skysight-inc/HackerNews huggingface dataset:
Access to the Bluetooth service itself can cause some problems - both in user tracking (as your device notices and is noticed by other discoverable Bluetooth devices), fingerprinting, and through access to the bluetooth data channels (as mentioned in the article with the Bose Connect app)

https://electronics.howstuffworks.com/bluetooth-surveillance...

https://www.soundguys.com/bose-allegedly-tracks-your-informa...
https://ftx.com/en/trade/TRUMP

https://ftx.com/en/trade/BIDEN

https://www.augur.net/ will also probably have a prediction market for it on Tuesday when they launch v2
Information Fraud: Why Paying for Twitter Makes Sense
I agree with this - Cloudflare's pricing and function is clear here, and it seems perfectly reasonable and expected to have a cutoff size that they don't cache at the edge. I get the OP was pissed about a big bill and felt like lashing out, but it's unfair to complain about Cloudflare when they've done nothing wrong.
The instance itself needs to get its SSH host key signed, or upload its fingerprints somewhere, on first boot. This is easy enough to write, but making it any more secure than plain old TOFU is tricky.
I can't fathom how the need for young dolphins to lay the groundwork for what is essentially a rape-posse, came to be the path to evolutionary success. It would seem that consensual reproduction would be the norm in any successful strategy, given the critical need for offspring.
Sounds like an Interocitor
But what about the companies making millions in profit each year that are carelessly exposing sensitive data because they don't want to spend a little more on quality IT work?

No one wants to see their local pizza shop lose their pizza-credit database, but if that's the price to pay for data security then so be it.
While this is true of LCDs, OLEDs have basically no draw latency, so conceivably they could directly update as the frame buffer was populating like a CRT if the gpu driver and OLED driver allowed it. This would still have tearing though for a modern game, so it is likely that it would need to buffer and draw entire frames at a time, which could still give you only 1 frame of latency. Most of the older games were not updating the positional information of sprites between frames (just using scanlines for raster effects) so there was already 1 frame of latency on input updates.
Not to the same degree. Including the externalities in the cost would make sure those who pollute more pay more.
You can't post like this here. Please read the rules: https://news.ycombinator.com/newsguidelines.html.
Really tempted to install starship but I also do a bunch of sensitive stuff with my terminal. Should I be worried about using this? I understand it's open source, yet still not confident.
The OpenStreetMap Foundation is looking into hiring a Senior SRE
I felt cheated after falling for the mass hysteria, which lead me to acquire my first set of SR-60. It didn't take very long to realise how uncomfortable they are for longer listening periods, or when the cable turns into a tangled mess, and the special hell, when you have to replace the earpads.
> The average American isn't remotely qualified to make these types of decisions.

So what? that's just an excuse to keep power away from them. We are already getting incredibly important decisions made by totally unqualified people (e.g. Pandemic response by the current administration) not only are making bad decisions, they are making them in their own best interest, in detriment to the people they are supposed to represent.

> That's why direct democracy has never, ever, in the history of humanity, worked in a society above a few dozen people.

Examples please? What country/government has ever implemented a real/direct democracy?
> As it is, it's burned away any interest I have

That's why we have early adopters to bring it to a more universally accepted state :-)

This project is quite interesting from a pure analytics point of view. It's only about 3 weeks old, and it already has 4k stars and its trajectory is quite steep as shown below:

https://imgur.com/Mwz7do2

This project also has a healthy number of new pull requests so clearly something is working. What would be interesting, would be to cross reference the rate at which people are "starring" with the growth of the project.

