skysight-inc/HackerNews huggingface dataset:
Moving the port is definitely security by obscurity, it's just that often, security by obscurity works. Tanks have armor but they still paint them camo. You are obscuring the target.
Amazon doesn’t offer free shipping, it’s simply included the price of the product.

It’s also not next day many times in my experience, and other companies online ordering experience and shipping times are comparable.

What’s not comparable is that Amazon doesn’t stand behind stuff purchased from their flea market of a store, whereas I can have more trust in the supply chain at pretty much any other retailer.
I am only lurking on this but Craig Murray (ex British diplomat) has a good blog following the daily ongoings on this trial.

https://www.craigmurray.org.uk/archives/category/uncategoriz...

It seems to be incredibly murky and quite frankly, pretty disturbing...
>I am pretty sure that a request with just your real name wouldn't reveal much.

It's enough to email from the address thats associated with the account. Generally speaking.
I don't like combat in RPGs anyway, but it did feel like less of a chore than combat in Fallout games. Maybe they just got the "grind/success" ratio closer to what I prefer.
good luck running on the ban instagram platform!
Someone attacking ssh may also attack other services (e.g. http) that may have vulnerabilities. fail2ban on port 22 keeps them away.
I think it's time for browsers to default to https.
Dfinance is transforming DeFi investment with its layer-2 network infrastructure
Given how many times Todd has lied it went back on his word, I don’t put any weight in anything he has to say.
Halo 5, Warzone REQ packs could be a money sink for certain kinds of players. Personally, I haven’t spent a dime on the game except the initial purchase - but it really soured the community that one could spend real money on power weapons. Given that many items in REQ packs are single-use rather than permanent unlocks it can be a whale magnet as well, and I absolutely do not think game developers should be allowed to capitalize on people with addiction problems like this.
I think it has a few replays in it, there's heaps you can do differently but I guess the question is would you want to? I think it'll be a game I revisit, just not right away.
> Why did they conclude the second field was a message type rather than just a string? Strings and messages are isomorphic on the wire.

Presumably its contents. The included protobuf-inspector output shows it's a valid submessage, including length-delimited fields having valid lengths. A two-deep string matches the expected title. The tag numbers are also in order, which adds plausibility. (Tags aren't required to be in a particular order but IIRC the stock implementations in most languages output them in ascending tag number order for known fields.)

This is pretty strong evidence. If it's not strong enough for you, reverse engineering might not be your thing. That's okay.

Nit: message is isomorphic with bytes, not string. string has the additional restriction of being valid UTF-8. I didn't check, but I wouldn't be surprised if field 2 is not a valid string.
I fully agree with your assessment, especially after seeing the Hamilton 68 "Russian backed media" dashboard that included a lot of progressive and alternative media, directed by a mix of DNC elite and Neo-cons, which was created by the orwellian sounding "Alliance for Securing Democracy".

It's obvious that the RussiaGate campaign is really a smear campaign used to take down enemies left and right if you pay close attention, e.g. used against Bernie Sanders who is obviously not a Russian shill, but I wish someone would put together a sourced timeline detailing the nature of the campaign, as I've got so many smart friends who fell for it and can't be convinced otherwise in a two minute discussion over cocktails.
I don’t really see it as an indictment that we don’t yet have a short list of things from science fiction. The reason authors wrote about those things is because the are so beyond our technological capabilities—that’s why they make for interesting science fiction!
It's pretty obvious by the way they use "your" and "you're"
Like a number of other posters I think this probably is mostly motivated by protectionism, but unlike them my response is: so what? So European consumers miss out on the tax-evading, anti-democratic, addiction-pushing, misery-spreading, dystopia-creating big-brother tactics of US big tech. Oh no, what a terrible tragic loss, how will this still enormously wealthy and advanced continent with thousands of years of civilisation behind it ever cope etc. etc. etc...
Threat model is having logs flooded by run of the mill automated bot login attempts, and missing the targeted attacks in the noise.
Being late does not make you a fraud.

