skysight-inc/HackerNews huggingface dataset:
I mean sure, I don't look back too fondly on the days of $0.99/mo 128MB OpenVZ plans, which is where I feel this distaste comes from. Digital Ocean, Vultr, and Linode have been way more solid for me and they keep each other honest in terms of pricing.

I'm curious if any of those three are guilty of selling personal data.
You can tunnel SCSI over PATA/SATA using ATAPI, used for optical drives. That's a bit different from SATA being "SCSI at their core"; the entire point of ATAPI is that ATA isn't SCSI.
It's on the radar, just not like you'd hope. Oregon police have begged people to stop calling in arson reports based on fake news conspiracies...

Stay safe!!!
Does this mean that https://en.wikipedia.org/wiki/Provable_security does not exist?
A ways into the video it says the core Dyalog interpreter is about 100KLOC, with the rest being GUI code and interop such as file handling and formats, cross-platform support, .NET interop, and so on. If the 100k figure surprises you then what you are missing is just how deep array optimization is. For example, searching through an array will use an SSSE3 table lookup for 1-byte elements, a different table for 2-byte elements, and several different kinds of hash tables for other types. I tried to give a sense of the scale of this sort of thing in the first slide of my Dyalog '19 talk on Reductions (https://www.youtube.com/watch?v=TqmpSP8Knvg). You can write pages and pages of code and still there will be a way to speed up a common operation substantially.

By working on multidimensional arrays, APL expands the range of computations that are accessible to optimization. I think the writer of a scalar compiler like C would generally be happy making a single loop as fast as possible. APL immediately makes the implementer think about what happens if there are many axes (each of which is equivalent to a nested loop) even if the later axes (inner loops) are small.
An Introduction to Data Oriented Design with Rust
It's easy to see that checked exceptions are bad... no other language tried to copy the idea. A worthy experiment, but that's all. What else did not get copied? Classloaders.
Checked exceptions are hardly Java's biggest mistake.
That's because it wasn't.
I assume the business case is mostly about PR. "Apple takes 30% of my math tutor's income" sounds worse than "Apple charges Epic Games 30%".
Sounds like Jevon's Paradox: https://en.wikipedia.org/wiki/Jevons_paradox

"In economics, the Jevons paradox occurs when technological progress or government policy increases the efficiency with which a resource is used (reducing the amount necessary for any one use), but the rate of consumption of that resource rises due to increasing demand."
> It is rare to find someone who has paid a penny for anything else.

Citation needed. Who are all those people attending the Microsoft developers conference every year? Who were all the people in the audience for Ballmer's infamous "Developers, developers, developers" chant?

You're claiming the nonexistence of something that clearly exists.
But what if I want one-to-few or even one-to-many experience?
Companies fly people out all the time (well, pre-COVID). They pay for the travel expenses, but not your time. I personally find this much more of an imposition than spending a few hours writing some code in the comfort of my home.
> Is it just because NPM does and javascript is bad

Not at all! In fact, npm's implementation is why some are pro, but also why some say that it's not worth it; see https://news.ycombinator.com/item?id=24444852 for some npm specific sentiment.

(Incidentally, npm added scoped packages in 2015, after these decisions were made for crates.io. However, crates.io is still smaller than npm was then...)

There isn't really a TL;DR because this space is complex, and there's a lot of details, and they matter, and different people have different reasons for not wanting them. I think it's good that github has namespaces, but that doesn't mean I think that Cargo should have them, because they're fundamentally different services.

The short reason we gave back in 2014 was:

> Because namespaces are strictly more complicated in a number of ways,and because they can be added compatibly in the future should they become necessary, we’re going to stick with a single shared namespace.

from https://internals.rust-lang.org/t/crates-io-package-policies... which is linked in the post.
'Grading homeworks and exams'. I'm sorry the only way I could get over it is by leaving academia.
The similar quote I've heard is, "Form is liberating." I feel like I heard this in the context of poetry in high school, but Google turns up a bunch of references to The Mythical Man Month.
Could say the same thing about these cookie-accept popups as some will just redirect you off their site if you don't accept.
DNS Flag Day 2020: October 1
> I'm more willing to spend money on iOS than other platforms, because of how Apple manages the platform.

