skysight-inc/HackerNews huggingface dataset:
The same reason you use accessibility in general: there might be 1 in 1,000 people who might permanently need it, but considerably more who may want it at certain times (running a compile job in the background, on a business trip and only have low internet speeds, underclocking to save battery, …) and that can be the difference between "I want to use your software because it always works for me" and "I tried it and it works 90% of the time for me, so it's not reliable enough for me to pick it". Plus there's the usual feel-good "I'm helping more people using my software, even the (often) lesser-privileged" rather than "I shouldn't care about these people".
Yes, those databases are sadly very common and are fundamental to how location services work on the phone. In most cases there's no good GPS signal in urban areas, so cell tower and wifi locations are the most reliable way of determining the location. These databases are of course very valuable and require constant updates.

Pretty much every manufacturer has them - Apple was collecting/uploads this data (cell towers, wifis and your location) in iOS 4 as well: https://www.computerworld.com/article/2507791/iphone-secretl...
Who do you think should regulate the “public”? ISPs, police, government?
OP here, yes I use the hetzner marketplace for used dedicated servers. I have found that using hardware that's 6+ months old actually decreased failure rate. Plus it's cheaper and they waive the setup fee.
A nice thread about it from 6 years ago: https://news.ycombinator.com/item?id=8566217
>tree^H^H^H^Hgraph

If we pretend we're using readline here, ^W (yank previous word) and ^U (yank to the start of the line) should save you some key presses.

Some recommended bedtime reading:

https://catonmat.net/ftp/readline-emacs-editing-mode-cheat-s...

https://en.wikipedia.org/wiki/GNU_Readline#Emacs_keyboard_sh...
He seems like an accomplished guy: comfortable in his field and in life to explore other parts of it outside his chosen field. This balance is something I’d like to achieve — to be secure enough in what I do to devote time to roger things.
> The attacker can’t perform an useful MiTM attack on the connection no matter what key you accept from the server.

True, thanks to public key crypto.

> At best the attacker could let you log into their server

This is another way of saying the machine you end up trusting could be under the control of an attacker. So yes, that's a serious concern.

> presumably you’d notice that you’re logged into the wrong server

Not if it's a fresh Ubuntu instance. Even if not, I'd expect SSH security to answer that definitively, on principle. SSH shouldn't be any sloppier than HTTPS.
Aha, this was subtle. Nice catch of the poster's own "ridiculous hubris" in assuming that the brain is "definitely not using any" algorithms.
No, their default sets up no authentication at all IIRC. Combined with Dockerized installations punching through some firewall setups (as discussed elsewhere), you'll get meowed.
re [1]:

While I do understand why they are willing to shell out tens of millions for good spots for undergrad, it also makes me ask: Why not just let them to to wherever they can get, on their own accord, and then just help them to land whatever jobs they can.

Surely, if you're the kid of Shaw, you:

A) Are driven and disciplined enough to get into some Top 20 school on your own - especially with all the private tutoring and what not.

B) Will be able to land whatever prestigious white-collar job through connections. And from there, getting accepted to some prestigious B-School is a lot easier.

Sure, I understand that they want to minimize risks because they value education - but I also have a feeling that it comes down to bragging rights.

But still...you can do a LOT for that kind of money.
In the UK it's probably already illegal under the Computer Misuse Act, as it'd fall under "unauthorised modification of computer material".

I assume other countries have similar laws.

That said, enforcing it is a different matter.
> Chairs are priced at £2,500, lamps start at £700 and mirror frames £450.

Damn. At I might have bought one of those chairs for 500€ or so. But considering the time sunk into growing one the price is understandable, of course.
Ok I read the entire thread and I don't know where to plug my comment so let me do it here.

I recently drove through a road after a couple of years. On one side is Safeway and other shops - standard California shopping area - bigger than a strip mall smaller than a mall - not sure what to call it, and housing on the other side of the road.

Maybe it is bad memory but maybe it is real since I sort of exclaimed when passing through the area. The area used to be a concrete jungle but now they added so many trees that if you were not looking you may not realize you are passing a shopping area (of course I exaggerate but just a little). Not sure if they added 10 trees, 100 or maybe 200-300 (smallish ones not full size ones). I wonder if those things help and to what extent?
The temptation to exploit data you collect is too high. Best not to collect this data in the first place.
Actually you can definitely trust these pieces to take the load... and then some. A piece of wood that naturally grew into a specific shape is much strong along that shape than any kind of joinery you can come up with. This fact has long been known and exploited in whole-tree and roundwood architecture... do some image searches for those terms to see some impressive stuff.
The docs are great and re-frame is a pleasure to work with. It make take some time to read through the docs but it is a worthwhile endeavor as the concepts build upon each other. They reward those willing to take the time. When I was a newcomer to re-frame and cljs I did not find the re-frame docs to be pretentious or off putting in any way. If not for re-frame and the re-frame docs I'm not certain I would have continued to use Clojure or cljs. Thank you for building this excellent tool and providing high quality documentation to back it.
>>Written simplified Chinese already mostly replaced the traditional Chinese way of writing - mainly Taiwan still keeps traditional Chinese alive.