Tesla does have a real team working on self driving hardware and software and they're shipping it inside cars.

It's not clear that Nikola has much more than powerpoint. They got a lot of impressive-sounding partnerships going but so did Theranos.
Developer onboarding. Have not used XML for springboot in ages. And aspects - very very rarely if at all.
What kind of argument are you making with your first sentence?

Regarding the rape, this is what Wikipedia has to say about it:

> On 20 August 2010, two women, a 26-year-old living in Enköping and a 31-year-old living in Stockholm, reported to the Swedish police that Assange had engaged in unprotected sexual activity with them that violated the scope of their consent, also because one woman was asleep in one case.
The problem is that it's not enough for you to stop buying the crap. Everyone has to stop buying it to make it go away. Personally, I think Apple products are (now) crap, beautiful to look at, but with a UI/UX that has jumped the shark so badly that they are essentially useless. I haven't bought a new Apple product in many years. And yet they persist.

UPDATE: "Essentially useless" is (obviously, I hope) rhetorical hyperbole. See subsequent discussion for clarification.
> cointrauma.com: Crowdsourced counselling for cryptocurrency-related upsets.

Make it on a blockchain.
Not understanding what is going on under the hood of software systems is a huge risk for a manager. A Demo could look and feel awesome. But the whole thing could be dependent on a npm package maintainer not disabling his account. And you don't understand that until your entire fleet gets bricked overnight.
> Most developers don't work with them, and their customers represent a tiny less "gaming educated" population.

That's a bit insulting. Mario and Zelda are a few of the consistently best game franchises. Smash Bros gamers aren't "uneducated"

> It's like using cellphone games as a gauge on the greater market.

The mobile game market is bigger than the console and PC market.
High-level, easy to read languages with large, robust ecosystems that your team has a high degree of proficiency coding.
they just optimize for "maximize our pockets", and do it hard

That's not the case.

Consider the purest examples: Google routinely incorporates factors beyond short term profit into their ranking functions. For instance they ranked SSL using websites higher than non-SSL using websites, to encourage use of encryption. The ads "quality score" system penalises advertisers whose ads appear to be low quality, defined by users not finding them useful. The constant shovelling of social justice themes into the search engine homepage.

The biggest problem these firms have is that they are not focused exclusively on maximising profit. Profit is an excellent metric! It is the sum of all the happiness and utility you are creating across all your customer and userbase, minus effort expended, in a single quantifiable number. Think of all the happiness created by Apple, Amazon, Google and yes even Facebook and Twitter. Hundreds of millions of people use the services of these firms, often for free, and they use it because they like it.

The problem big tech firms have is they explicitly got on board with "let's maximize world happiness" as a goal. Dumb dumb dumb. Nobody agrees what world happiness is, but there sure are a lot of activists who will always be convinced you're not doing enough about it. Once you go down that path you'll never stop walking, and the further you walk, the more abusive the activists get. It's so subjective and unquantifiable you can never tell if you've done enough.

my belief is that we're in a tipping point where the market, as an optimizer, is getting out of control and needs to be reined in

Isn't that just a classical Marxist or Malthusian collapse proposal? People have been predicting that capitalism will somehow collapse in on itself for hundreds of years, it never has because it's a fundamentally natural, evolved and stable system. The alternatives, not so much.
>Also this allows them to bring the ID tech engine under their stewardship....

I'm surprised that isnt more commented on here. Everyone is focused on creative IP. Owning id Tech 6 is or should be a play against Epic, Unity, Crytek etc. 1-4 were open source, and ZeniMax clamped down 5-6. I can see Microsoft marketing id Tech's long open source history, and transforming it into an Amazon Lumberyard competitor.
The Quantum Butterfly Non-Effect
Competing in any market isn’t easy, especially with low margins. If it was, someone would be doing it, since people have a goal to earn money.

