skysight-inc/HackerNews huggingface dataset:
The tweet with the spec talks about USB2.0 devices, so it's probably not as sensitive as higher speed 3.0+ device would be (just guessing here)
From a reply the poster made in that thread:

"So, we have backups on an encrypted drive, which we can't access (authentication is done via our custom ERP software, which is down as well - in hindsight, a very bad idea). And the backups don't work. We can rebuild the DNS servers from scratch, and the records are probably still safely stored somewhere inone of the 3 different databases our ERP software uses, but we don't have an authentication key or the scripts used to pull the DNS domain / record information from the ERP system anymore. The API's are undocumented, and there's only one key that can access those records."

Elsewhere, they say that two years ago, they found they were unable to restore from backups...
For anyone wanting to read more about the need for and benefits of electrifying everything (the ones in the home being cars, clothes dryers, stove/oven, heating/cooling, water heaters, etc) check out https://rewiringamerica.org

They have a lot of technical details of how much carbon it would reduce, how many jobs it would create, how much it will cost, and how to do it on the time-scale necessary to stay below 2 degrees warming. It's really inspiring.
I know it wasn’t mine because we still have one guy who knows how everything works :) (unless he quit over the weekend oh crap)
Mitsutoyos are in a class by themselves. None of the cheapies have absolute positioning.
These kind of posts are awesome tabletop scenarios. (and fuel for https://twitter.com/badthingsdaily ) Coming up with potential fixes is a good exercise.

Things I would do that I haven't seen mentioned yet:

- Grab images from the relevant servers to have current backups before messing with anything.

- Try tcpdump-ing and decoding the custom KV protocol - other databases are complicated, but things like memcached/redis/... have trivial wire protocol. Maybe it's possible to recover some data by listing all entries.

- Run `strings` on the KV binary or `file` on the data to make sure it's not just some open source project with a proprietary interface. With any luck it's just something like bdb that can be accessed externally.

- Hook up a debugger to the KV and try to recover the keys (or maybe just strace to see if they keys are in any files)

- Start tcpdump on the old DNS IPs. They mentioned they have no idea which domains they own anymore - as long as NS on customer domains wasn't trashed as well, they could collect queries coming in and recover a list from there.

- See if the customer domains can be collected from billing data / some email store of notifications.

(as much as I try to design for no disasters in production, the rush of "this is so FUBAR, what insane thing I can do to fix it" for me is an amazing feeling :) )
You can not make any of these comparisons, Bulgaria is a very special country.

1-Prime minister is a thug and soon to assume dictators role.

2- Population is in HEAVY decline, unlike most places.

3- Most of the educated people emigrate abroad, and never return, in result the remaining population is mostly in "risk group" .. but it is not a group if its most.

4- 10% of the population (romes), do not count as Bulgarian and will not be vaccinated, so that is also a huge problem.

And most of these factors are due to culture/mentality problems, that stem from within.

So yeh. Bulgaria is not comparable to other countries
> Is there any story about anyone affected by the issue? Does this issue even exist

Yes. Yes it does.

Imagine, a web site that has a query parameter with a secret (password reset pages, email unsubscribe, custom feeds, etc). Any images or other assets used in the page will receive the full URL as the referrer, so they can see those secrets.

GitHub fixed this very issue a few years ago. They have a feature to get custom RSS feeds for user activity. There is a secret worry parameter in the URL, and any third party images were receiving that full URL.

Referrer-Policy header is already supported in many browsers.
The Guide to Custom Bidding in Display and Video 360 (DV360)
With this one, you can write granular shared states (multiple "entities") without creating layers and layers of Context Providers in your component tree.

Since data is not encapsulated inside React component tree, I found it to be multiple times faster than when using Context.

And one thing that's perhaps the most obvious... it's simpler because you don't have to use Providers at all.
Interestingly, some of these legacy systems run on things like IBM i (AS/400) which have an easy backup story and vendor support for recovery. I can have a new i machine receiving a backup and deployed fairly quickly (day or two) and I'm out in a rural area.
At least then the insertion effort is O(1): you know in advance it will take two tries. Even that is an upgrade over pre-C USB, in my view.
Ask HN: Bought shipinpublic.com, now what next?
Hello,
Hope you're doing well.

As I shared in the title I bought shipinpublic.com domain. All I know is coding and making. so can you suggest to me that what should I make here that can help you or other makers out there?
The only sharing is for large binaries (>64 bytes)[0].

Like all messaging mechanisms, this can be handled by passing a reference or id, and the receiver fetching the actual large data from db/file/source of truth.

[0] - http://erlang.2086793.n4.nabble.com/how-message-size-effects...
Common cloud problems and how to fix them
The problem is you are thinking about making money as the goal and content creation as the method.

