skysight-inc/HackerNews huggingface dataset:
I really like the re-frame docs, thank you very much for putting so much effort into them. They've helped me grow as a programmer. For context, I first stumbled across the readme in ~2015-16 in college before working professionally. As someone looking to learn I enjoyed the didactic bent, I felt like I got the big picture. It tied together a lot of Clojure kool-aid.

The vibe I get from the tone of the docs isn't really juvenile or self-congratulatory. The humor is mature, references made show that material therein have been considered. It's not memes and emojis and WOW! It's somewhat unprofessional, has a few in-jokes, but I like those signals. If the docs haven't succumbed to design-by-committee lowest-common-denominator then neither has the code. It gives me the feeling that someone took the slow road, thought about a lot of things, came out with something simple, and is likely to work hard to preserve that simplicity.

The docs tell me that re-frame is focused on the craft. That means a lot more to me than sprinting to see how do I do x in y quickly.
Wow how racist is that.
> (Btw, another baffling trait of the Android ecosystem is how many well-known and widely-used hackish tools are closed-source: those from XDA and such. “Flash this binary to root your phone”, “install this blob for low-level customizations”. Eeeeh? I think I'll just disable all Google's misfeatures instead, for now.)

It really seems like most of the android developer culture came from the oldschool windows freeware scene, which also has a baffling aversion to publishing source code.
Merriam-Webster labels the word as "nonstandard" and recommends that regardless be used, all the while assuring readers that "irregardless" is indeed a word that has been in use by English speakers for "well over 200 years" and by "a large number of people across a wide geographic range and with a consistent meaning".

And, note, that same dictionary makes no disparaging remarks about the abuse of "literally" as a generic intensifier; it simply cites that usage as one of the meanings. The abuse of "literally" is more recent than "irregardless".

That tells you that "irregardless" is quite the lexical pariah. A major dictionary like Merriam is not able to wholeheartedly accept it in spite of the word's age and stability.
Grammarly iOS Keyboard – Unboxing
Luna is a terrible platform. It still has a large gravity well that requires massive amounts of fuel to land on, and return from. And the moon is a desert devoid of useful resources.

Building in low earth orbit will always be far cheaper.
My experience is that they want even more, an actual pull request. And when you do submit it as a PR, they want you to go back and "rebase" over latest again. For someone thats not so familiar with the process it's intimidating.
Is Buy Negative Google Reviews Safe? – Smmbiz
The article shows again the importance of reaching out to AWS support for issues like this, they would rather have a long term customer then a one time score, they are really forgiving of one time mistakes.
You could probably do the same with the blink ANSI escape sequence if your logs are getting displayed in the terminal. Though I’d recommend you not to use that particular escape sequence...ever.
I think you make an important point though - deleted or not, there is no real way to know what's been exposed, and no guarantee that they'll ever admit it; so torch all the data expeditiously, and we'll just have to comb through 'successful' leaks just as always.

Another side is that with their database blanked, that will force more companies to explain their downtime or complete loss of data, rather than quietly secure it again and pretend nothing happened
>Your statement is basically akin to someone saying that it’s fine for people to get robbed if they went out with their wallet; or worse.. killed.

Uhh no? The analogy would be that there's some benefit that comes from someone's wallet being destroyed, instead of stolen.
Ideally they'd report it so that password managers could warn everyone, but with just the database URI there isn't necessarily any obvious way to know what domain or business its associated with.
It happens all the time in reporting. It seems to be part of the journalistic style guide to provide context to quantities by comparing them to another quantity. Here, both units contain the word "kilowatt" so they are used as comparisons.

