skysight-inc/HackerNews huggingface dataset:
You don't have to be faster than the bear, just faster than the other camper. Assuming the bear is just hungry, that is; if you messed with her cubs, she's coming for you specifically.

These are, of course, opportunistic targets and specific targets. Moving the ssh port helps with the former, but not the latter.

There is some economic cost with portscanning everything, but the bigger impact is that if you moved your ssh port you're more likely to also have turned off password auth and more likely to be running fail2ban and more likely to be running an IDS. Spammers don't want to deal with you making their livelihood more difficult. Poor spammers.

People who see brute force attacks chasing their port moves are probably specific targets. Ears up.
FinCEN Files: We Got Our Hands on Thousands of Secret Documents
> a sizeable group have decided Assange isn't likeable

Or they decided that Assange and WikiLeaks are malicious actors not worth siding with.

The powers that be are right to throw Assange in prison.
Firefighters working to Fix Chirping smoke detectors disrupting virtual classes
Haven't seen one in a while bug a steering wheel club lock had the same effect. A determined attacker could just cut the steering wheel and remove it but there were a bunch of other cars without them.
That's not my experience. Enterprises usually schedule far in advance budget specifically for the sole purpose of upgrades. Every product has a life of end support and projects to move to the next version are a reality in the enteprise market that brings a lot of money to the table.
For .NET it will be exactly the same.
I should add that asking about C++ is absolutely the wrong response if you are interested in saving Rust from scheduled oblivion.

What it needs are active measures to increase its adoption rate by orders of magnitude. Hype on HN only goes a little way.
"Elementary" in the sense of "introductory", not in the sense of "taught in elementary school".
I read a quote once, that something along the lines of open source is a switcheroo where Open Source is switched with proprietary and Free Software is switched with open source. If a project is not available for commercial use, it isn't open source under the open source definition, nor free culture under the free culture definition.
It seems that the rules and common law interpretations that we are used to no longer apply to the degree that we imagined.
Congrats on finding a life partner and getting married. :)

I don't know which kind of diabetes you have. Did you know that some people with type 2 diabetes are cured with weight loss?

https://www.webmd.com/diabetes/news/20180917/lose-weight-rev...

https://www.thesun.co.uk/news/12549482/what-is-new-nhs-type-...

I've tried losing weight many times with varying success. The only time I've had full control over my appetite was after attending a silent meditation course (the free Goenka one). For 5 weeks after the course, I meditated twice a day for about 30 mins each time and resisted eating sweets. I lost 10 lbs. Then I ate some cake at a friend's birthday party and fell off the wagon. Maybe meditation would work for you?
OpenHAB is still a bit user unfriendly from my experiences working with it. My existing stuff will talk to Google or Amazon's assistants, but getting OpenHAB to talk back and forth with those devices and Google/Alexa is proving to be a pain in the ass.
As a fellow Facebook employee, FYI, Hacker News is not a great place to get tech support.

For the benefit of everyone else on this thread, note that Facebook uses https://github.com/facebookexperimental/eden. From the README:

> Despite having originally evolved from Mercurial, EdenSCM is not a distributed source control system.

i.e., this is not "stock" Mercurial. For example, the Eden server (Mononoke) is written in Rust and the complementary virtual filesystem is written in C++. This has very different performance characteristics than real Mercurial.

EdenSCM works with both EdenFS (the custom filesystem) and a traditional filesystem. If you use EdenFS, pulls will be much cheaper because you only fetch what you use. If you use a traditional filesystem, EdenSCM supports the same "sparse checkouts" feature as stock Mercurial (https://firefox-source-docs.mozilla.org/build/buildsystem/sp...), which can also be used to reduce the size of the slice of the monorepo you pull down.

Last I checked, Perforce (and Google's "implementation" of Perforce, Piper) did not provide nearly the same level of support for stacked diffs as Eden. As both Google and Facebook have cultures of pre-commit code review, working with stacked diffs makes it much easier to make progress while waiting for approvals on earlier diffs.

I believe there are relative advantages/disadvantages of Eden vs. Piper+CitC and that both projects aspire to have the best of each in the limit.
Might be interesting to look at how the industrial machines do it: https://www.cticutting.com/tools/

I believe the hobby machines just use rotary cutters but the industrial space is more interesting:
- vibratory blade
- ultrasonic blade
- heated (sealing) blade

BTW laser cutting (non-synthetic) fabric is totally possible and is used in industry, the "hobby" type laser cutters do need some tweaking to get good results: https://www.troteclaser.com/en-gb/knowledge/tips-for-laser-u...
Leather does produce a smell that may raise objections ;)
I don't think the Three Gorges Dam was built by something most would call a democracy.
This article was written today, in response to an article that made it onto HN 7 years ago?
Their algorithm matched me with someone else who rode the same bike path as me but started her ride 8 minutes later. I can see her path and everything. It's creepy as hell. some random lady can look at my route and figure out where I live (based on her map, I think she drove to her start point so the address sharing isn't bidirectional)
The cheapest I've ever eaten was after I made conscious effort to only buy and eat healthy things.

