skysight-inc/HackerNews huggingface dataset:
TL;DR: Cool that this thread exists because people will mention (please do!):

* Docker-based e-mail setup, with comments about their experience, like https://github.com/tomav/docker-mailserver (which incidentally IIRC was recently looking for a new maintainer).

* ...ideally that would have one host running SMTP facing the big bad public Internet and therefore minimalistic, and a separate more isolated host that runs the IMAP server. (My current setup does that with, looking for hints but perhaps I have more to share than to learn this time.) -- https://foxcpp.dev/maddy/ mentioned in this conversation may simplify things but with IMAP and SMTP inside one process you'll get a hard time doing this separation, not a good point for security.

* perhaps advanced mail routing like user-selectable option to automatically create mailboxes, per mailing-list and envelope address, although technically we could start another conversation about this. (My current setup does that, looking for hints but perhaps I have more to share than to learn this time. One pain point is many senders generate uninformative List-Id or even change them at each message, even Mozilla for example, making things messy.)

My current setup runs Postfix for SMTP on one host, doing all the rejection of spam and forwards approved messages via LMTP to another machine holds the private mailboxes contents to be served via IMAP by Dovecot. Plus custom recipient delimiter instead of the traditional "+". And all point above except being Dockerized.
That's probably what i should do... Hopefully my phone is fully supported.
I'm pleased to see this. I'm privacy forward and there is no doubt this information will be abused by private and public entities. We simply need to deal with this another way without giving up yet another bit of privacy.
Types and Programming Languages is one of the best textbooks I've ever read, even as a non-CS-oriented reader. I was able to start at the very beginning of the book with no solid grasp of the lambda calculus or type theory (or formal CS education), and I worked through the whole thing, implementing many of the different types systems in Rust[0].
TAPL does an excellent job of building on each proceeding chapter and explaining things in a very accessible manner.
TAPL actually inspired me to start working on a Standard ML compiler and language server as well. [1]

[0] https://github.com/lazear/types-and-programming-languages
[1] https://github.com/SomewhatML/sml-analyzer
https://siderea.dreamwidth.org/ is another widely read blog.

Most DW users post under friends-lock. You're not going to see most DW posts unless someone has given you access.
That's an interesting idea that could stop very specific types of fraud, certainly in the life sciences. But it's not feasible for all kinds of research, and in fact could hinder lots of research.

> All papers would be required to be made public.

This is more universally feasible. Publicizing the data and analysis tools (scripts, software) falls into the same category, and would go a long way to help without the need for such strong separation.
But there's already been a process slip.

> Intel’s current best technology, known as 10 nanometer in the industry, was scheduled to appear in 2017 and is only now making it into high-volume production. And when the company reported results on Thursday, it said the next iteration -- 7 nanometer -- would be delayed by a year.

So a three year delay for 10 nm and an indeterminate one for 7 nm all while TSMC already has 7 nm in production and is working on 5 nm.

If Intel does start outsourcing EUV, given the very large investments needed for that technology, I don't see how they would ever recover their lead.

Also this isn't just about Intel. The US invented the semiconductor industry and has been at it's forefront since the beginning. It looks like that is no longer the case and that the only company in the world with a cutting edge semiconductor fab capability is headquartered in a country China claims as its own.
I have both Beats Wireless noise cancelling headphones (provided by work) and Bose wireless noise cancelling..

I have never even thought about downloading the apps for either of them. I never even thought to consider if they have apps. I just bluetooth to my phone and listen to music.

Am I really missing out?
Jeez, that's a pretty impressive dumpster fire. And it's been going for half a decade. Kudos for keeping track of it and periodically doing your part in reminding the world.
The root of the problem is that we allow people with high esteemed credentials to run society. They jumped through a hoop.

"You got straight As at 14 - 18 years old and got into an ivy league school as a result? Here run this venture fund."

"You got a PhD in Economics with a good publication by P-hacking your secret data? Here take a run at the FED with power over the US Economy. Your Phd shows that you are the man for the job."

"You got a PhD in ML by making some incremental improvement on some already existing model and then doing massive hyper parameter tuning? Here, become director of research at this big corporation."

Research will never be fully productive in this system, there are too many people who have too much to gain from gaming the publication system.
Or, as they just learned exactly what it is that they have lent, NASA may now want it back. Let us please keep this off of twitter.
One strange thing about that forum is they keep the same threads year after year. So there is, for example, 11 pages of people rooting for Ruth Bader Ginsburg's death since 2009.

Discussions are indeed not very kind.
> But if you require everyone to take adequate measures to physically secure their houses, you don't even need laws and morality!