Given the limited data (3 weeks), it would be hard to say if taking a more aggressive curating approach would hurt or help the project.
Mongstad! Mongstad! Mongstad!
Please don't take HN threads further into gender war. Nothing good can come of it.

https://news.ycombinator.com/newsguidelines.html
So STEM types arrogate "real science" to themselves, while they suffer the same reproducibility crises as "soft" science. They also seem to be ignorant of the histories and developments of social sciences, so cannot even conceive how they could be scientific. It's myopic.
Was curious to learn more about you, your website is nice, but the blog (blog.penguincoder.com) redirects to the main site (penguincoder.com), FYI.
Heroku really screwed me over once and the reps I spoke with were complete and total assholes and acted like I was in the wrong when it was their system that totally dropped the ball. I now advocate against them at my workplaces and I know it's cost them at minimum tens of thousands of dollars, though I get that isn't much money for them.
I tend to use passive headphones with 3.5mm jack, they have no electronics in them except the small speakers. They do not collect data. They are also used by musicians when doing audio mixing so its should sounds neutral and good.

That the headphones does not have electronics and batteries means they will last longer and thus be be better for the environment.
4000 small fish is a lot of biomass.
Why would you choose what's natural (inheritance, physical development, parent's DNA) over what's supernatural (your willpower)?
Randomized Control Trial: https://en.wikipedia.org/wiki/Randomized_controlled_trial
> ...CO2 is a waste product.

If we could turn it to become a resource, perhaps it will be consumed out, just like the rest of resources we humans discover.

One possibility maybe applying photosynthesis, if we knew how to do it in a practical manner. We know that plants can do it, we know generally how they do it, but still can't replicate it.

With photosynthesis, the CO2 ends up in some form of sugar among other things. Where the hydrogen comes from water, and we want that hydrogen for energy.

Of course, as with anything done by humans, there's a danger of abuse. In such case, we could 'overharvest' the CO2 such that it could starve the plants, leading to oxygen shortage... And that's another doomsday scenario.

All in all, the problems point at the humans, so far Earth tolerates us.
Given VPS providers give you terabytes of bandwidth included even with cheap VPS', I'd say that a $3k bandwidth bill from AWS costs AWS pretty close to $0
Using the term "tools" loosely, fork and spoon comparisons digest better than apples and oranges.

Eating soup with a fork is still a success with enough intelligence.

Pfffft. Spoon-fed geniuses raised with only forks was a cruel joke.

Let me guess... For an encore, they'll do a study that says AI is more successful.

A suckers iterated ever minute on the Internet with a path/information like that.
I’ve been alive for almost 50 years. I would think that if I dreamed, I would have been aware of it at least once. That is approximately 20,000 times I have woken up without any recollection of anything since the moment I fell asleep.
Save time by deploying your microservices to GCP in parallel
> PGP is bad and needs to go away

how should we sign git commits?
You are surprised that devices can be improved after their launch via software updates?

Or that people will see that as valuable?

Or that people have different preferences in their products than you?
This describes my journey somewhat. Started at ad and media agencies, was client side at tech companies, and gradually got more and more into the analytics, data, and technical bits.

I've held marketing and media leadership roles. But I've been teaching myself to code for fun and realized I might need to focus on more technical roles when I found myself doing things like reading the OpenRTB and AdCOM API docs for fun, and hanging out with engineers and data science folks more than fellow marketers.

Would you mind sharing what sort of role you're in now and how you went about that pivot?
There is grit before and after a certain point on a “trajectory” that matters. And intelligence may get you far, maybe grit will help you complete the last mile. So no I don’t think you can definitely say what the study says
What data could contradict such an image?

Generally, data doesn’t convince anyone who doesn’t want to be convinced, and can usually be used to support a wide variety of contradictory interpretations.

Avoiding this is why science has to be so rigorous.
Please don't make things even worse by posting like this (or https://news.ycombinator.com/item?id=23835194). We ban accounts that do that.

https://news.ycombinator.com/newsguidelines.html
> "Thirty-four officers have had 40 or more allegations against them."

That's 34 people who should be off the streets - so that's notable.

It would also be interesting to find the count of claims where the board was unable to get evidence it was entitled to.
Realistically, it probably would; those marks would just not fit into the progression of .02 radian marks. Ever seen a meter stick that also measured inches?

