skysight-inc/HackerNews huggingface dataset:
My guess would be that they went with "ports" instead of "expose" which makes it public. But even with careful composition of your docker-compose you might want to be careful, Docker can interact with iptables in surprising ways and long iptables rulesets are almost comically difficult to validate sometimes. The result is that if you're using both Docker (and even more if you use Compose, Kubernetes, some other orchestrator) and doing anything else with iptables (including using it as a host firewall) you need to take a lot of caution to make sure you don't mess anything up. These tools usually confine their changes to custom chains to make this stuff easier to sort out but at the same time it can make it more difficult to understand what's happening, particularly with the use of tagging and etc.

In general I would recommend putting some kind of protection between machines running Docker (and especially orchestrators) and the internet. This could be cloud provider mechanisms (security groups, ACLs, etc), a firewall appliance, NAT gateway configuration, etc. depending on the situation. It's not necessary, but it makes the situation easier to audit/validate, and more layers of protection seldom hurt. If nothing else it means that much of the time you'll need to make a mistake in two places instead of one, in order to have an unintended exposure.
Mobile app idea #81: Crisp Conversation
There is no value in calling out hypocrisy. If a murderer outs another murderer now you know about two murderers. Saying "you're a murderer too, you hypocrite" has no epistemological value.
Hopefully it's going to be a wake-up call to make their connected devices and softwares a bit more resilient in case of an outage.

Or maybe I'm too optimistic.
yeah. traditionally in the US the top CS programs really only want to recruit candidates who were in for the full package. MS was really kind of consolation prize

that started to shift about 20 years ago with professional night classes for MS students (I think modeled after the night school MBA programs). this is just a huge cash cow, and the programs aren't really very rigorous - you're not doing research - its more like undergrad++
If it results in lower prices, I'm fine with this. But they should be clear about what they're collecting.
Dogs Can Sniff Out Coronavirus Infections, German Study Shows
> What if one of the databases has a record of credits you've purchased at your local spin studio?

Usually when you buy something, you get an email receipt. So you print out your email receipt and go to the mom and pop store.

Given they are a local mom and pop store, you likely have a long term relationship with them and they may even remember you buying credits. So it will be a hassle, but likely ok.

It is the huge corporate stores that don’t have long term relationships that would be hurt by this thing the most.
You can play 'Doom' inside 'Minecraft' using a virtual PC
Mailinabox handles all of that automatically and nicely.
You just need to do some manual DNS work and check your IP against blacklists on http://multirbl.valli.org/ - and mostly done.
A Boy Who Heard Too Much (2009)
This conversation took a big leap from "I want to learn more", into "PhD". If you just want to learn more, forget grad school and go audit the courses you want. There is no need to go through the hassle of any degree if all you want to do is learn, and don't actually have a goal of getting an advanced degree.
Agree with nkrisc -- this is like, if I contracted with a storage company, and then my stuff was vandalized because the company's "secure storage location" was an unlocked box out on the sidewalk. Obviously the vandal is directly to blame, but it's also absolutely negligence from the company.

I'm sympathetic for the people who were only storing their own data, but not for companies that failed to safeguard their customers' data. If I borrow stuff from friends, I take better care of it than if it were mine. I hold companies to the same standard.
We don’t have clear evidence for this being true.

Perhaps for performance on a fixed kind of test or for certain kinds of raw calculation speed, it is true, but handling complexity and problem solving skills can continue to develop based on experience and exposure to concepts.

The belief that intelligence is fixed is a trap for the mind.
So you are rationalizing a crime because it teaches companies a lesson? That is a crazy rejection of the rule of law. Would you be comfortable in applying that logic to all crimes?
KDE Plasma 5.20 Bringing This Enormous Feature for Wayland
Not any more than walking in the street and trying car doors.
Electron Considered Harmful (2016)
My perception is that, at least lately, unions grift to build a powerful (and therefore wealthier) union official hierarchy. (There was a day when they actually were for the blue collar workers, in practice as well as in theory, but that day is long gone.)
This is a super weirdly sensationalist article. It's far too popsci to be a good read for physicists, while being far to science-jargony to be accessible to laymen.
Not entirely true, SNAP-10A is still in orbit and has suffered some degradation (parts coming off), that may have led to radioactive release.