Most of these people are thinking about content creation as the goal and making money and an unfortunate side requirement.
RFC-1945: Because the source of a link may be private information or may reveal an otherwise private information source, it is strongly recommended that the user be able to select whether or not the Referer field is sent. For example, a browser client could have a toggle switch for browsing openly/anonymously, which would respectively enable/disable the sending of Referer and From information.

So not sending referrer has always been fine, and I suspect that firefox will have an option to enable the sending somewhere in it.
According to Wikipedia [1] the "Referer" (sic) HTTP header is an optional one so I don't see how they are breaking the open web by sending less data in it under some circumstances.

[1] https://en.wikipedia.org/wiki/HTTP_referer
The problem isn't that there is "one desktop" for Linux but there there "one thousand desktops" and none of them are any good.

If there was one they'd have to fix the bugs, but because there are thousands people move to the one that fixes problem A, but problem B is broken, etc.

A pet peeve I've had for a long time is that most Linux desktops have a 'devil may care' attitude about font metrics, so that labels are often bigger than the space allocated for them, overlap with each other, etc.

Lately I was digging into some old Word documents and that got me looking into the internals of how Win95 graphics worked (this is enshrined an a "windows metafile" format) and found the font selection, metrics, etc. from Win95 are pretty advanced compared to what people use today, and that's got something to do with why you could make applications with Visual Basic and have the controls and text render properly and why off-brand knockoffs of Visual Basic for Linux and other OS have never been a thing.

Personally I really like the option of a "big Windows machine running a Linux VM with NO X Windows" that way you get a GUI that works (like you can find the scroll bars for your IDE) but just ssh into an environment of 100% POSIX Goodness.
Apple sells about 20 million Macs a year according to this: https://www.statista.com/statistics/263444/sales-of-apple-ma...

What percentage of that is possibly due to folks buying Macs just to run Safari? Pure speculation on my part but I don't believe it can be more than a percentage of a percentage.

Was there a sudden increase when the Windows version of Safari was discontinued in 2010? It's hard to say exactly, because there are an awful lot of factors involves in sales numbers, but I don't see any evidence to suggest that's the case.

Also: think about your average dev or dev shop that buys a Mac just to make sure their stuff works on Safari. Are they buying a shiny new high-margin Mac? Oh heck no. They're buying the cheapest possible new Mac or, more likely, they're getting some cheapo preowned Mac. Or perhaps even more likely, they're using a service like Browserstack.

They wouldn't shoot their entire web strategy in the foot just to sell some negligible additional amount of Macs per year.
HomePod mini reportedly includes room temperature and humidity sensor
Deemed as optional is a synomim for dropped to any compiler that is yet to fully implement them, as they aren't required to support it for ISO C certification.

Several commercial compilers for embedded development, mainframes and surviving UNIXes, VC2019 since 16.8.

Additionally ICC apparently never supported VLAs that well.
Can’t you just pull the drive from the failed server, extract the DNS entries and build a new DNS server? It doesn’t sound like everything is broken, just that it is failing because the DNS server isn’t answering. Just install Linux on a new box and set up a DNS server on it. It could be done in a day I would expect. Or am I missing something?
Supercharged paperless: scan, index and archive all your physical documents
I would have liked to personally drive a cattlerod through Epstein's brain, and yet I don't think there was anything wrong with Stallman's comments. How do you square that? Maybe you have not properly characterized the situation.
Hmm, I came here for a discussion of the history of the security identifier... https://en.wikipedia.org/wiki/CUSIP
> People seem to believe the magical internet economy will make you rich

This is the entire founding belief of YC (and a huge swath of “VC culture” and Hacker News in general).

Look at how many “businesses” promoted here have no meaningful revenue and no real ideals for how to monetize.
Tool to decide contracting vs. full time employment for distributed teams
'Discover Three.js' put on hold, probably permanently
> My government has been caught lying over and over “for the public good” [...]

I just see decades old, one time events completely unrelated to the current government.

> We literally have laws that the press isn’t free to talk during the pandemic.

[citation needed]

> People don’t trust doctors and politicians, simply because they have been shown several times to not be trustworthy.

French people don't trust doctors because France in one of the leading countries in homeopathy, osteopathy and various quackery spending. Half of the typical pharmacy's stock is a healthcare scam. French are also the top antivax population in the west. [0] So it's hardly surprising that the average Frenchman's perception of what a sound healthcare policy looks like is absolute bonkers.

French people not trusting doctors is not a consequence of bad medical practice, but a symptom of something else. After all, French healthcare routinely ranks in the top 10 in the world, and often top 1 [1].

Then Macron arrives and removes homeopathy from the social security reimbursement program because it lacks any demonstrated effectivity and loads of French people complain. [2]

The government is far from being perfect, but in this particular topic, I'll side with it, thanks.

