skysight-inc/HackerNews huggingface dataset:
Maybe people don’t read much content on blogs with rss these days.
Not necessarily, plenty of people have common / guessable user accounts. For example every one of my servers in the cloud has an account called "user". (All my servers are also key-only authentication, obviously.)
You're displaying the words BDSM in public on this very forum to people who haven't consented to it. That's innapropriate and we have to create a policy that respects those who don't want to see that.

~My point is when you take entire words, regardless of their context and outlaw them you're inherently suppressing that words representation of groups that use it in different contexts. There is no reason to wholey remove the terms master and slave unless the words are wholey wrong to use, which would then mean that BDSM surely is as well. Either you take all of it as being wrong or accept that words have context.
You have a very nice website. some_furry's is great too.

This is the kind of thing I miss from the web of the 90s and early 2000s. A vocal minority might complain that it doesn't look like Medium with the useless hero image of a laptop in a desk, the 45 trackers and analytics and paywall, but I silently enjoy both the content and the personality, so thank you both.

Might be the culture I live in or I'm getting old and stopping to care, but I frankly wouldn't have a problem putting this as a reference link in some internal documentation or in Slack. We have a Manga Guide to Databases in our work library since forever, so maybe the mascot is fitting. A furry-themed blog would fit too, of course, as we have a few O'Reilly books (but none with a wolf unfortunately). Jokes aside, I find the mascots of both sites tasteful and nicely drawn, btw.
If these problems are so obviously ineluctable, why talk around them instead of detailing or even naming any?
I ended up opening my browsers inspector and deleting the distracting ads. 10/10 would recommend.
In some ways I feel like I have the opposite problem. I like to occasionally write tech related articles but my blog mainly features information related to my hobby and that’s what most people follow my blog for. Now I feel weird if I want to post a tech related article because everyone will get notifications for it when they’re expecting hobby related posts
These are all great games with huge art budgets. Nothing remotely indie about them.
Correction:

And they ask "where are the police?" after unanimously deciding to defund (rather, abolish) the police.

So an entire police force must be abolished because of the alleged abuses of a few?
Thanks. Any idea why the wire services are re-reporting it?
Picking a random number isn't guaranteed to help you find a prime number. However, doing the "take all the prime numbers and multiply them and add 1" always produces at least one prime number; either the result or the factors of the number.
EDIT: What happens to HN? It's my second post that get downvoted for no reason in this thread. This whole post is mostly question asking for clarification, how can they deserve to be downvoted?

> So when you have SSH listening on some uncommon port and see hits in your logs you have a reasonable assurance the attacker isn't some script kiddy spamming the "attack" button on some stupid app.

Do you remove a vulnerability by doing this? Whatever you are afraid that the script kiddy may do, still can happen, thus it is security by obscurity.

> You also have reasonable assurance blocking that host/network with fail2ban or equivalent will actually be effective.

Can you explain that to me? How is it less effective to block a script kiddy or not? Block him... that's it...

> You can also set way more strict fail2ban rules since you're far less likely to ever lock out authorized traffic.

Wait, what? How will it make less likely to block authorized traffic? As long as that traffic act like authorized traffic, it should still be authorized, isn't it? You would blanked ban traffic that doesn't try too many username/password?
One of the only websites I've seen that offers a big and clear "Decline" button is NextRoll's advertising service [0], e.g. seen on Texas Instruments' website [1]. But I haven't checked whether clicking the "Decline" button actually opts out everything.

[0] https://www.nextroll.com/trust-center

[1] https://www.ti.com/product/TPS543620
This is a valid point. I've gone to sign up for a SaaS before, read through the features list and thought it was great, and then realised they've split all the features up among plans and I'll need to pay more than I was expecting to. Obviously this just means that the highest tier plan is what they think all the features together are worth, but I often find that for smaller SaaSes, the desire to have 3 plans shapes how they do their pricing, so the highest "all inclusive" plan is more expensive than it otherwise would be if there was a single plan.
Usenet died from a combination of web forums being a better experience for most people, and a saturation with warez binary traffic becoming so expensive that ISPs did not want to pay for it.
I'm unfamiliar with marketing but I suspect the situation is much better now with all the tracking. And I can imagine for many APIs, people do know what most frequently used features are, and what typical users are like.
Hyperscript, a Better JSX
The detail in the store description is wonderful. That's exactly where I grew up, learning to program on store equipment as the store manager let me spend the days there in exchange for showing potential customers what these things were.
This dataset is certainly not open source if you aren't allowed to use or even view the images.