However the Soviets crashed several RORSAT reactors actually on earth, which is indeed much worse (and many cores are still up there in parking orbits)
Not sure if I want to carry on host other people's email anymore, it's become a huge pain. It's bad enough that Google and MS frequently refuse to deliver mail; without any apparent reason or any humans to discuss the problem with. But now that zimbra is dead (no new open source versions), email hosting is pretty much back to where it was in the 00s.
I am by no means an expert here, but a couple thoughts back from my limited knowledge:

1) I don't think all carbon capture necessarily requires a lot of energy input. Planting trees is a more obvious example of this - of course, the trees rely on the sun's energy so it's not "low energy" in that sense, but we weren't going to harvest that energy any other way anyways. It's possible there are other solutions that are like that.

2) If we have an abundance of zero or low-carbon energy in the future that doesn't exist now, it might not matter that taking carbon out of the atmosphere uses more energy than the energy we got from putting carbon into the atmosphere to begin with.

To be clear, I really wish we'd just spend the money and take the sacrifice to use a lot less carbon right now. It certainly seems like a much easier problem to solve than trying to suck it back out later, and relying on it to work seems like a dumb risk. Even if we're confident that we'll inevitably need some amount of carbon capture and that the R&D will happen to develop it at scale, there's a good chance that it'd be easier and cheaper to put less carbon in the air now than to do more capture later.
Dick Cavett thought of himself as a serious journalist, and he conducted himself as such.

Letterman was foremost an entertainer (as was Carson). But he also (credibly) acted the part of cultural critic. Letterman laid some of the groundwork that John Stewart ultimately perfected.

And, as a sibling comment notes, Letterman had widespread (mainstream) reach. Much more so than any of the other fine examples that you cited.

It is only appropriate to close this comment by quoting Letterman himself - "if you accept the premise, you'll enjoy the show."
I did my interpreter class in Scheme in university. The main thing it taught me was I never wanted to use scheme (or lisp) and put me off of functional programming for many years.

I re-did the interpreter from that class in C++ and it made insanely more sense to me than the scheme version. I could see where scheme was going and why it was a good fit but just hated it.

That same professor taught our C++ class (while learning it, they had someone quit) the next semester and they had to actually do a do-over he was so bad at C++. To his credit he knew as much half way through the semester (he had students getting ahead of him). He basically nop'd out of C++ like I did out of Scheme. It just didn't fit his brain.
Or just set everyone's password to the same thing eg SecureMe
With all the fixes and standards just to send a cute cat GIFs to your friends on Gmail is such a pain in the butt for most self hosters. If you're doing it, great! Keep it up! All the better for you. But for me, using a e-mail hosting provider with a good reputation is preferable, they've already done all the hard work (my preference is FastMail, but it's not everyone's cup of tea). I've been in the IT field for almost 20 years, I've done the self hosting e-mail thing. In my early teens and 20s, I didn't have anyone to please or take care of, so keeping up was easy with new e-mail standards as they rolled out, 15-20 years later, I'm divorced, work full time and have two kids, I simply don't have the time to self-host anymore. I'd rather give somebody a few $ a month to take care of that for me.
How someone who is visually impaired uses iPhone / iOS
Care to elaborate on the "manic pixey" part? I've never heard that phrase before.
That would be amazing!