Hong Kong and Macau does too, although it seems a transition is underway to shift to simplified writing.

[1] https://en.wikipedia.org/wiki/Traditional_Chinese_characters...
Actually, a good physical example is restaurant health inspections. They're responsible for testing the safety of an organisation, and making sure that data is publicly visible, and in extreme cases, shutting the organisation down for negligence.
If you want to be the centre of the world, if you want to be a public utility, if you want to be the front page of the internet... then you have to have a proper complaints procedure, a proper independent appeals process. Yes it would be very expensive, tough luck.
And note that this has been going on for a lot longer than that.
Why is the person doing the deleting so low, relatively speaking, in your ranking of people's responsibility for them doing the deleting?

Also, do you think that this person or persons would refrain from deleting the data if they had the opportunity, but it qualified as a "good idea" to keep online? I.e. they might review, say, medical records, spend some time thinking to themselves whether it was 'necessary' to be online, and then decide to delete or not delete depending on their judgment?
Slack is unusably slow on any machine, so there's nothing new about that.
How can this be enforceable? Aren't the records themselves public domain since they were produced by the government?
Tangentially related but I'm having some issues related to email beeing refused by Gmail.

In my organization we have ~10 linux VM and they are all configured to send email to an exim MTA. For example monitoring stuff. The system mail name is set to vmName.srv.domain.name (domain.name is replaced by our actual domain and this resolve to a local address) so it's quite common to receive mail from root@vmName.srv.domain.name. This cause no issue when it's delivered to the local Cyrus server but when it's transfered to a Gmail address for some reason Gmail reject the email because the headers are bad.

I am considering rewriting the address to user.vmName.srv@domain.name in exim when receiving email from local VMs and I am wondering if this could be a bad idea.

I'm going to redo this mail server from scratch soon because it has been left untouched for something like 6 years. Some software was compiled on it with shared libraries which then were updated but the software was not recompiled. It's a dumpster fire and I'm actually surprised most of our emails seem to go through.

I would also add to the article that's it's a good idea to have some rate limit on outbound email, outbound email spam checks and to check that the user sending email has the right to use that address.
This is an unfair advantage but I don't think is specific to Google. I don't know whether Apple collects such consumer usage metrics or not but Amazon, Walmart, Costco, etc. they all monitor consumer metrics and might end up building a competing product/service based on those metrics.
The article mixes two things: Growing willows into furniture and turning driftwood into furniture. But yes, the seat is harvested, not transplanted. Still-growing furniture would be a heavy burden in maintenance.
Im working on a project management tool called kanception.io it is free and in beta now
Screamer: Efficient Implementation of Nondeterministic Common Lisp [PDF]
Drugstores in Brazil are doing it and that concerns me A LOT.

Their modus operandi is to ask you your CPF (it's like an SSN, but not that secret and powerful) and, if you refuse to tell them, you are not eligible for some discounts which can reach 40% in some more expensive items.

Customers happily agree to give their CPFs, completely unaware they are of the potentially disastrous consequences, and we are not even offered something resembling a privacy policy.

Think of the uses of such data. Health insurers could use them to detect and even predict health issues. One could estimate menstrual cycles and even the size of your genitalia.

A Brazilian data protection law is about to become active within the next weeks, but honestly.. such data shouldn't even be collected at all.

I'm looking for support for a bill to forbid drugstores to collect CPFs and to offer any sort of discount to people who identify themselves, but I believe this should be more publicized before being discussed for voting by the Congress. The more active drugstores on the "data business" are part of huge chains and their lobby will definitely be massive. Society should be aware of that and counterbalance for such lobby.
You'll find that people, even those without formal education in English like me, don't generally write like that. I think just reading and writing a lot makes one's spelling naturally converge to the most common one.
Coppice doesn't kill the trees.

