skysight-inc/HackerNews huggingface dataset:
Zuckerberg certainly has the benefit of having parents a few standard deviations above the mean who could afford to send him to a nice school a few standard deviations above the mean and coming of age at exactly the right time that the internet was about to become ubiquitous.

However, compared to others, he is pretty self made in the sense that he did the grunt work to create his website and get it off the ground. Obviously, almost no one vaults themselves to the top with zero help, but Zuckerberg is a far cry from someone who inherited a trust fund and then placed various bets hoping to hit it big by funding someone else's work.
> Basically the attack vector from them is polluting the Tor nodes (so that they control enough of them to understand information), timing attacks on onion services to figure out locations of people accessing the hidden services solely within in Tor, as well as undeclared exploits, and feeding local law enforcement around the globe the information about you.

Nicely explained, and AFAIK, pretty much correct.
I can't imagine that there isn't a market for this. Look at the number of people recommending Ubiquiti stuff to each other. There are entire YouTube channels dedicated to it. If your whole living space or small office can be covered with a single access point, get a 3-in-1 combo that has a WAP, a router, and a small switch. But if you don't, you are left with, what exactly? There is also some demand for mesh stuff, for people who rent and don't want to run Ethernet cable.

My plan: OPNsense on a PC Engines board for router + firewall, an unmanaged PoE-providing switch for switching, and something from 2-8 WAPs for indoor/outdoor Wi-Fi.
yep but not with Raspbian and the community, or wifi, or ...
‘Lighting a fuse’: Amazon vote may spark more union pushes
They seem to have gained access through getting secrets from developers as far as I understood it.

So with 2FA they would have had a much harder time to gain access to the database.

The part of changing the seed only matters for customers of the hacked company but is (as far as I can tell) unrelated to them gaining access.
Have you seen the new firefly rk3568 offering? They have lots of I/O including an M.2 slot and SATA port.
I wonder if there’s a sweet spot for verbosity or if it doesn’t really correlate with bugs or productivity. I end up thinking about this pretty regularly.

For example Kdb/q has always fascinated me, my initial reaction was that encoding meaning into fewer symbols surely causes cognitive overload and promotes programmer failure, and yet i saw some python code written by a quant converted to q by a kdb developer. The original python was well written, it relied on pandas and numpy but all fairly garden variety stuff.

The q had exactly the same behaviour except some small changes for data ingestion. Around 500 lines of python, 16, not a typo, 16 lines of q. The performance comparison was absurd too.
As far as I know, TP-Link doesn't require any cloud based service, or even a local controller. They can work fine without any of it and you just manage them locally/directly.
There are toddlers running amok in government! At least this time we're not talking about the President
My personal rule of thumb is that I don’t trust anybody whose Twitter profile picture is a photo of themselves.
Europe here.

I have been driving an ID3 nearly every day since a month or so (don't own it) and I absolutely adore the car. It's both simple and full-fledged at the same time. Voice-control is hot garbage but other than that it's fine.

Disclaimer: I never drove a Tesla Model 3 before, but a few other EVs like the BMW i3. The VW ID3 feels like a genuine high quality car - as if the Golf simply reached a new era.

BMW's i3 always felt like a weird toy and the Renault Zoes I drove where just an electric replacement for Smarts which are now electric too. I can see myself sitting in an ID3 for a longer trip with a nice charging pause.

I would never even dare take a Zoe on the Autobahn or an i3 aside from a handful of kilometers. ID3? No issues here.
CT is ambiguously defined and complex in theory and practice. While analysis and evaluation of selected novels is intended to enlighten perspectives idk that curricula is rational or skeptical based on reading lists. Maybe an effect on bias.

It’s been awhile, but would wonder how unbiased today’s history books are. I can’t see the State of Texas board being nuanced about the Alamo.

I can see a rural district where teachers/schools have much more control over curricula, so enlightment or indoctrination is easier to influence. I dont see this scaling to large administrative/measurement bound districts. How does one test to CT outside perhaps secondary effects of STEM or AP results? It does appear that higher percentages of students are taking AP tests though.