The comment I replied claimed Amazon didn’t have competition, to which I wanted to point out that the retail side of Amazon has a ton of competition. And single digit profit margins are pretty hard proof of competition, and/or low barrier to entry. Because again, people have a goal of earning money, and the only reason they would accept single digit margins is if others would take their business.
He also said that he was partnering with soda stream to make soft drinks from the water emissions from hydrogen vehicles.

This man is a billionaire
It's a somewhat common pattern that regulation intended to stop the encroachment of some bad thing also effectively causes a standard to form around the (now) worst thing you can do and still be legal.
This fails to demonstrate that "imitation would be in a small font that isn’t noticeable at first glance". It's always prominent, and often part of the single most prominent piece of text on the package.

https://www.google.com/shopping/product/8945736565554256086?...
That's nothing compared to my experience when I got allocated static IP (IPv4) at university. I didn't even request it, the university has /16 allocated, and doesn't do any NAT, instead a stateful firewall blocks all incoming connections by default.

Anyway, the RevDNS resolved to a host containing my full name. I suppose that would discourage any abusive behavior, but even if you didn't have intention of doing that it was still a weird experience.
It's worth noting that Madoff made billions from his fraud, had to return all of the remaining money to his victims... And will die in prison.
And as well for all the satellite states.
Nothing to see/hear. Military Shadow Government covering up their tracks.
> Most drug dealers in this country are small time weed dealers. Usually college kids or recently graduated. These are the drug dealers who are small time and basically never get caught because they aren’t the demographic that drug laws were created to criminalize. So no, you and I seem to know different things.

I'm assuming you're counting people who sold drugs to a friend as a drug dealer?

And trust me, most drug dealers are not college kids. Those are edge case drug dealers. Even the small time ones who sell say 100 pills/an oz of coke a month.

> I’ve got to say it seems like this argument comes from a lack of real world experience and a strict adherence to the reports and theories of law enforcement agencies. Contrary to your belief, non-drug crimes do not suddenly spike in areas where drugs are legalized. See: Europe, American states where weed is legal.

I think the difference is, I had experience with a lot more drug dealers than you. Ranging from school kids selling a hundred bucks of weed a week, to people selling to pay for their weed, to folk selling because they got into drug debts, to people who supplied the entire town with a specific drug. You seem to know only small time folk selling weed.

> Contrary to your belief, non-drug crimes do not suddenly spike in areas where drugs are legalized. See: Europe, American states where weed is legal.

Weed? That's not where the money makers are. Very few people sell weed to make money, there is no money in weed. Heroin, cocaine, crack, meth are what people sell when they want to make money. These drugs not not legal in any country, in Portugal it is treated as a health issue but it is as far as I know, still illegal to sell the drugs.
EA is much bigger in terms of revenue.
New Start Up Product
Hey everyone, I’m part of a new start up Warden, a product that stops you from getting hacked. We started back in 2017 but have had some setbacks along the way.

But recently things have got exciting for us! We have a mobile app due to be launched soon, couple that with a brand new website - we have Instagram and a Facebook page as well as the existing website. I’m just looking for some feedback and if people have any queries, concerns or questions they’d like answered!

Thanks
I think Sega is also a major player, they have bought up many studios in recent years including Relic, Creative Assembly and Amplitude.
I think what has changed is the expectation that work should always be 'joyful'. I don't the majority of employees working in any industry have ever been involved in cutting edge or creative work.

Can you imagine what the medical field would be like if the majority of general practitioners started complaining about the fact that they don't get to work in neurology research?
No, I don't think they do — I generally hear comments like: hotter than expected, artificial taste, thin body, short finish, etc. I just wanted to establish a somewhat arbitrary "good" baseline somewhere.

If you are feeling experimental though, the ones that seem to be the most popular are:

- Cleveland Bourbon / Cleveland Underground

- Tuthilltown Hudson Baby Bourbon (but it appears to be recently discontinued / relaunched starting this month as a 3-year aged Hudson Bright Lights, Big Bourbon)

I'm not lining up to buy their bottles personally. The reviews on Distiller.com are pretty insightful.

