skysight-inc/HackerNews huggingface dataset:
I'm in Canada and my last car was a Volkswagen Eos. I'm unlikely to buy another VW, for reasons which have nothing to do with the emissions scandal.

A few years ago I had to spend ~$10k to replace all the roof seals and repair damage after water leaked into the interior. I bought the vehicle new and diligently lube the seals according to the owners manual.

Last month my girlfriend found a piece of a suspension spring that broke off. I took it into the dealer, who replaced the front springs and shocks. I specifically asked them to check the rear ones, which they said were fine. Also asked about any undercarriage rust, which they said wasn't bad, and in line with what they'd expect for a 10 year old car.

Two weeks later this larger chunk of a rear spring fell off while I was driving:

https://m.imgur.com/a/uHhdD1p

I've had other minor issues. eg. Ever since the new seals were installed, one window sometimes takes multiple tries to close right, despite several attempts to correct.

It's a fun little car and the Service department has been very accommodating, but all in all the money I've spent on repairs could easily have paid the bump to buy the BMW hardtop instead.

After the last incident I bought a Toyota RAV4 with green Consumer Reports reliability ratings across the board. VW has a lot to prove if they want me back as a customer.
Well, there is a crucial, legal, difference between using illegal devices (VW) and using edge cases and loop holes (everybody else). The first one is illegal cheating, the other smart playing the rules. Both are not ok, so. But only one clearly illegal.
Interesting mix :)

I wonder why CLJS / Reagent is not enough, and where the others step in...

I mean in my fantasy CLJS / Lisp is so powerful one never looks back to languages relying on commas and colons
It is on SteamDB, right here[0]. It says in giant text "This page was taken down because SEGA is claiming we distribute their game here (we don't)."

However, if you search for the game in the SteamDB search bar (just enter "Yakuza", don't even need the full name), it will show up just fine, with a picture and all, you just won't be able to see the full page. That's how I found that link, so I have no idea how you missed it.

0. https://steamdb.info/app/1235140/
Lack of 2FA for the AWS access ? Sure. It might have prevented the attack.

The attacker had access to the whole database. Which meant he could alter the 2FA seed. So it wouldn't have mattered much.
> For a language, it doesn't really matter which side you pick (force programmers to select a value, or auto-assign one).

Even (modern) C/C++ handles this aspect of memory safety better: There is no default value, and reading from an uninitialized value is a compile time error (usually, because C/C++ have baggage).
Long-awaited muon physics experiment nears moment of truth
yes, they might work even better atthe scale of US
I agree with your analysis here, although from what I understand he argues that these phenomena have to do with working for big companies. The book “developer hegemony” makes a similar argument and argues that the “way out is to have lots of small software consulting shops.
As I mentioned, elsewhere, this is in Israel - and clearly not a HCL city like Tel Aviv. While I'm not the example, I pay less than this for many things, simply because of city I live in. My cell, with 250GB of data (as an example) is 29 NIS - about $9 USD.

Prescription medication, and glasses are covered by our equivalent of HMOs. Depending on income levels these are literally free. There are no copays - we have socialised medicine.

Yesterday, I bought a pair of jeans and a t-shirt at Fox, the local store. Their cost - 55 NIS (that's ~16 USD). For a further data point, a monthly inter-city transit pass costs ~256 NIS so < $77. It also takes an hour to get from a low cost of living city, to a HCL city where one is paid more than these minimums.

Again, I don't think that someone doing this would have a high quality of life. I'm just saying that it is very possible - but it depends on many things.
There is Fortinet(which acquired Meru 5 years ago). Meru was pretty OK. I helped manage a setup of 2500 + access points on a campus.
I left that job 6 months after Meru was acquired so I cant say how they are now.
The article provides examples and cites the source of their classifications.

"MARTIN: So when you talk about a far-right news source, do you feel comfortable giving us an example that we might recognize? I know what I certainly think of, but what are you thinking of?

EDELSON: So some of the top-performing far-right news sources in our data set were things like Newsmax, Breitbart - that kind of media source.

