skysight-inc/HackerNews huggingface dataset:
https://en.wikipedia.org/wiki/Secure_copy_protocol points out a few things:

> SCP does not expect text communicating with the ssh login shell. Text transmitted due to the ssh profile (e.g. echo "Welcome" in the .bashrc file) is interpreted as an error message, and a null line (echo "") causes scp to deadlock waiting for the error message to complete.

> As the Secure Copy Protocol implements file transfers only, GUI SCP clients are rare, as implementing it requires additional functionality (directory listing at least).

It points to https://www.openssh.com/txt/release-8.0 for the quote "The scp protocol is outdated, inflexible and not readily fixed."

This comment was related to a security problem last year, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111 . Part of the release notes comments "the scp protocol relies on the remote shell for wildcard expansion, so there is no infallible way for the client's wildcard matching to perfectly reflect the server's. If there is a difference between client and server wildcard expansion, the client may refuse files from the server. For this reason, we have provided a new "-T" flag to scp that disables these client-side checks at the risk of reintroducing the attack described above."

https://en.wikipedia.org/wiki/SSH_File_Transfer_Protocol further comments "SFTP attempts to be more platform-independent than SCP; with SCP, for instance, the expansion of wildcards specified by the client is up to the server, whereas SFTP's design avoids this problem."
This author agrees https://mobile.twitter.com/firefoxx66/status/132409515198431...
I am pretty sure that its already too late to contain this. Confirmed human infections.
Well, it's very similar to many other real situations like common household doors. They provide a weak level of protection and we add laws that criminalize getting unauthorized entry.

I'm sometimes baffled that people miss that point when it comes to internet security. The biggest real difference is the global nature of the internet and thus problems with jurisdiction, which obviously doesn't apply if both sides reside in the same jurisdiction.
I don't know what the definition of "prestigious" is, but Google and Facebook employees earn more money (gross and per hour) and have a better quality of life (at home and at work) than consulting firm employees.
Flourine is electronegative enough to be able to burn with asbestos, but not willingly, it needs a lot of encouragement to do so. It'll happily burn spent coal or other oxygen burn byproducts.

For asbestos you'll need some chlorine to make that flourine very excited about the idea of tearing apart some strong molecular bonds. Chlorinetriflouride is the candidate here, though Dioxygendiflouride also likes doing it, if in a more explosive fashion (it'll probably detonate in a hypergolic fashion with asbestos or sand).
Gravity storage is not a heat engine, ergo Carnot's rule does not apply.
You're right. On Chromium it renders all right. Beautiful work.
I range from between 7 hours to 8 hours. I’m still coming to terms with getting triggered when I encounter certain colleagues, so I wake up at night. I know by elimination process that the trigger during the day reflects into a wake up at night.

For the past three weeks, I’ve been sleeping without interruptions ( waking up suddenly) until today, having encountered a problem person yesterday and flew into a minor rage at certain recollections of unfair actions by them.
Linux kernel manages themselves pretty much without github.
I've read that US polls are much smaller than equivalent UK polls, like sample sizes 90% lower, sometimes just a few hundred people whereas political polls in the UK use more like a thousand or two. It seems like an odd discrepancy.

But really. If the polls are so unreliable then at some point people like FiveThirtyEight or the Economist need to understand that and stop incorporating them into models (which may mean not attempting to forecast at all). Just pointing the finger of blame around only gets you so far.
This is impressive and cool from a purely technical point of view. That's certainly enough for me, so I don't wanna detract from this, but: what would the real-world importance of this be?
Humane Tech
Cloudflare customers may not, but what about board members, investors and shareholders? They might not be too happy with a CEO who shows such bad judgement.
The book is from 2005 and is based on the authors experiences from a career in consulting so that could be from the 1980s.

Somehow I don't think the details have changed and I've actually witnessed people in a meeting room in a shared office building doing the brown paper trick fairly recently!
Papers are meant for when you're already familiar with the basics. It also depends on your knowledge of prerequisites and goals.