Are you trying to measure an angle, draw a particular angle, or confirm that an angle meets a particular standard?
I'm planning on using PineTab to replace my SurfaceRT for movies on road-trips. A 10" tablet with 16:9 aspect ratio, a USB-A port and can run VLC (or equivalent) is what I need, and it checks all of those boxes. My SurfaceRT served me well, but it needs regular rebooting now so will be retired.

I also seriously doubt the PineTab will have a slower UI than my SurfaceRT. 2-3 seconds for a tap to respond is not uncommon on it.
I defer to your evident experience.
No, he's right. The problem with taking huge spread positions is that mark-to-market p&l can be volatile and illogical, and if you can't recapitalize, you won't be able to hang on until the spread goes your way.

> They were always winning

Give me a break.
They are not based on X.509. I recommend taking a look at the CERTIFICATES section of the ssh-keygen man page, because I am unable to find a good reference on the web right now.
How did you approach this in your workspace and successfully steer people away from C and C++?

I have successfully avoided C and C++ my entire career, for good reasons, but I am getting more and more interested in doing more true embedded system type of work. Rust is certainly the leading candidate for me.
I can’t prove if everything you said is true or not but I like the way you lay it out there. :)
This comment breaks the site guidelines, and some of your other comments have been doing that also. Would you mind reading https://news.ycombinator.com/newsguidelines.html and sticking to the rules when posting here? Note that they include:

"Comments should get more thoughtful and substantive, not less, as a topic gets more divisive."

"Don't be snarky."

"Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."

It's obviously not easy to stay in the mode of curious conversation when discussing the most conflictual topics of the moment, but the intended spirit of this place requires all of us to try.
How Designers are Monetising their Skills
About Ron Graham
> it should also be pointed out it is political in the sense of having an intended purpose for societal change

The Christchurch mosque shooting was very consciously political - the perpetrator published a manifesto, he pre-announced and live streamed his crime to an online political discussion community dominated by the far right, he was hoping to inspire copycats through which to change society (he hoped to trigger the genocide of the Muslim minority in Western societies). Compare that to the Sandy Hook Elementary shooting - in the later case, the perpetrator didn’t prepare a manifesto. His motivations appeared to be primarily personal. Like everyone, he had some political views which investigators pieced together from writings and communications he left behind, but he made no attempt to communicate a clear political justification for his monstrous act.

Both shootings were horrific acts of evil. But only one was clearly intended as political. Only one was a clear case of terrorism
Thank you for asking serverfault question and writing about it here.

When I started to work with EC2 and SSH few years ago I encountered this problem. However I was overwhelmed with the stuff I had to do for actual business and had no energy to investigate.

Next question is, how do we protect against this attack without waiting for few minutes and making all those clicks to find the fingerprints every time we launch an instance?
Your API, in this case, is basically your Flask application so you're pretty much done.

If you want to run a database securely, you configure a decent password (should be asked during installation), create new users for each application/database (easy with tools like MySQL workbench) and make all applications running on the server (Flask, in this instance) connect to localhost/127.0.0.1. Don't expose services like databases to the outside world if you cannot in any way help it.

Then enable a firewall on your server (Ubuntu server comes with UFW by default) and lastly use a port scanning tool like nmap/zenmap to check if you have left any services other than HTTP(S) exposed.

I don't know much myself about Flask deployments specifically, but you'll probably use something like nginx or Apache to handle the actual web requests. There's an article here [0] on how to do that. After you've done that, you can secure your connections for free through Let's Encrypt clients like certbot [1] which handle most of the configuration for you.

TL;DR:

1. Configure your application to connect to localhost with a secure password

2. Enable a firewall, run "nmap <your domain>" to check if it works (should only expose HTTP(S) and probably SSH if you did it right).

3. Install nginx or Apache to handle requests for you and follow the guide at [1]

[0] https://www.digitalocean.com/community/tutorials/how-to-depl...