I've heard this argument from iOS users who have never really used Android for a significant amount of time.

I have been using both Android and iOS devices for almost a decade now and there's not much of a difference.

In fact I'd say the experience is better on Android. For instance, if you uninstall a paid app you just recently bought you get an automatic instant refund. Good luck getting a refund on iOS.
Except for the decision to not tackle solutions for native extensions.
"I had a 10 year career in that "wasteland"."

From your CV, apparently developing for the Mac. Actually at a well known developer that probably had just a handful of employees. It isn't really a counterpoint.

"Citation? From what I've seen, that's not actually true."

Epic doesn't release these numbers, yet from third party analysis in the 30 days before being kicked from the respective stores, Fortnite made $43M on iOS, and a paltry $3.3M on Android, worldwide. Those iOS numbers would make it represent 40% of all Fortnite revenue, which would already significantly over-represent the userbase.

Nonetheless, it's funny when someone demands a citation and then gives their own belief minus citation as a counterpoint.
> Of course security can lead to operational problems.

So can lack of security.
There has been the ability add to the home screen since day 1. There were plenty of website that calculated where the “share” button was in the browser app and had a pop up to add to the home screen.
It's Time for a Reckoning About Criminal Intelligence Databases
Maybe I misunderstood the parent but "force manufacturers to bear the costs" is very different from taxing the end consumer goods, no?
In case it's useful to any - here's a diff of what Apple changed since the last update in March:
https://gist.github.com/samdozor/637d21424cc3240b25fe5cd7007...
> Pringles are addictive

Pringles have nothing on Doritos.
> It is very well possible to brute-force port knocking

It's incredibly unlikely - there is probably more chance of the sun imploding tomorrow. And if you're the type to install port knocking, you've almost certainly also installed something like LFD, which will temporarily block IPs for port scanning.

Also, without inside information, how would you even know that a server was using port knocking?

> unlike
Security can also be achieved by physical separation or identity based on physical human traits. Now we're getting philosophical, but if the security crew of the data center knows my face, and does not allow other people to enter, would you reduce my face to a value that is "extremely difficult to guess"?
Yes, there are benefits to that approach. We rejected it because we want builds to be reproducible, and not to have that property depend on external entities.
I have a DJI Mavic Mini and I was very impressed with the hardware and software overall. My kids and I have had a lot of fun flying this little drone! It does log every flight to the cloud, showing the telemetry logs of exactly where the drone flew and what it sent and received along the way (not full video, just telemetry). I find the logs extremely cool to look over after the fact when analyzing a flight.

Their insurance program saved my butt when I lost radio contact when I flew the drone over to a friend's back yard, and had misconfigured the "return-to-home" altitude too low, so it promptly flew itself into a tree trying to get back to me. $30 to get a full replacement was a huge relief.

It doesn't bother me much that they have a copy of my telemetry logs. I wouldn't want them to have copies of the video or pictures, and as I understand it those never leave the SD card.

It would be nice to have a "local data mode", but on the other hand, their cloud service is also authorizing the flight envelope based on GPS coordinates, and it's important that the device doesn't let itself be flown into air traffic corridors and the like.

Drones are a serious responsibility, and can be misused to cause a lot of damage, I'm totally willing to trade off some amount of tracking for the ability to have off-the-shelf access to this tech.
You've bought the privilege of being allowed to accept the EULA.
It is interesting to me that an open source project would be acquired, which is literally the trademark and copyright. However since the copyright is literally governed by copyleft they really can't change anything unless every contributor agrees or they actively re-write the code that scrubs non-agreeing contributors.

