skysight-inc/HackerNews huggingface dataset:
Reupping my comment [1] from the last discussion:

> Agreed: adding port-knocking and fail2ban in addition to passwordless should not be and are not silly ideas.

[1] https://news.ycombinator.com/item?id=24446577
What are you paying though? The most common reason I get pulled in is because of exorbitant aws bills which eclipse dev bills... This sound expensive.
This article engages in quite a bit of mental gymnastics to avoid calling this tactic exactly what it is. Security by obscurity

What are you doing here? SSH generally runs on port 22. You move it to an alternate port to thwart a naive intruder's attempt to establish a connection to a service running on that port.

You are still running SSH with the same old setup. If it was insecure before it remains insecure. The only thing you've done is "obscure" how to connect to it by using an uncommonly used port.

Why all the hate on "Security by Obscurity" It's a perfectly valid thing to do. It will definitely defend against a host of intrusion attempts. Its only cast in a negative light when it's the ONLY thing you do or if you consider it sufficient in terms of security.

FWIW the key analogy is broken. Hiding a key to your house in a plant is a form of "Security by Obscurity". Anyone that finds the key can open the door. Thats not very secure. So we hide the key so no only people that know where it is can find it. If an intruder found the key they'd immediately have access to the house. We rely on the obscurity of its location to provide whatever security it has to offer.

You could achieve the same affect by having a hidden door and leaving the key out in the open or hiding both. What use is the key if the location of the door it opens is "obscure". This works because access is defined by knowing the location of the key and the door simultaneously.

Both are examples of "Security by Obscurity"
From the perspective of what you (and I) personally have around us, I agree. But if you think of it from the perspective of e.g. what ends up in landfills, then it's a bigger and more general, more interesting issue.

I think the article should have spoken more about how consumer culture is manufactured along with the goods that it consumes.
I think a lot of HN in general is made up of programmers at big tech companies working on what seem like small problems, but from the perspective of someone working in the biotech sector, let me assure you there's a lot going on outside of silicon valley's open offices. I mean first, lets appreciate that tech companies have actually majorly impacted the world in ways sci-fi authors couldn't have imagined, and for all the negatives, there's a reason the tech sector was (prior to recent times) so widely loved - the fact that I can reconnect through facebook with a friend I haven't seen in a decade that I may never have meet again otherwise is straight up magic and that matters. And google search and smartphones - don't underestimate them! But yeah, the valley seems to have this "hardware is hard" mentality (even though it's built off of the semiconductor industry...), but just look around. We've got for the first time ever a potentially sustainable spaceflight industry blossoming, biotech is making strides like you wouldn't believe in tackling some of the most complex diseases, your inkjet printer is a marvel of microfluidics, green energy sources are becoming cost competitive to the fuels that have fueled our entire development as a species from an agrarian to an industrialized civilization, we've got vaccines that might be ready to defeat a global pandemic within a couple years of the first case recorded. I do work in the printing and inks space. There, just recently, there's been a transition away from using UV cured or dried inks that release volatile organic compounds into new inks that are cured with electron beams - i mean, the amount of technological complexity and innovation that goes into making the packaged product you pick off the shelf have the color that it does! And these have real impacts - eliminating huge sources of pollutants and improving health and the planet. There could and should be more, especially more investment into R&D, but don't underestimate what's happening outside the Silicon Valley bubble, and don't underestimate what's happening inside the bubble either.
Random selected quote:

"Pulling a circuit breaker is not generally an appropriate or intuitive crew
action."
I won't. That's like saying Jeff Dean has forgotten Big O or how hash maps work.
In a sense, all security is by obscurity. Security-wise, your PIN is in fact pretty much equivalent to a random port.
He did spend time talking about "interdimensional pedophiles" with Alex Jones [1].

> How does one distinguish a pseudo-intellectual from a real intellectual?