Of course it's innumerate, but that's a broader problem for our society.
The theory is supposed to be an abstraction of the implementation, not the other way around...
Should Everyone Learn to Code?
I've seen this comment or a variation on it a thousand times now and it is getting boring. Just like all the other times: please comment on the message rather than on the means of delivery, finding pages without social media embeds is becoming more and more rare and besides that the party writing the article content may not have control over that particular aspect. But that doesn't mean they don't have a point.
Yes people don't want to pay property taxes either. That's the point of taxes, to force people to pay for the externalities of their purchases. The carbon capture is a part of the gas price. The package recycling cost is a part of the product price. The only way to make an economy sustainable long term is forcing people to pay the true price for their purchase rather than forcing future people to subsidize their decisions.
in general, biofuels are not the greatest, but it might be the best solution for aviation.

The US military has already proven a jet aircraft can be run on biofuels.
What CTOs Worry About
But electricity consumption was never measured in anything else. Here, it's because the aggregate unit, kWh, is present on the bill, so the derivation for kWh/year is easy to determine.
There's so many copies of personal data all out there, it would blow your mind. I have a friend who works in this industry. Brokers sell to other brokers who sell to other brokers, who might even sell it back to the original broker after it's been "enriched" with more detail from additional brokers.

I'm a pessimist. You will never remove your personal data. If you get it removed by one company, the others will pop up like mushrooms. Also, from what I've seen, a lot of this information is out-of-date or crap that is just plain wrong.
One of the companies I used to work for - the joke was they are a land acquiring company under the guise of technology. They did tech too and made a lot of money, but they made decent sum from land too.

Same may be going on for churches too.
There is so much misinformation online and in this thread. Take off the s of that figure in the US. That is a lie, the death count is only over a hundred thousand and COVID-19 deaths at their peak accounted for only 20 % of deaths In the country. So everyone had an 80% chance to die from something other than COVID-19. Today you have about 95% chance of dying from something other than COVID-19 in every age group. While it reasonable to be afraid of death, you should now be much more afraid of dying from other causes than dying from COVID-19. The curve has more than been flattened.
Yes, Baker creek is awesome! Also their seed catalog is the prettiest/most enjoyable one I've ever seen.
They can always cache the data and do the processing at a later time when your device is charging and/or when you do something resource-intensive (like uploading a video, etc) to conceal the extra resource usage.
It's scarcely surprising that it's not used in print. Books are considered, written by those most proficient in English, read and re-read, and professionally proof-read.

The extent of its use in ordinary conversation is something else entirely.
The question if it's really down to probability that only 1 out of 10 investments works out. I'd say there is a big factor in there that they simply make poor business decisions, like doing whatever your friends are doing, and betting money on people you would like to go play golf with instead of people that maybe make you uncomfortable but are much smarter than you are as a VC, and know a lot more about the problem domain than you do.
I also wish there was an easy way to buy and shut down oil producers. There are 8.3 million millionaires in the US, so they control 8.3T.

Chevron is worth 180B. If the millionaires banded together to control 50.1% of Chevron, they could oust the board, permanently destroy all of its oil production and distribution capabilities, and convert its oil fields into a permanently undrillable status.

Then, they could sell off the remaining assets (except the mineral rights), and only lose most of their money. Heck, the resulting shuttered corporation would probably be eligible for carbon credits.

Even better, instead of buying the oil reserves, they could buy out the corporations that own patents and factories for things like fracking equipment and critical car components.

Anti-trust would probably get in the way, but the global airbag industry has revenue in the single-digit billions. A band of 100,000 millionaires could easily acquire them all and charge $80,000 extra (per car) for bags headed to gas powered vehicles.
https://www.censys.io
It's hard to express how strongly my wife feels about wanting trash gone. She in fact often comes up with schemes to pay to get rid of it before the city will do it for free
There must be some regulations that need to be met to run an SOS service? I bet if those didn't exist the SOS service would be down now as well and peoples lives would be in danger.

The rest of their services clearly had as little spent on them as possible to "maximise shareholder return".
Just because its offering some useful service doesn't indemnify the ownership from the bad methods they use to deliver the service.