They start with a small to medium size tree that has been cut to (roughly) ground level and train the sprouts that come up off of it.
Spiraling Self-Censorship in the United States
OP is from 2016; apparently it's been used for beef and chicken with FDA approval since it was brought into widespread use.
Wonder if this should take into account pan laws:

* https://en.wikipedia.org/wiki/Pan_law

* https://www.image-line.com/support/flstudio_online_manual/ht... (search for "panning law")
I use Bluetooth headphones, but almost never use or bother to set up the associated app. So hopefully Bluetooth pairing alone isn’t enough. Looks a lot of these details are collected through a companion app.
I broke down when I finally found good noise cancelling headphones that will continue working without battery. The annoying part now is that layering pass through audio of the outside world on top of what I'm listening to has become pretty nice.
That sounds just like the (very generous interpretation of) Yelp business model. Automated systems that are as effective as elevator door close buttons, & human support available only to paying customers.

I think the origin of this wasn't even originally sinister. It's just that "free" services aren't willing to provide human support, so youtube, gmail, etc. rely on automated systems. Ultimately, only paying customers get human support, and that simple system (even assuming all actors behave well) progressively skews to the advantage of paying customers. The house edge is small, but cumulative.
The Climate Crisis: Lighting Up Its Impacts
I think it is entirely reasonable to start with the presumption that people have a right to their data and to their property, that it is valuable to them.
Lightly edited title to fit within the space (and fit [PDF] which pushed it 3 characters too far). Original:

Screamer: A Portable Efficient Implementation of Nondeterministic Common LISP
Is there an inexpensive service out there that does “mock” attacks if you give it a bunch of host names and ports? I know it’s something you could create yourself but would be nice to have a third party try to connect to your databases and immediately alert you if it was able to gain access.

Would especially be useful if you were tinkering with firewall/security settings and accidentally opened something up.
Ask HN: Are ongoing stimulus and extra jobless benefits economically dangerous?
If you look at the US Dollar Index, the dollar is losing value against a basket of other international currencies at a fairly rapid pace.
US Dollar Index tracks the price of the dollar against a basket of international currencies: https://www.marketwatch.com/investing/index/dxy

Just wondering if anyone on HN has any takes on this topic.
Controlling spam used to be about stopping unwanted messages sent to users. Now it has morphed into this idea that every site has the responsibility of content-policing their own users, lest what they publish be used to facilitate spam. Your advice may be pragmatic, but it shows how far we've slid down the slippery slope.
>I prefer this over having data stolen.

Okay, and I prefer being waterboarded over being drawn & quartered. But it doesn't mean I support the practice of waterboarding, since there's another option, namely just not waterboarding in the first place.

This contrarianism is so strange to me. Data not being deleted by a bad actor is preferable to having it deleted, and I would think that would be the main takeaway here, rather than this weird descent into counterfactuals. Where does the impulse come from to bypass the normal answer, treat it like a trick question and go into contrarian mode by measuring it against counterfactuals? I think when you do that you lose sight of the most important thing here, which is the fact that data is being wantonly deleted and that it is bad that this is happening.
AWS does have budget notifications that you can set up with a few clicks. It doesn't come by default because AWS doesn't know what's the right amount for those notifications. I already get enough emails from AWS for every account that I make.

I can actually think of possible/real workloads that would burn 2700 usd out of blue in two days and those customers would not be happy if AWS blocks their account because AWS thinks they did something wrong.

AWS Support quite often happily refunds these amounts and you don't need to post to Twitter. I've seen them refund a lot more.

Why haven't they done something to prevent this mistakes? They already refund these things, it's just those refunds is a drop in bucket compared to services that enterprise customers are paying for, and AWS engineers are busy building for them.

AWS gives you a lot of power compared to what you can do on your average hosting provider, but sadly there's also a lot of room to shoot yourself in the foot if you don't know what you are doing.
I don't know :( But this feels like some sort of terrorist tactic, and I don't think this should be the way things on the internet are regulated either.
> See also changing capslock to control.

Is it even possible to do it through system settings alone, even if obscure ones? I use AutoHotkey to do Caps Lock -> Ctrl remap, and it's one of the first programs I install on every new system.
Old news. Germans did this before.
https://www.history.com/.image/c_limit%2Ccs_srgb%2Cq_auto:go...
Will have to give this a try, one Arch derivative I've always been fond of has been BBQLinux (https://bbqlinux.org/) which still runs amazingly on my 3rd Gen i5? Laptop.
You can cheese infinite loop detection by setting a max number of edge traversals (that way you don't just loop longer when someone speeds up the happy path).

