skysight-inc/HackerNews huggingface dataset:
EXACLTY like that! Thank you!

So now I know of NES and Genesis implementations of this idea. That is super encouraging, I thought I was dreaming into the wind alone for years.
If You Are Looking for Reasons to Be Happy, You’ll Probably Find Them
RUSSIA is the only one who could have guessed this password!
Ask HN: What knock-off effects will happen as California businesses evacuate?
Cost cutting is a wonderful thing
Any you might recommend?
Work to elect politicians who will mobilize the apparatus of the state to fight climate change. It’s as simple as that.
Uh huh, so that means even when there's direct evidence people shouldn't believe it because it's the boogeyman argument?
Yeah and that's the kind of things that really annoy me about Apple.
I'm thinking one will be a reduction in the sky-high real estate costs.

Any other speculations?
As Obama told Romney years ago, "the 80s called and are asking for their policy back!".

American media loves their heroes and villains narratives, and the characters change depending on what is convenient. Even if Russia was responsible, would you believe them after all the other times they cried wolf?
I think the hardest part about running such "experiments" is ever knowing whether they were success or failures. Even here, we (and I doubt CDPR) don't know enough to really judge whether the tokens things helped or hurt. Or if it helped, whether it helped as much as a more traditional system. Except for small experiments that can be run many times (or in many similar departments in parallel), circumstances just change too much to ever compare apples to apples. (Here, devs may have loved this game's concept so much that they worked hard in spite of the tokens. Or didn't love the game concept but loved the tokens.)

Frankly it's why it doesn't make too much sense to veer very far from practices proven to work. But what's shown to work in a HBR studies may not apply in a different cultural landscape than the US.

All that being said, I'm sure there are many possible practices that are better than traditional approaches. It's just risky trying to find them.
Is there a similar project that releases current Android distros for post-end-of-support android phones?
That's great feedback, thanks! Yeah we also need to do a better job converting options into something readable too.
So does this attack really require "State sponsored infrastructure" to have occurred?
I think that really depends. If there are performance, compliance, or maintenance requirements for the new versions where this is being implemented, and devs are updating to, then it could be considered reasonable. You wouldn't be seeing these delays if you continue using old versions of the library. Freeze your dependencies if you don't want your dependencies to change.
Clearly only state sponsored attacker could’ve guessed that password
Pricing makes sense for enterprises. Considering that you may need a team (or a part of one) to maintain a self-hosted cluster at possibly 0.995 reliability, do upgrades, manage devs, run all the mandatory security scans, justify why some enterprise scan tool throwing errors isn't an issue, etc. Oh also justify why you need the manpower to do it, at which point your VP will tell you to just use the managed service.
Serious question: how would you know that you are receiving ALL emails from ALL senders?
Realistically you shouldn't, I work in auditing and there are very few use cases where sharing passwords is okay. But here are a couple of approaches.

- Using a password manager where there is audit logging that is reviewed and the access to the passwords is segregated to those who need it
- Using a privileged access monitoring tool such as CyberArk
- Simply creating separate named privileged accounts for each person to use is the best alternative
> What are the good password practices for handling passwords that several people need to be able to use?

The answer is typically “never share accounts” and therefore never share passwords.

I wouldn’t the surprised if “do not share credentials” is explicitly stated in solarwinds internal security policies.

Beyond the challenge of sharing strong passwords, there’s also the (important from compliance perspective) issue of losing the ability to audit who took what action if multiple people use the same credentials.
From https://www.pemberley.com/janeinfo/austheir.html:

'Singular "their" etc., was an accepted part of the English language before the 18th-century grammarians started making arbitrary judgements as to what is "good English" and "bad English", based on a kind of pseudo-"logic" deduced from the Latin language, that has nothing whatever to do with English... And even after the old-line grammarians put it under their ban, this anathematized singular "their" construction never stopped being used by English-speakers, both orally and by serious literary writers.'
Hanlon's Razor etc etc, but if I wanted to create an intentional security vulnerability and have plausible deniability, I would use stupidly simple passwords as well.
I disagree. It is NOT your job to fix any of this sh*t given the way you are rewarded and grow your career in BigCorp is by shipping new features and growing the customer base. Cost saving or optimization is barely ever an important priority in any tech organization BigCorp that wants to attract and retain talent because most developers wouldn’t want to work there - there would likely also not be delicious food in the cafes and kitchens either. Startups similarly spend money extensively to attract talent and keep them, not by being cost, efficiency and order focused.
With recipes, I suspect it depends on how the recipe is written. Usually they're quite prose-heavy, and require a lot of linguistic parsing before you start to get the meaning out of them.