Exposing your database to the internet with default creds is not "standards and best practices" - its highly negligent, and if you are taking people's money for such a service, I have no pity for you.
Kudlow suggests extension of federal eviction ban is in works
When you compare Winamp 2.x with Spotify, you realize how slow software is today.
But that would be mixing Latin and English, just as bad as television!
It's reinforcing the popularity contests everyone on the net has turned in to in the past 20 years. I miss the old internet and IRC without profiles and "karma".
Has the EU actually shown any teeth to these outfits?

It's starting to.

https://dataprivacymanager.net/5-biggest-gdpr-fines-so-far-2...

There are 7-8 figure fines already this year, and two 9 figure ones that the UK regulator has given notice on.
If the databases in question (Elastic, MongoDB, others) make it too easy to set up unsecured access, possibly because they default to an unsecured state on installation, then some good may come of this: The reputation hit to the database vendors should encourage them to mend their ways.

If that happens, then the attack can arguably be justified despite the damage — consider all the future database installations which wouldn't otherwise have been secured which are now spared from not only destruction but theft.
[1] https://duckduckgo.com/?t=ffsb&q=slush+hydrogen
Ahh, this is real reason why the phone manufacturers want to get rid of the headphone jack. I was so naive to think it was only about DRM/licensing.
We aren’t sure how much regolith is mixed with that ice, or how we can process it without using massive amounts of energy. It’s not like Mars where water and CO2 are everywhere.
That's not a good argument, inexperience does not excuse exposing user data.
Publishing thousands of police discipline records that New York kept secret
> There should be a name for this kind of ridiculous hubris. Unfalsifiable non-insights by people trying to apply arbitrary deep learning algorithms to a brain which is definitely not using any of them.

Galaxy brain-ism
Let's see what new social-media non-code related functionality will be added next. Location, checkin and filtered photo of each commit, messenger?
It may just not be worth bothering. Most of the time when I see someone complaining about a page being blocked for Europeans it's some local American news outlet serving a town of five thousand people whose IT department consists of one guy in a broom closet.
The conjecture is likely wrong. Some speakers simply reach for irregardless whenever they want to say "without regard" and are never heard using regardless.
If you can't or don't know how to secure it, it shouldn't be online.

My argument is more akin to a child learning not to leave their bike unattended on a city street corner overnight. I can come by pick up the bike, and tell you the dangers, but there's only one real way to learn.

And clearly my opinion isn't even close to comparison with somebody being killed in a robbery.
>That's the real power of tech: the great equalizer of access to information.

access to information isn't relevant. If you don't believe that ask a few people if they'd rather want the MIT degree without having any of the education or the education without the degree.

Information on its own is useless without any capital or network to turn that information into something tangible, in that way it's like oil. And that's also why the more information dependent our society is the more centralized it is, as a small amount of players can leverage information to create outsized returns on capital.
Price transparency can harm prices. Competitors can use it as a mechanism to signal appropriate prices to each other in order to reduce pressure to reduce prices. It's highly industry/context specific but transparent pricing does not always mean better pricing. In fact, in limited contexts, price fixing can lead to better pricing.

I think Westinghouse was the big FTC price-transparency-can-be-bad case.

That's orthogonal to the post's issue, though: he paid exactly the price he was quoted for services rendered; that he didn't understand the services he was consuming isn't really Amazon's problem but it's great they jumped in to help a $0 account (which, of course, was self-serving)...
We don’t know yet if Mars has an ecology or not.
Yeah, their mainstream audience is a fundamental part of the joke.
Imagine seeing such article title 10 years ago...

What happened to the world?
Yes, that's arguing past the point with a different point, not addressing it. This is a strawman argument being used to distract and shut down.

The argument about leaking air around a mask is interesting (hence why I'm looking for research), but wholly different from whether masks prevent transmission.
Personally, I think that most behaviours/attributes have evolved out of the basic laws of life (survive and reproduce) and of Physics, especially energy-related constraints. Based on that the most obvious basis for sleep is energy saving.