If laws and morality were sufficient protection against malicious actors, I might agree with you.

However, in a world where cyber vandals are often beyond any accessible jurisdiction (and may even be supported by their local authorities), laws and morality are clearly not effective at keeping unauthorized users out of private systems. As such, the responsibility for keeping private information secure naturally falls on the people running the systems.

Putting up a network firewall (or at least requiring authentication) would have prevented the damage described in the OP, and is a rudimentary security measure that has been common practice for decades. The people who suffered significant damage from this attack should strongly consider outsourcing system administration to someone who knows what they're doing.
I've been running amavisd-new for ~10 years (it runs spamassassing and clamav) and have been DKIM signing with it the whole time. Never had the need to switch to rspamd. You can also sign emails with OpenDKIM.
‘digital wellbeing’

This has such an Orwellian tinge to it.

This is the Western version of CCP controls, the means just take another form. I don't imply the two are in the same category and therefore it's not equivalent, but within the constraints Google has ... this is what it looks like.
Most often by avoiding paying for the externality.
I thought this must be the case. Every time I enable oh my zsh git new terminal opens slow by orders of magnitude.
Salary caps? So the best people go into the private sector where they can actually get paid?
You mean jokes about race, gender, or sexuality. Your "perspective" is prejudice. Spell it out, don't be such a coward.
Having had to do some mass audio stuff on datasets recently I discovered SoX - a self proclaimed "swiss army knife" for sound processing. Delighted to find multiple bindings in Go, I eventually decided to just do it in python as there was a very solid library there and it was just simpler for my use case.
It is, at least if you ask me.

People here are speaking about how gmail will "effectively spambox your mails by default". That's not been my experience (from setting up multiple small customers). Anyway, at least I've never heard of gmail just eating your e-mails. They either get rejected or accepted and put somewhere (maybe the spam folder, but at least somewhere).

Office365 / hosted Exchange / Outlook Protection or whatever is it called these days... they should be routed to /dev/null by everyone.

They just won't track your reputation unless you send them more than 100 mails per day. Does this sound bad? There's more: if they don't have reputation info from you (because they refuse to track it due to the low volume), your mails will go to spam inboxes even when their filters indicate that the message is not spam.

And there's more! Don't dare to ever get a bad reputation (i.e.: a user managing to get hacked and their account used to send a couple hundred spam e-mails before triggering your countermeasures). If this happens you are 100% fucked. Now they will DROP your e-mails. Hear, hear: their servers will accept your mails and just DELETE them. No spam folder, nothing.

You will try every possible thing: set up everything for their feedback loop, sign up in their "Smart Network Data Services" to track your reputation (it will be empty except for that day)... and finally contacting them at their sender support.

Do you want to know what they will reply? That you should be patient and let your reputation build up over time. What a joke! How on earth can your reputation improve when users cannot mark your mails as "not spam" because they (outlook, not the users) are simply DELETING them without a trace?

Oh, there's a way out of all this though: obtain a "Return Path Certification" [1]. That is, pay them an absurd amount of money and your mails are guaranteed to get to the users' inbox unless you are clearly spamming (all of the above assumed you are NOT).

Up to this final point you could think they just do their best and all that I've explained is collateral damage. That last "pay and we let you off the hook" is what clearly signals to me that this is an elaborate scheme to get small players to either pay them anyway or just give up and use a big-provider service.

[1] https://sendersupport.olc.protection.outlook.com/pm/services...
Thanks for pointing out the problem with credentials.

Name a better indicator then for being competent.
As mentioned in https://news.ycombinator.com/item?id=23960831 it's good for security to have SMTP server and IMAP server segregated, even separate physical machines, which you'll have a hard time doing when everything runs in the same process. What happens when maddy gets a security hole discovered.

To me maddy would feel like sleeping on live electrical wires, only they are insulated by a thin layer of paper. Hope the isolation does not get scratched anywhere while you sleep. Even a non-dockerized, traditional setup like postfix+dovecot has better isolation.
Malware and childporn reduction efforts also often go after the hosts of that content. I'm not sure why calling the folks hosting this stuff what it is incorrect. Sure, childporn folks don't actually necessarily "send" child porn, they just respond to requests from viewers. But they host it.

These scam sites are like that - do you really think you can make $30,000 a week working 30 minutes a day from your home computer if you just send these idiot $25?
This is an unnecessarily combative post and assumes words spoken by the original poster that do not exist. The OP correctly, in my opinion, identifies a hypersensitivity trend in modern companies.
That was aimed at everyone on this thread that feels comfortable with deleting databases that they don't own.