Being educated by Jesuits, we started with Socrates/Plato. But looking at my classmates FB feeds I don’t see any evidence of sober CT skills. Skepticism is a synonym of conspiricism in today’s generations. Biases are polar bound.
If you don't have remote access enabled and aren't running their surveillance camera software, it is not clear to me that there is any risk to the customer from this event (outside of the source code being used to generate new exploits). It doesn't sound like the attackers were able to abuse automated firmware update functions, and losing credentials to a UI account has no impact on users running cloud key locally without remote access enabled.
It's probably considered Consciousness of Guilt.
If they collaborated with Russian Strategic Command to re-enact the Zero Wing meme, it would be comedy gold. Beyond that, no clue
Love this! Great article!
Yes, more people who want to, can do the job today without needing a PhD.

However, most of the people who want to do the job want to do it because they heard Google pays six-figure salaries for it. But Google pays six-figure salaries for the job because it takes a PhD to do it right. When the job becomes a job that everyone can do, Google won't pay six-figure salaries for it any more - to PhDs, or anyone else.

At that point, once more, you'll need a PhD to do a job that Google pays a six-figure salary for.

The goose that lays the golden eggs gets killed over and over again. Some people get in early and get a golden egg. The rest are left to suck ordinary eggs and accuse the others of cheating.

But, who was it who killed the goose in the first place?
Isn't enough to just disable cloud access?

Edit: I got upvoted by somebody, but as an UI user I'm genuinely looking for an answer. If it's still possible to get inside if devices aren't connected to UIs cloud.
Personally, I think my brain gets tired of having to filter non-stop PR. Actual engagement would be fantastic though so as much as that exists I’d claim provides a good potential.
With TP-Link you can run the Omada controller for their EAP line on a local device (I have it running on a Pi4).
It’s definitely still pretty big for the reasons others mentioned as well as the growing popularity of indie 18+ material (whether it’s photos, videos, or art) on sites like Patreon. If you pay for something like that it makes sense to save a copy in case you unsubscribe later or if the creator deletes their account.
Yes, the point of the rules is not that you can just skirt the edge of safety.

The intention of the rules is that they be easy to understand, easy to follow, and you won't be in danger if you mess up a little bit.
That's basically what MikroTik CAPsMAN is, depending on your needs.

I think it's specific to Access Points, so not a general purpose centralized controller for MikroTik equipment, but... centralizing access point management seems to be the main thing under discussion here.
What you want is a 'bottom' class (as opposed to 'top' = Object), not null. Essentially, a class that subclasses everything to indicate some problem. Look at how 'null' works: the class of 'null' (whether it can be expressed in a language or not) is a subclass of anything you define, so you can assign 'null' to any variable of any class you define. This is how 'bottom' works, if you want it as a class. But you already recognise that this is not really what you want: you want specialised sub-classes representing errors of specific classes you defined, which are all superclasses of a global bottom class.

Such a system can be done, but it is probably super ugly and confusing. The usual answer instead is: exceptions, i.e., instead of instanciating an error object, throw an exception (well: you do instanciate an error object here...). That works, but if overdone, you get programming my exception, e.g., when normal error conditions (like 'cannot open file') are mapped to exceptions instead of return values.

The usual answer to that problem then is to use a special generic error class that you specialise for your type, the simplest of which is 'Optional' from which you can derive 'Optional<MyType>'. You can define your own generic type 'Error<MyType>', with info about the error, of course. I think (please correct me if I am wrong), this is currently the state of the art of doing error handling. It's where Rust and Haskell and many other languages are. I've seen nothing more elegant so far -- and it is an ugly problem.
It's a problem without an easy solution. There are some cases where you genuinely want to couple fields together basically all the time (e.g. a database driver, address, etc. into a "DB" object) but there are many more cases where you want to couple fields together 80% of the time. Those are the hard ones to deal with - separate your fields, and you need to do a lot of redundant work, but if you combine them that can be a pain to unravel and slow down your loops.