But it's best to take courses and read textbooks. There are good free courses from reputable universities out there. I'd recommend starting with some math and CompSci foundations. The internet is full of recommendations because everyone and their mom is asking the same question. How to learn AI from zero. Most of those people then don't stick with it of course because it takes time and effort.

The other way is to just read "easy" tutorials and "instant" courses without any foundation, learn just the buzzwords and then be totally confused about what is actually going on.
But with the HD wallets you can switch a field in the derivation path for each coin. Then one seed can give you different looking addresses for each chain, from the same device.
I don't suppose you can link to some images of some buildings you designed?
The iron powder is reusable so this is a one time mining operation. What acids do you think are produced in the electrolysis?
This. It seems like a small price to pay not to have half an electorate believe political rivals are child-abducting lizard people.
That’s the opposite, labeling signed commits.
Aside from the VC angle, without constant growth your product will likely end up failing to compete with some monopolist vertically integrating or diversifying into your market.
How is ISPC's support for AMD MI supercomputing accelerators, or Nvidia's A100s ?

I feel like Hip, OneAPI, ISPC, etc. haven't improved anything over CUDA.

With CUDA we had one proprietary API. Now we have 3-4.
The problem is with people exploiting capitalism, not capitalism itself. There are many well-known flaws with capitalism, the most obvious being lack of accountability for external costs and the formation of monopolies. This is why we have laws to "correct" that. You don't get to be as big as Microsoft without some amount of corruption and exploitation to circumvent these measures.

To give an analogy, I think the Internet is great. But I dislike the individuals who exploit it to send spam and propagate worms etc.
Every case is different, but the malware authors are often willing to share the decryption tools with Coveware for vetting, even before payment is negotiated for the keys. The hackers have no part in the decryption process.

They could very well have changed something on purpose before encrypting, but they do have a reputation to uphold if they want to keep getting “customers”. At least in the high profile cases, the ransomers do seem to be honest and dependable if they are paid.
Been a while since I used java but is it still the case that your main function has to be inside a class which has to inherit, ultimately, from Object? I think that's what gp meant in implying that inheritance is not optional.

In practical terms of course a bit of boilerplate to declare a class where none was needed, doesn't matter a great deal.
Looking for Small Businesses and Individual
Hi guys, I am looking for people to try my website and give feedback taskmagnet.com. Cheers!
But the second law of thermodynamics still does. Gravity wells are still a mechanical system, just not a heat engine.
If anyone wants to share their thoughts on the code quality I would be happy to read them.
I can see your PR staff in my head, standing behind your monitor and saying: "now you have to write everything is in order, everything is normal, this is not a bug but a feature".
Hosting Provider Leaked 63M Records Including Magento and WordPress Credentials
Over 60 million customer records by a Cloud Application Hosting company Cloud Clusters Inc. leaked including user/password credentials for Magento, WordPress accounts, and MySql.
Yeah by the end of it I was dying for an explanation of what all the uses of linear and non-linear were meant to imply. One paragraph has the words mentioned six times in three sentences!

The whole thing would be much more obvious if they ditched half the philosophising and gave a concrete example of the problem and their solution. Then by all means talk about the philosophy behind how it generalises.
I have so much content in my garden now that I want to do some deep data science on it soon :D

https://github.com/nikitavoloboev/knowledge
We don't criminalize lock picks though, just their illicit use (and any following actions).
Update on MuseScore 3.6 and 4.0
Another well-known long-running (20+ years) successful permaculture / regen ag farm in India is Krishna McKenzie's Solitude Farm, Auroville, Tamil Nadu. Again, mixed crops, herbs, fruit and other trees, multi-layer. On-site farm cafe with raw / local / vegan food. They also know well about and use local edible weeds as food, further reducing work and increasing efficiency - no need to even plant them, let alone cultivate! He has a video or two about that too, along with Nina Sengupta, who wrote the book Edible Weeds of the Auroville Region. He also does talks, local outreach and education, and has a good video channel on YouTube about it all.