Vigilantes make their own choices, but professionals are judged by their reputation. As I've said elsewhere, I challenge anyone, especially professionals, to tweet "I will delete your data if you don't secure it" and to add it to your resume/CV as a strength.
Didn't Equifax have open customer data back when that attack happened?
We need more HTML books. Content could become so much richer by linking to relevant external resources, much better accessible.
There's about a dozen Russian posts now, only one of which looks like spam.
Unfortunately you can't disable noise cancelling without the app.

Well, you can, but you first have to enable that using the app.
Noise cancelling works quite well on planes.

It's not for hi-fi. Livable-fi in combination with noise cancellation is a bonus. The headphones are for noise cancellation, not hi-fi.

(These cans are usually not too bad with noise cancellation turned off. But when you turn it on, it's because noise cancellation is what you want.)
In reality, remote work makes you vulnerable to outsourcing, reduces your job to a metric, creates frustrating change-averse bureaucracies, and stifles your career growth.

And, it's more cost effective than slavery!
Police Declare Riots at Portland and Seattle Protests; 1 Killed in Austin
As usual on this kind of articles, no details given on how exactly FBI traced the attack to Russia.
Agree, I don't think salary caps have much to do with the poor alignment of incentives under discussion here.
It's not just supporting, it's about not wasting resources that can be used productively for other things.
Take a look at this paint software:

https://github.com/Symbian9/azpainter

https://tipsonubuntu.com/2020/05/19/azpainter-full-color-ill...

It's written in pure C by one developer, and it's super fast. Operations are on par with other software because fx libraries are usually already written in native compiled languages and optimized, but this one loads its interface in a lot less than one second, which becomes like 100 ms or less cached. Wouldn't it be wonderful if all software would at least load their interface comparatively fast? Why do i have to waste (tens? hundreds?) megabytes just to show a GUI that does absolutely nothing else than linking events to graphics elements when someone can write a full fledged software using a quite complex interface whose entire executable size is less than one megabyte?
I had no idea she had a legal thing named after her. Of course, it was well before I was born. But, still.

The article mentions in passing Hattie McDaniel, one of her co-stars in Gone With the Wind:

https://en.wikipedia.org/wiki/Hattie_McDaniel
Not everything is a car analogy.

But if you want ... it's like having a drivers license.

Or: you only "drive" self-driving cars. In case of emergency you don't know what to do. Perhaps an even better analogy.
Industry kinda already has. Products launched. Teams managed. A candidate's publication record is a conversation starter during interviews, but I feel like years of experience at a company working on launching a successful project is a much more valuable currency.
Publications really only look impressive to outsiders and gra d students.
I feel like you must have never read the bible, or even interacted much with a christian, to say this.

EVERYONE is a sinner. That sin is then forgiven.
it subscribe model is OK for a starter but what are the search algorithms employed should produce open source technology if its want vast adoption
> * Public access to research results, methods, and data, with some exceptions (such as PII)

You mentioned PII, so I'm assuming some familiarity with the health field. I'm curious about your thoughts on the position that one should not be required to immediately publicize their data, because there needs to be an expectation that a researcher can translate the capital (both time and money) they expend to acquire quality data into academic and institutional capital (in the form of research output, i.e. papers). The fear being, there might be insufficient motivation to conduct large data collection-oriented studies due to another researcher beating the data collector to the punch in terms of publishing certain findings.
Of interest:
https://github.com/chaifeng/ufw-docker
Took another dive and found that the main site showing what they are looking at and what they think they found is suspicios0bservations.org and if you visit that site you will find links to several other sites that have content related to their efforts.

I'll dive into some of this as time permits but for now I did watch a video from 2016 that outlined the data they are using and potential links they have found and papers published as a result.

I'll suit up, grab some coffee and dive into that later. Looks interesting so maybe not fair to compare it to stock market shysters at this point though the blind squirrel analogy will always be valid.
> Federally-funded universities can't use NDAs or non-disparage agreements

Many companies are only willing to enter into research agreements with a lab providing that lab is willing to sign an NDA. This would prevent companies like Google, NVIDIA, Apple, and Facebook from working with research labs. This is especially short-sighted since a student who is working at a federally funded university will have to publish their work.

> Federally-funded universities must respond to records requests under terms similar to FOIA (note that FOIA has requestor pay costs)

This is already true. I have known many faculty whose emails were FOIA-able and as a result, they preferred in-person communication for sensitive topics.
For getting a job, maybe…industry isn't everything.
You don't need to be a carpenter to know that you should install a lock on the front door of your house. How does anyone get to the point of standing up a production db and is allowing writes from unauthenticated connections?