In any event someone could fork today, and rename it Cuddly Server as long as the copyleft stays in place. See Jenkins/Hudson.
Like you said.. "worry less"

Can a theoretical attacker intercept a port knocking sequence? maybe. Would a script kiddie running a new ssh 0day against the entire internet be able to do this? no.
It appears you didn't hear the biggest shocker of them all; one does not need to have an outright monopoly to be in a dominant position, able to abuse its power in a market.

I know, shocker.
Okay, but I don't want that as a user. If I accidentally say "Deny Location Permission" I want the app to say "I actually can't navigate for you without this, sorry. Want me to request the permission again?". I don't want to debug this shit - oh why is navigation not working? No thanks. Life's too short.
Thanks for the comment.

I am by no means trying to downplay metaphysical discussions, most lived human experience is in that realm (“what should I wear/eat/do/etc.”), so one could argue it is more important than many scientific/engineering endeavors looking to find new ways to serve advertisements :)

I love the discussion of complexity and automata, and I struggle to think how our limited minds will ever work around the problem of unbounded complexity...
Send a meeting invitation and see how many people show up. Preferably a videocall or a presentation, something not too attractive to come to.

Then do the same thing as a random employee. See the difference in how much of your team doesn't show up and absolutely nobody from the other team across the corridor comes.
A company doesn't have to sell things to the local population to do business there. There are many companies in China which wish to access the user base that FB has. Here is an article from NYT talking about the $5B that FB made from China during 2018: https://www.nytimes.com/2019/02/07/technology/facebook-china...
Second reply: Impact = Population * Affluence * Technology.

The problem is not rising population, it's rising affluence and inert technology.

As people earn more, they consume more in general, and more of environmentally harmful products like meat, cars, and plane trips in particular.

Meanwhile we're not improving core technologies quickly enough.

We make buildings using Portland cement. Cement making is responsible for about 1/20 of total carbon emissions by itself. Planes are not electric yet; nor are cars. Cities are badly designed for pedestrians. Meat substitutes aren't good enough or cheap enough yet. We burn coal to make electricity, thanks to the coal industry's astroturfing campaign against nuclear in the 1960s and 1970s.

We also burn coal to make steel. We cut down forest to make biofuels, a bizarre and depraved practice.
Certainly. They use it in app store ads, to determine their own product development, and to market their products.

On other platforms, I can install apps on my devices without telling anybody.
Free market capitalism is a condition of peace, in the real sense that there's a spectrum from tariffs, to bans, to economic sanctions, leading to outright war.

Unilateral disarmament, where one party allows free access to markets while the other party does not, is actually a valid tactic. It's not always the wrong thing to do.

But choosing a tit-for-tat strategy instead isn't some sort of mark against free market capitalism. It just means that America has gotten tired of China defecting.

Which I approve of. Your mileage may vary.
I will again agree with you that the VPN is a more robust and more complete protection. You are correct.

I think the reason I continue to prefer (and evangelize) port knocking is that the intersection of (modest) security gain and simplicity/robustness hits a sweet spot for me.

Again, 10+ years in production on many hosts, worldwide, and never so much as a blip. IF knockd were to fail, it would fail in a very boring way. VPNs, on the other hand, are far more complex and they fail in fascinating ways.

I am a sysop turned sysadmin - this is my lifes work. I prefer simple, unixy tools that fail in boring ways :)
North Dakota has more than 10x the per-capita COVID-19 infection rate of New York City right now, despite having only about 0.03% of the population density.
I use Digital Ocean now and used Linode for a long time before that, both are great.

But, before I knew how to manage my own server, I used https://dathorn.com/. They were the absolute greatest shared host that I have ever used. The guy running it is extremely responsive, and I never had any issues.

If you're looking for shared hosting, I can't recommend them enough. I'm not affiliated, I just hope they never gets put under by big hosting companies.
Here's a diff of the document. I'm not sure if it works on mobile:

https://web.archive.org/web/diff/20200911173859/202009011909...