MARTIN: And you and your colleagues say that far-right content is the only partisan leaning in which misinformation actually drives more engagement. And there is no what you call misinformation penalty. Could you just talk a little bit more about that? So a misinformation penalty is what? Is that if you are demonstrated to be inaccurate or false, then what? People who are on the left side of the ledger would give you less credibility. Is that it?

EDELSON: So we can't say exactly why it's happening. But what we see is that for left-leaning sources, for center sources, and even slightly right, the sources that have a reputation for spreading misinformation just don't engage as well. There could be a variety of reasons for that. But certainly, the simplest explanation would be that users don't find them as credible and don't want to engage with them."
Those kinds of fanciful things are not commonly in threat models because they don't happen. The threat models address things that are likely to happen, which are all variations of someone's device getting compromised.
It should be noted that the NBA is only woke with respect to the US, with China there’s no politics or social justice.
An Option<T> is literally a pointer to T with some compile-time semantics. Which part of the memory model is hard to reason about?

Edit: Nevermind, I forgot this is only of T is a reference. Otherwise it's layed out like a normal enum.
I'm referring to a very different Speedwagon.
I don't think anyone has a problem with what we might call objective facts.

The issue is that there is a feeling that the 'objective facts' narrative is simply being used as a Trojan Horse to teach things which are much more nuanced (like the effect and pervasiveness of racism), and treating any questioning or disagreement as wrongthink which much be corrected.

Not saying this narrative is true per se, that's just how its being perceived.
Eero is amazing.

It Just Works.

Apple style. Plug it in. Never fuck with it. Rock solid.
Does libreboot auto-update now? Back when I played with it, I had to manually apply updates(which I admittedly didn't do).
> it's related to their line of work.

Documentation?
Nope. It's not about using similar phonemes instead of the actual ones a German would use. It's trying to pronounce the wrong word/name. The name doesn't start with a V but with an F. It's just written with a V. It's nothing Americans can't pronounce.

If you argued that you can't pronounce 'Wagen' as the Germans do ("'vaːɡn̩", according to Wikipedia), that would be a different thing. But we're not talking about that.

Indeed, the word, i.e. folk, you are not willing to pronounce happen to exist in English as well and can mean the same (or very similar) thing. "Volk" (i.e. "wolk") OTOH doesn't mean anything in either languages. (It does mean wolf in Russian, though ;) )

People's car or you could say "Folk's Wagon" (or maybe "Folks' Wagon"). Yeah, weird choice of words and won't exactly sound like it was German but close enough, kind of meaningful and nothing you couldn't pronounce. Just remember to write is as VolksWagen.
Yeah, it's a really bad example. I would just cmp.Diff, and if I only cared about 4 fields, I would delete the data from got.FieldIDontCareAbout before comparison. (You can also make cmp.Diff do this if you want to do it every time.)

I think that an evolution of tests would be:

assert.Equals(got.Bar, want.Bar)
assert.Equals(got.Baz, want.Baz)

then:

if got.Bar != want.Bar || got.Baz != want.Baz {
t.Fatalf("bar and baz:\n got: %v\n want: %v", got, want)
}

then:

want := Thing{Bar: xxx, Baz: yyy}
got.Quux = ""
if diff := cmp.Diff(got, want); diff != "" {
t.Fatal("bar and baz:\n%s", diff)
}

(cmp.Ignore and friends should also be considered for less misleading output, if you don't care about Quux)

Basically, cmp.Diff should be your go-to testing framework. It's easy to use and the output is excellent.
> this completely invalidates the 2FA of TOTP if your password manager get broken into

I think that's the big "if". If you assume the password manager is secure (which something clearly wasn't in this case, but that seems like an outlier), TOTP secret in the password manager still secures the account.

Is such a setup as protective as a separate storage method? No, but it's leagues more convenient. A cloud-based PW manager also solves the problem of a lost/broken/new phone causing you to lose all of your 2FA setups. Some 2FA apps do as well (Authy, iirc), but trust me when I say people lose 2FA codes _all the time_. And then 2FA needs to be disabled by support, which is its own can of worms.