I am pretty salty since as a sysadmin, I have been getting 'just pipe it to su bash' and 'i need allow any any' and 'bro I need chmod 777 on this directory and all its children' and 'bro this service account has to be a domain admin' from developers my entire professional career. Everything that there is to say has already been said and I am not really sure what to do about it. Nobody is out there peddling these cool fixes as truth and yet they seem to have a cult all the same.

What can we do to make this common knowledge? This needs to be on the same level as washing your hands and not accepting candy from strangers, yet every week we see a new data breach that boils down to 'somebody used the rights as they were designed'.
And height as well. It is hard to remember mostly 1.x metre high (rarely 2m). But in feet you can have change in the first unit. After all feet is about foot. More natural.
I guess I usually know what directory I'm in and if I ever need a reminder I use pwd.

With at least 6 months of commands in ~/.bash_history

$ history | grep pwd | wc -l

10
Complaints. Successes. Management reviews. Peer reviews. Customer evaluations. Just like other jobs.
The term was common in computer magazines in the 1980s and 1990s.

A lot of people who read those were not IT professionals, they were popular with enthusiasts.

Many of them were sold in mainstream outlets targeting the general public.
You have to clone from the previous iteration - because in theory, the block itself could modify the loop variable again and that modification gets lost if you keep cloning from the initial environment.

So your function would produce incorrect results for cases like this:

for (let i = 0; i < 100; i++) {
i += 10;
setTimeout(() => console.log(i), 1000);
}

I think the following should work though:

function FOR(env, cond, incr, block) {
if (cond(env)) {
block(env);
const env2 = {...env};
incr(env2);
FOR(env2, cond, incr, block);
}
}

FOR({i: 0}, s=>(s.i < 8), s=>s.i++, s=>{
setTimeout(() => {
console.log(s.i)
}, 100)
});

And yeah, I agree, it's not really complicated to implement (as long as you don't care about the waste of memory). It was just an unexpected bit of logic at that point.
Considering that Brueghel proved "modern" watermelons, which are much sweeter, existed at the time, I think it's more likely Stanchi just decided it looked better with black seeds instead of white.
Creating a UX Research System
Sure, they generate more, but the lower/middle class Westerners can't afford what they generate but the rich guys can.

The price of the offset doesn't matter because for climate change locality effects are not big on this scale. I double the estimate from Terrapass so I'm pretty certain it's good.
Allow me to offer some qualities other than competency that are necessary for responsible research.

1. Purpose. what is it that drives one?

2. Integrity. when does one compromise it?

3. Awareness. is one able to disengage when one's ego (fueled by credentials) is activated.
Comments such as these make me wonder: do you never ask yourselves where most of the population of Earth lives right now and why? In the hottest areas or near them. Because for some reason, they seem to be better suited for us.

Finish that thought.
I just ran into this very issue. I opted out of downloading anything. It was working fine until just now for whatever reason the volume is so low that I can hear a background hiss. The source laptop volume is maxed out.

If this is Sony's way of forcing me to use their app, they guessed wrong. I just bought these and am considering returning it.
Are you saying rocks have intent when they sink your boat?
> Yes, however a lot of that is done to produce products that are unnecessary

If you have to figure out which product are “necessary” and which are not - you don’t have enough resources “to go around” by definition.
"What if carbon removal becomes the new Big Oil?"

What if rainbow-horned unicorns become the new automobiles?

What if my wife finally succeeds in inventing dehydrated water?

What if zero point energy becomes the new electricity?

What if ... meh.

Someone once pointed out that if you wait six months to read it, the Economist magazine reads like pure comedy.

But this ... this is just Kubler-Ross denial. Very sad.
You have to do prior research. Bose don't tell you on the box that the headphones are bricked until you connect it to the app to do an update before it will allow you to connect it as a normal bluetooth device.
That's the point.

> You'll have tough time getting 5x.

5x isn't tough. It's easy. In fact, better.com will give it to you right now.
And the cherry-on-top: Once you are part of a research unit at big corporation, your annual bonus depends on your number of publications. Or why the pursuit of incremental but well marketed results never ends. Or why papers with 6+ authors among which only 1-2 substantially contributed is the new normal.
What's the motivation for the folks developing PCSX2 these days? Is it a purely intellectual endeavour, or do they play PS2 games for fun, and take advantage of things that aren't available on a real PS2 (4k support, cheats etc.)?
AWS could always send an alarm if current aggregate spend is more than say 2x previous monthly spend.