From the Open Source Definition (OSD):

> 6. No Discrimination Against Fields of Endeavor

> The license must not restrict anyone from making use of the program in a specific field of endeavor. For example, it may not restrict the program from being used in a business, or from being used for genetic research.

https://opensource.org/docs/osd
Thanks! Mostly I just hated to think that a developer might fall into protracted customer support discussion asking for their account to be refunded, if the $25 turns out to be a hardship. I wouldn't expect this to impact many people, but you never know.

I'd also be curious what happens if people ask the normal channels for the refund, of course.
noted and updated the post with a comment. thanks for taking the time to offer guidance on not a/b testing and how to improve future posts.
Or a federated system that was designed before anyone imagined spam could be a problem, and thus can only deal with it in a backwards-compatible way by piling on ex post facto hacks. There's no reason to assume the designs of today will be informed by the same naïveté.
They already took that gamble and lost, twice. Would not be surprised to see them gamble with human lives again. Got to hit those quarterly sales figures.

I think you scrap the plane, then start over with a wholly compliant design. This whole ordeal is a great example of regulatory capture. You have a plane with a ton of new flaws, and all the flaws of the old design, and business decided it was cheaper to pressure the regulator to be okay with these flaws and to kill a few hundred people than to build a proper plane, but let's give them one more chance to kill a few hundred more people, so they're not financially inconvenienced over a problem of their own making.
But a surprising number of them can be solved with the insight only that x^2 >= 0. (Both Cauchy-Schwartz and AM/GM reduce to that if you squint hard enough). And that's accessible to any maths student.
It could be that the bundle sizes for the user to download are smaller with low level languages. Scripting languages (and Java) have large runtimes.
I've been using it long before wire-guard was generally available. I would guess that it's far less configuration to just "make port X on host Y look like port Z on localhost" with spiped, but I can't be sure.

Things I like about it off the top of my head:

- I will often start out with a single box, then say "well the DB should really be on a different machine" and just setup an spiped between them and I'm done. The actual application configuration changes not at all since it's still connecting to localhost.

- My dev machines can be configured to spiped to the non-production database and I can run tests just like I would in production, since everything internal connects to ports on localhost; I literally can't accidentally mess up the production DB in a dev environment because the only place the hostname for the DB is is in the service file that starts spiped.

[edit]

Totally forgot the best feature: it can proxy between unix domain socket and TCP, which is something I think it had before SSH (it certainly had it before the ssh on my machine could do it).

It also will re-lookup hostnames at a configurable interval, so new connections can be sent to a different machine just by configuring DNS.
I am not sure this is self-evident; it could be that there is no end state, but rather a cycle of centralized and federated systems, and we simply haven't seen enough of the cycle to identify it, yet. As a parallel, consider systems of government in the last 2500 years or so.
> "2. Mormons have a very tight social network. We REALLY trust one another. Its actually one of the great things about the religion. However, this makes us very vulnerable to fraud. There are lots of scummy MLMs in Utah that exploit the already established social circles in Utah."

https://en.wikipedia.org/wiki/Affinity_fraud
It's also totally valid to separate different aspects if that's what you are more comfortable with (e.g. have two distinct feeds). That's the nice thing about your own blog, you get to make those decisions as you prefer.
I guess the same reason that `impl AsRef<T> for T` isn't implemented. (Not sure exactly what that is, but that would probably be a better question to look into, since you could argue that `AsRef<T>` should be manually implemented for any std type T with your argument)
Judge also has conflict of interest and ties to the intelligence community.
The problem is the right to be offended that seems to be a catch all term that makes it okay to block anyone from speaking about things other people don't like.
Government seems to have fallen into this trap and believed that if they don't do something about those poor people who feel offended, they will lost the next election.
It's actually quite bold hypothesis that they have - of course the next lost elections will have nothing to do with increased taxes, more crime and reduced freedom. Not at all. It's all because those pesky people speak their mind on the internet.
Contrary to the comment below, you don’t need to be in an expensive area to make that amount. I know quite a few making that amount without graduate education and in areas where the average cost-of-living is a small fraction of Silicon Valley
> So far the best stab at the problem is Urbit, but mostly because almost nobody else is even trying.

What about GNUnet? They’re trying to build pretty much what you described, from the ground up. https://gnunet.org/en/
> That doesn't make him a fraud.

Why not?

What is the point of deadlines then?

Being a fraud doesn't mean you fail to deliver.

fraud: 'wrongful or criminal deception intended to result in financial or personal gain.'

He promises deadlines to soothe shareholders. I don't see the difference in his behavior and fraudulent behavior, other than that he has a large fan-base to validate the behavior.