Mentioned it before too, in that same recent thread:

https://news.ycombinator.com/item?id=24876047
I think GP is measuring the difference in the total margin while you are measuring the difference in each candidates percentage.

I.e. in Wisconsin, the forecasted margin was 8.3 points and looks to be closer to 0.7 points which is a difference of ~8 points as GP said.
At that point feature phones also strike a very good balance. Personally 99.9%[1] of things I could do on a smartphone theoretically I can do 10x better/faster/more conveniently on a laptop, so I just better off postponing the action.

[1] Disregarding bad actors who force you to use a phone app
I got a top of the line AMD card for compute > 1 year ago. Still does not have ROCm support, so its been sitting in a shelf for >1 year.

Some people here value "open source" drivers over "working drivers". I value "working drivers" over "open source" drivers over "proprietary" drivers.

An open source driver that does not work, is worth zero to me.

If it were true that "open source" means somebody can go and fix the driver, then somebody could have added ROCm support for the 5700 XT a long time ago. The fact that this has not happen, to me at least, means that open source is not as valuable as people seem to try to make it be here.

Sure it is better than closed source, but if your driver doesn't work, and AMD doesn't want to fix it, it definitely does not mean that anybody will fix it within the lifetime of the card. This card will be surpassed by the 6000 series next week, no chance I'm going to buy one of those.
If they have control over DNS, could they just move to another cloud service?
It's been tried.

https://en.wikipedia.org/wiki/Atomic_gardening

"The practice of plant irradiation has resulted in the development of over 2000 new varieties of plants, most of which are now used in agricultural production"

See also:

https://99percentinvisible.org/episode/atom-garden-eden/
Another article mentions the fuel gets heaver as it burns. So if it was used in a ship it'll get lower in the voyage as you travel.

Personally I'm waiting for thunderf00t on this one. (But it's also cool to do strange stuff to brew beer, the story is an important part of the drinking, allegedly)
Much of this boils down to "IPv6 sucks because it's so different from IPv4", which has never been a very convincing criticism to me.

The conclusion of "It's hard to memorize or type plain IPv6 addresses" has always been "I guess I need (m)DNS" for me, not "wow, IPv6 is bad". And some years later, I'm extremely happy I don't have to memorize even local IPv4 addresses anymore – mDNS together with a proxying/caching local router works that well.

Regarding the "unnecessary" changes (i.e. everything besides just adding 96 more bits to every address):

When implementing a new IP protocol version literally touches every single device on the network (at some point), why not use that opportunity to revisit some of the historically grown cruft?
I haven't yet looked much into effect systems so can't really talk about them but I think even with something like MTL you can achieve a decent level composability/modularity where you build up a library of capabilities that you can then use to pick and choose effects from, eg.:

type FooContext m = (GetTime m, GenUUID m, Log m, Auth m, ReadDB m, WriteS3 m, BarApi m, etc...)

foo :: (FooContext m) => UUID -> m Foo

The main downside is ergonomics, ie. the amount of boilerplate needed, but personally I don't think that's a high price to pay.
Graphs are usually persisted as a list of nodes and a list of vertices. The ML approaches usually use tuples or triplets of nodes to represent connectivity and model neighborhood. I wonder if that can not be used to model a graph in a linear system?
We simply do not know right now. I think ARDS and the risk of permanent lung damage is one of the main reasons that we named this SARS pandemic "COVID".

For the previous SARS pandemic I believe it was about half of every infected person who developed long term respiratory problems. This strain shares around 80% of its genome with the previous SARS-1 strain.
An interesting point for the upcoming apple silicon macs.

They'll be able to run iOS apps natively, so I think that may indirectly help the bad actor situation.

You'd actually easily be able to use either an old iPhone or something completely different and still be able to use an app when a company requires it.
> A bug for the consumers, a feature for the developers.
I think this is a cross-post of the medium article. Previous discussion on HN here: https://news.ycombinator.com/item?id=24967601
In Italy we have an old saying:

"La terra è bassa."

