skysight-inc/HackerNews huggingface dataset:
This is why I'm deathly afraid of using any major cloud provider.

External traffic is effectively unlimited, and a number of possible reasons (popularity, misconfigured script pulling something in a loop, someone intentionally generating traffic to hurt me) have the possibility to throw me into arbitrary amounts of debt, with the only recourse being hope that the cloud provider will be merciful.

Even if I have alerts set up: someone pulling 10 Gbit/s can generate over 100 TB per day, at $80-100 per TB. If I don't check my e-mails for weekend, I can be $30k in the hole before I notice.
It's not a matter of "cutting corners." Think of all of the small businesses that recently moved online due to store closures. These businesses simply do not have the budget required to create something comparable to, say, Best Buy's e-commerce. Sure, Shopify might come close, but how do you think Mom and Pop will find and create an e-commerce solution?
You are comparing outsourced contractors to salaried employees. The low end of typical contract rates here is, IME, ~$100/hr.

Also, as a rule of thumb, a salaried employee cost twice their salary after benefits and other costs are factored in. Given the median salary I recall from a recent placement company, this is in the region of $300k.

If the reduced physical presence of remote work reduces the value that salaried employees can bring, contracting out work will become more attractive.
Ah I see, thanks for setting me straight. I must have conflated someone's later reading of the poem with the author's original intent.
Trolling? The first part specifically stated it was a movie; I'm not sure what gave the idea it might have been a documentary. The joke is to explain why the other students were prompting Fima — a behaviour that was strongly discouraged in my western schools.

Of course I'd recommend watching the whole thing (or even the Alisa cartoon), for good examples of non-western juvenile SF, but in this case I was deliberately trying to show an example of non-western classroom behaviour management.

It may not have been entirely realistic, but judging from the nostalgic comments I've seen, it was not so unrealistic that students at the time it was aired found it ludicrous.

(counterargument: Friends — has many fans, but just how did NY baristas afford apartments like those?)
MongoDB listens only on localhost by default since 3.6 (2017)
> The biggest flaw of the GDPR in my opinion is that it leaves the definition of what's considered personal identifying information with too much wiggle-room for creative interpretation.

Note that this is the totally normal approach for Civil Law systems: you define the general principles of what the menace is, and leave it down to the courts to determine whether or not those principles have been violated. In essence, you can view it as every case being decided on the basis of the mischief rule as exists in many Common Law systems.
What a lovely story.

The siege of Leningrad was a brutal affair and yet time, effort and materials were found for a child (Nina) to receive three complex brain surgeries.
Who’s “everyone”?
Thanks for posting this! I’ve been enjoing short stories more than I thought after picking up Men Without Women recently. They make for very nice lunchtime reading :D I also appreciate that the list is full of classics. I quite like the feeling of reading an established canon.

Flowers For Algernon never interested me much, but learning now that it was originally a short story, I’ll put it on my list.

Here is a neat pdf of Asimov’s The Last Question, for those who are into that sort of thing: https://docdro.id/GQfVN6o
I'd worry about getting LEDs that put out UV or some unintended harmful wavelength.

Is there reliable / cheap way to test wavelength being emitted?
I lived in Vientiane, Laos is a kid. Mail back home to the 'states was a three-month round trip affair with only about an 80% success rate. Phone calls to family were completely impossible unless we flew to Bangkok first.

Nowadays, I can click on any of a half-dozen free webcams that show the old neighborhood, whenever I want. It still kind of blows my mind, the improvements in the world's communication infrastructure when I think about it.
I thought it wasn’t that, and it was a combination of cloud flare didn’t cache his 13gig file and also this 3555 error bug that he didn’t seem to really explain?
As Sam Altman says, think more about what you want to do. Moving fast in a wrong direction isn’t going to help.
The issue there is that sometimes a little bafflement is a good thing. Not too much, not too often, but enough to make readers work a little: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que.... It slows the mind down and makes it engage a bit in figuring-things-out mode, which is good for curiosity. I think it's a valuable mechanism for interrupting the internet reflex brain, with its rapid reactions to literally everything, that mostly governs us online.
California's Air Pollution Cops Are Eyeing Uber and Lyft
Started up exposed to the internet and listening on 0.0.0.0...