Since then, the only time I've ever seen something that's sold in a box be cheaper than produce is when whatever's in that box is made out of mostly sugar or flour.

I'm under the impression that many people choose to shop at places like Whole Foods and pay a premium for it when they can get much cheaper, but same quality or better, food elsewhere. The markup on produce (besides bananas) at Whole Foods is typically 2x-4x more than the price of organic produce from a farmer's market, or other grocery stores.

That, or they're under the impression that what they pay for meal-kits is how much food costs at the store. You're paying restaurant prices for food when you buy meal-kits.
> Put yourself in the shoes of someone who wants to send these articles to their manager to support an idea/project of theirs. It absolutely detracts from the professionalism of the post.

I, as a hobbyist who blogs about things in my spare time for my own amusement, owe no obligation to random people's managers.

In 99.9999% of cases, that also includes my own manager at my place of work. (And even then, my only obligation is to not talk about things that aren't meant to be discussed publicly.)

> Every once in a while, I see a post on the cringe subreddit

https://www.youtube.com/watch?v=ePnrEolRopU

> What is driving the need to include this in everything?

I've answered this on my about page.

https://soatok.blog/about/
That's not true at all. Modern C is very different from K&R C. It took 10 years for ANSI C (which is more or less what we know as C today) to be established.

And embarrassingly longer for that standard to be widely implemented...
Technically defense in depth refers to multiple effective security measures (like cryptographic login), so security by obscurity isn't actually part of it.

(Moving SSH port plus something like fail2ban could be considered defense-in-depth against the incidental DDOS-like issues, though.)
The positive aspect of money is that people focus on creating valuable products instead of on navel-gazing / politics / whatever. Fintech kind of places the cart before the horse in that regard, don't you think? I wouldn't really know - I have never worked for a fintech project.
It is just obscurity.
Among my friends and I there is NO ONE who is having a better dating life during the pandemic

so not sure what the heck this article is about

Where do people on Hacker News meet their future significant other or people they date?

Bars - gone

Cafes/Coffee Shops - mostly gone

Museums/Art Galleries - mostly closed

House Parties - gone

Friends of Friends - almost gone

Random Luck - almost completely gone

*

Online dating - really sucks

I guess pandemic must be really good for people who specialize in online dating. For everyone else it sucks
I think some of the "fabled antics" are necessary for success. Tim Cook simply continue on what's already been built and would have to be really bad to really fail in that period of time.

In my opinion executive skills are of course needed but so are long term high level vision, with strong opinions like sjobs had - even if that makes them "less liked"
> why don't we just record meetings by default?

Chatham house rules make recordings a little bit tricky, but it's nothing that can't be overcome.
Not the person you responded to, but when I worked at State Farm they had 'Organizational Support Specialists' who did this and other clerical odd jobs. Unfortunately they were pretty high turnover, it was rare to have one at the start of the project and still have the same person at the end.
We need Justin Bieber to use mastadon.
While there are some useful thoughts and hacks presented in this post frankly if someone provided something resembling these examples post meeting I'd start by seriously questioning their priorities and time management skills.

Cynically speaking one may consider some of the prose and phrasing to be awkward to the point of unsettling - almost "uncanny valley".

My experience has been that meetings are almost always so information sparse that a "good enough" recall of relevant details is trivial. I have often been told (and tested as such) that I have a better than average memory but at certain levels of performance this is (essentially) expected.

Also be aware that significantly better than average recall of people, places, situations, etc can be very unsettling to others if there isn't a substantial accompaniment of charisma. There are gushing anecdotes all over with the likes of Bill Clinton, Tom Cruise, etc remembering the names of random strangers years after meeting them. Bear in mind, of course, these characters are personally likeable whether they remember your name or not!

Meanwhile (especially across genders) the reaction may not be quite so positive when it's "that awkward guy I had a meeting with once a few years ago. I think he might be obsessed with me"...

Overall this approach strikes me not only as unnecessary optimization but difficult to impossible to "pull off" for those it doesn't already come naturally to.
Ask HN: 10 years experience, 200 resumes, almost zero responses. Do I give up?
No idea what I'm doing wrong. Nobody is even calling me.

I've had a hard time finding a good long term job. Employment lengths:

1 year
3 years
3.5 years
6 month contract
13 months
3 months

I think that is what's screwing me despite the fact that I actually am a good developer. I asked a recruiter if I had anything obviously wrong on my resume and he said no. He also said software developer hiring has been relatively unaffected by coronavirus.

I've applied locally and for remote positions. I'm getting totally ignored. I'm about to give up and start doing something blue collar.