It's interesting to think about, and makes me suspect that this is why I tend to prefer writing my own recipes out as tersely as possible, particularly if I know the general procedure. At this point I don't need to be told to preheat an oven or to scrape down the sides of the stand mixer, so I'll just write down things like "Creaming method, 350° in 8x8 cake pan." I might even start writing them in pseudocode now.

My partner takes it a step further with her cranberry sauce recipe; the instructions just say "C'mon."
we do not have direct visibility of how this CD or digital download is being used by gamers and which machines they’re using – the newest consoles or older ones.
My wife's school is in the same boat except they've been told they are SOL and they need to find replacements.
Ask HN: How to get RedHat to release the asciidoc source for their docs?
I wish RedHat would publish the git repositories containing asciidoc source files for their public and freely licensed (CC-BY-SA) documentation (like their LVM docs), does anyone know any of the higher-ups in RedHat who could force this to happen?

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_logical_volumes/index
“ we do not have direct visibility of how this CD or digital download is being used by gamers and which machines they’re using – the newest consoles or older ones.”
If you’re open to the spoons concept of interaction (any given person only has a finite number of spoons available for use until they need to be resupplied), there’s lots of different kinds of spoons. I have similar experiences: I’ll dread and stress a social experience until it comes, drain myself during it, then wake to find something full that was running low, something I may not have even been keeping track of.

There’s also a concept of mixed introvert/extrovert, and more to my liking a concept of introversion not being antisocial but craving certain intimate kinds of social experiences.

I thrive on a very small, somewhat malleable but always close social world. All other social demands are conditional on my ability and comfort. But my close social world can come call or (metaphorically during pandemic) hug or snuggle any time
Actual title:

Hackers used SolarWinds' dominance against it in sprawling spy campaign

Not to dismiss the point of the editorialised title here ("SolarWinds use the password 'solarwinds123' on their Update Servers") but note:

Neither the password nor the stolen access is considered the most likely source of the current intrusion, researchers said
> Neither the password nor the stolen access is considered the most likely source of the current intrusion, researchers said.

For what it's worth.
90 days prior to that it was 'solarwinds12'.
How did Solarwinds ever pass a SOC2 or similar audit? And who performed the audit(s)?
Also, never ever a 550 5.1.1 error.
This is annoying without knowing the sources. But APT behaviours are repeated, researched, investigated. This could be legitimately mapped to a specific group using details which relevant agencies don't want to make public. Not sure we can deal with it better than acknowledge this is someone's opinion and there's a chance they may have more information, but there's also chance they're playing games.
30 fps target?
Same, I was scratching my head, wondering why the author of the article doesn't just use readlink... and then a few hours later, a coworker of mine asked why my bash script isn't working on her Mac! Turns out readlink on OS X doesn't have the same flags. I ended up substituting it out for the hackier but more portable method that the article uses.
We arrived at the current prices through some A/B testing a few years back, but it may be time to re-run those experiments.
No, why? If they have special customers I’m sure they could give their special customers a complicated password to use just the same.
In case the storage is due to numerous messages and media, you have the option to limit the number of messages saved for each conversation, default is no limit I think.
You can't spread what you haven't caught.
MacKenzie Scott, ex-wife of Jeff Bezos, says she gave $4.2B to charity
Loneliness is primarily a psychological state. A person who spends a lot of time alone, and is ok with that, is not lonely. Conversely, there are people who say they feel lonely even when they are in the company of others.

Since you don’t seem to have a problem with spending time alone, you are not lonely and the purported* results of this study don’t apply to you.

*I am skeptical of this study’s validity but that is irrelevant to what constitutes ‘loneliness’.
What value does SolarWinds provide? I manage three days centers, about 4000 physical machines, and tens of thousands of VMs, switches, routers, etc.

Never had a need for anything SolarWinds provides, and we have tons of stuff in PCI-DSS environments...
What seems to have changed, to me at least, is that journalists have shed whatever veil of balance and impartiality they used to wear and have gone full fledged activist, even on the job. As such, their image is no longer of the semi-neutral third party, but just the foot soldier of the enemy's side of the culture war. Once you're there, there's no room for balance, or "tempering bias"; concession to the "enemy" is now disloyalty to your side.
Weird phrasing, restating: For individuals that want it, it's likely much greater than $1/mo in value and they'd likely pay more for that tier.

The question is how far past $12/yr are they willing to pay for email, considering free email addresses are ubiquitous?
60 fps. There's also a 4K 30 fps option but my screen doesn't support that so not sure how good it is
I ran my own mail server for 15 years. It was not more reliable than Google or Microsoft (my current provider).

> never use a service where in principle a program would do

Email is definitely a service.
The password probably hasn't been changed since they last updated the UI of Orion ten years ago.

https://www.networkmanagementsoftware.com/wp-content/uploads...
> the underclasses who are routinely beaten, robbed, and killed, with no consequences for the attackers

Most of the people I know have been beaten or robbed at least once, or narrowly escaped being beaten or robbed. In almost all cases, the perpetrators were never caught. Are we the underclass?