The best security measures are the ones people actually use. If not having to use a separate app is the convenience people need, then I think it's totally worth it.
fzf is also great as a live preview window for a command:

echo '' | fzf --print-query --preview-window wrap --preview 'cat test.json | jql {q}'

Here shown with jql[0] to write json queries and see the live output.

[0]: https://github.com/cube2222/jql
It links to the Git repo and mentions the commits. Regardless of your feelings on the matter, I’m having difficulty not describing the following as a “coup”:

> I, Leah Rowe, have taken over the Libreboot project.

> I've done this without consulting the other devs

(P.S.: In case it isn’t clear from my tone, though, I am not trying to express an opinion regarding the situation, only that their PoV seems perfectly reasonable.)
He could have had 2fa on his console account but saved an access key for CLI access. Many large organizations have an infrastructure where you exchange your corporate authentication (including 2FA) for a short lived AWS access key, but AFAIK this isn’t out of the box.
It's actually only superficial simplicity. There have been good comments on HN about this issue. Just because the language is "simple", it doesn't hide the complexity of reality, and written code ends up being harder and more verbose and more difficult to manage compared to powerful languages.
OpenWRT also provides SSH access and CLI tools, so if needed things can be automated the old-fashioned way.
On a side note what was the deal with https://libreboot.org/news/leah-fundraiser.html . This seems kind of unseemly to be fund raising for an elective surgery using your open source project as a platform. Was the fundraiser successful? Is type of thing common among project maintainers?
SpaceX Launches Starship SN11 Rocket Prototype, but Misses Landing
The left is significantly more clever on how they move the Overton Window - doing it primarily by picking the topics that are discussed.

For example - the new focus on anti-Asian crime as a wedge issue.
The author does in fact identify that left and far-left (and center and right) misinformation exists, but does not drive engagement. A cursory glance at the article reveals this.
> the easiest to learn for new graduates

And I'd say it fails at that goal, judging by the number of gotchas in fundamental concepts of the language like slices or interfaces.

A surprising behavior of slices that had discussions on HN, and something I discovered in my own code as well: https://news.ycombinator.com/item?id=9555472

And of course this gem was on HN just yesterday: https://news.ycombinator.com/item?id=26631116
This line of thinking of unions is why many Americans not in unions hate them. They benefit nobody but the people in the union.
If you prefer a video, you might check out my 3-part autotools tutorial, starting here: https://www.youtube.com/watch?v=4q_inV9M_us

The video shows an animation about how the autotools work (which I think helps understanding), and has a CLI demo of how to use it, all for the low price of free :-).
You remind me of indoctrinated religious people. A guy gets a rare birth defect and one day a doctor cures him, he thanks God for saving him but not blames God for giving him the birth defect from the beginning.

Same in your case you blame the union concept for all the evil (ignore all the other possible causes why China economy is rising) but never credit unions with any good thing.

Let's assume that the US people are special, they can't ever have a society like the rest of the world. How do you solve the issue where workers have to work in unsafe conditions, pee in bottles and other degrading stuff? Do you pass laws to forbid peeing in bottles? The anti-government guys will not let you pass such laws... do you make each worker negotiate how many minutes a year he can spend in toilet ?
Do you solve it with Twitter and cancel culture or with God?
At least for 1) hardware accelerated encryption/decryption makes many things faster. Even just browsing the web.
Looking at the DNS records it's definitely a joke.
The short of witnessing things...

The scope from this mistake(social media's captiving attentionn not to say heritage alienation...), gonna have without preceding impact(s) to our societies... and this already materializing nowaday...
Clojure uses colons for :keywords, and commas for unquote.
Good news, everybody! The site uses Flash! And the privacy policy is, "we love to send spam from anyone who pays us".