(translates to "the earth is low" implying that to get food out of it you have to kneel and bend a lot, i.e. it is hard, hard, backbreaking work)

With animals, it is (IMHO) even harder, another saying (Tuscany) goes like:

"Le bestie non conoscono feste comandate"

(translates to "animals know nothing about holidays", it is a 7 day a week (from dawn to sunset) 365 days a year job)
Is there any vendor who doesn't do that? I remember conversations with Nvidia driver peeps on the OpenGL boards 20+ years ago, and it was very very striking that they would always, always, flatly refuse to implement any kind of "is it in hardware?" query. Waste of time even asking.

It wasn't spelled out, but I think the implied rationale was that doing so would just be used against them by competitors' marketing in a bullet-point feature comparison. And maybe a bit of "you don't care if it's hardware, you care if it's fast", which isn't unreasonable.
Ways to keep your browsing history hidden from ISP
Your ISP knows the full details of the network you are viewing. Using a certain level of encryption allows you to hide information from intruders. After the rules of net neutrality were canceled, providers began to sell personal information of their customers to third parties.

Regardless of your location, the sites you visit, the duration of viewing content, the device you use to log in to the system can be tracked. Fraudsters can find out where you are, as well as other sensitive data.

You need to hide your internet surfing – this will help you stop getting annoying ads. Companies can collect data about your views and suggest products that interest you. To keep your connection secure, you can use VPN Service for iPhone.
This is criminal. How can they do this to us? It was a great service.
Mil Records Exposed Online; Attack on Gold Bullion Broker
I use bugmenot for websites that require an account to browse or to download stuff (looking at you Qt), it works most of the time
Audio/Video/Image encoding/decoding and crypto is about all that I can find webassembly useful for. I wonder why all the hype with it.
That makes your decisions look mediocre, you want to look bold.
You're absolutely right. From my non-lawyer understanding that's why the youtube-dl dmca mainly rests on youtube-dl showing illicit use within their code (download of copyright protected material) and not that the tool is theoretically capable. But it's indeed a slippery road.

There are other examples in the real world tho, where the distribution/creation of the tool is already illegal (e.g. certain weapons or explosives), because only reacting after damage is done is infeasible.
I'd love to see the architecture for this... Tho, I did hear they now have 200 lambdas a second firing to serve the content. That seems incorrect based on the efforts on the caching layer.

Anyone else know more?
Your personal git isn't relevant to the question.
> Lorenzo (one of the team) agreed to a commenter that IPv6 should not be treated equivalently as IPv4 with more bits.

Judging by the list of standardized IPv6 Neighbor Discovery Option types, https://www.iana.org/assignments/icmpv6-parameters/icmpv6-pa..., it seems like that's exactly what is happening. Not only does that list make it seem like RA/ND ICMP messages are being used/abused to mirror 1:1 their DHCP field counterparts, but several of those RFCs define RA/ND and DHCPv6 options together.

I'm curious: what sort of meaningful network management possibilities, beyond stateless addressing, are made practical with RA/ND that aren't with DHCPv6, especially considering that stateless DHCPv6 is a thing? At first I thought it might be easier to relay/passthrough specific extensions, but a cursory reading of RFC 4861 (Neighbor Discovery) makes me think you can aggregate these options in the same packet, in which case it would be no more easier (from the perspective of implementations) to selectively relay these configuration parameters than with DHCPv6. And if I'm also reading RFC 3315 (DHCPv6) correctly, ND is an even better DHCP as solicitors/requesters can selectively query specific options rather than the advertisers/responders having to send all options down in the same reply.

If RA/ND is already being used/abused this way, why would people dislike DHCPv6 on principle, as opposed to disliking DHCPv6 as unnecessarily duplicative (notwithstanding that it came before most of these ND options). If anything I would think such people would be advocates for DHCPv6 if they were afraid of ND becoming a dumping ground for extensions unrelated to fundamental addressing and routing issues.
> As a hobbyist in the last decades, you could learn about IPv4 and DHCP in a couple of afternoons.