The vast majority of cases of assault, robbery, and murder are not carried out by wealthy landowners or the police. If you're that concerned with people being beaten, robbed, and killed, your priorities should be different.
'501@rw1nd5IZE' would be better.
Google discontinues Home Max speaker, tells you to buy two Nest Audios instead
It is not. It is only getting worse. Src: recently departed Googler.
That's not how international trade works. You can regulate your competitors differently.
Why Paying People to Be Vaccinated Could Backfire
Peeking Inside a VW Gearbox Reveals Die Casting Truths
No, it does not.

Just mathematically the thing you said is clearly false. Suppose I say that, for some system, the return to each player is a function of the number of players: r(n) = 100 / (n+1). One player makes 50, two players make 33 each for a total of 66, three players make 25 each for a total of 75. Clearly not zero-sum, but I can still move up in the world by killing someone else's cows.

One might observe that much of the world is like this; not truly zero-sum, but with payoff matrices that incentivize hurting or helping strangers.

Note that almost all traditional microeconomics is this kind of curve-following system, one way or another. I'm not saying that kind of economics is right or wrong, just that it's a very traditional model, worth understanding as a starting point.
Ask HN: What apps do you use EVERY day?
My list turned out surprisingly short: Slack, Zoom, Gmail, Notion, Chrome, Spotify.
And just so 2020 can give you a kick in the teeth on the way out the door, you can't buy any of these technological wonders unless you pay a scalper on eBay a 100% premium.
Thank you for this recommendation. My ears have been acting up again, so I ordered this as soon as I saw your comment. It took a couple showers, but I can hear again! This thing works.
For the same reason it has been the persistent narrative for the past four years.
I got serious DX vibes, but as soon as the surface is scratched you can see that it’s not an ice cream sundae but a shit sandwich.
Water does work, it is also astoundingly heavy. That is the major issue. Elegant but impractical.

It simply blows out any useful payload volume and costings because of the amount of water required. Last estimate I have seen is they would need 1,500 tons of water to make Starship radiation resistant (80% decrease in exposure). Even at $300 per Kg, about 1/8th the cost of current launches, that is still approaching a half billion dollars per ship with a significant lost of internal space.

Technical viability and economic viability are two very different things as well. This is going to be the thing that I feel will eventually limit our travel outside of the earth system.

I suspect we will see rampant use of Starship in orbit, the occasional run to the moon and maybe once or twice to Mars but beyond that. It will be just another technological lead that ends up in civilizations recycling bin.
Three data centers, 4000 physical machines, tens of thousands of VMs, switches, routers, etc...

Never needed SolarWinds, and we'll definitely never entertain them now.
That seems plausible. Music is written to be read in that way. Writing and sight-reading are a sort of symbiosis. There are no subroutines or abstractions. And a good reader recognizes a lot of patterns by familiarity. There's stuff that goes straight from my eyes to my fingers while I'm thinking about something else. But if you write some completely random note pattern or rhythm (or both at the same time), I might be in trouble.
Yeah, they would have been better off pulling the (metaphorical) plug—maybe block incoming traffic to port 25 or something—until they had this fixed.
There's a lot to hate about dotnet -- The lack of documentation on how to configure .csproj properties without the VS GUI, how convoluted and opaque everything is, the sketchiness of nuget, etc. ad nauseum. It just smells like Microsoft.

But I love love LOVE how much it is used in commercial/enterprise software!!! I can fire up ILSpy/dnSpy and get an easily readable csharp disassembly from basically anything. It makes reverse engineering such a joy! For this reason dotnet has become my #2 language over the past few years.
Normally when the game starts with a character creator, I expect a lot more agency. Instead, V seems to have a well-established character, and the dialog options just serve as additional flavor to their established character.

Also, can we talk about how atrocious everything involving driving is? The AI, GPS/pathing, handling, etc is all well behind what GTA IV was doing over 10 years ago.
This is depressingly familiar. I can't tell you the number of times I've got an error, searched, ended up on StackOverflow reading the answer, full of stuff I have no knowledge of. Get to the end, it was answered by me. More than twice.

Seriously.

I'm now more obsessed with documentation and the kind of code structuring you mention and have come to hate, viscerally, projects that lack documentation.

As a potential aside, I once took a course in ASP. We had a bit of time before the class started and the tutor had a chat with a couple of us. Some huge government projects were in the news for having failed and gone well over budget. He told me he'd worked for the company behind them and that they used to obfuscate the code just by stripping out all the comments so the government had to keep going back to them for work.

