person in your friend group who doesn't use Lyft/Uber and never knows when the public transportation is running late and takes forever to book hotels (and always ends up spending a lot more when you do)... well, you are going to use a bunch of apps that do a bunch of data collection.

People care. They have no choice.
The first real issue I ever had was last week though, truth be told, it was mostly on UPS. (They didn't make a scheduled delivery pickup, then their tracking system eventually said they picked something up even though they didn't. Amazon did issue a refund when the item was "picked up" so I assume it's all on UPS now.)

The problem is that I was utterly unable to talk to a human at UPS. I even went to a UPS Store but they were powerless to do anything.

The thing is that Amazon's automated chat bots and so forth just kept referring me back to UPS.
Generalizing/ignoring details/bluntly, the people using the fossil fuels are rich and do it to buy more stuff/go on holidays more often. The people doing the deforestation are poor and do it to survive (sometimes in order to make stuff for the rich)

It doesn’t help telling poor people to stop deforestation, because they have no choice. The way to get there is by having the rich consume less.
Putting it out there as an idea, might inspire others and might help.

Machine Learning is the most closest thing we have, as far as i know.
They're still growing the first batch, apparently, and still taking pre-orders.

https://fullgrown.co.uk/

And apparently investors (with some sales numbers):

https://www.shadowfoundr.com/investments/583/full-grown/?fan...
One of the chief functions of a mainstream dictionary is to guide users on usage. Irregardless of the principles possessed by Merriam-Webster's editors, they still have to warn readers when a usage will be conspicuous. Chumming the water for pedants can only be a distraction.
https://www.scientificamerican.com/article/how-scientists-so...
Totally agree. I have alerts for 50% and 120%. If I get the 50% in the first week I'm digging in then. If I get the 120% I'm watching it like a hawk from then on (and letting accounting know).

The article says they would not have helped but it doesn't say why... Maybe because it's delayed by a day?
When I work on embedded Linux stuff I sign my packages.

Shipping hardware as opposed to software allows secure deployment of pre-shared keys which can be trusted.

Even if someone hacks our automatic updates server (not too unlikely, it's some shared hosting), devices we have sold won't trust the modified packages because 512-bit ECDSA signature won't match the public key they have pre-deployed.
I'm appalled that this passes muster for you as a rational statement, knowing all we do about how parental wealth and education, professional network size and health, and even residential location can effect career outcomes in even technical fields. I thought we put this canard to rest.
I wonder if its going after RATs, heh
Sometimes the best path forward does harm, sure. It's just hard for me to agree that deleting these databases is the harm-minimizing path. One example of a less harmful path that comes to mind immediately is installing a random password on the unsecured database and emailing the domain owner the password. That would cause downtime but it would limit the irreversible damage. You could even say that you will delete the database if it is found again with an unsecured password, if you wanted to add some stick to your carrot. It does not seem like this attack has harm-minimization in mind.
That 'privacy' stuff everyone rants about is pretty annoying, i guess
also: https://en.wikipedia.org/wiki/Tree_shaping
In terms of energy, it's not a contest and it's not a hangup. Carriers are already powered by nuclear reactors. They have about 1500MW of steam power available as a matter of course. Compare to 25MW if you paved the flight surfaces with solar panels and parked it at the equator on a sunny day with perfectly calm seas and measured at noon. Unlike solar in this example, the nuclear design is not bumping up against physical constraints and could be scaled up quite dramatically if there was a compelling reason to do so. Fuel production would be a compelling reason.

The chemistry and chemical engineering problems you point out are the major hangups.
You mean, they... controlled variables?

Between those 3 cohorts, I see a phenomenon that cuts across a wide slice of the population.
Hi all! Co-owner of Dreamwidth here.

Pretty cool to see my project hit the front page of HN, but definitely a bit of a /shrug moment on the subject itself. "Facebook gonna Facebook" I think is approximately how we feel about this.

I know here on HN we're used to hearing stories about scrappy startups trying to carve a piece of the pie big enough to exit on, but that is pretty much the exact opposite of what Dreamwidth is. Our motivations are very different, so this FB block is mostly a curiosity to us.

Dreamwidth is a small, neighborhood corner store kind of site. We're run by a couple of dedicated part-time staff (who have other jobs/responsibilities in life -- I personally work for Discord!) and a cadre of amazing volunteers who donate of their time and energy to make a nice little corner of the Internet that isn't driven by the cycle of VC and growth and user monetization.

We do not have any goals around growth, we don't advertise, and we ultimately don't care that much what the other platforms do. Our goal is to give people a stable home where they don't have to worry about their data being sold, their writing being monetized. Users choose to pay us for a few more advanced features (like full text search), and we support ourselves entirely off of that.

We are home to a large group of online roleplayers, Hugo Award winning fiction writers, Linux kernel developers, parents, security researchers, artists, activists, recipe bloggers, educators, and everything in between and around the edges who would rather work with a service owned and run by people who are motivated by something other than get-big-and-exit. Large communities of online roleplayers who get together and build whole worlds on Dreamwidth, who tell stories together. I'm constantly impressed by the creativity of our community.

Anyway, it's super cool to see Dreamwidth on the home page here. It's been my side project for over a decade now, and I'm quite proud of it. Even if modernizing a 20+ year old Perl project is a hellish undertaking at the best of times... but we keep going. :)
Fixed, thanks you for pointing this out!
As usual, if there's no headphone jack, I won't buy that device. Privacy isn't even the deal breaker there. Latency and the ability to use my favourite set (Sennheiser HD600) are.
Backblaze B2 also lets you put hard caps in place which can be nice for some situations where money is tight and the application isn't critical--and especially if you don't really have IT people monitoring.
Mh i thought your answer is ridiculous. Why would someone enforce/use a pgp signature with public key servers without a proper challenge?

I know it from my visited 'network of trust' but apparently there is no real challenge involved in uploading your key.

Thats just really really shitty.
It's not strictly necessary, as long as there are no known vulnerabilities, and you use sufficiently hard password.

However, it's highly recommended you never expose such services to the public, or at least limit allowed IP ranges.
Of course the cost of data egress for AWS does not add up to nearly what they charge for it.

But it's totally unfair to say they're "overcharging". The pricing is set up to encourage using the service properly. For example, did you know you get unlimited free (very fast) transfer between s3 <-> ec2?

You are free to use S3 however you want, but the pricing is set up such that people use a proper cdn backed by s3, do as much as they can between ec2 <-> s3, etc. instead of making s3 the backbone of their public site.

If you want to use it in a way it's not intended it will cost you more $$ which is how it should be.
If it doesn’t hit a cache then it should be passed on... that seems to be the basic premise of how caches work.
Did you end up doing this blog? Not seeing it on your blog.
I don't find your example very convincing. Any database storing personal data needs to be properly secured, and if that gym also has ID credit card or other more sensitive data, that data might better be destroyed than stolen.

If it's a publicly accessible wiki with no sensitive data whatsoever, and that's meant to be publicly accessible, then there's a reasonable excuse for the poor security and it's not helping anyone to destroy it.
There’s inclusive evidence that intelligence is fixed, and there’s evidence that people that believe intelligence is fixed have worse outcomes.

I think it’s very likely environmental factors and personal mindset have considerable impacts both positive and negative on intelligence. I also suspect in the next decade or two research will come out on pharmaceuticals that show improved mental performance. There’s already the beginnings of this.