skysight-inc/HackerNews huggingface dataset:
Not OP, but I built a NAS not that long ago. For the case I purchased the Fractal Design Node 304 (https://www.fractal-design.com/products/cases/node/node-304/...) and am very happy with it.

For the Mobo I suggest finding a decent board (AMD based one if you want ECC RAM) and then use a PCI-e controller card to support the hard drives you need. It is hard to find a nice MB with all the SATA ports you need, using an external card gives you a lot more options. When I researched it everyone recommended an "LSI Logic Controller Card LSI00301 SAS 9207-8i" (eg. https://www.amazon.com/LSI-Controller-LSI00301-9207-8i-Inter...) and it has performed very well for me. If you go that way you'll need a SAS to SATA cable, they are easy to find as well.
Modern operating systems can; there is quite granular control.

But often when such sandboxes are attempted, it turns out that it often became more complex than originally thought, and applications need many resources which were not originally considered, so they are given those resources, and very often those resources can be used again to construct more resources or otherwise to some measure escape the sandbox.
https://en.wikipedia.org/wiki/Tycho_Brahe#Illness,_death,_an...
Pretty cute, just wish the man in black himself was still around to do a rendition.
I still keep my Turbo Pascal manuals, and some generous souls have uploaded most of them to bitsavers.
> The move to the shelter violated a clause in her auto loan contract that restricted her from driving outside a four-county radius, and that prompted the lender to send a tow truck to take back the vehicle.

The lender should have spoken to her and adjusted the allowed region rather than escalating immediately to a towtruck. Ideally she would have had the presence of mind to call her lender, but some understanding should be shown.

> If the lender could so easily locate the client, Ms. Kleinpeter said, what was stopping her husband?

This makes no sense. Her husband doesn't work for the auto lender. Why would he have access to that? It feels dishonest/manipulative to use this argument.
> There will be a layer on top of it for things like that.

How many monkey butlers will there be?

> What Bitcoin provides is sound money with a fixed predictable supply not at the whims of politicians and fed officials.

A naturally deflationary currency is such a bad idea that every single country went away from them in a fairly short time period.
>People by and large don't care enough about privacy

Not to play dumb or sealion, but what opportunities are they given to do so? How often have those opportunities been one-and-done, "if you don't do something to protect your privacy in this particular instance at this particular moment, it's gone forever?"
How many strongly typed languages are:

+ Installed everywhere

+ Even within 20% as concise as bash
The metastasis is companies and organizations that have FB groups and insist that’s the only way to get data or collaborate with them and their members or customers.
You can buy it from a duty-free shop even if you have multiple flights, even if you have to transfer out of the security area - they seal it in a special bag with receipts attached; when you go to your next security check-in, you present the sealed bag, and they check if it has been less than 24h since it was purchased, they inspect the seals, and they let you through if everything is in order.
Not even close, the rates are far more onerous, and often require bi-weekly payments which also doubles the chance for late/missed payments and thus increases the lot's chance of re-selling the vehicle again.

The lenders, as ever, are the only ones benefitting.
This is always one of my top tips for power users moving over to macOS.
Bitcoin is priced pretty much on par with low cost energy consumption. It's not any more profitable to mine Bitcoin now in terms of energy per dollar worth of Bitcoin then before
Unless you mean strictly generics, D has had the ability to do this and a lot more (e.g. accept user defined types as parameters) since at least 2014 or so
>help them pick a reliable car at a fair price

I work for an auto loan lender. If you want a fair price, I recommend CarMax. They are fair. You won't get a great deal there, but you also won't get a bad deal there. It is right down the middle.
Besides the sibling answers, properties were originally taken from Eiffel/Sather into Object Pascal.
> Software wise, pfSense is where it's at

Recent events suggest that the people behind pfSense are not especially responsible stewards; see https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice... and https://opnsense.org/opnsense-com/ .
I seriously view OCaml as a descendant of Pascal. If you look at some of its imperative syntax (for loops, while loops, mutable assignment), comments (* ... *), modular programming style (distinguishing interfaces and implementations), and fast compilation speed, it's clear that the OCaml engineers took a lot of Pascal's (and its descendant Modula-2) lessons to heart.