> The only remedy is not to take more or less precaution; the only remedy is to start being trustworthy, having open science, having a talk about the risks, and not trying to slander or sue people who have opinions that are not approved by the nomenklatura. As a reminder, the Ordre des Médecins has sued Dr Raoult for “violating fraternity”. The rest of the accusations I’m not a doctor, but “violating fraternity”? Is that science we are talking about, does physics include “follow whatever the group says”?

Since his rise to fame, Raoult has been charging 1264 € per consultation, many of those for prescribing a hydroxychloroquine treatment [3]. C'est quoi ça, conventionné secteur arnaque ? Excuse my literal French but the parent knows what I'm talking about. Those rates are roughly 15 times what a well-rated specialist would charge after decades of practice.

That's leaving aside that his hydroxychloroquine fixation is unawarded as it's been shown again and again that its benefits, if any, are very small.[4]

Raoult has been doing a pump-and-dump of his medical career to retire comfortably, and he's masterfully catered the contrarian sector of the French population to do so. It's textbook medical malpractice. The damage caused by him is to be picked up by his colleagues, so, yeah, that's "violation de la fraternité".

[0] https://www.marketwatch.com/story/this-is-the-most-anti-vaxx...

[1] https://worldpopulationreview.com/country-rankings/best-heal...

[2] https://www.france24.com/en/20190710-outrage-france-govt-can...

[3] https://www.ladepeche.fr/2021/03/09/covid-19-des-visites-de-...

[4] https://www.thelancet.com/journals/lanrhe/article/PIIS2665-9...
It’s unacceptable that people building their own channel/brand/art have to work nights while doing a day job?

This is normal. Life doesn’t owe you success. You have the suffer and work hard if you want more than a day job. Or move to somewhere with low rents and eat rice and beans for a few months, that also works.

Success isn’t guaranteed and certainly society doesn’t owe you it.
Fair point - in that case I suspect that would be highly dependent on whether there are any assets remaining in the company and how the local legal system treats employees as creditors.

Mind you - if the company is going down the tubes they are highly unlikely to enforce any job contracts.
I'm in Iceland for 6 months on their new teleworker visa. It took a couple of months to get, but it's pretty straightforward: https://ozar.me/2021/01/whew-we-got-iceland-teleworker-visas...
If the referrer header contains the full URL from which the user came from it could contain something the user deems private.

Imagine that the URL contains a search string that contains something the user might deem private, or the article is about something a state may deem to be illegal, etc.

This may not be PII but it could be deemed private by the user. The user should be in control of what information could be given to a website. Imagine a scenario where a person is a member of a group that is looking for equal rights in a country that is very much opposed to this. The group uses a tool that happens to make it clear who this group is. The group then links to an article about their cause or similar. Now that country could potentially link things together and demand information about everyone in that group.

It's amazing how little bits of information about you can get you in hot water.

This is a good move imo, and I'm glad that Mozilla is trying to plug these types of things. It's better for everyone.

As an aside, moving to a privacy oriented browser could very well get Firefox more users. Just like Apple's play to being a private and secure mobile OS is getting them users.
3D-Printed Tiles Are Being Used to Restore Hong Kong's Fragile Coral Reefs
This is true of electrical power outlets (15A/20A), HDMI, schrader valves, RJ45 (this one especially!), and many other things in life, and I don't think it's very fair to pick on USB-C in this manner when it does so many other things much better than previous alternatives.
Its encrypted and the encryption keys are lost.
> there is (to my knowledge) no single C++ feature which makes up the majority of its complexity over C

Maybe template programming?
> I got dozens of death threats when I built an AP search

Do you have any idea why? conspirologist in me says, this could be targeted attack by FB, Twitter to slow down decentralized movement. But I don't want to give my inner conspirologist take over my mind.
You should sue the LTO tape conspiracy that means you need to spend $3000 to back up the contents of a $300 hard drive.
SFW relevant video https://youtu.be/jJ6GPabvSfY
Who exactly was responsible in a company for the company's profits going up by 20% in a quarter.
Wonderful news!

I recall https://guix.gnu.org/blog/2019/joint-statement-on-the-gnu-pr... happening at the same time as the FSF incident, which fortunately didn't pan out.

It felt to me that we were attempting to purge a man from his life work, for...What? I'm still not sure, a vague allegation of alienation of a hypothetical future user base.

I found the whole thing distasteful, and moved away from guix as a consequence. I do in earnest hope they rescind their statement - if nothing else the timing of it was terrible, like they were jumping on a bandwagon.
And just a reminder that it's always a good idea to set Referrer-Policy regardless on sites you own.
Show HN: Task is a task runner / build tool / alternative to Makefiles
I meant the Amstrad Spectrum +3 one.