Well, that's certainly not something I'm qualified to answer. However, I was reading "Thinking Fast and Slow" recently and one of the heuristics for identifying if there can be real expertise formed in a subject or not is if it has regularity. IE, you can't have expertise if the outputs of some process are dominated by chance. I'd start there.

The problem is people who use cargo cult science as a selling point for their particular ideas which are usually political in nature or maybe have to do with startups or the stock market. Things that if they were a truly decided science, we wouldn't be arguing over in the first place. They take bad results with tiny sample sizes and pawn them off as fact and then because "facts don't care about your feelings" they feel justified calling anybody that doesn't believe in whatever it is they're selling an idiot.

[1] https://www.vice.com/en_us/article/9kv9qd/the-joe-rogan-expe...
4.3billion computers seemed like it was enough when the world population was 3.6 billion.

But then they started assigning /8 (16.8 million addresses) to companies like Ford Motors.
Another 16.8 million addresses to represent loopback.

IPv6 is assigned similarly like that, for example /64 (18,446,744,073,709,551,616 addresses) is the smallest allocation unit for SLAAC. I'm wondering when we will need IPv7.
True. I find it terribly hard to give up, but now I find the 5 minute official F1 recap on Youtube is a much better use of my time than two hours of watching whatever Mercedes car is driving in clean air open up double digit seconds leads.
German median personal income grew by 21% from 2008 to 2018, as per my original link.

My overall point was that GDP per capita growth does not relate to income of actual people, though.

The difference between both metrics means that mostly only inequality grew in the US from 2008 to 2018.

I think you looked at mean income in the wikipedia table, not median income. Median income is "only" 7k less in Germany than the US. The difference between mean and median essentially tells the same story: GDP growths only landed in the upper few percent housholds.
Nope. https://allaboutberlin.com

Isn't dropshipping extremely overcrowded since The 4 Hour Work Week popularised it?
We list ingredients on food products so why not require manufacturers to display expected lifetime on their products? With tax breaks for longevity.
That’s the crux of it right there. Funding. Studios that have funding secured (or don’t need it) should be the ones taking those risks. But yes, it’s risky to introduce new IP, the results can be disastrous. Cliff Bleszinski knows this.
Better still. Your modern PC retains backwards compatibility and emulates hardware quirks of this "not a PC".
Normally I would 100% agree, but the barrier for entry is so low that I'm not sure that consolidation in the video game market. There are plenty of issues which plague the video game market (software ownership rights, anti-competitive exclusivity deals, workforce abuse, literal gambling for children, pre-order "culture", etc), but I don't think this is one of them.

That said, I don't know if this is necessarily a good thing either. Strictly as a video game publisher, Microsoft has been doing pretty well for themselves over the last five years. They've definitely stood out as one of the more consumer-friendly publishers, but the market is full of notoriously bad publishers (Bethesda included) so being one of the better ones isn't very praiseworthy.

Microsoft also has their own jaded publishing history which includes some pretty bad moves at the end of the 360 generation and beginning of the Xbox One generation. The Kinect was a very high-profile failure. The original Xbox One was met with a strong backlash for lacking support for physical media. They played a significant role in the integration of "microtransactions" into full priced video games. Although they have done many great things over the last few years, I'm still weary of them as a publisher.

I think the jury is still out on whether this is a net positive for the video game market, but it will definitely make the upcoming console generation very interesting.
Thanks for the link. Anything by Yan Cui is definitely worth a read!

I'd argue the most important value prop that serverless has had for us was to force us think of everything in terms of an event-driven process, with small batches of job being done at every invocation. This is such an underrated benefit of going serverless/event-driven: together with job queues, this has enabled us to maintain control of our jobs from outside the code, without a need for re-deployment. We can fast-forward, pause, stop, rewind our long-running jobs simply by changing the event triggers or sending a new message to the queue.
What exactly is "soooooo low" about $0.50 for a 1000 pages?
I don't necessarily disagree with your points. In fact, I am in agreement [0].