[1] https://certbot.eff.org/instructions
Bartosz truly deserves to be more widely known.

His Category Theory for Programmers book is an excellent introduction to the CT world if you come from a Computer Science background (well ... duh it says it right there in the title) and know very little math.

Highly recommended to give it a try, even if the topic doesn't seem to fit you. This is one of those books that will make you a better programmer regardless of what you do.
I suspect they liked the device in the state they bought it in, and were pleased when it later got even better at no extra charge (except for installing the app).

You can still buy dumb headphones without Bluetooth or noise cancellation of you don't like smart devices.
> I think it's easy for everyone here to estimate the actual amount of malfeasance by taken the number of times they've seen police behave inappropriately (dozens) and divide it by the number of complaints they've made (zero).

Except that this approach is NOT useful because police malfeasance is NOT distributed evenly. For example, over my lifetime I have only seen one case I can recall of police misbehavior, and I'm not sure that one even rises to the level of "malfeasance".

Perhaps if I were black and lived in New York City (where "stop and frisk" was an official policy for years) I would have a very different impression.

It is for exactly this reason that it is important to use actual statistics instead of personal anecdotes.
Remote is a fun one at the moment.

Technically a company needs to domicile by the information given by the employee. Should the employee not disclose where they are working from then its fair game. This crosses a number of tax locations but basically its a bit of a don't ask don't tell vibe at the moment.

Essentially it's providing the low cost living arrangement of X with a London salary of Y.
Then you'll learn real quick to secure your database, make backups, or not post personal stuff online.

And if you've configured your database that poorly, am I supposed to assume you've properly configured your server against becoming part of a DDoS attack? Or a bot net? The base level of negligence you're defending enables a multitude of attacks. Losing your DB would be an immediate sign you don't know what you're doing, and thus shouldn't be doing it.
> This would have to be the most laborious and lengthy manufacturing process.

In the video from the article, Munro opines that this is actually more time-efficient since you don't need a 60 year old tree to produce lumber that you then have to cut and then fasten together to make the structure. Since his business is still fairly young it would take a long time to market the first batches, but in another 5 years it seems likely that he'd have reserves and you could just buy a chair at your convenience. In terms of laboriousness: it doesn't seem to require lumber milling or furniture-making tools or skills. More work up front, but maybe less work in the long run?
Why not? If they have offices in EU, raid them. If they have customers in the EU, freeze their bank accounts or sanction their payment processors.
One of the biggest upgrades from using fish is syntax highlighting / autocompletion. You can get fish-style syntax highlighting and autocomplete in zsh (which has the advantage of being more interoperable with bash generally):

[zsh-syntax-highlighting](https://github.com/zsh-users/zsh-syntax-highlighting)

[zsh-autosuggestions](https://github.com/zsh-users/zsh-autosuggestions)

Poster mentioned "modern alternatives exist" with good colorization options. Some of my favorite colorized feature-rich alternatives:

ls -> [exa](https://github.com/ogham/exa)

cat -> [bat](https://github.com/sharkdp/bat)

du -> [ncdu](https://dev.yorhel.nl/ncdu)

diff -> [delta](https://github.com/dandavison/delta)

In combination with all of the above, [fzf](https://github.com/junegunn/fzf) suddenly becomes a syntax-highlighter preview-pane via leveraging bat (or delta, as the case may be).
Right now yes. But we're creating waste that remains harmful for thousands of years and store it in facilities with a 100-year service life.