And in the terms of service: they are prohibited from suing any of us for misusing the site; everything has to go through an unnamed arbitrator. And not only that, they aren't allowed to discuss the results of any arbitration.

source: privacy policy talks about the value of Flash cookies (section 4d). and the spamming is section 3.
Turkey has already had varying involvement with warfar recently with engagements in Syria and Armenia-Azerbaijan. I would not be suprised to see them engage in further conflict.
The most disconcerting part for me is the fact that the attackers gained full access to one of the administrators’ LastPass account. I would love to know how that happened.
> 2) get rid of SD and have onboard NAND, like a phone

Oh dear. That will involve the process of flashing OS onto the Pi and will increase the risk of bricking it. That is the reason for using SD cards instead of a NAND chip.

Secondly, you can't upgrade the storage on it either and would have to choose a RPi with fixed storage space on it. Might as well get a M1 Mac Mini.

I cannot imagine having to choose a future RPi 5 having either a 8GB, 16GB, 32GB NAND' and being unable to upgrade the space on it. So no thanks and no deal to (2).
You are going to end up paying for a license to cover security updates. I use Fortinet, not cheap.
YC does not go along with unethical practices. I'm not involved with that side of the business but they're serious about it and have disowned companies (by returning their investment and excluding them from the YC community) for being unethical.

I'm confused about what the issue in this case is. It sounds like some people are complaining that the product isn't open source because it's not self-hostable, while the founders are saying that it both is open-source and self-hostable? This sounds like a misunderstanding to me.

Even if it's not a misunderstanding, but rather a difference of opinion about how words should be used, that's not likely really an ethical issue. Rather, the definition of 'open source' is a classic flamewar topic that people regularly post zealous denunications about (including fiery charges of unethicalness and the usual "you should be ashamed" etc.). Of course this is not helpful—it just leads to flamewars, which are off topic on HN, and makes clear communication harder.

It does seem like "open core" is emerging as a term for startups that have open-sourceiness in some sense but not in every sense. That's one way to short-circuit flamewars and we've helped at least a couple YC startups launch themselves that way. But I don't know if it would be a solution in the present case because I don't understand what the issue really is.

(I'm not saying any of this because I think you personally need to hear it! I'm just posting it here out of caution, because if I jump into the argument directly, people will accuse me of putting a moderator thumb on the scale. We have to moderate HN less, not more, when a YC startup is involved: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...)
Great without it. The major improvement I noticed with it, is 802.11k & v (faster handoff).

Without those, it takes a little longer for the device to switch APs at the borders of their coverage. Mostly imperceptible, but the longer handoff times can be enough to kill a phone call over iPhone WiFi calling
Interesting, I've never heard about that. Thank you for the link.
Hardware crypto has an incredibly low gate count, and essentially all network communication requires crypto. Without it, you waste the (much more power and die-space intensive) CPU on AES.
funny to see this today - I just used it yesterday for the first time, and saw the ISS fly by above Seattle, with the naked eye. Was so cool!

coolest part was, I saw it pass by sometime around 8:00pm. Made dinner. Ate. Did the dishes. Now it's around 10pm. Checked the app again, and... the ISS was passing by again in ~5mins. Looked out the window, and... there it is!

I had this moment of total awe - over the course of my dinner and some cleanup, that little craft, with humans in it, traveled around the entire planet, and there it is again!!

hoping to see a starlink train next, weather permitting.
There is no evidence that this is the case. Can you cite an example that is not Trump saying the "Amazon Washington Post"?
I’m sure it’s awful for normal folk like us but in his case (and again this is uninformed speculation), where he’s essentially the fall guy for a scandal that was supporting one of the world’s largest economies (and a large component of several others), it’s not that hard to imagine his experience being just a bit different than what a normal inmate should expect.

He also likely knows a lot about how many of his superiors were in the loop on this, so I assume he was well compensated for his inconvenience.
Dark Matter’s Last Stand
The article clearly states that there are far-left sources of misinformation, but they do not drive engagement.
You can cat .mpg files together, but you should not. ".mpg" is supposed to refer to an MPEG Program Stream, which does in fact have a header. You can cat Transport Streams, but these are supposed to have the ".ts" extension.

You sometimes get transports streams named ".mpg", which complicates everything.
I addressed your concern with the commit message and linked it directly. Honestly, I'm ready to wash my hands of all of this but I'm not willing to roll over, so yeah it is kinda messy but that's the nature of this situation.
> Is something like kidnapping in the threat model for companies like ubiquiti?