For real code, you wouldn't generate a web page with 5 million entries in it, so you can be pretty sure that the data is bad even if it's not cyclical (but it probably is)
Apple certanly collects metrics about AppStore downloads (they're after all available to developers with https://developer.apple.com/app-store-connect/analytics/ ). There's also a decent chunk of analytics going from iOS (probably order of magnitde less than Android though) you need to opt out of.
Sovereign does most of it:

github.com/sovereign/sovereign

I was an early contributor to Sovereign and used it for many years, but I found that we kept adding features to it and it got too large for my liking. Now I use docker-mailserver:

https://github.com/tomav/docker-mailserver
Do you have permission to access HackerNews (:rolleyes:) ?

You access it because it's publicly available...
Churches provide love? As long as you are one of “them”. Go into your typical small southern church if you and your spouse are different races - many church goers still believe that “miscegenation” is a sin - including Bob Jones University.

I wonder how many churches would be as “loving” if “Adam and Steve” walked in?

https://www.au.org/blogs/wall-of-separation/deja-vu-all-over...
a bit of a tangent, but i've always wondered why "wild-caught" is such a marketing thing. to me, if it's wild-caught, chances are high that it was not done sustainably, which is opposite of how farmed variants are procured.
Preliminary Mac support. Woo!
PHP7 to ES7 Syntax Translator
I enjoy working with re-frame and can't imagine building single page apps in ClojureScript without it. For some reason the docs are controversial, which is a surprise to me. I appreciate the conceptual framing in the docs and how each section builds upon the previous. I don't mind the references to star trek or statements on the greatness of Lisp.

A common complaint seems to be the docs are too verbose and people just want to jump in and use the library. If this is you, I recommend using the Luminus framework https://luminusweb.com/ to generate a new project template so you can hack on a ClojureScript project with re-frame to see if you like it.

# Make a new project with re-frame
lein new luminus my-project +re-frame
# Start the clj and cljs repls
lein repl
lein figwheel
Some of these attacks leave a calling card sort of thing, e.g. a database with a document that says "hey, lock your stuff up".

That's more or less the best you can do without unreasonable effort, and there's no guarantee the database's owners will ever see the extra database unless you also destroy stuff on the way to make them pay attention...
Ah a growth hacker! You go do it. Out-compete them with bamboo!
Big Reasons Election Day 2020 Could Be a Disaster
The snowbirds keep them nice and frosty, even in the off season, unfortunately.
Back of the envelope calculation says that one gallon of gasoline makes 20 lbs of CO2 when burned. One hundred gallons of gas per ton of CO2. I have seen sequestration costs of $200-$500 a ton for current CO2 sequestration or conversion to fuel hydrocarbons. This would work out to a $2 to $5 dollar tax for gallon of gas. So this would take us to $4 to $7 per gallon gas to create a sustainable CO2/hydrocarbon economy. For a lot of people, this would be better than spending an extra $20K+ for an EV. Twenty thousand dollars buy a LOT of gas. Ten to 15 years worth for a typical computer driving 10k a year even with the added taxes. Plus, this might make some places like New York, more politically open to oil/gas pipelines and fracking etc to increase supplies because gas/oil would now be green.
i meant under "Access your data with:"
something like "Or read old link:"

but you're right it can be discovered
I'm fairly certain he is self employed / has a business, and Australia is different :)
Friendly FYI, "EXPOSE" is a no-op that is only meant as visual documentation to end-users.

"The EXPOSE instruction does not actually publish the port. It functions as a type of documentation between the person who builds the image and the person who runs the container, about which ports are intended to be published."

Second paragraph:

https://docs.docker.com/engine/reference/builder/#expose
Sure but blacklists are binary. That’s why they don’t work.
Reminds me of Apple and Amazon.

These gatekeepers flexing should be a huge red flag, akin to the BP oil spill in the tech world.

This might be the last straw for me to delete my Facebook. I would be a bad capitalist if I didn't.
Hm, basic begginer problems. You need good connectivity, video conferencing gear, dedicated room and nanny. All that is affordable if you do not live in expensive city.
Running an email server became a real pain about 4 years ago. Until then, we could run our own exchange server, control everything and it was awesome. Then came the email security products from the large companies.

It became a self fulfilling prophecy. Our email would trigger a rule in big co's third party security app, which would then report to a centralized rule breaker clearing house automatically. Clients couldn't receive our emails, we would dive in, submit appeal to clearing house, get clear and a week later do it all again.

Everything was configured properly on our end. We passed all the online validation engines. IPs were our own personally owned block and pristine.

It became too much.

Switched to office365 and all problems magically disappeared. Sent emails to same big cos with third party email security and haven't had a single issue.