The same is true for IPv6! Granted, beginner-friendly documentation is a bit harder to find, but I was able to set it up for my home network through OpenWRT in a couple of afternoons as well.

In the process, by necessity I also learned something about setting up local DNS properly, which in the end has been very beneficial also for IPv4 hobbyist use cases.

The comparison with HTTP1 vs. HTTP2 seems a bit unfair – it was never possible to write plain IPv4 packets to the network via Telnet/nc.

And if you're talking about the availability of tooling: Don't forget that IPv4 is several decades more mature than IPv6 :)
Any specific example of where the spec is loose?
> “I think the trend is clear that you almost always censor—meaning block content, fact check or label content or demonetize websites—of conservative, Republican or pro-life individuals or groups or companies...

Have we really arrived at a point where fact-checking and providing context to a claim is considered censorship?
Well I think in this case the iron is feeding a furnace so it's not going through a heat engine, it's just giving off heat.
Much of the ilegible logic behind institutional machinery is cultural. Whether you characterize it as prestige, pedigry or whatever... it's probably a gross oversimplification of what's going on.

A corporation is a cultural institution as well as an economic institution, and the cultural side is strong when it comes to these kinds of firms.

A lot of the work (or "work") that these consultancies do relates to board/investors and management's cultural machinery. Being "external, for example, is a defining characteristic. Their reports and suggestions allow management to do stuff that they're having cultural difficulties doing.

In any case, I'd posit two points. Point one is that class plays a major role in these firms, from recruitment to the culture of the firm to the value of the services they provide. This is not surprising considering that their job revolves around confidence from elite individuals. Point two is that humans still respond to class. We all know it, but have a hard time with the moral implications. We excuse. We deny. We point and scream. We create grande theories, new terms and types.
I've written code in academia in applied mathematics. If I look at it today after 4 years of professional coding, I cringe. I know how horrible my code is. I know how poorly I understood oop and how none of the things were tested. Zilch. Nada.

If I were to go back to academia ever again, the one course I am going to take is coding standards and practices for researchers. They should know basics about git, testing, ideally even a review and CI system. Given my experience in how code is handled in academia, I'm very skeptical about the quality of it and I expect to find critical bugs in them if it's written in a non-cs department. It's actually sad that we depend on the code so much for our publications, but how little attention we pay on how to do it properly. My trust went down in academia more and more when I saw how well defined practices were in industry and how it actually helped maintain a reasonable quality of code.
CSRF tokens solve this problem for free
And the i740 two decades ago. Intel does not have a great track record with graphics.

https://en.wikipedia.org/wiki/Intel740
Sameer Patil has effected a fairly amazing transformation at his farm somewhere up there I think. Take a look https://www.facebook.com/patilnaturefarms
I prefer to aim for community sufficient, rather than self sufficient. You probably won't do a good job of being entirely self sufficient. A small healthy community could be, or almost.
Take a look at this PhD thesis. It was converted from real LaTeX to HTML with LaTeXML:

https://asmaier.github.io/phdthesis

Source code is here: https://github.com/asmaier/phdthesis
Wait Github isn't open source? The irony.
Can confirm it works, looks like it uses file windows somehow. An explanation would be appreciated :D
My grandad was a small farmer in South Italy, and my parents used to curate the land they inherited (and some land they bought on their own).

Yup, it's a full time job, the land doesn't go on vacation.

Yes it can give enormous satisfaction. Every time I'm at the store buying fruit I sigh at how much fruits our grandad used to bring home, for free, it was way better than the fruit I guy at the grocery stores, and it was the surplus from the sales...
Confident, decisive and bold.

Edit: I know from experience that in a lot of sales situations a pitch that is delivered confidently, decisively (with no "It depends") and boldly will pretty much always beat a technically better pitch delivered less boldly.