...and also not enabling a password
I was pleasantly surprised that the article didn't trot out the now-debunked watermelon painting which so often headlines the more pop-sci articles on this subject.
Cracking down on research fraud
The volume of spam is mind boggling. When we first implemented DMARC / DKIM etc our legit emails were 3% or so of all outbound mail per the reporting we got back! We have a somewhat trusted domain.

Some mail delivery systems start to notice that your domain name is being used as part of a lot of spam / bogus emails, so you can have perfect IP history / no spam and STILL start triggering some random filters (no big players but smaller protection product filters).

So the game must be absolutely never ending for everyone and the inbox a valuable target - especially now that unsolicited phone calls really do seem to get ignored these days - I feel like spammers killed the golden goose on phone calls and the telcos let them.

I will say DKIM / DMARC is working well, except google (which we now use for outbound) gives us transient SPF errors even though we are 100% using their IPs. Not sure why that is (ie, SPF failure on an IP that should clear)
Seems to me that the baseline assumption should be if you spend more, net, on the wireless (or wired) headphones, the environmental impact is probably greater. A million reasons can be given why the cost isn't exactly proportional to the environmental impact, but any time someone starts by assuming it's unrelated, I think they are probably not making good decisions.
What is dreamwidth? Why was it blocked?
I was initially sympathetic until I watched that video. The style of reporting is similar to Breitbart or Infowars. Yes, Infowars was banned from Facebook.

Until Section 230 can be reworked, not much can be done. Perhaps Meidas can join Gab with the rest of the social media exiles (no snark intended).
Augmented Reality, which is really the merging of our physical and digital worlds

Bioengineering / Genetics, this will probably change the way we make many materials in addition to health applications. Nano materials are pretty interesting too

Something to deal with a hyper-connected world and all the issues therein. This is probably about rule making. "Rules for a Flat World" is a good read on how humans have made and used rules and laws.

I hope for something in the social network space akin to the FHIR standard in healthcare in US. This could enable the separation of the network from it's presentation and thus (fingers crossed) encourage competition.

Pessimistically, the second cold war
Of of the good aspects of Hetzner that they also offer desktop CPUs which are often more powerful than the so-called enterprise CPUs (see https://jan.rychter.com/enblog/cloud-server-cpu-performance-...).
There’s a trick you can do on the internet that involves the words sci and hub and doi.
For simple storage, rancher longhorn is also an option.
> Beyer Dynamic, AKG and Shure have several options much cheaper than these Bose or Sony headsets which still give you at least 10x the audio-performance.

It's complicated.

The lowest level opinion is "Bose and Beats are awesome, soooo much bass!!!" That's the typical consumer.

The level above that is what you said. That's sometimes called mid-fi. At least these things don't have major flaws anymore.

The next level is companies and products specifically focused on high performance - Stax, Audeze, Sennheiser, Etymotic, etc and their best models. That's the "audiophile" level (and here truth is mixed with a lot of bullshit also - stay away from head-fi.org, it's a cesspool of pseudoscience).

And the level above that is when you realize imperfections in headphones can be corrected via DSPs, for the most part.

I have the Sony noise cancelling flagship model. By default, it's deeply flawed. It's tuned to the taste of the average consumer at Walmart ("moar basssss!!!"). But apply the oratory1990 corrections (from Reddit) and they sound like some nearly-flawless high end devices. The corrections are based on precise lab measurements of the headphones, and basically revert some of their flaws via digital processing.

The future is DSP.
If the only thing stopping you being forgotten in a job is being visible in an office, it might be time for a new job.
A New Theory of Dreaming
*other
This is icredible impressive, I have always thought php probably could be translated to js. I could definately see myself using this for future php projects.