He profits from promises that aren't delivered.
> arguably one of the largest social networks in the world

At the same time, I know several people who gave up their email addresses and only use Facebook now. Maybe the next iteration of social media behemoth will be even more effective at that.
Yes, it feels worse to me as well, but I can't say why, except that it seems fundamentally alienating. But this is subjective. It seems to me connecting to other human beings is part of being human.
This is crazy, but I kind of like the way web does new features.

They start off with a name that obviously will never be needed (eg "moz-blur") and work with that for a while until it becomes apparent what "blur" should be.

If the rust developers had named "Range" as "RustRange" or something else weird to start with, then they could come back through later and name it to the more desirable name. This seems like a good tactic whenever you're still trying to figure something out but intend to put it in production anyways.
One for the Angels - Twilight Zone
https://www.cbs.com/shows/the-twilight-zone-classic/video/62...
It's not cheap, you're paying for it every time someone new has to log in and you have to explain your setup. For that price you could do a real security measure like public-key only login.
See the other thread where a Google employee offers to make it right.
Apple Watch Series 6 Teardown
I have some SnapOn and some Harbor Freight and agree both have their place.

Used SnapOn tools can be a pretty decent deal (especially for a lifetime tool) and I honestly wish that I'd known the difference and started buying SnapOn rather than Craftsman for some of mechanics hand tools I bought when I was younger. They really are notably better, especially the 72-tooth 1/4" and Dual-80 3/8" ratchets. (I see they've got some newer 100-tooth 3/8" ratchets.)

If you work on cars or machinery and haven't tried any SnapOn tools, I'd give one of their ratchets a try. There's a reason they're popular among working mechanics. It's not just status.
Ask HN: How to facilitate growth of open access journals?
I exist outside the research community and do not publish in peer reviewed journals. I benefit when researchers publish in free open-access peer-reviewed journals. There are examples of amazing platforms [0], but as a reader I don't see how to incentivize the research community to move towards open-access journals. What leverage does a non-academic reader have?

[0] https://www.sjscience.org/
This is precisely the point I was trying to make.
Eh, KPIs aren't inherently bad...they just trend that way because of the typical audience for them.
Eh. It doesn't look "hiked up" at all to me, and, truthfully, the outfits the cheer team wore at my high school show a lot more skin.
This is HTM, not HyperScript[0]

[0] https://github.com/hyperhype/hyperscript
Start this labyrinth from the end point. Why are giants attracting 95%+ of users?

1. Among other things, because of a dead-simple user experience that lets even grandpa post content after a few clicks. Federation, if it adds any level of complexity past the grandpa UX, would defeat the goal.

2. Next, identity, if grandpa can post, so can the bots, how do you ensure accounts don’t go to fake entities? What if an account has to pass a quality threshold before it can publish in public, but can be used privately any time. HN has similar model, but here you limit public posting until 10 random other users have seen and upvoted the new user’s post. Add to that possible additional authentication for payment of a pro feature, or a human check mark, and you’ve put a hurdle on spam.

3. To keep culture from running amuck provide positive and negative feedback. Public content has a span problem, not so much private behavior. Content ratings and discussion licenses can come into play as well, where any group can limit posts to PG content, or discussion that gets moderated automatically or manually if it passes certain thresholds.

Happy to suggest more if needed. I run https://www.dreamlist.com
Find a smaller enterprise system integrator in the field you're familiar with. Titles such as Sales Engineer, SE, Solutions Architect. Usually the compensation plan is a 70/30 or 65/35 split between base and commission. Once you cut your teeth and are building out your professional network, then looks for an ISV to be on direct sales...
Continuing the speculation, I'm curious whether that uptake is low in relative or in absolute terms. A small percentage of Google scale is still a big enough business to make a lot of people rich and a lot more comfortably employed.

In a hypothetical world where Google and Alphabet are broken up into a bunch of small companies, would the Extension Store Company be making enough revenue to be viable?
Ah, it looks like Tbird uses its own cert store, maybe. https://manuals.gfi.com/en/kerio/connect/content/server-conf... describes a pretty unique process for manually applying a trust exception to an arbitrary server cert - maybe worth a try if you didn't know about it, as I also did not until five minutes ago despite having used Thunderbird for what must now be a couple of decades.
NASA Detects Lattice Confinement Fusion
If you expect to be hit by that kind of attack (simple combination of username/password), then you should protect yourself from that kind of attack. It's never been easier nowadays to do this.

You may answer that you could still miss a few of theses simple password, that your solution would be more effective, sure, but then you use security by obscurity to protect yourself.

By the way, security by obscurity does works, it's not bad per say, just as that FBI agent just proved, it does have an effect. If it didn't, there wouldn't be so many case where it was used. The issue with security by obscurity is when you rely on that to protect from vulnerabilities and then ignore them. It only lower the likeliness of getting attack, it doesn't make attack less effective, it doesn't protect from any vulnerabilities.