At the same time, OCaml's ML heritage greatly simplifies the majority of the syntax (getting rid of semicolons, making identifiers case-sensitive), and bringing the expressive power of functional programming.

It fuses together the best of both worlds. It's why I often say that OCaml is like a midpoint between Haskell and Go. The 'Go parts' are from their common ancestor, Pascal.
Leg of lamb is not tough generally, I personally would cut that down to no more than 18 hours if it is bone-in and probably like 8-10 hours if boneless, depending on size.

Edit: A few websites suggest something between 5-8 for boneless.
I think that depends on the cut of beef. 36h is great for brisket or short rib. But 36h would be bad for fillet mignon.
Unsuspecting parents that are not technically inclined enough to block it in advance, happened to my sister.
Amalgamation of data before encryption?, encrypt full rows of data? etc.
What the hell does “slams” mean? The government shouldn’t be allowed to use the media to “slam” people. Enforce the laws or don’t.
Getting a hold of someone's secrets is not possible just by doing a pull request. It's really only about resource usage, at least when the runners in question provide sufficient isolation (true at least for the Github-hosted ones, or we're all in big trouble).

Unfortunately, using self-hosted runners to provide additional capabilities not supported by Github-hosted ones is basically impossible (for public repos at least) as you can't restrict a runner to an organization or project. Set up a bare-metal runner and it will receive jobs from random forks.
Quote: ">> An instance of a class is not the same thing as an object.

> I have no idea what you mean here, sorry.

This explains the issue quite well: https://forum.lazarus.freepascal.org/index.php/topic,43622.m..."

I am not sure how Lazarus implements stuff behind the scene but I can tell you 100% for sure that in Delphi every declared class has TObject as ancestor class, so when you instantiate a class in Delphi, you are creating an object.
I got one of these at a jumble sale in the 1990s:
https://vintagecomputer.com/panasonic-executive-partner.html

There's so much insane ambition here-- the best of wacky innovative Peak Japan.

Let's build a clamshell laptop. But instead of a battery, let's include a printer! Instead of the cutdown 8088, use a full 8086! And make it about 50% the size of a normal laptop in every dimension, so you can have normal 5.25" drives! And an ISA slot! And since the plasma screen doesn't render colour well, let's set up a character ROM with bold and italics to provide the same differentiation!
What curse? There is no language with versioning integrated into the module system.

In all modern languages that is a build system responsibility.
For checked-in bags, there is no limit in the EU at all as far as I know. The problem is with carry-on, where you are extremely limited in the quantity of liquids you can get past security - no more than ~100ml, and even then it must be in a bottle inside a clear plastic bag.
This all has its place, and I learned a good few things from the article. But also, in many situations when you may not need to deal with completely arbitrary input, it can be nice to shed all of the "correct" syntax and just optimize for readability.
Their UI quality is more mystique than reality. iTunes was a particular abomination among many. Not only did it have a terrible interface which conformed with nobody's standards and looked nothing like any other Mac app, it also had a propensity for eating your music, especially music which was yours and acquired outside the Apple store. Hardly a quality program. Apple apps are still famous for focusing more on keeping you in their walled garden than on making the best UI for the user.
Slackware? 14.2
Natural numbers don't form a ring, and integers don't form a field.
Very interesting story.

I wonder how it compares with more contemporary mostly open source intelligence collection efforts such as the Russians seeking value from US academic archives during the Cold War and China’s CCP doing the same even more aggressively in recent decades?
> you don't see poor people buying EVs that much

Poor people buy 5 to 15 year old used cars. There aren't that many 5-15 year old used EV's.

Yet.
Ah that’s fair, but it’s the combination of both that is the worst
> Operator overloading allowed me to define joules like so: `J = KG * M*-1 * S*-2`. Then I could define grays (a radiation-related unit) like `Gy = J/KG`. Repeat for hundreds of units.