My observation is that most VPN users use it for anti-censorship. And as for the points Tory raised (VPNs as a security measure against phishing et al), most of them are better mitigated on-the-client like how Tor works so hard to mitigate browser fingerprinting on-the-client as well, for example.

Of course, I never touched upon anti-surveillance, and if that's your threat-model, VPN is absolutely a necessity amongst a myriad of other things [1].

[0] https://news.ycombinator.com/item?id=19603091

[1] https://news.ycombinator.com/item?id=21601031
NPM public-facing site down (packages still available)
> ASSANGE Agrees to Help Manning Crack a Password [1]

Is this what Assange is accused of doing?

1. Receiving a password hash from Manning

2. Telling Manning he'll try to crack it

3. Following up asking for more info about it (related usernames or something)

4. Never actually cracking it and no further action

Does anyone have any more specifics on what Assange actually did here to break the law? The indictment is pretty vague on this and it seems to be the central issue.

[1] https://www.justice.gov/opa/press-release/file/1289641/downl... (page 9)
> Then you can literally say anything and claim "just not yet!".

To play a little devil's advocate, then...

Wouldn't that put most startups and Silicon Valley into the "fraud" camp?

Net positive revenue is always coming and funds are continuously raised on that promise...
I don't care why Signal tramples on its users' freedom.
hackers go after low hanging fruit 99% of the time. it's the reason why there are so many wordpress scanners out there.
> I built a website that pays the bills, and now I have a lot of time on my hands.

It's also pretty impossible to build a website that pays the bills indefinitely without maintainence or upgrades. If your website becomes popular enough to pay your bills you WILL eventually have competitors, as well as new mediums of technology, and you'll have to constantly keep up to date.
Is your domain name ready for the voice search era?
The prestige and status of research fields within mathematics
> In addition to Hibernate, we’ve also implemented support in CockroachDB for ActiveRecord (Ruby), SQLAlchemy (Python), GORM (Go), and TypeORM (Typescript).

> A full list of ORMs and other third-party database tools that CockroachDB supports is available here[0].

https://www.cockroachlabs.com/docs/v20.1/third-party-databas...
Ask HN: Should I major or minor in Machine Learning?
I recently started my Masters degree in university and I have been trying to decide on what to major in. I find that, in my school, the Machine Learning major has a very limited scope of subjects and there are majors with broader subjects that also interest me. However I worry that if I want to apply for an “ML-heavy” position in the future, then majoring would be better.
Assange is being charged under the CFAA. The charge carries a maximum penalty of five years. The statute of limitations for charges the CFAA is five years - the indictment was filed after eight years from the alleged incident.

The US is claiming that the reason the statute of limitations doesn't apply is "terrorism".

I'm not sure Assange meets any reasonable criteria of being a terrorist.

Secondly, the charge stems from a few lines of instant message conversations. Specifically, Manning said to Assange that she was unable to crack a password hash. Assange said he had rainbow tables that could be used. Manning sent Assange a password hash.

A couple of days later, Assange stated he had "no luck so far" with the hash. There is no other evidence Assange even attempted to crack the hash and definitely no evidence that it was successful or that it harmed the US in any way.

That's basically the entire case.

One other point: the case will be tried in East Virginia, which is home to the densest population of jurors that happen to work/ have worked in national security in the nation. This is intentional, of course and it's the same reason Snowden is also unwilling to return to a US trial - the jury is known to have strong pro-government views, strong ties to the national security apparatus.

EDIT: The bigger concern is that there are only four spots for the public to view the case and all of the online access was cut, so almost no public observers are allowed in. This is concerning given the broad implications of the trial and the fact that there is obviously enormous political pressure being brought to bear.
> Imagine Cook taking random developer's questions at WWDC today.

Sure. Developers today would ask him about AppStore policies and things like that. No one would ask technical questions as it wouldn't make sense. And I am quite sure this scene will only ever exist in my imagination. :)
The public suffix list only affects limits with letsencrypt. The limit is still quite high IIRC, you just need to have proper backoff an smoothing between devices.
I suppose your network provider (cloud provider) might have counter measures for port-scanning.