I was envy of a friend that had one due to CP/M support.
A physical manifestation of Instagram filters!
Certain kinds of civilian reactors produce plutonium with large amounts of higher isotopes, but (1) it's still possible to use that stuff in bombs, with boosting, and (2) other reactor type produce plutonium that's better than weapons grade (for example, fast breeders with a breeding blanket region around the core; the Pu from that blanket is almost entirely 239Pu, and remember that scaling nuclear to supply world energy demand will likely require breeding.)
How about adding some search functionality? First, I was thinking that the "Subscribe" form is the search form.
Which is the issue here. An event that should be rare is not rare among AZ vaccinated.
Here's a practical reason for doing this.

https://shkspr.mobi/blog/2018/01/mailchimp-leaks-your-email-...

A few years ago, I discovered that referrers from MailChimp let you unsubscribe people from lists, and see their email addresses.
Doesn't this just push people to more tracking cookies? How are sites supposed to know what sources are driving their traffic? Whether visitors are coming via email campaigns, google, etc?
So I have to give props to Twitch here. Twitch literally created an ecosystem and a culture of supporting creators that 99.9% of whom could never be supported by ad revenue alone.

But what I find with all these creative professions is an undertone of... desperation. A lot of people seem desperate to be famous. It’s kind of sad.

Thing is the majority of wannabe Twitch streamers (and this includes YouTube) just aren’t entertaining.

I think they see the top 0.1% and say “I could do that”. What they Do note may be easy but getting there wasn’t. People don’t seem to see the years of building an audience and luck among the way.

Too many people now just see solar signs. 10 years ago (at least on Twitch) it wasn’t a profession. People did it as a hobby.

I imagine this is similar to other fields like acting. So few people are professional actors. The vast majority are working casual jobs for years hoping to get their break and most won’t ever get that break.

At least With field like dancing there’s a barrier to entry. Dancers train for years.

A lot of YouTube creators don’t have any skills. They just want to be famous based in their looks and their lifestyle. That’s the worst kind of fame seeker (IMHO).
To me it sounds like those people who left can command a very high day rate to help with the immediate aftermath. A high enough rate that even if they are doing hours elsewhere some will be tempted to sign in after their work hours to help out.

A company does not just stop existing or being able to function, deleting DNS records didn't empty the bank account or the ability of the accountants to be directed to pay someone... there are lots of options.
It would work if they knew what the DNS entries were but seems they lost all DNS records and don't even know what records they have/had, so spinning up a new DNS server won't help as they don't know what it should serve.

> All domain information was wiped out and records became null [...] Our records are wiped from all domain servers out there [...] We don't even know what domains we own, the listing was hosted in the ERP which is now busted
> Most applications of political correctness focus (at least on the surface) on defending a marginalized group against the verbal attacks of a privileged one.

I dispute the idea that PC is mostly defensive in nature; rather it seems to be overwhelmingly offensive, targeting people who frequently aren’t even in advantaged groups themselves. I would also suggest that Jews are treated pretty badly by the PC folks, as are Asians (although #StopAsianHate in the wake of what appears to be a non-hate-crime has been a convenient bludgeon).
I suppose it matters why you have rate limits. Just to have them? As a soft failure case before hitting some harder boundary, like memory or fd exhaustion?
> Elsewhere, they say that two years ago, they found they were unable to restore from backups...

So their business actually failed a couple years ago, and they have only noticed this month.
Whoa that is really close. Isn’t it common that lava will be ejected much farther than that? Or does this volcano have a particular known pattern already?
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...

You can combine CSP it with SRI hashes and also report violations to the backend.
Play with OTT Recommendation Engine [Entertainment] URL
Only some revolutions involve unfocused rage at existing norms, and they’re usually bad ones (like the French Revolution).
Surely you meant to say:

> but the fact that others don’t allows them to micropay for a lot of content with their time.

I'm not objecting. I do the same. But in what sense are you paying? I'm sure I'm not.
> The only sharing is for large binaries

Can you also share small objects by reference? (I.e. prevent serialization of a large tree composed of small objects)

And refer to those objects through pointers (avoiding an expensive db layer)?
The real warning is this one: Disable any third party tracking scripts on all user account pages. Assume they are hostile party's attack vector.

If you want to retarget me on FB, fine, do it on a marketing pages of a website, but don't let the trackers anywhere close to my private data.
I believe to properly conform to the USB specification, the device must be tried one way, tried the other way, then tried the first way again before it plugs in properly.
Thinking you're fucked is unhelpful, but it's pretty normal to go full Alien Hudson in a dire situation and need someone else to assure you that things will be okay.
> You may live in a democracy, but we don’t.

France is not a democracy?
Are the CTO and sysadmins liable in such scenarios? Can they be sued ?
COBRA still applies if you leave voluntarily.

Source: left voluntarily
It's troubling that companies don't see this as unethical at best.
It sounds like you may need help, and I hope you find it.