Presumably exponentiation rather than multiplication by a constant, right?

This is cool and reminds me of how the Python Z3 binding uses operator overloading to let you express arithmetic and logical constraints

>>> import z3
>>> s = z3.Solver()
>>> a, b, c, d = (z3.Int(x) for x in "abcd")
>>> s.add(a*b == c+d)
>>> s.add(a+b == c+d)
>>> s.add(a!=0,b!=0,c!=0,d!=0)
>>> s.check()
sat
>>> s.model()
[d = 6, c = -2, b = 2, a = 2]
>>> s.reset()
>>> s.add(a>1, b>1, c>1)
>>> s.add(a*a + b*b == c*c)
>>> s.check()
sat
>>> s.model()
[c = 17, b = 8, a = 15]

(It's limited in some ways for some reasons, like for some types and relations you may have to use a Z3 function to express a relation even though Python has syntax for it -- the example that I know of is that you have to use z3.Or(), z3.And(), etc., with boolean variables instead of Python's builtin boolean operators. Not sure why.)*
I wonder if it makes sense to add operator overloading to a language, but in a way that requires that closure under each overloaded operator and the existence of identities/annihilators. The operating principle here is to ensure that principle of least surprise for library consumers (sometimes at the cost of making life harder for library authors).
To get through to Russia they need to pass territorial waters, you ain’t getting into the Black Sea or through the Aegean really with your AIS turned off.

Now it’s even harder due to the migrant crisis the waters are very heavily patrolled and anything bigger than a dingy will light up on radar.
Do you mean TURN? STUN does not work over Symmetric NAT as the source port is unpredictable.
US housing is very roomy, often features AC and poor insulation, and electricity is cheap and avergae incomes are high.
> steal CPU from the GitHub community

from Microsoft*
50% of known CP is hosted in Netherlands. A country smaller than New York state.
> Even in this case with phone numbers and other data leaked, so what? What harm do data leaks cause?

Lets imagine a situation. You've got an officially looking letter, from unknown to you organization, claiming that for example, your lawn is infected by a grass variant of COVID-19 and must be disinfected, and this organization could do it in a jiffy for a mere $1k.

Probably it is a scam, isn't it? How do you judge it? One of the sign of a scam is a lack of personal information in the letter. But if you see that letter contains your name, address, phone number, lawn dimensions, then you probably shouldn't throw letter to a garbage bin, you should find some other kind of test to judge is it a scam. Isn't it?

So when you made your personal information public, scam detection is going to impose bigger costs on you. Even if we assume that you are perfect scam detector and will not let any of scam to pass you undetected, then the lot of people are not perfect in this regard. So the more difficult detection is, the more prey for scammers. It impose costs for a society overall, because society start to give money to scammers, to finance all that activity that is counter productive for an economic growth.

But as for me it is just a nuisance to decipher such letters trying to spend as little time on a scam detection as possible while having no false positives.
> I think many middle class jobs can support owning a Tesla Model 3

In a handful of countries.
I've always said that if coal's waste was conveniently in solid form instead of destroying the entire planet's ability to host mammalian life, we wouldn't be having this conversation.

It's the pinnacle of "perfect is the enemy of good."
https://tailscale.com for instance will show all the peers on the network in the menu bar of the app.
Except... that's only the tip of the iceberg.

Facebook/Google (et al) farms data from everyone! There really is no escaping it in today's unregulated privacy free-for-all.

Friends/family/associates will provide your personal info in their contact/meta data.

Companies (and their 3rd parties) you've done business with willingly sell/provide your personal info.
Lifetime plans is one of those dark patterns that for some reason is still considered legit. I can't think of a single lifetime plan that I've bought that have actually been lifetime, most have been sneakily killed by not updating the software anymore.
When did you remove your phone number? Looks like this relates to a vulnerability that was patched in 2019.