I believe that 'sleep' has been observed in animals as simple as jellyfish so any neuroscience-centred explanation is bound to miss the root cause, in my view. But, as often in evolution, the development of nervous systems may have taken advantage of pre-existing sleep patterns.
Isn't the difficulty in proving actual damages in a personal claim one of the main arguments for making this a regulatory matter?

As mentioned in my other comment near here, the regulators have started issuing some reasonably substantial fines already.
The NYPD Files
(June 2018) Speculation/Discussion: Intel will become fabless
Why is that? Hg still seems nicer to use in my experience
LSD also seems to be extraordinary non-toxic.

This document (PDF) from the Multidisciplinary Association for Psychedelic Studies (MAPS) claims:

The LD50 of LSD varies from species to species. The most sensitive species is the rabbit, with an LD50 of 0.3 mg/kg i.v. [52]. The LD50 for rats (16.5 mg/kg i.v.) is much higher [52,53], though mice tolerate doses of 46– 60 mg/kg i.v. [52,54]. These animals expired by paralysis and respiratory failure. Monkeys (Macaca mulatta) have been injected with doses as high as 1 mg/kg i.v. without any lasting somatic effects [55].

There have been no documented human deaths from an LSD overdose. Eight individuals who accidentally con- sumed a very high dose of LSD intranasally (mistaking it for cocaine) had plasma levels of 1000–7000 μg per 100 mL blood plasma and suffered from comatose states, hy- perthermia, vomiting, light gastric bleeding, and respira- tory problems. However, all survived with hospital treat- ment and without residual effects.

https://maps.org/research-archive/w3pb/2008/2008_Passie_2306...
“Fried his brains” is a figure of speech and not a diagnosis. Not to be taken it literally that Syd fried his brains as in frying an omelette. But after doing a lot of LSD seemed to be a turning point in his life.
An rtg can be designed to handle cooling failure. It isn't like a water reactor. As the brick heats it expands, decreasing reactivity and heat production. So an rtg can live perfectly well without its cooling system. It won't be making useful power, but it isn't going into meltdown either.
Here's my link, from people working to promote evidence-based medicine: https://www.cebm.net/covid-19/masking-lack-of-evidence-with-...

From your link:

> (eg, reusable 12–16-layer cotton masks; pinteraction=0·090; posterior probability >95%, low certainty

That "low certainty" comes from GRADE. Low certainty in GRADE means "The true effect might be markedly different from the estimated effect". Masks may be very much better, or very much worse, than they estimate.

The Interpretation section says this:

> Robust randomised trials are needed to better inform the evidence for these interventions, but this systematic appraisal of currently best available evidence might inform interim guidance.

Which suggests to me that they want more and better evidence.

The end of the paper says this:

> Our comprehensive systematic review provides the best available information on three simple and common interventions to combat the immediate threat of COVID-19, while new evidence on pharmacological treatments, vaccines, and other personal protective strategies is being generated. Physical distancing of at least 1 m is strongly associated with protection, but distances of up to 2 m might be more effective. Although direct evidence is limited, the optimum use of face masks, in particular N95 or similar respirators in health-care settings and 12–16-layer cotton or surgical masks in the community, could depend on contextual factors; action is needed at all levels to address the paucity of better evidence. Eye protection might provide additional benefits. Globally collaborative and well conducted studies, including randomised trials, of different personal protective strategies are needed regardless of the challenges, but this systematic appraisal of currently best available evidence could be considered to inform interim guidance.

These sentences make me think the evidence isn't as strong as lots of people claim it is:

> while new evidence on [...] other personal protective strategies is being generated.

> Although direct evidence is limited

> action is needed at all levels to address the paucity of better evidence.
Oh, the irony...

One of my banking apps has a 10 minute logout "feature" (which can't be disabled) that pretty much guarantees you need to have a crappy, easy to remember, password if you want to use it. Add on top of this a predilection for "2FA" (aka text message) every few times you log in and the thing is basically an unusable hot mess.