For normally aged bourbon, I really like most of the Four Roses and Buffalo Trace products.
Because speedbumps are annoying to everybody, and wastes everybody’s time with unnecessary complications.
How to Accelerate Your Programming Knowledge with Multiple Streams of Learning
Also wondering this, if there is a boiler plate template we can use I will send it straight away to Quantcast.
Make Your Product Onboarding Better by Trying It Yourself
Deadcells ?
rebo had a sick booth at burning man
> thus have concluded that all woodwork is less intelligible than all software building

If you read my initial comment carefully you’ll see that I’ve made no such conclusion.
I could have used that book back then. That was life before Amazon and online searches ruled everything. If it wasn't at Borders or Barnes and Noble, I didn't know about it.
My family has a number of such collectible spoons, all to a T useless for eating or serving food.
A detailed history of stock market activity for the years 2020 and 2021.

If I know the future, I can make a ton of money. The other suggestions I've seen are good, but mostly just satisfy curiosity about distant future events. I would rather make an obscene amount of money and work on current day problems or curiosities.
Pre-filling those fields, with the body text auto-selected may be a good compromise.
>if someone offers you security but does not charge you for it, they are most likely to compromise your privacy at some point and it usually happens when you need protection the most

I don't get this, could you give an example of where this happens?
Let me say that I have thought about your position.

It is not a "solution" for humanity to exterminate itself through its own idiocy. But you can see that it is a hard problem that might well "solve itself", as the thread-OP said. As a humanist, I prefer to make an effort.

Although extinction through our own idiocy would be horrible, it would be of a piece with the other plagues that I mentioned. Albeit on a different scale.

Extinction because of a major catastrophic event not of our causing would be tragic because there isn't much intelligent life in the neighbourhood, much less under our "own roof".
To me, this sounds like developers who are too far away from the business. Either they don't understand the context, or they aren't given the latitude to express their concerns about product direction.
Ngx-scully-blog: A simple blog for developers
Well it would be security through obscurity if you changed the port, but didn't require any authentication on your ssh server.

There was a time when people would do stuff like this, have a modem that would dial in to a corporate system without any authentication. With the idea being that they would have to guess the phone number. Then later on in the name of security making sure that you had to connect at a certain arbitrary bitrate.

I understand the point of the article, I just think it's too narrow of a definition. The whole thing is just arguing semantics anyway.
OK this annoyed me enough that I wrote my rebuttal :) https://www.cryptologie.net/article/505/why-not-rust-for-sec...
There was no question of the authenticity of the documents. The piece was completely unnecessary. Julian Assange himself is irrelevant to the stories that the NY Times published, and readers did not need to know that the NY Times considers Assange paranoid in order to evaluate US military logs. If a NY Times reporter broke a big story, would the NY Times run it next to a smear piece about that reporter's personal habits?
That's why I'm always talking about this on HN. Trying to spread awareness on the inside :)
Is that not costly?
Why Not Rust for Security?
It’s ok. It scratched that “Bethesda fallout” itch better than Bethesda did, but ultimately I found it got a bit monotonous and dull after a little while. It’s not a bad game, but it’s no masterpiece.
EU can at worst drive those giants away and creates their own. It isn't that a scary thought as it was a decade ago.
Dynamic scoping moves a bunch of correctness checks from compile time to runtime. It basically introduces all the problems that come with shared mutable state across different functions/methods. It becomes hard to reason about who mutates state where/when.
This app requires a rooted phone. I don't have root on mine. Is there something similar that doesn't require root?

My Pi-Hole is useful for tracking/blocking via DNS, but I can't tell which apps make which DNS queries. I'd imagine you must be running on the phone to get these data, or use deductive reasoning/matching/etc.
Academia is the best place to do novel research, and a bad place to write great codes (like Tarsnap). You can't do great research on "Birch and Swinnerton-Dyer conjecture", if you are not an academian (like Manjul Bhargava).

> In 2005, I made the first publication of the use of shared caches in multi-threaded CPUs as a cryptographic side channel...