I'm stuck doing gig work. I could be doing so much more for society than this. I have a product I want to sell but can't scrape up a thousand dollars to get it to market. So instead of innovating or working as a software developer I'm delivering fast food all day long just to survive.

I have experience as a professional full stack developer. I have a bachelor's degree in software development. I'm being ignored by almost everyone.

Do I give up software development? Where else can I go that is better than finding some random blue collar thing on Craigslist?
Do others get to vote in US elections ?
how do you connect rightfully then? at that point is easier to have and access rule on the firewall and only accept connections from the allowed ips.
Ideally, no one makes mistakes and everything is well understood the first time around.

But in my experience: humans have errors (Ex: Notetaker writes down 1/2/2021 instead of 2/1/2021). Having a formal "last call" for record-changes is useful for catching these mistakes.
Because of people bringing him up as some kind of established PL designer when talking about PL design. He's created almost a cult-like following around this semi-vaporous programming language, and almost none of the people talking about it have ever even used it.
But how many times have you said "I was going to give you money, but now that you're giving me options on how much money to give you, I'm not going to give you any."
Price is on this one ...

https://www.flickr.com/photos/fuller_craft/49837855711/in/al...
Its vision. He knows what fits in his vision, and he knows what doesn't and can name the reasons why not and what it would take to make it work. At the same time he can on the spot explain it, and if nothing else at least the listener understands the reasons, and not just the decision. Its crazy refreshing in the midst of soundbites and technology which doesn't serve the end user.

Frankly, I think he nails it all in the first couple minutes. He's the chief NAK'er. Being able to say "no" is more important than yes. Yet so many people are afraid of hurting people's feelings or don't have the political will to do it. Although at that point in his career it had already bitten him once at apple.

Also, can you imagine a current apple employee publicly disparaging one of their products like Jobs did the Newton and various other things? Take the watch, he might have loved it, but I can totally hear him complaining about how it was a subpar experience to the iphone, which you have in your pocket, cue the speech recognition bit. Also the thinly veiled bits about if the clone hardware were actually better..
In the legal sense of "obstruction" (which is narrower than the colloquial sense) it's different. The law makes a distinction between refusing to help law enforcement, and actively hindering or deceiving law enforcement. It's not a crime to refuse to provide helpful information to law enforcement. The government can serve you with a subpoena for that information, but that's a civil process. While you can be held in civil contempt for refusing to comply with a subpoena, it's not a crime, and there are lots of circumstances under which people are "privileged" from having to comply with such subpoenas. (Lawyer-client, doctor-patient, between spouses, etc.) Journalists are generally held to be protected by a similar privilege.

Those privileges don't protect you from actively assisting in a cover-up or concealment of evidence of a crime, which is itself a crime. A lawyer doesn't have to tell a prosecutor where to find relevant evidence, but he can't help his client hide that evidence in the first place.
Hacker-News-Undocumented
It isn’t so obvious to me that you can make say, WhatsApp be distributed as easily as making it centralized.

It seems like all kinds of things like identity, message routing, nat-traversal etc, are harder in the distributed case a compared with a centralized server farm.

It’s also not clear to me that email is a good example of ‘distributed’. For a start most users actually do use centralized email services like gmail because it’s easier, and secondly even in the days before that, email has always relied on DNS, which is at best only partially distributed - i.e. although the participants are in a federation distributed across the network, there are still centralized authorities governing the root servers, the issuing of IP addresses, and of domain names.
So here's the problem:

Ports under 1024 are privileged in Linux - they require root or root delegated privileges to run. When SSH is on port 22, you have the assurance that unless the server is root compromised, it is what you think it is running on that port.

When you make that port 2222 or whatever, like so many people do, you have cut out a lot of noise... but now that compromised PHP application you had running has allowed someone to now race you every time SSH is restarted for an update or crashed or whatever to bind on that port. Let's say it wins - now you've got something listening on the SSH port. If someone using SSH ignores the fact that the host key has changed, now they're trying to login to a fake SSH server. Maybe you use password auth and you just gave them the password. Maybe they're using an OpenSSH client that is vulnerable to leaking private keys in certain situations. Maybe the fake SSH server pretends to be a real shell and they then log whatever actions you try to take when you SSH in. Because they're going to be able to figure out what port SSH is listening on - a fingerprinting port scan can be done in seconds.

You are sacrificing security when it comes to a more focused attacker for the sake of filtering out the low effort mass scans and basic brute forces. The thing is - I'm worried about the former, not the latter.

If you care enough about securing or filtering your SSH to go through any of this trouble, just set up a VPN on a separate machine and restrict SSH access via firewall to that machine. Spin up the smallest VM your cloud provider has, throw up wireguard on it, and you're good to go. It'll be plenty for a VPN that's basically just there for SSH access. Now someone has to have both an exploit for wireguard and an exploit for SSH to get into your machine that has things you care about, you've filtered out all the noise, and you haven't introduced new security risks for a more determined attacker.
> Old-style COBOL translates trivially to or from very brain-dead imperative style code with lots of goto.