(looking at you walmart moneycard)
Any is too much. Ditch them.
There are false negatives and positives in the tests. In Macaques they could not reinfect them, so this doesn't seem that likely.
> it is obviously a stupid word, and that makes it stupider.

This is the social signaling aspect of language at work, not the communication part.

Human brains can trivially digest the correct meaning of “irregardless”. Using the word, however, marks someone as not having had a “proper” education, and would perhaps brand the speaker as “stupid”, “irregardless” of whether the idea they were expressing was intelligent or not.
No it doesn’t, https://en.m.wikipedia.org/wiki/Eurodollar.

Not to mention that since the USD is a CLS/FCC currency you can perform correspondent banking transactions with it without having any government involved in the process.
Ever tried to connect a corded headphone into a microphone jack? It works quite well
Yeah. I don't care if some big business loses their Elasticsearch data and their site stops working until they get it secured and re-hydrated with data from their relational database. Good, they learned a lesson.

But I would feel bad if someone's small business had to shut down or lose a bunch of money because they lost all their customer data. I'd feel bad if someone lost all the data they'd been using for a personal project. If they didn't have backups and proper security, shame on them, but ideally they would be contacted and given advice. Ideally, their data would only be deleted if the effect would be minimal.

On the other hand, if this is something that happens consistently -- all unsecured databases get deleted immediately -- maybe the data would be stolen less and everyone would have to learn their lesson early...
Millionaires/billionaires wouldn’t act against their own interest or class interests. There is one way to achieve what you are dreaming of: democratic control of industry.
Super cool, I have just tested with YouTube and it's allowing background audio playback on mobile because the video continue to play on the server. Audio is playing on my phone with a 3 sec latency but without hiccups and good enough quality.
> Given the competitive nature of recruiting and employment at Facebook

Interviewing at FAANG is about cracking the interview and the tests; it doesn't reflect all the skills that would be relevant in the real world. You can very well be a mediocre engineer but grind Leetcode all day long and eventually pass the interview (and the reverse is also true, a lot of otherwise great engineers wouldn't be able to pass their test), so just because the code is written by FAANG doesn't mean it's bug-free or that the bugs were deemed important enough to be fixed.
What I don't get about Shodan: Why aren't all unsecured databases found instantly (at the moment Shodan went online), but recurring attacks/dumps like this one that rely on it? Do they update their crawl data in waves?
While I agree in principle, this kind of observation is getting awfully close to mister gotcha[1]. Whenever the topic of, for example, google analytics comes up on HN, many reasons are given for why the alternatives are inferior. And that's from people intimately familiar with the tech. I'm not sure how you can expect a site whose revenue probably comes exclusively from Google ads to be able to effectively resist the Google/Facebook duopoly.

[1] https://thenib.com/mister-gotcha/
By not saying anything, they're actually adding to the fear, rational or not. Ransomware is headlining, and they're pretending it isn't happening.

Simply stepping up and admitting it at least allows their customers to take steps to protect their data, credit cards, change passwords, etc.
> No, that's outright wrong. Please see the well respected techempower web benchmark: https://www.techempower.com/benchmarks/

I just notified the servers I've to manage (and my coworkers) that we're outright wrong and the load we're seeing is phantasm and that guy from internet told us so since he linked the well respected techempower benchmarks, which apparently reflect real world situation :)
This is more akin to a person knowing the basics of driving a car but not which side of the road to use or what to do at a traffic light. They are a danger to themselves and others, the others in this case being the users of whatever services the unsecured databases provide.

My sympathy for people learning the basics of our field and missing a few points stops when others are harmed.
For giant files, you can at least break the file up into pieces. If nothing else, it's a greater technical challenge to build a caching system that scales to infinite GB. Why would Cloudflare invest in such a system when it's of dubious utility in the first place?