Although, I mostly do javascript today anyway.
If you attempt to connect to a database the database will greet you. It can be configured to ask for a login. It can be configured to have no login. If it doesn't have a login and gives you a welcome prompt it's not called hacking. In order to hack something it needed to be secured to start with.

Databases do greet users in mostly english. Need help? Type help. On the list of things the system allows deleting data appeared to be one.

If you knock on a door and the door opens and says welcome what do you want to do (delete data, read data) and you pick delete it doesn't mean it's illegal vandalism.
Don't most sites have those features? Some of the hate sites out there that much of the Internet applauds being blocked also have much of the same features.
"Ancient" doesn't really work as a measure of performance anymore. Sandy Bridge is almost ten years old but it's still about half as fast as the fastest x64 processors with the same number of cores and quite a bit faster than a lot of "modern" low-end ARM processors.
I am glad someone else is bothered by such titles as far as readability goes.
Very neat. It sounds like they're curating a dataset ripe for machine learning.
When it comes to hardware purchasing decisions, I don't really consider a device to be open-source friendly unless the drivers are upstreamed. Out-of-tree drivers that aren't at least on track for upstreaming in the near future will in the long run be just as much of a hassle as proprietary drivers.
> Initially, the scientist theorized that Snyders, who specialized in still-life paintings featuring fruit, vegetables and animals, lacked talent.

Ha. Harsh first hypothesis.
Interesting... shouldn't a failure to uphold the law disqualify anyone from working for the NYPD? Seems like whoever makes these calls should be personally held to account for that, since they're clearly not doing so?
Your logo is almost identical to the International School of Geneva's.

It doesn't really matter I guess, just something I noticed.

https://www.ecolint.ch/sites/default/files/logo_eig_bleu.png
I assume the comment was partially in jest. But this would actually work well if it was consistent and fast. If databases get wiped before you have time to put anything important in them then noone gets hurt.
WebRender won't work on a GLES2-only system! The Pinebook Pro is one for now..

GLES3 support in Panfrost is experimental, wait for it to mature.
So, what you're saying is, since there are too many competing and incompatible standards, what we need is another incompatible standard? :)

There are a lot of "better" terminal emulator standards out there. The problem is you need software that uses them. Perhaps this is the real "refinement" spoken of before -- these quirks are generally understood and software layers are built on top of them to abstract away the ugliness while keeping broad compatibility.

There are lots of ideas on how to make a better CLI -- from Plan9's rio/window to various XML/DOM based terminal emulator, to a smorgasbord of xterm-but-added-features emulators that add support for anything from inline images to transmitting entire files over the TTY. Ultimately, these are only as useful as the software that uses them, which often ends up being just a few tools the terminal emulator itself ships with.

Even Windows' alternative to TTYs has basically been supplanted by an xterm/VT-ish compatible TTY style interface for software compatibility reasons.
If you're using MongoDB Atlas, you can allow connections only from a specific subnet. Also, you should of course set a password or use x.509 certs.

If you're hosting your own DB on a cloud provider, connect using a VPC / Heroku's Private Space Peering to keep your database off of the internet.
That's fine and my BT sennheiser still has a 3.5mm jack. Presumably so do most/all BT headphones?
The only reason I keep the app is to turn on/off "wind noise reduction" while walking by the sea... reconsidering if this is worth it.
What is special about 5551?
In the case of Gmail, you’re also their customer if you pay for it via G Suite. My support experiences with Google have been very good in that situation.
At least in the case of MongoDB, yes. Listening on all interfaces and not having a password set.
It's difficult enough and error-prone. What customers want is a bulletproof way not to exceed a defined spending limit. We've been asking for it for many years, and the answer has been "Yes, we hear you, we are working on it", and then nothing ever happens, because this is a strategic business decision that would affect their bottom line. Why should they do it if they don't have to?
> Well, it's just another attempt at monetizing the product.