Julia's multiple dispatch is really helpful here, because you can e.g. write one connect_to_db that takes a DB object, and another that takes a string. I've found this flexibility to be surprisingly helpful, it completely takes away the tradeoff in many (not all) cases.
>The problem is that on-prem isn't much better in many cases. Only the largest organizations have the capability to operate deep defenses against these threats whether it's the cloud, or the on-prem.

One of the truly sad things about all this though is precisely that UniFi made this a lot easier for small orgs and even individuals (and could have gone even farther). Stuff like VLANs and RADIUS became dramatically more accessible "for free", using just what was built-in to a UniFi stack someone might get anyway. Back when they were still more competent Ubiquiti added management VLAN support across the lineup, and the setup is fairly intuitive and then just works. At one point I'd hoped they'd continue in that direction much more. It's not some impossible thing, it mainly just needs better UX putting the pieces together in a graspable way. Graphical VLAN topologies and point-and-click, automating all the certificate authentication/signing stuff, the generation of profiles for onboarding, all the components for this stuff exist right now just not, well, unified.

I think a lot of places don't want to in fact, because they'd rather push cloud ties since that can yield subscription revenue.
The last time I had a "work-laptop", I was fired (for boring reasons) suddenly and without prior notice, and had to immediately hand my laptop over. I wasn't even allowed to go back to my desk and gather my things, because the HR manager at that time was so paranoid.

I'm pretty confident I didn't have anything personal on there, but just to be certain I wasn't leaking passwords, I did a quick

rm -rf ~ &; disown

Point being: employers have all the leverage over their hardware, and you never know how or when they will use it. Encryption is your friend.
James Dyson launches new Dyson vacuum cleaner with laser technology
This is just hypothetical, but the go statement could be an expression that returns a cancel function. From there, the sky is the limit. And in the other side, have a runtime.Done function that returns a channel that will need closed when the said cancel function is called. There are a bunch of other runtime functions that are goroutine specific already, so there is precedent
> Plus firmware updates area always an adventure.

To somewhat eliminate the chances of adventure, I’ve profiled the setup for each of my many OpenWRT devices and created unique profiles for them in a (reasonably) simple Git repo[1].

All I need to do to get device-specific firmware is to update the OpenWRT version-number in a single makefile and the rest happens automatically.

I’ve even setup Github Actions to build the firmware for me (basically, run make), so I can even get/build new firmware from my phone.

I’ve yet to have any issues when flashing these builds. It used to be much worse when flashing the regular “official” OpenWRT image and restoring packages afterwards.

Couldn’t be simpler! (With the regular Linuxy you-have-to-build-it-yourself-first clause)

[1] https://github.com/josteink/openwrt-build
Canada didn’t write that, it was their social media account manager, which might be outsourced to a firm.

It might even be the same person who manages the United States account.
A problem I had and I could not find a solution (maybe someone could help me).

I want to show a button for the user to click. I respect my user and I want my button not to be too big or small, I would like it to be equal or similar to his preferred button size he configured his OS to use. If you search for the best practices you find studies that say that on mobile the button should be maybe 10mm real size , but good luck setting a css dimension on the button that will ensure either this default size on all devices. IMO there should be a css value for preferred font size and preferred touch button size so you don't get at the same time complaints that the button is too large or too small. (I do mostly bgackend so maybe I missed something when searching, maybe there is some hidden trick to do this...and I am referring at mobile devices)
A potential option for anyone wanting to avoid buying new hardware to move away from Ubiquiti management software: https://openwrt.org/toh/start?dataflt%5BBrand*%7E%5D=Ubiquit...
It turns out to be a difficult question to answer as to the number of FLOPs of the Pi 4 GPU, see here: https://www.raspberrypi.org/forums/viewtopic.php?t=244519

But it does appear the the GPU has perhaps 2x to 5x the FLOPs of the CPU, albeit with not much in the way of APIs to actually use it.
I don't get it. If I'm competing with someone, and I tell on them for cheating while not cheating myself what do I lose if they don't get burned for it?
I never did quite master what the Germans do with their "n"s. I live near Washington and can never quite master their pronunciation of that, either.
I agree, I have enough bad experience with on-board NAND from other SBCs; it's no fun at all.