What catches my eye, other than the "person to person experiences" and game streaming changes is the complete removal of the following clause in section 3.1.3(b) "Multiplatform Services":

>You must not directly or indirectly target iOS users to use a purchasing method other than in-app purchase, and your general communications about other purchasing methods must not discourage use of in-app purchase.

To me, this was the most draconian rule in the entire agreement since it governed how you could communicate with your customers outside of your app (such as on your own website). IANAL, but this change seems to allow mentioning the 30% Apple cut to your users and nudging them towards alternatives.
Most people don’t care about side loading apps on their phone either...
We may be talking about two different things. I'm talking about a multiverse where different parts have different values for constants (like the fine structure or gravitational constant) but the equations are the same. If you're talking about a universe with structurally different equations implying different conservation laws, then indeed we can't demonstrate anything about it.
Yeah, I think the only way to "kind of" verify would be to have the consulting firm build from source and have a drone be fully operable.

Or run a public version inside a black box and monitor all traffic.
I was going to make approximately this point. However, I think it's also important to have some of those "shut up and trust me" phrases codified and have them available for the layman via Google. Because sometimes those people demand "proof" or they'll go searching for it themselves and if it's right there to be found and most major sources agree... well, the discussion can then be "Is this just obscurity where security is needed?" AS IT SHOULD BE.

If you get right down to it, passwords are just obscurity. Usernames are just obscurity. In this very thread people are dismissing port knocking while it's functionally equivalent to a password.

I will personally stand by "security through obscurity is not security" forever because that way we can get to the actually interesting question -- what level is needed for this service?

Let's take a simple example from the public Internet -- you want to share something. So you put it on a server with Apache. You add TLS and PFS. You hide it in a folder structure somewhere. You add a single-use token or just htaccess.

Any of those individually would be obscurity, but put together they are most likely more than enough for... well, anyone. So is it still obscurity or actual security? That's a debate for the ages, but I think most people would agree all of those put together are fine-ish, but pick just one method and it's just obscurity.

This whole thread is basically just a philosophical debate where half the people haven't read the article, the other half disagrees with minutiae in the article, the third half disagrees with major points of the article, the 4th half is sharing anecdotes and the 5th half just wants to participate.
My question is how do you solve/amend this?

Don't have just one most important/critical thing your life, like your professional life for example.

Very serious advice, go outside and exercise.

Find a friendly real life community to be part of. Fans of movies, fans of some sport, fans of science, anything, just any group of real people that you share sami-regular or regular friendly time with.

Human beings are not made to be alone, regardless of how introverted they are. They are not made to be isolated. They are not made to have little to no physical exercise. We are however made to become easly obsessed to get the job done, so make sure you have more than one fun challenge to become obsessed with.
PayPal is currently blocking all transactions containing the word “tardigrade”
Many people consider anthropogenic extinction immoral and the ongoing human-caused mass extinction event to be an urgent moral crisis.

But let's suppose you were going to take a cynical argument along the lines of "these species are going extinct due to their poor adaptations to a changing environment, it's just evolution," or let's just say you think moral objections are irrational. Then from this (ignorant and needlessly cruel) perspective,

- the destruction of the Amazon is likely to have profound climatological/geochemical impacts, including increased C02 in the atmosphere

- widespread defaunation of predators could very well lead to increased pests or disease-carrying animals

- loss of insect life could be catastrophic to industrial agriculture

- overharvested fishing and agricultural resources means diminshing returns (and possibly famine) for future generations

More generally, the destruction we've wrought upon the world in the last 150 years is scientifically uncharted territory, and it's deeply naïve to assume that 150 years of strong economic growth can be extrapolated to suppose that destroying the planet will work out for humans in the long term.
AIUI this is slander. The reason they sound "bad" is because their time resolution is so good it exposes flaws in mixing.
"You're claiming the nonexistence of something that clearly exists."

You have become incredibly insincere in your arguments, or you are seriously misunderstanding this discussion.