Don't make excuses for their shitty business practices.
As background, the oral history panel on the 8080 is hard to beat [1]. It was designed by broadly the same team (led by Federico Faggin) that did the first commercial microprocessor, the 4004, and then the Z80, which somewhat overshadowed the 8080 commercially.

[1] https://www.computerhistory.org/collections/catalog/10265812...
Also, how is space expanding in time when space is already intertwined with time. Is the block universe expanding in meta time ?
Try https://github.com/tomav/docker-mailserver

It’s pretty good, I use it for my own server. It still requires some config, but better than running all the services from scratch.
depends on the data. it could be public records
Reading a bit further, you can see that this is an elaborate ad for a paid service, possibly a scam:

> Proofs that IJMB is Real

> These are reviews from happy customers: ...

...

> How much does it cost to Register for IJMB

> To register for IJMB you pay the sum of N8,750 only for online Registration.
Keyboard Ergonomics
True. It's a mistake to do a job search using gmail. Interview invitations and job offers are going to go straight to spam.
So long as that threshold is based on science and not, “they eat weird stuff,” I’m okay with that.

If the threshold is: has caused pandemic, then swine is off the table, pun intended.
I'm all pro remote work, but...!

I thought most of my problems with work stem from working from an office, but in the end being forced to work on an schedule imposed on me by someone else was a much bigger problem.

I don't like having a boss, even if they let me work from home.

I like to work on my own schedule.

No motivation this week? No problem!
Don't tell people what to do.
Your comparison isn't fair - blowing the whistle is supposed to be a last resort. Internal disclosure and attempting to fix the issue collaboratively is always the first step.

This attack is indiscriminate and is without warning, so it eliminates the possibility for database owners to fix the problem in good faith.
I don't think there are many spammers compared to, say, 2005.

In 2005 you would get 100 spams to an unfiltered, widely published address, these days it is more like 2-5.

The continued lockdowns and protocol changes of gmail and yahoo are a sign of being overstaffed, "feature" oriented and yes, the attempt to shut down competition and the free exchange of mail.
Just because its depricated doesn't mean it is unused.

People still use Python 2.7.
> I think that, where JS is concerned, for some reason we're seeing a regression where it's becoming "conventional wisdom" that JS itself is slow, against the evidence to the contrary.

It's because people have plenty of experience with actual real-world JS code being very slow. Which has nothing to do with the runtime or the ability of someone purposely writing optimized JS to optimize it well.

The fact that you can write fast JS doesn't mean that the language itself or popular frameworks encourage you to do so, whereas that is the case for a lot of other languages with a reputation for being faster.
> ripe for machine learning.

Yes, that might be the fruit of their labour.
anything done in php in theory can be done in js. the problem is the browser has to say open a long time
> It's not possible with password auth, either

It is, if you screw up with TOFU.

> If you fail to check the server's fingerprint (the way most people use SSH), then you haven't verified the identity of the server, and again this is regardless of how you authenticate the user.

This has different ramifications depending on how you authenticate.
“the dollar is losing value against a basket of other international currencies at a fairly rapid pace.”
You are allowed to judge people for taking far, far too long to do the right thing.

It indicates a pattern of poor judgement, which speaks to trust. You know they are going to let you down each time a new issue comes up.

Faulting people for being cautious around such bad actors (which I'm not saying you're doing, but the response will) speaks to your judgement, not the vendor's.
Find a local bookmaker. One of those will very likely give you odds. But it won't be particularly good odds, seeing that it's a 'pick one of two' kind of bet.
You're presumably an engineer, I'm an engineer, this is an engineering forum. That is why I may have "assumed you made the point as an engineer".

It sounds as if you think I'm defending the attackers. I'm not. I'm pointing out that the presence of malicious actors is a fact of life on the Internet, like it or not.