(Personally, I'd prefer use port 22, just because it's less configuration)
If you are doing that and do not want to do it then you are probably at the wrong company or not speaking up about it.
Belarus police detain hundreds at women's protest
This isn't Reddit, would you all please
I wonder whether a synchronous port hopping would help security. The sshd would hop to a different listening port based on a random seed and the current time at fixed intervals. The client runs a small app to compute the current active port by using the same seed and the current time.
And in this case you are putting the lock in a place that is not the doorknob, where an intruder will typically try to unlock the door.
In most cases this comes from mobile ad/analytics frameworks (Facebook Ads/SDK, Google AdMob, StartApp, Chartboost, MoPub, etc. etc.).

They usually ping back with usage counters and probably other analytics data. In many cases those SDKs even join data between apps on your device (e.g. you give your age to app A, your name to app B, your location to app C and they merge it on the backend). This data is then shown to users and in a lot of cases also sold in bulk.

Note that most of these frameworks target iOS first and Android second - due to population and revenue.
I would recommend finding for smaller companies to work for, or better yet, doing your own consulting. Being able to fire customers is the only reason I still enjoy what I do.
Why do so many tech employees feel that they're entitled to be arbiters of morality? Tech companies should have the backbone to fire every annoying internal activist group that tries to sabotage their efforts.
The International Court of Justice which the US not only refuses to acknowledge but actively works against?

Maybe when China pulls a US citizen out of an embassy something will happen, although I suspect not.
I've been following the reporting from the witness testimonies and some of them detailed that a lot of work has went into editing (and supressing some of) the documents that he supposedly released without censoring names of assets. I posted these links previously in the thread but Daniel Ellsberg talks a bit about how this was handled:

https://shadowproof.com/2020/09/16/pentagon-papers-ellsberg-...

https://www.craigmurray.org.uk/archives/2020/09/your-man-in-...
Title has me interested to view what you're showing, but is there a way to do so without creating an account to log in, or perhaps an accompanying blog post for the curious?
I think that when others are talking about the experience of being an academic, they mean that of a professor, not student. While some students do help their advisors write grants, I don't think it's the norm - I never did. But grant-writing is a major concern for professors at top-tier research universities.
I'm not sure I deserve the "elitist" label, but yes, I find this development very negative.

While I agree with your point that hobby startups distribute money and enlarge the market, I was trying to point out that people working under management with no experience will probably not learn their craft well. In my opinion, the old apprentice system used for jobs like becoming a carpenter would be quite appropriate for software engineers. But it only works if there are enough master level programmers around to teach everyone else.

As for the pie analogy, I don't share your opinion. When the market moves towards lower quality, that usually makes high quality more expensive or even outright impossible to acquire. Case in point, I'm not aware of any bicycle that is rated for 200kg+ for driver and luggage. Not only are there no cheap bikes at that stability level, but also nothing in the $2000+ premium range. So something that used to be easy to buy for everyday folks 20 years ago is now too expensive even for rich people. And all that only to drive the price of the cheapest bikes down from $500 to $300, which I presume won't make much difference to anyone because a good bike will last you 10 years, so it's <$1 monthly in either case.
Top level problem: It turns out that "being exactly like a 737" wasn't a feature but was in fact a huge bug.
Joe Rogan is not new, and is only "edgy" to the type of people that can be cut by a pillow.
So, dynamic scoping are global variables... except with even way way way worse unpredictable behavior. Any function from three-level remote libraries can invisibly modify the meaning of code.

Sure, it allows for neat tricks, I suppose. It mostly allows impossible to diagnose error conditions since what happened actually depends on anything that may have happened before, invisibly.

I find it particularly amusing since fighting off global states has been a worthy goals of languages, libraries and framework. Without it, you can say goodbye to reproducible behavior and multi-threading.