Provided the target language supports "goto", and "fall through PERFORMs" :)

>If you can look past the syntax, modern COBOL is a decent enough compiled language, with most of the stuff you'd expect.

Probably < 1% of production Cobol uses any syntax newer than Cobol 85!
Interesting question, but how would you even get close to an accurate judgment of how many people it actually takes to get the job done globally? Maybe 10k is about right, especially to do a highly localized task with millions of customers split into groups with at least somewhat competing interests, like dog walkers and dog owners. Maybe those 10k are doing such a bad job that there's actually space for 100k people to build and run profitable businesses world-wide. Or maybe 10k people making $50k/y is better for the world than 100 people making $5M/y.

Coming from a socialist country this sounds like the shared communist and capitalist goal of zero production waste: unachievable, top-down, and resulting in terrible products and services all round.
Yeah, that’s a grey area actually. It’s why Google Analytics has the option of chopping off the last byte of IP addresses, for example.

Better to assume all PII and PI even if not identifying, belongs to the user. GDPR is explicit on some of this and not on others. Shared information, or that deemed necessary, won’t be deleted on request for say Uber/Lyft. There is a financial transaction and a driver etc, they won’t delete. They could sever the link to your profile though. Facebook offers something like this, but don’t do it. You will never be able to authenticate yourself again, and they will keep building the “anonymous” profile. It’s complicated for users out there...
The article does not load for me (database error) but I have cut several types of fabric successfully with a laser. What is the impact to the material? I found it works well for natural fabrics but polyester and nylon can be a bit fiddly to get the settings right. Normally too high power will melt the edge a bit, and you can't cut several layers at once as they will stick together but otherwise it does work ok. Oh, and some wispy fabrics (which are likely plastic based) have a tendency to waft away if the extraction is too strong.
There is no official support, only AMD's custom TF branch. Further ROCM itself works only on Linux. I believe most people writing Swift are using MacOS.
I fully agree that my post did not bring anything new to the table. I really felt distressed by what I was reading by the time I wrote it. That's why I signaled it as rant which I think is a good compromise : I do think facts and arguments matter in a discussion and we should not let our emotions take the seat of reasoning but if that's what's happening well you better say it rather than starting to bend facts or telling some things you are not so sure about but would like to be true are absolutely true. Furthermore, it seems my rant expressed a more general feeling about the thread, so at least it served that purpose. I thought the bit about powerlessness (that seems to be the common lot for most individuals) and pseudo-wisdom would at least make it a little funny to read to certain people. I did not mean to be condescending, I do regret writing that bit now. I guess that what I tried to express was that one's education does not seem to prevent falling for basic tricks in the realm of politics such as a smear campaign. I was really frustrated to read repeatedly such shallow arguments as nobody is above the law or why do they think they are entitled to a seat? or just reading that one did not sympathize with Assange hardly ever explaining why or just calling him a russian agent. Whether you sympathize with Assange as a person is irrelevant. Even if Assange was a rapist and Putin's best friend, which I very much doubt on the base of what I have read so far (links welcomed), I don't see how it matters in the case of exposing a war based on a lie. the killing of civilians ans journalists, extra-judiciary kidnapping and torture and so much more... And those are facts, not mere allegations.
Apple Watch and Airpods are a larger part of Apple's business than Macintosh.
> You’re positing that we should basically have vigilante hackers that expropriate and publish confidential data so long as they purport to be acting in the public interest.

That's not what they said at all. That's just a straw-man you created. What they said is that Juries are the law, they're part of the English tradition because a Jury is the law.
That page is not very informative. It doesn't explain why anyone should be interested in this project, and compare with alternatives. What's the novelty, what's the edge, etc.

Hardly surprising that it didn't gain much traction.
I'm not sure how a VPN would help you attack a ship and steal its cargo.
If they're claiming to be a PL designer when doing so? Yeah, probably.
>What is driving the need to include this in everything?

This is just an armchair psychology theory, but I feel like it is just the need for social validation in the absence of it, as well as an attempt to prove that their interests/passions that are considered to be for "weird" or childish people can belong to "normal" adult people too. Hence why they never forget to remind people at any point in a regular discussion about that interest, as if it is a regular everyday thing that a lot of people are into.

And in the meantime, it is also sort of an interest/passion that isn't about an activity (very unlike most other interests/passions), but rather about being a different entity as a person, which makes it more difficult to detach yourself from that interest, as it literally is solely about being another form of yourself.

Overall, I agree with your sentiment however. Having furry content in a technical blog post would essentially prevent me from sharing it with my teammates, no matter how good the actual technical content of that post is.