I'm imagining a sci-fi novel where aliens have extended their own lives but not improved their memory, so after 5 million years they reach their destination doing nothing but singing and merriment on the way. Sadly, upon arrival they can't remember why they are there, where they are from, or anything else important. Maybe all over the ship they left notes to themselves a la "100 years of solitude" but sadly they can't remember how to read them.
This is why you should use a well-designed system such as The Update Framework (TUF) that aims to make security as usable as possible:

[1] https://www.python.org/dev/peps/pep-0458/
[2] https://theupdateframework.io/
To add to this list, they also let us upgrade firmware.
The very concept of consent or rape (as moral and ethical concepts - which is why the article uses the word “coerce” instead of “rape”, I bet) are difficult to apply to nonhuman species because they’re not human.

[EDIT: interestingly I think this all boils down to considering if dolphins have ethics or “dolphin rights” within their own societies. A violation of a right is logically impossible if the very concept of, or indeed, the right itself, does not exist.]

I think it would be really interesting to talk about animal ethics and with very smart mammals like dolphins moral imperatives like consent might be appropriate in some way but I just don’t know.

But it’s inaccurate, imho, to talk about rape as a reproductive strategy for animals if we are using that word in the way we use it when we are talking about ourselves (humans).

Again not to say the concept is irrelevant to animal life but I think we do both ourselves and animals a disservice if we aren’t careful.

If you are speaking with some knowledge of animal ethics but didn’t share it my apologies :)
This began life as a hobby CS project started at the time the author was in college. The allocator was based on a custom malloc() written for a systems programming course (I was in the same course at one point).

https://github.com/klange/toaruos/blob/bb91a91cac2793daa213d...

There's some really early screenshots here.

https://forum.osdev.org/viewtopic.php?p=202371#p202371

I think before he even graduated the OS had a graphical mode. On OSDev you'd have a screen sharing thread with people posting their text mode OS projects and then he would post this one with this windowing system with the anime background and it would stand out that much more. And it was all made by a single person. In college.

Some people are just way, way out there.
Ask HN: What bloated piece of software deserves a performant rewrite?
Addendum: if you host a mailing list server such as Mailman, you'll need to do one of (1) don't change the content or DKIM-signed headers at all (e.g. by adding Subject tags or unsubscribe instructions); (2) rewrite the From: header so that you don't look like you are impersonating the individual senders; (3) use ARC [https://en.wikipedia.org/wiki/Authenticated_Received_Chain] signatures. I don't know if Gmail and the other big providers actually honor ARC headers yet, but if they ever do, that would seem to be the cleanest solution if you need to add unsubscribe instructions or similar banners.
Why is mongodb seem to show up alot with this. Does their default set up hide some unsecured users? Its been a while but I dont remember that being in there.
My apologies again for the negative tone of my comment. I've had a bad day and I let it bleed into my remarks here.
That sounds too straightforward, therefore not worth as many internet points...

(Thanks that's a nice share!)
Tenet Should Have a Special Premiere in Fortnite
Looks to be very close to the solution Zig also went for. I like the solution and it seems to fit both languages very well. I should look a bit further into Dart some time I think.
Whenever I see "could" in an article these days, I just roll my eyes. We might have actual clinical results of stories like these in months—a blind test in more months after that.
I don't know if this counts and I haven't seen it outside of research projects, but 3D spatialization (that's worth a damn) basically requires it be tuned for the user's particular head geometry.
Me too! I forked this and started annotating the code with Typescript types to understand it. My intention was to eventually make a music visualizer, but I paused work to focus on other things.

https://github.com/justjake/WebGL-Fluid-Simulation
Summary:

1. The big cloud providers charge enormously for outgoing bandwidth. Most of us know this, but unfortunately it bites people a lot.
2. If you host big files on these clouds with no limits or warnings, it's just a matter of time before this happens to you.

This is why I don't run hobby things on these clouds. Any hobby project may have backends and services running on them, but NEVER anything user-accessible such a webserver, S3/GCS bucket, or similar. It's just too much of a "click here to bankrupt me".