(If dynamic scoping is thread-local, you still have the issue that anything can affect anything else, so nothing can be assumed to be reentrant anymore.)
For anyone into games like this, I also highly recommend Cataclysm: DDA
Clickable link for the site you mentioned: https://allaboutstevejobs.com/
NinDisney will be a thing.

I'm astonished Disney hasn't yet acquired Nintendo.
If you want to be cynical, Proton was made from the scraps of a contingency plan that was the Steam Machine. When they realized that Microsoft wasn't going to force their platform onto users, they gave up on Steam Machines and I guess they leveraged the tech to something else.
I have stopped buying some Apple hardware due to the dongles adapters. Carrying adapters makes it more complicated to connect external devices. Plus all adapters creates more electronic waste which is bad for the environment.

Thinking lack of 3.5mm headphone jack on iPhones. Lack of hdmi out and no non USB-c ports on mac. So many dongles...
“do Considered od” Considered Odder than “do Considered ob” [pdf]
This was my first computer: https://en.wikipedia.org/wiki/TRS-80_Color_Computer Got it for Christmas in 1980. Second computer was https://en.wikipedia.org/wiki/TRS-80_Model_100 and third was https://en.wikipedia.org/wiki/Amiga_1000 I have the Model 100 in storage, and it still works just like new, taking four AA batteries.

Complexity is daunting today. I believe, however, that the power available far outweighs the total difficulties.

I am still inspired by the basic possibilities that most anybody can, with nothing but access to a computer and the Internet, write some javascript and html in a simple editor and make it available to most everyone in the world.

Objectively speaking, that's simple and approachable, far more so than anything I ever did or was aware of.
> It's a wild amount of inefficiency.

Only if you think that due diligence and actually collecting the repayments is inefficient. Someone like LendingClub will do all that for a 1% overhead with plain old fiat though if you don't want maturity transformation and deposit insurance.

I'd say it's a bug rather than a feature of the crypto ecosystem that people who sneer at 'numbers on spreadsheets' can 'earn 10% interest' if they buy enough tokens from a website whose 'institution license' page tells you what a license is but doesn't tell you which country they're headquartered in, never mind what licenses they actually hold. It's not removed the middleman so much as anonymised him and made it more likely he's running a Ponzi scheme.
First of all, thank you!

The point of the pure text recognition service is to draw business; not to make a profit. Without the "Advanced Features", the service operates at a slight loss. However, the profit margins and total volume we do on "Advanced Features" covers the loss and turns a profit.

On the Hydra (Documents-to-Database) side of things, I think we charge enough. Margins are very high.
May I ask when the place you grew up in acquired indoor plumbing?

Apple was incorporated in 1976. What do you think they did for the first 25 years of their existence?
For sake of argument though, can we assume all “old” programmers in this case are ones that have been doing this a long time and are actually competent? I’m not disagreeing with you, but I know those are in the minority of us “old” programmers. “Old” vs “Young” can be a measure of experience.
Size and sleep: New research reveals why little things sleep longer
Finding a Hobby in 2020
I'm also in my 50s, and I can't imagine ever losing interest in programming.

A computer contains practically infinite possibilities, and people who lose interest in that are really just lacking creativity, and maybe some cognitive ability.

I don't only program though, I am creative in other ways and I build many things that have nothing to do with computers, but I do often incorporate programming into these creative pursuits, because it sometimes pushes the project to the "next level".

If someone only writes "glue code" then yeah, that will get boring. There are so many other kinds of programming though, that many never even explore. 3D is a whole entire interesting field that is far removed from "glue code". Home automation is one of my latest obsessions. The list goes on and on.
Scripts are not magic, they must be doing something. So what are you defending against? The last openssh preauth remote exploit from 2003? Weak passwords? Those are much better addressed by other measures.
Or, as the above user put it, the difference between making a creative masterpiece or a clone made to exploit the system.