The SD cards are nice for most use cases, but on some boards I'd really like to see a SATA port or M.2 slot which can be booted from and a x4 PCIe port (even if through an optional board or a HAT).

I see the SD cards on the Raspis as modern floppy discs. They are good to have, but not ideal for some cases.
On the other hand, if the child had been a little bit older and thought it would be funny to tweet, "we have launched a nuclear strike on North Korea," or something, I'd imagine that we might be looking at this differently.

I don't blame the social media person, but I am pretty surprised that the US Strategic Command allows their Twitter account to be operated from an insecure location.
I found a YT video saying it's "wo er wo". Which suggests they have a hard time pronouncing it, which shouldn't come as a surprise given how different their phonemes are.

Approximating it, because you can't pronounce it is one thing. Not giving a shit, even though you do have the same word (i.e. folk) is another one.
"Powerful" maybe for the pub/sub capabilities that allow you to trigger actions on write and whatnot?

I don't know if Supabase has this, but at any rate I don't find anything else about Firestore "powerful", it's just a NoSQL database with all the pitfalls of NoSQL, a more limited API than MongoDB, a terrible data explorer UI, and very limited local capabilities...
Perfect cyber defence is impossible. Getting rid of password protected backdoors is possible, applying security patches in timely manner is even more possible. There, two biggest hacks in the last few years just became impossible. People are not doing their jobs and hide behind the “impossible”
Both sides pick topics that are discussed. Have you seen the news about migrants and the 'Biden Border Crisis' as I've seen it called?
I thought this was going to be about webapps.

Surely anyone who has a hankering to do some work just fiddles around for a few minutes with their editor until they get something they like and then gets on with it and doesnt ever think about it again.
> So the question for becomes: is there just not a good enthusiast market for this stuff?

No. They just don't want to serve the low end. I'm from SK, Canada and the vast majority of all businesses are small businesses. This site [1] says 98%. The problem is they only account for about 25% of the GDP, so vendors don't consider them worth serving. Everyone wants to sell to the 2% of the businesses that make up 75% of the GDP.

There's a lot of money to be made in the small business sector. It's just not *enough* money for huge tech companies.

1. https://www.bizadv.ca/by-the-numbers-saskatchewan-business-s...
The TP-link offering looks very similar to Ubiquiti from a quick scan a month or two back.

Both will run from locally hosted controllers if desired.

I've been seeing more Cisco "Meraki Go" kit around as well, which looks to target the same use cases as Ubiquiti (very very similar gear, WAPs, low end switches & gateways), albeit without a local controller option, but at least without the usual steep Meraki subscription charges.
Papercups – open-source live customer chat in Elixir
Google collects 20 times more telemetry from Android devices than Apple from iOS
It's a combination of two things. First, type inference from "short variable declaration" (see the spec here: https://golang.org/ref/spec#Short_variable_declarations ) and secondly, nil interfaces vs typed nils stored in an interface type (see this FAQ entry https://golang.org/doc/faq#nil_error ).

Another way to explain the difference is the following:

// case 1 is the same as
var i int
// inferred type of *MyErr because that's what returnsNilError returns
var err *MyErr
i, err = 0, (*MyErr)(nil)
// err is of type (nil)(*MyErr)

// case 2 is the same as
// inferred type of error because os.Open returns that
var err error
err = os.Open("/tmp/file")
var i int
i err = 0, (error)((*MyErr)(nil))
// err is of type (error)((*MyErr)(nil))

Note well that "err" is a different type in those two cases. Type inference, plus the fact that short variable decleration re-uses an existing variable if the type is compatible, can result in previous code changing what type a variable is.