For a business it's a different matter. You are making money, and you're spending money to do so. You still need to have a DDoS plan for your outgoing traffic, but it's much easier to solve these problems if you have revenue. Revenue buys time and people.
Exactly. IME HN or text.npr.org will fly, old reddit / readthedocs / other light js does fine, and SPAs like new reddit and Slack crawl.
I think part of the point of the post and the PDF to which it links is that Gmail and the other big operators don't use the blacklists, so for deliverability to the majority of recipients it makes no difference whether you are or are not on those lists.
>But it's totally unfair to say they're "overcharging". The pricing is set up to encourage using the service properly.

That's a very charitable take. A more cynical take is that they do it to encourage lock-in. If you already have your data stored on s3, they can get away with overcharging on compute because they know that if you switched to GCP, you'll end up paying more because of the egress costs.

>but the pricing is set up such that people use a proper cdn backed by s3, do as much as they can between ec2 <-> s3, etc. instead of making s3 the backbone of their public site.

I'm not sure what your point here is. Cloudfront costs 8.5 cents per GB of egress, meanwhile ec2 costs 9 cents per GB of egress. half a cent doesn't make the egress charges any less outrageous. That's not even including the per-request charges that cloudfront has, which probably can make it cost more than 9c/GB depending on your usage profile.
Is the file size known as the request starts?
I was just thinking how GPT-3 could be that novel's method of generating so much noise as to inoculate everyone against astroturfing.
Isn't the idea that you form your own trust network? For example meeting people in-person at conferences and signing each other's keys, and extending trust that way?
I'm not sure wiping out data from these unsecured databases is the answer, but even for amateur installations which have data of no relevance, the database could be used for nefarious things or the machine itself it runs on could be taken over and used for things such as DDOS attacks.

In that sense, receiving a strong notification that your compute is available to anyone and you should secure it is a good thing.
If this turns out to be an effective lesson on security, systems should implement their own meow to protect their users.

E.g. A database That intentionally removes itself if the default password/an insecure password is used, with an easy-to-follow guide in error log on how to properly configure it.
> and assume it's sufficiently cromulent for formal use

Ha! Good one.

> the use of the word 'decimate' as an alternative spelling for 'destroy'

An alternative spelling? I don't think so.
Lack of regulation and non-existent enforcement of existing regulation.

People are used to the government being there to prevent companies from doing bad/dangerous stuff. It’s why you can buy any food at any supermarket and be reasonably confident it won’t poison you or be full of cyanide.

People expect the same when it comes to technology companies, and I once did too - I expected that big companies would’ve already got in trouble if they did something bad so it must be safe. The problem is that is far from the truth.
It sounds like we're in similar age ranges. I've done the startup game (employee 11 at a per-series A sleeping on the floor next to the CTO) and I've done the big company life (more stable, but can be slow at times).

What do you want to do?

If you want to code, deal with an average amount of politics, and focus on a more predictable cash flow and career path, start drilling leetcode.com, set up 10 interviews with the top 10 tech companies, fail 7 and get 3 offers. It'll take about 6 months. There's plenty of "normal" work at FAANGs, not everyone is Machine Learning things together there. With seven years of experience getting the interviews will be very doable, passing them will be a bit tricky but doable after you get into the groove of things.

If you want to focus more on managing you're already doing great. If you want to increase your income start applying to other manager/director roles and get a competing offer. The formula of "Do 10 interviews and fail 7" works great here too.

Do you want to start your own company? Teaming up with a friend who has sales relationships or strong marketing experience to get users could be fun.

Not sure what to do? Take some night school classes. I took an eight week product management course just to see what it was like. Turns out it wasn't really for me. I took an online software engineering prep course too to prepare for the bigger company interviews, I wasn't a huge fan either.

For me personally, I realized I wanted to be more customer facing so I'm working on switching to a more sales focused path. Once I figured out my destination I've worked backwards and figured out a path to get there.

You can't lose. You're doing great now, just figure out what you want to do and work your way backwards :)
If curious see also

Discussed in 2015 (not very well) https://news.ycombinator.com/item?id=9091997

Discussed at the time (much better): https://news.ycombinator.com/item?id=5438679

Related from last year: https://news.ycombinator.com/item?id=20895212

Related bit from 2018: https://news.ycombinator.com/item?id=18765224
I have used the Pinebook Pro as a main driver for nearly 6 months because my main died before isolation.