As far as I know, the first publication about cache side channel attacks was [1] by Dan Page in 2002.

[1] https://eprint.iacr.org/2002/169.pdf
No, you're still getting additional security from the port move. The argument being made is nonsensical.
There's a solid question as to why the tool you'd pick for CRUD databasey stuff should be coupled to what you'd pick for NLP heavy lifting by the interpreter. Different jobs, different tools.
I think best practice among languages that support dynamic scoping is to only make use of it for global variables. As I understand it, one should only read or shadow, not modify, these variables. Since that's the case, besides the thread issue you mentioned, I'm not sure this solution is lacking. I don't know much C++, though, so I might be missing something.
Ask HN: Which python3 implementation of the grammar of graphics do you prefer?
And why?
How Are the Mighty Fallen: Rejected Classic Articles by Leading Economists [pdf]
No idea; I generally work on screens so big that any sort of maximization, even partial, is unpalatable.

That said, when I did a lot of travel, and worked on my laptop without any external screens, I was a big fan of Divvy (https://mizage.com/divvy/).

Also, here's a list of some keyboard shortcuts that folks may enjoy:

https://www.imore.com/manage-your-windows-pro-macos
I don’t see how this is functionally different to passing an object that contains references to the relate to variables; which I’ll call a context object.

Practically, dynamic scoping is more confusing than context objects.

void main() {
int x = 2;
fn();
}

Does fn access or change x? You need to inspect the body of fn to know.

I would call dynamic scoping a poor form of coupling. Instead of bundling your coupling wires in a neat little set of in/out arguments and a return value (the format of which only needs the function’s declaration, not its definition), you are instead reaching out of and into the function’s body, like sprawling tendrils, as your function has free pickings of your variables.

It also strangely couples the names together. The outer function and the inner function may see the variable in completely different lights, yet dynamic scoping requires the outer use the name prescribed by the inner.

Optimization would be hard without WPO. You’d essentially need to keep a run-time “scope” object for every function. Though, the author’s proposed design for dynamic scoping in C++ means you don’t need it for every function; however that design has its own issues: how would you optimize such a design? It would a puzzling challenge.
Seems like pretty realistic and sustainable planning to me, they give you at most 50 cents of credit to see if it works for you without a forced time limit.
Astronomers discover an Earth-sized “pi planet” with a 3.14-day orbit
Not implying any sense of quality, just naming some IP's that have been milked.
I recently tried to change ssh port to remove log noise. Well, it certainly helped a little bit, but bots quickly found out new port and started to brute force it, so in the end it did not help, just reduced noise. And as I don't see much difference between 100000 attempts and 1000 attempts, I decided to return it back. I don't care about brute force anyway, my passwords are not "root:root".
> CPU codegen has been benchmarked to beat openblas

Source on this claim?
Awesome response! Companies that “hear” their audiences, are top notch in my book.
Another one that doesn't get that after Longhorn, its ideas were reimplemented as COM and bare bones Win32 is frozen in XP style.
If they make a Minecraft / Skyrim hybrid, I'm in.
An activity being “mindful” is not the same as an activity being “intellectual stimulating.” I do not consider software engineering mindful in any significant way but I do agree with you that repetitive manual labor is quite mindful.
Seems like they'll go for something low power and low performance at first. (from some chatter I've overheard on linux-sunxi)
> Europe will continue to lose their talent to USA, as long as the pitiful salaries do not increase to an acceptable degree.

I'm not sure that's true - that Europe is losing talent to the US. COVID-19 has the US on blacklists for most of Europe. And before that Trump policies towards foreigners are not exactly encouraging to migrant workers. Meanwhile 70k Euros (82K USD) ignores that you're getting cheap, high quality healthcare, you don't have much student debt (or none at all e.g. Germany). Meanwhile Google, Facebook et al. have been opening engineering offices around Europe, presumably because it's hard to get talent over to the US / cheaper in Europe.

> you have to jump through hoops with HR and management in Europe

What hoops are these?