I doubt it. That's going to raise some blinking red flags on the radar of organizations you don't want to be on the radar of. Not just three-letter federal organizations, but three-letter news organizations too. The current situation is Yet Another Security Breach that will be forgotten about in 15 minutes. But a kidnapping is interesting! People will be making documentaries and shit about that.

It's so much easier and cheaper to bribe people than it is to kidnap them.
PornHub is like YouTube was 10 years ago. Even 4K videos are encoded at a painfully low bitrate. The rest of the "tube" sites are essentially the same. There are a couple sites (2 that I know of) that offer high-bitrate videos (mostly direct copies from pay sites) either to stream or download.

There is also a relatively large community for torrents, just like with movies and music. Sure, you can be a total l33ch and "stream" a torrent, but most content is shared on private trackers that demand high seed ratios.

There is also mega, which has its own limitations.

One of the biggest reasons for someone having local copies of data is when actually paying for porn: Subscriptions are relatively expensive, but practically always allow downloading. It makes sense to get a subscription for a short period of time, and download as much content as you can before it runs out.

All of the same goes times 10 for VR. Good bitrate/resolution VR content tends to run 5-20gb per video. SLR has managed to find a good balance for streaming - very impressive IMHO - but it still runs into the same motivations that other subscription-based services do.
This actually seems like criminal advice.
It might not be immediately clear, but the "data oriented programming" discussed in this subthread is about using code as data to be interpreted. That TCL has way less primitive data structures and even less syntax for them doesn't mean it doesn't treat a lot of the code as data. REBOL[1] and Red, on the other hand, do have a comparable collection of data structures along with literal syntax for them.

[1] https://en.wikipedia.org/wiki/Rebol#Dialects
The problem isn't Ubiquiti using AWS. It's Ubquiti forcing customers to use cloud authentication.
This is correct. Worked for a fairly large corp with lots of customer data and while I haven't witnessed breaches of said data it's pretty much a matter of time.

Me and my colleagues always pushed for more secure setups and configs but the common rebuttal was "no need there's a keycloak running several layers above and you need to use a VPN and need access to AWS first, go implement features instead."

I hope for them that no rogue employee decides to play around a bit or that no one stores their credentials in some cloud LastPass account with a '123456qwerty' master password.
I think its just the cloud key. I have a unifi controller install as well and use a local account with no issues.
Amazon is already censoring books and manga they don't approve of on the kindle.

For example, you can not buy Mushoku Tensei Vol 6 on Amazon for Kindle, even though it's still available on other platforms (and on Amazon in print form). The reason? Drawn topless children in a slave pen.
I have to correct myself. Bitcoin doesn't need merchant protection, because transactions are irreversible. Paypal can provide buyer protection, i.e. chargebacks.
Anti-Asian hate is spilling over to LinkedIn (30-Mar-2021)
I've found bars are filled with people willing to chat. Almost as if the political bubble is just a media driven fabrication.
I'm glad they made this chart on their website

https://anonymousplanet.org/media/image6.jpeg

But one should practically note that this is just a practical warning. The omnipotence of the Mossad and NSA etc is limited too, and their interest in things is also limited.

Basically the attack vector from them is polluting the Tor nodes (so that they control enough of them to understand information), timing attacks on onion services to figure out locations of people accessing the hidden services solely within in Tor, as well as undeclared exploits, and feeding local law enforcement around the globe the information about you.

But 9 out of 10 things you could possibly even do are not things that would have them bother with you, although it is accurate that over time you begin to have a problem if you are really trying to stay both private and anonymous and are doing criminal violations (distinct from civil violations). So just keep rotating keys and move with purpose. Limit your Tor session to implementation and execution and consider using Tor just for casual reading or accessing RDP to actually browse clearnet from someone else's computer.
Funny how a lot of "work" on large scale code bases boils down to de-coupling code from the datatypes they never needed to be dependent on (eg, function takes obj but only needs obj.foo)