I'm slightly concerned about this myself. I'm also seriously ticked off with Zuckerberg and co. I can tolerate the fact that internally they do scumbaggy things with my data. I tend to have less forbearance when they let my data out into the wild.
OPN/pfSense have been mentioned.

Don't waste time with WiFi on the gateway itself as most WiFI chips you can buy are crippled in firmware for regulatory reasons. Just use a dedicated commercial AP hooked up directly or VLANed.

Once you get comfortable with something like pfSense I highly recommend switching to regular Free/OpenBSD, or Linux depending on what you're comfortable with. I find it much easier to manage a gateway with the entire configuration in version control than a GUI. There aren't that many services that a gateway needs to run.

If you feel like you'll miss pf on the *BSDs check out nftables on Linux. It's not as well documented but it's much less painful than iptables.

To loop this into the UPnP discussion: when you build your own gateway from scratch you have to add a UPnP daemon and configure it yourself, instead of forgetting to disable it and exposing poorly configured IOT stuff.
As sad as I am to see such a website update, the new movie doesn't look half bad.

As a big SpaceJam fan, I'm excited for it.
> This vulnerability was reported to Apple in Dec 2019, and it got patched somewhere in 2020. I don’t know why a CVE-2019 ID is given.

FYI: The year part of a CVE ID is either when the ID was assigned or when the issue was publicised: https://cve.mitre.org/about/faqs.html#year_portion_of_cve_id

Not (as I had assumed) when the vulnerable software was first published.
The article focuses on the security issues surrounding his new NAS, and that's fine. But the problem isn't security. It's Trust.

Consumers generally trust that manufacturers will follow Best Practices and that security is part of the deal: I pay you money, you give me a quality product that Just Works and is Secure.

False.

Products are made to be sold at a profit. You can imagine that some engineer at that company knows about this problem, put in a Jira bug for it and since it didn't affect overall functionality, and because the product needed to be released as soon as possible, they rejected the bug and sent it off.

By default, we should NOT trust that things are Good and Secure. If we are security conscious, then it's on us as consumers to figure out how to mitigate these problems. Or is it?

If I was this guy, I'd box that thing up and send it back and give the company feedback as to why, and then I'd show them this very blog post.

The manufacturer probably won't care. They know that until the average consumer cares about security and knows how to mitigate problems it won't matter. And we all know that the average consumer, even of technical products, has security habits.

Now if you'll excuse me, I need to go take care of some security stuff on my boxes, this really got me thinking about it!

sudo passwd root
greatnewpassword11
greatnewpassword11
That's why the feature flag was "min_const_generics", we do plan on extending it more in the future, but you have to start somewhere, and even this tiny, tiny slice gives a lot of power.
IDK, at least for me it certainly is the bottleneck / scarce, limited resource that matters.
Exactly the opposite experience.

Openlayers Web GL suppot is rudimentary.
It’s in clinical trials. It’s also very obscure and doesn’t get you high at any dose
The greater the edge, the more you can bet on one occurrence. Easier to understand if you look at binary events: double your bet with a win, lose your bet with a loss.
> I don’t think crypto should be illegal but the institutions enabling it should.

I feel the same about PoN[1]-based currencies! Get rid of the Fed and the military!

[1] Proof of nukes.
Unless I'm very mistaken the example they give is not a dynamic system, so asking whether it's ergodic doesn't make sense. For it to be a dynamic system it would need to have an invariant measure, which I can't even begin to figure out from their description.

The process of simply flipping coins, even a biased coin, does correspond to a dynamic system where the space is all infinite sequences of heads and tails, the invariant measure is the joint probability, and the operator is the left-shift (i.e. if you sample 1 series of coin flips and throw away the first result you still end up with a sample of the same distribution).

But this doesn't translate at all to their proposed scenario of starting everyone at 1 and letting the results diverge from there.
I've linked to an article by a Pakistani Journalist, who recently bought a vaccine (Sputnik). The government provided free vaccine is CanSino and that's only for the over 70+.