I think of that any time I hear "but the code is the documentation"…
It would be nice to know if they did or if it was ever required of them.
I previously put together something like this, but my only gripe was having the usb cable hanging down to an outlet to power the whole thing. I tried a solution by scrapping the Pi, using a nodemcu with a portable power bank and putting the node in low power mode and only regularly coming on to check for updates and to update the thermostat state, but then it became just another thing to charge, so I scrapped that too, maybe a revisit is in store.
While, unlike many other people, I do _not_ believe Trump is an idiot, or even dumb at all, I do not believe he has any knowledge of how to stop the internet even if he wanted to.

Plus, how would he send tweets if no internet? I think he likes being able to use Twitter more than he likes being President.
Why do you think people who are undoubtedly smarter and more original than you are also buy into political "teams"? If "conformity" is your best answer, then once again, this demonstrates you don't really grasp what's going on.
Are there no sensors that natively see in colour without the filter matrix over the top?
AWS IoT Core for LoRaWAN to Connect, Manage, and Secure LoRaWAN Devices at Scale
I think the programming analog of sight reading might be following along with assembly language or other low-level or simple imperative code while mentally tracking basic stuff like register/variable usage and control flow. Sight reading music doesn't involve real-time analysis of the broader abstract structure of the piece. That's not really applicable to high-level code making heavy use of nested abstractions or non-imperative paradigms.
This is a wonderful thing to do. Wish Bezos competed her in donations, now is the time when a lot of Americans are in need
Haha what a smart idea
First time I ever had to leave a comment surrounding the HN Guidelines, but "Please don't use Hacker News for political or ideological battle. It tramples curiosity."

Just today you wrote "[...] Russians, you're a fucking Trump supporter!"

HN is the best and I'm sure you agree. Please take it easy with these kinds of comments.
As someone who works as a leader of a tech team building a financial engine, from my personal experience. When teams are doing overtime it means some bad management happened somewhere. Either someone under-estimated the scope and was never adjusted / communicated, or someone couldn't keep promise of not changing things as a result the developers and final product suffer.

Software projects are very difficult to estimate. Especially when you are building 'one of a kind' products. How do you give an estimate of something you've never built. You may know how efficient your team is at building a past product but you do not know about the upcoming problems you will face when building something new.

After working on a project for sometime you have a better idea and give better estimates however pinning 'deadlines' on a 'one of a kind' product never works out.

This is just another one of those cases. They should have just released the PC version first, and the other consoles could have come later. It would have been a better release for everyone and a better product.

Having engineers work overtime also is generally quite bad. Engineers are humans they get tired, when they're tired they make more mistakes. I guess it shows very clearly in this game all the 'mistakes' the developers made.

How long did they spend making this game? And to rush it at the last minute to hit a 'deadline' and to have an outcome like this. Was it worth it?
> If they fail to deliver in the next 12 months, future sales will be bad.

Citation needed. In my experience gamers are very quick to forgive and forget a bad game and will still line up for the next hyped release from the same publisher/studio.
I do get slightly tired of those. They seem less common than the poster's question (at least lately). However, many of those have questions fo have more specific criteria, like the individual's skills, experience, and location. Not quite as general as "what can a programmer do about climate change".
The 'turn off the computer and go talk to the family' game.
Think about an API like a control panel for a machine. It is precisely designed for an operator abstracting away the details of the machine's electrical schematic and every component. It is user focused. GraphQL is like opening up the entire machine, stripping off the panels and working on live circuits.

IMO GraphQL is great to quickly develop something. If your front-end is making 18 queries to REST API and you're making a case for how awesome GraphQL is, I think perhaps your REST API design needs to be properly thought out. I personally like to start with GraphQL, once everything is ready and I know what I want, write proper API endpoints. They can be REST-ful or REST-less. One API call for one function the front-end needs to perform.

If the wiring in the machine changes and need fancy brushless motors are added, the operator doesn't need to worry about it. They can always replace the control panel with a new v2 version if they want additional features, but we guarantee that v1 version will continue to function. This is beautiful design.

APIs don't have to be REST-ful and they should not be some kind of an analog of the backend database schema. API - it is in the name, "Interface".
It’s not my review, that’s why I added a link to the source review.

I have previously preordered the game for ps5, however I’ve returned it
That's actually the most secure password they could have chosen. Who'd suspect that a security company would use the simplest of passwords. Dumbasses wasting time trying to crack a secure password, hah! /s
Throwaway here.

These kinds of passwords are all over the place. Cisco uses a simple variation of c!sco123 for a lot of it’s managed gear which is a documented default that doesn’t get changed.
Ask HN: Mattermost vs. Element/Matrix as self hosted team chat?
Looking for comparisons between the two from people and organizations who have tested and implemented both. Regular solutions like slack, teams, google chat/meet etc are off the table.

Needs to be fully self hostable and open source.
Show HN: Accessible Covid19 statistics for the blind and visually impaired