It's the same kind of "leaving problems to the next generation" of current fossil-fuel use except this one is a lot more generations away.
Piezo-electric? But then you need to cool the other side even more..
Or Cucurbita pepo pepo, the Intergalactic, planetary, planetary, term
How about simply emailing the admin to tell them their database is unsecured? Oh, but that would be benign; I'm sure vandalism is so much more fun.
First ever photo of quantum entanglement
All features that couldn't be reasonably configured without an app
Ask HN: What is it like to work on software for space exploration?
Hi HN!
One of the most inspiring presentations I've ever seen is by someone who worked on the code and instrumentation for the Rosetta spacecraft sent to explore the comet Churyumov-Gerasimenko. I still think about this presentation often and wondering how is it really like to write code for spacecrafts and space missions. Has anyone worked on similar projects professionally? Can you share a bit about your experience and the exciting technical challenges? Thanks in advance!
There’s a famous saying in the sciences: “All models are wrong, some are useful.” Many of our physics models have been “wrong” historically, but yet they describe the world well-enough to be useful in making very good predictions. Newtonian physics is a perfect example of this - it tells an incomplete story of reality, but it’s still extremely useful in making predictions about how the world works.

The reproducibility crisis across the social sciences (and sometimes even in biology and medicine and - hot take - machine learning) is evidence that many of these models are both wrong AND useless for prediction, as opposed to just being incomplete.
Why doesn't the ccrb issue foia requests to get the data, or sue the police department?
You’re right about the (false) equivalency. But I think that “github” is well on its way to being the “kleenex” of version control.
One person may adopt value-laden definitions, another person may adopt value-neutral ones. Arguably, the term “perspectivism” is more appropriate for the former than the later.

The fact that an act occurred, and the question of what its announced motivations are, is not (usually) something that depends on your perspective. People with widely different moral and political views can agree on those descriptive facts even if they make completely opposite value judgements of them.

(Conspiracy theorists sometimes dispute the fact that an attack occurs and the real motivations behind it. But there are plenty of terrorist attacks which they don’t bother doing this to.)
I get what you are saying philosophically, but I don't think it holds up in reality. I'll take good healthy genes over whatever life lesson you are offering.
I think the major difference is that losing my house along with all my belongings is much worse than losing just some of my belongings.
Also data being exposed publicly can be used nefariously by multiple parties, so is likely worse in most scenarios compared to just outright deletion of the data
It would perhaps legally be more acceptable, and more efficient in bandwidth, to create a binary patch that makes an official virtual machine image into what the author offered ("fully patched with all necessary drivers and VM extensions").
Yeah, it was kind of amazing how the article never explained what exactly "meowing" entailed, and just left readers to figure it out from context.
Flipping Bits for Fun and Profit
I will add US roles if there is any interest!
Come up with an experiment that involves gravitational forces; there are physics models will predict it and you can design your experiment to have a P value of 10^-6 to confirm those models.

That's very different from the other items listed previously.
Another way to look at countfrom is that you have built--manually, as opposed to using any special syntax in your compiler--a "generator" for the sequence using a "coroutine". Had you written it in a language with support for typing the generator with syntax for coroutines, it would have looked directly recursive... but it wouldn't have been, as the implementation of that coroutine as expressed using normal routines would have had this property of storing thunks that are actually being called iteratively by the consumer. It thereby makes sense that the co-routine (which is sitting at a higher level to the routines which are used to implement it), being not a normal routine, doesn't have normal recursion: it instead has co-recursion. (Now, what is amazing to me, is that I open this document and not once does it even use the word "coroutine", even though all of this terminology makes a lot more sense if you are willing to do so ;P.)
I wonder if carbon capture actually makes sense, not from an economic perspective but from an energy perspective.

One way or another you're spending a lot of energy doing it. Using fossil fuel would not make sense as it would add to the problem you're trying to solve. Considering there's not enough renewable energy for all our current uses, wouldn't it be simpler to just reduce, and convert more things to renewable as they come available, which we'll need to do anyway?

Once we have a big surplus of renewable in the future we could look at this again.

It sounds to me like a pipe dream, a promise of a 'quick fix' for a problem that has no quick fixes.

And to be honest in order to actually reverse global warming and prevent some of the future effects we're already locked in to, we'll have to extract so much carbon that I don't see this happening in the next hundreds of years.