There are ARMIES of corporate developers making internal apps for corporations around the globe. I, like probably 80% of HN, spent much of our career doing this. That isn't commercial software. It has zero relevance to any App Store, Windows Store, or getting money from users. Corporate developers make up the vast bulk of participants at those conferences (based upon first hand knowledge).

We have MSDN subscriptions, go to conferences, and then we make some internal timesheet app or glue with an accounting system.
I'm not even sure what you mean by app store experience honestly. The google play store is such a worthless piece of garbage with a garbage search experience that I have to use googles web search, which actually works, to find software to install via google play.

Conversely I have used a variety of app store interfaces on various linux distros that were quite usable and pleasant with search functions that actually worked.

Here for example is a relatively recent video showing installing software via the Linux Mint Software GUI

https://youtu.be/cNt_D2GyApk?t=218
Fires on the west coast are especially damaging to homes built in rural areas. It's the people living outside of heavy population areas being hit hardest right now.
No other programming language has cost me that much time, figuring out vendoring for a few dependencies.

The v2 story is just broken. It is nice to have a possibility to have multiple versions of the same package in this 0.1% of projects. The cost of it is anguish and frustration for 99.9%.

On the other hand I am seeing libraries teetering on the border of introducing breaking changes to point releases, or holding back progress, just to avoid going v2.

Nonsense

+incompatible
SATA doesn't use the SCSI command set. It's all still ATA, right down to the inability to abort tasks. (But it is common for operating systems, such as FreeBSD, to model all commands internally as SCSI commands and just translate them to ATA commands if necessary at the last minute.)

SAS HBAs are backwards compatible with SATA drives because they're specifically designed to be. So I guess they're capable of passing either SCSI or, when SATA drives are used, ATA commands.

Where it gets amusing is when you use SAS expanders, since then the link from the HBA to the expander is SAS, but the link from the expander to the drive is SATA. Thus SAS has a special protocol called Serial ATA Tunneling Protocol (STP), which allows ATA to be tunneled over SAS.

What's really comical is that this means if you attached a SATA optical drive to a SAS expander, it follows that you'd be talking SCSI tunneled inside ATA/ATAPI tunneled inside STP over SAS.
TL; DR:

> If you are an authoritative DNS server operator, what you should do to help with these issues is ensure that your DNS servers can answer DNS queries over TCP (port 53). Check your firewall(s) as well, as some of them block TCP/53.

> You should also configure your servers to negotiate an EDNS buffer size that will not cause fragmentation. The value recommended here is 1232 bytes.

> Authoritative DNS servers MUST NOT send answers larger than the requested EDNS buffer size!

ISC (makers of BIND):

> For DNS Flag Day 2020, the idea is the same: make the Internet a better place through a coordinated effort across participating DNS implementers, vendors, and operators. This time, however, the target might seem not directly related to DNS: IP fragmentation. The truth is that DNS is one of the few prominent users of IP fragmentation. When DNS messages are transferred between the DNS server and a DNS client over UDP, they can exceed the Maximum Transfer Unit (MTU) on any part of the path between the two endpoints. The MTU might vary between any two interconnects; while the standard MTU of Ethernet is 1500, the unit size is effectively reduced by encapsulation into different protocols (the most basic example would be VPN). When the MTU is exceeded, the IP packet gets fragmented (split into more parts) and reassembled.

* https://www.isc.org/blogs/dns-flag-day-2020/

So please make sure your DNS servers (authoritative, recursive, stub) can handle UDP up to 1232 bytes, and also are able to handle queries and answers over TCP.
> a Supreme Court Justice once said, “I’ll know it when I see it”. And we think that you will also know it when you cross it.

I personally think this is the worst line that ever came out of a Supreme Court decision because of how simple it is. It is such a blatant low effort cop out that legitimizes arbitrary rulings. At least usually they obfuscate it with legal jargon and historical rulings.
Buy an Android....