It's well known that an interface with a type is != nil (i.e. "var nilErr *MyErr = nil; var errIface error = nilErr" results in an 'errIface' that is not equal to an untyped nil).

I hope that explanation made sense to you.
> (plus a backup MFA)

IAM doesn't even let you register more than 1 MFA device.
Yes, this is what's being left out. The standards are not designed for someone who is capable about writing an essay discussing the tradeoffs and and evidence for various standards. The standards are designed for someone who is not capable of writing, period. Not that people working in commercial kitchens are unintelligent or untrained, but some are, at least in the language in which they're working. "Only use stuff that says NSF, keep cold under 40, hot over 140." That can be conveyed in a few seconds, to almost anyone.

Furthermore, it provides you a margin of safety. 165 for chicken is going to be pretty dry for white meat, but I'd choose that over medium rare!

If the guidelines occupied a poster-size tree it would be much more difficult to follow them and the consequences would be much more severe.

I also make it a point never to take food safety advice from anyone who doesn't know the difference between "sanitized" and "sterilized".
Their http interface is reasonable and you can configure/provision the APs from CAPSman from one of the routers/switches in a central location.
I was referring to the root accounts in your organization. The blast radius is more limited, but still a root account that has access to everything within that AWS account.
While I really appreciate articles like this that take a more rational view of the nuance of either side of a debate, there are a couple points I felt were left completely untouched:

1) there is an interest in low-cost labor provided by illegal immigration that American businesses (regardless of party) depend on, and this illegal labor market cares not about minimum wage laws, SUI, etc. So the interests in the debate go beyond the "protection" dimensions outlined in the article. There are cold, hard financial interests that use any convenient rhetoric to get the outcome they want.

2) The children approaching the border on their own are not all originating from Mexico, and these aren't toddlers, but many are 16, 17 years old. I'm instinctively skeptical when I hear the world "children" used in politics. Characterizing the "remain in Mexico" policy as sending children back to the horrors they're trying to escape may not be the best characterization of what's happening. Ignoring entirely the agency of the parents in sending children unaccompanied (or worse) to the border, keeping a kid from Honduras in Mexico rather than the US is not sending the kid back to the horrors he's trying to escape.

I have no idea what percentage of influence the illegal labor market has on the debate, and no idea how many "children" are originating from the same Mexican state that they'd remain in under the old policy. But these are some dimensions the article glosses over - effectively purporting that there is not monetary dimension to the immigration debate, and the consequence of the "remain in Mexico" policy results in more child-victimization than putting them in overcrowding holding cells.
I think looking for deeper motivations such as abuse will likely prove fruitless in these cases.

A few years ago the 14-year old old daughter of a coworker of mine got into a lot of trouble after being revealed as the person (cyber)bullying two classmates because they were "flaunting their new iPhones on social media too much". Anecdotal for sure, but kids can be mean and with the internet still offering a veil of anonymity, incidents like this are bound to happen.
Honest question from an outsider: except for the hobbyist/techie points, is there a solid reason why you'd buy a Raspberry Pi?

Aren't there any Intel Celeron or some such super cheap x86 small boards? I imagine you'll get a ton more oomph, probably much better software support and they shouldn't cost that much more.
And be successfully prosecuted.

I'm sure someone in legal knows someone at the AG's office who might be "considering the private sector" in the near future.
Can you go into detail? Also, which country are you referring to?
I wonder if previous 'Coding Adventures' videos have prompted similar 'coincidences' with people wondering why they are suddenly seeing procedural planets popping up all over the place :)
> There is no evidence that this is the case. Can you cite an example that is not Trump saying the "Amazon Washington Post"?

Huh? What does Trump have to do with Bezos owning the WaPo?
How do you use your computer? A Unix shell is literally a REPL over a stateful filesystem.
Plus the other approach is: hack, insert porn/embarrassment, extort.

I hope the ultimate outcome is the rise of shamelessness - such as Jeff Bezo's response a while back, "sure, you have a picture of me, go ahead, so what".
Product Management Templates