I'm not going to take my analogy further. I think it's reasonably clear what I meant.
You can pontificate that its one rogue complainant or you can check the data because its right there and shows race, age and gender of the complainant. The very first page of data shows one sergeant with 25 complaints composed of atleast 11 complainants over 5 years.
Eh, I didn't read it...so my thoughts. From experience the prob with DNSSEC is latency in verifying PKI of the record. Usually what happens is the timeout per resolver has to be greater than 15 seconds under no load in a private network which is very inconvenient in comparsion to plain DNS that has a default of 5 seconds.
Aside: Swimming test? Apparently he went to Columbia, I wonder why they would have such a requirement.
Probably a direct result of cross pollination between the communities. Since PHP was historically embedded into HTML you would get a lot of front end technology exposure.
[META] Language and Culture
Cloudflare has supported video streaming for a while now: https://www.cloudflare.com/products/cloudflare-stream/
>1/3 second vs 1/4 second

I have an instant reaction doubting that statement. Not because the numbers are obviously wrong in themselves or I think you made them up or the source was lying.

It implies a precision such that 1/3 s != 1/4 s. The difference is 80 ms.

To be a meaningful statement, it implies that the speed measured can be characterized to some fraction of 80 ms, and that the variance within english and mandarin speakers is also significantly smaller. I cannot conceive of that being the case.
Siri requests aren't tied to unique persons.
Yeah, it's bad for the industry right now, but this is just a transition period! Once we get through the pain of losing a few databases, the new steady state where nobody's data is stored in world-writable databases will be better for everyone, and that will be worth the cost.

Consider if this happened five years ago, it would have had a smaller cost than happening today. And it was probably going to happen at some point, so better that it happened five years ago than today. By the same argument, better that it happened now than at any point in the future.

I'm not sure how serious I am about this argument but...at least a little bit? I guess the alternative argument is that any day now software vendors would have all moved to secure-by-default platforms where deploying a world-writable Redis in production would have been so difficult that it rarely happened.
The compliance argument is an interesting one and I see that being a big issue going forward.

The issue is that your database is still probably not running at the edge. That seems to be the bigger issue for most data privacy laws especially if you are using a microservices architecture and actually have $TEXAS databases with customer data in them.
Reframe it! Instead of thinking results matter, reframe your life as the following:

1. Pretend that only effort exists

2. Assume beforehand that all your results are equal to <insert first-rate role model>'s results in <insert your desired field>

3. Only exit this make-believe world by looking at your actual results in order to measure the quality of your effort
S3 is much cheaper than the egress traffic. As such, this isn't so much about S3 because you'd be paying the same price for that traffic if you were using EC2 instead of S3.

Looking purely at the traffic price, I believe the word choice "overcharging" is warranted if you can buy the exact same product elsewhere for 90% less.
Ironically, when I go their website I get a warning because their certificate has expired.

https://openvas.org/
Remote work is only preferable to the ‘distributed office’ to which we’ve all been inured. Most have no comparison to physical presence.

Is there a way to search for tech jobs that minimize electronic communication?
Like the list, big fan of Borges, Egan and Chiang, but very surprised to see no Lem. He has to be on a list like that. A Perfect Vacuum is brilliant and the Cyberiad is a great candidate as well.

Another thing I'm surprised to not see on the list is Chinese short-story sci-fi, there's been a lot of great stuff coming out of the country in recent years much of it translated by Ken Liu.

Folding Beijing by Hao Jingfang is great and free to read[1], there's The Wandering Earth by Liu Cixin whose Three Body books got a lot of attention, and there's another collection called Invisible Planets, which has a few good stories by Chen Qiufan. He's also written a very good novel called Waste Tide.

[1]https://uncannymagazine.com/article/folding-beijing-2/
I imagine they didn't start using "libre" due to a sheer lack of problems with "free".

> The loan adjective "libre" is often used to avoid the ambiguity of the word "free" in English language, and the ambiguity with the older usage of "free software" as public-domain software.

https://en.wikipedia.org/wiki/Free_software#Naming_and_diffe...