Do you feel eighty bucks is a fair price for a "free-market" vaccine?
> the industry, in my opinion, does not seem to value craftsmanship in software outside of a few niches

That's because craftsmanship in software has massively diminishing returns outside of a few niches.

Unless you're writing some VERY highly optimized kernel code, some physics logic that makes a simulator run correctly, etc... you're writing code that gets the job done until it's replaced.

A login form on a website works, until the business requirements for it change. Is it worth going back and understanding all of the fine details to make sure your changes don't break anything, or should you just rewrite it from scratch in an afternoon?

This is how I feel generally about craftsmanship. There are some places where it's warranted for long term stability and incremental improvement. But the power of software lies in it's mutability (else it's better and faster in pure hardware), so the vast majority of software will break due to changing requirements or dependencies, and will be cheaper and less buggy to just replace. There's no point in finely crafting these replacements because eventually they'll suffer the same fate.
Keyword research 2021 – The step by step guide
The best Strategy to make a full Keyword research without paying money for a Keyword tool
Try doing that in the Aegean not to mention the Sea of Marmara / Dardanelles and lets see how that works out.

They might be able to sail into North Africa and then arrange for fake papers and ownership transfer but I would really like to know how they would sail into Russia without raising any alarms.
At what age are goats usually slaughtered? Lamb is delicious, but I've had goat that I consider roughly as good as lamb when it's in a flavorful dish.
It's possible, (and I think might even work on nightly? Don't have the time to check right this second) but is just a lot more work to support than in a template-based system, that's all. We'll get there!
I wonder too. Things like file and directory manipulations are way more complicated in native Python and I find the exceptions harder to troubleshoot than native commands. I'm not even going to get into pythons version and dependency hell, suffice it to say I have more confidence in a standard version of bash and standard utilities generally being present on a modern Linux system.
What I've seen from pythonistas as reasoning for this replacememt love is usually one or a combination of a few things - a claimed write once run anywhere ability that I think is generally fantasy, a belief that Python is a "real" language and shell is not which usually just means "I don't like shell or think it is unfashionable", or a belief that Python code can be made more reusable. The person in question almost always has a background of feature developer that is now doing devops type tasks.

All that said I like python and there are tasks I absolutely prefer it for, usually anything to do with scraping some web API that returns a complex piece of JSON or xml.
When I first tried Java, 25 years ago, after learning Pascal/C/C++ at Uni first, my first pet-peeve with it was the fact that I could not declare global variables. Coming from Pascal and C/C++ that was a bummer. I had to declare a class then inside that class go declare my global variables. Imagine my frustration that instead of just typing "globalHandle = 25" I had to write instead "mumuClass.globalHandle = 25". Real productivity bump right there!
This is the kind of nuances that make it increasingly hard to look at C++ code and be sure of its semantics, without diving into compiler flags and standardese.
I see two options:

1. They're ignorant and follow a fallacious "appeal to nature" mentality. They seriously think that some sort of return to nature will result in a utopia instead of disease and famine.

2. They're Malthus apologists who want to cause an energy crisis and cause people (who aren't them) to die.

It also overlaps with the anti-GMO types.
> If anything, the hosting company should at least issue penalties on false claims.

If penalties are issued by the hosting company, then they just won't be paid. Then you lose: there's no way to take all the non-paying offenders to court, and you can't ignore subsequent requests, so you wind up in the same situation as you're in now.

Instead, move the onus off the hosting company: if they receive from some entity a DMCA takedown that is believed to be false (according to whatever standards are applied to counterclaims), then no further takedown notices from that entity are required to be obeyed until the entity takes appropriate remedial action.
IMHO IPv6 is an ISP problem, I don't need every (any, really) of my devices accessible from outside my personal VPN, and IPV4 private space is more than sufficient for that.

IPv6 is overly complex, therefore insecure. Thanks to the US Patriot Act I dont even trust the VPN stuff tbh.