Sadly, too many time, we just ignore it, hide everything and hope to avoid targeted attack which would foil that obscurity pretty quickly. This is when it get bad.
I think it's precipitated by the shift of the Web from an early-adopters world that is mostly exploring the idea of being online, to one where the property-ownership ladder has taken precedence.

The idea of being a "serious professional" is entangled in that of "the personal brand" and thus in your identity being your property. But it's not just that: it's also that this property has some assumed virtuous pattern of development(in the sense of Aristotle), and something that is not that pattern is incorrect, and possibly threatening because it disrupts their preconceptions of what is right - and it's always a preconceived thing, young kids aren't afflicted by this. They'd like to take the content - because it's valuable - while protecting those beliefs, so an urge rises to lash out, dismiss everything, give "helpful hints" about what to do better, or call it degenerate, because changing a belief is hard within oneself.
Start this labyrinth from the end point. Why are giants attracting 95%+ of users?

1. Among other things, because of a dead-simple user experience that lets even grandpa post content after a few clicks. Federation, if it adds any level of complexity past the grandpa UX, would defeat the goal.

2. Next, identity. If grandpa can post, so can the bots, how do you ensure accounts don’t go to fake entities? What if an account has to pass a quality threshold before it can publish in public, but can be used privately any time. HN has similar model, but here you limit public posting until 10 random other users have seen and upvoted the new user’s post. Add to that possible additional authentication for payment of a pro feature, or a human check mark, and you’ve put a hurdle on spam.

3. To keep culture from running amuck provide positive and negative feedback. Public content has a span problem, not so much private behavior. Content ratings and discussion licenses can come into play as well, where any group can limit posts to PG content, or discussion that gets moderated automatically or manually if it passes certain thresholds.

Happy to suggest more if needed. I run https://www.dreamlist.com
I would like to see a math equation traceback. Like for a stochastic model of animal population distribution you might have something like

p_ih = p_0exp[(ad_ih)^c + (b*s_star)^e]

and it would be really nice if you could just see the traceback on everything, like you click on s_star and it takes you to the definition

s_star = (s_max - s_h)/(s_max - s_min)

and you can keep going until you are done. I guess I'm just tlaking about a wiki at this point but the focus would be on integrating the definitions into the equation itself so that when you read it in a textbook or whatever you can see where the ultimate comes from.
It's worth noting that Microsoft enabled Do Not Track in Internet Explorer by default just after it started to gain traction, which caused a small backlash against its use [0], notably Apache started to ignore all DNT headers from Internet Explorer.

I have to wonder whether it was an intentional effort by Microsoft to discredit DNT and to stop people from respecting it... On one hand, the same outcome (almost ignored everywhere) is likely to occur regardless of whether Microsoft made its move, on the other hand, it may have gave it a greater push.

[0] I have my cynical Fundamental Law of Privacy - it must not be enabled by default, so that the industry will continue profiting from it, while giving the user the illusion of choice. But at least those who enabled it enjoyed privacy, although only to a very limited extent.
Astronomers discover an Earth-sized 'pi planet' with a 3.14-day orbit
I think that "Security by obscurity is bad" is really a misstatement. The right version should be "Open design is better".

The underlying assumption is that criminals are often smarter (or having more advantage) than defenders. But they probably do not outsmart the entire human intelligence, so there's a hope that an open design that actually survived can better protect us in a long run (because they're viewed and attacked by everyone).

i.e.

Individuals < Criminals < Collective Intelligence

In this case, I don't think using an unusual SSH port is security by obscurity. Its design is already open; knowing the port number doesn't significantly change the threat model because SSH itself already provides a certain level of security.
“Can you please limit reminders of human rights abuses and other unpleasant things to other platforms instead?”
Yep. I remember paying for the license to publish a joke extension I've made for chrome. Now I won't be able to make my money back, haha.

https://chrome.google.com/webstore/detail/crosstext/gnlobfhf...
Gitlab issue tracker is being Spammed by football streaming links
Screenshots here:
https://imgur.com/a/EwG41pq

Issue tracker link:
https://gitlab.com/gitlab-org/gitlab/-/issues
Thanks, that really means a lot :). I agree, we definitely lost something special after the early 2000s. We got standards compliance and rid ourselves of IE which is awesome, but I think we lost a part of the web's soul in the process.

I've been preoccupied lately with how we can encourage more people to blog again. I think everyone has something interesting to say, and shouldn't be constrained by what a specific social network permits (technically, or with content).
Very cool toys indeed:
https://en.m.wikipedia.org/wiki/Human_rights_violations_by_t...