> Alt-tabbing between Firefox and a terminal takes one second, as does switching between Firefox tabs.

Using the OpenGL compositor (which should be the default in latests versions of Manjaro) is a lifesaver! Web apps are and will still be slow sometimes (I don't use slack but messenger can be sluggish).

> Video playback on browsers is not really nice.

Depends, YouTube is indeed quite slow (I think it became slower after some YouTube update), but if YouTube was optimized for speed there wouldn't be all those adds, right?
I like to listen to YouTube music in the background, I use https://github.com/mps-youtube/mps-youtube for that and it works like a charm, uses 10% CPU and a few MB of RAM.
I don't use mpsyt for video but I guess it would also improve your experience.
Other websites (kissanime) work like a charm, even in 1080p.

> Manjaro does not provide a way to disable tap-to-click
True, but installing `xf86-input-synaptics` (although it's deprecated) provides such an option. Also, I use ctrl+F7 to disable the touchpad while I type large chunks of text.

From the specs, one could think that the RAM is the problem but zram totally solves that (I have dozens of tabs open in Firefox, including heavy apps like Messenger, Trello and Overleaf). The slow CPU is a larger issue, with Gmail being so slow to load it's almost unusable (loading my mailbox takes 20s and creating a new email takes 3s).

Overall, I find the machine very much usable though.
I only have two complaints:

- static noises

- under "heavy" load (eg html5 games with compilation in the background), the alimentation is less powerful than what the machine consumes, which leads to the battery discharging.

I wrote a guide on my setup that includes other tricks. Shameless plug: https://louisabraham.github.io/articles/pinebook-pro-setup.h...
Trivia?
Great to hear all around. I like the focus on doing your own thing and ignoring the other platforms (and likely naysayers). We could all use a healthy dose of this in our side projects! Also - I would take it as a positive you are blocked on FB.

My wife and I tried to setup a simple business page for our local store we opened less than a year ago; they flag us as a fake/fraudulent account multiple times when we tried to created one; neither of us have personal/active FB accounts so I guess that's the reason (and this behaivor, yeah makes me double down on NEVER getting a FB account now). I even tried to emailed them 'proof' as they requested because my wife was worried it would really hurt us, nothing ever came of it. We finally decided it wasn't worth our effort, forgot about them and our store has thrived since. I'm happy to grow our business without having to deal with them. We've been using local and other ad platforms such as NextDoor.com, which I'd never heard of but one of our older customers brought to our attention. People talk about getting rid of Facebook, to me it starts with the actions you guys take and how my wife and I are going about it.

Don't support Facebook at all, they don't deserve it.
I really like the product you've made, and use it regularly. It might be helpful for your user base, and the project as a whole if one responded with a little more than a shrug. Facebook may be more willing to listen to you if you contact them then random users in getting this resolved.
Is an email from an anonymous address easier to trace than remote database commands?
dupe: https://news.ycombinator.com/item?id=23912490

(It's not a quantum computer anyway, just a analog computer.)
Complaining about stop and frisk would not have been a valid complaint since it was policy at the time.
Brainbow
I would define "merit-based" as "measuring and ranking based on directly relevant capability." There are limited cases where the first contributes to merit, but both are becoming less and less justifiable in a global, or even national, job market.
I don't even think you need "a lot of sacrifice" to stop emitting so much carbon. The EPA estimates that energy efficiency could cut emissions by up to 20%.

The trick is that most energy inefficient buildings and appliances are used by poor people who can't afford to upgrade or maintain to the latest and greatest standards, and massive funding for poor people is a giant lightning rod at least in the US. I know that in a previous house my utility was literally paying me to replace my fridge and air conditioner to reduce peak power demand, but I have no idea how widespread such programs are.