skysight-inc/HackerNews huggingface dataset:
>if you the increase in income isn't extremely unequally distributed

How is your family's net worth percentage change looking compared to Bezos? How is your salary percentage change looking compared to that?

Sorry for laboring your point. It should be labored. Repetatedly & with emphasis.
April Updates from the Google News Initiative
Port forwarding is fairly simple. All routers should support it. Forward port 443 to local-rpi-ip-address:443. Setup caddy/traefik. Create A record to public ip. Enable tls. Enable file hosting. Done: you now have TLS static website without any 3rd parties.

That said, cloudflare is super handy for dns, and for proxying specific domains, where you don't want to expose your public ip.
Agree. Very good point. I am looking at their GH sponsor page. Will do it.

BTW, I checked Ghosting pricing https://ghost.org/pricing/ and I see Basic for $29. What is manager solution?
> I don't think SEAL team 6 is going to be hunting down these attackers

It would certainly reduce their enthusiasm for hacking.
No, yeah, I agree totally with what you're saying. It feels like giving up to us but that is a whole lot of projection.
ok, so you were basically just referring to a 3rd party waf... thats cool...
> but I'd rather be calling the shots!

With a horse, you get to communicate and convince. Also, stretching your legs and not squeezing would help.

> To each their own. :-)

Definitely.
Ok fair enough, I may have read more into your comment than you intended.
Are you worried about building up tolerance? Although not 100% clear, it looks like it might potentially be an issue:

https://www.gwern.net/Modafinil#tolerance
Because I want to.
But when it's legal we can research what to take with or before to minimise the negative effects. Just because there is no cure for the alcohol hangover doesn't mean the same for MDMA, forexample there is some evidence that dosing with 5-htp for 4-5 days prior ameliorates the negative effects somewhat, but, as ever, more research is needed.
Maybe that’s what I’m thinking about. Seems early then to adopt?

Aside from community and WireGuard issues, any reason to abandon a working pfsense install?
> companies are chasing profits at any cost

What does that mean?

This was addressed in the article. Critical services are on the internet because remote workers need access to them. I don't see how profits factor into it.
Agreed. Our companies are driven to increase profit at all cost. Even cost to their function and utility.

Our over financialization is squeezing everyone and everything.
Really wonderful.

Anyone who knows how to implement this with projectM, or GLSL?
Starting? The semiconductor issue has been going on since at least March and is only getting worse every week. The stocks of solar companies, car makers, cryptocurrency miners, appliance makers, and anyone else relying on semiconductors has been dropping since February. Some like the solar company ENPH have been cut in half. Shipments on products with semiconductors have gone from an ETA of 6-8 month from April 2021 to “12 months or more” from this month, May 2021. I heard a rumor that it takes 2 years for a new semiconductor plant to be built so we may be in for a quite a wait for the supply to catch up to the demand…
Well, Einstein's mom, for one.
I think the problem was that students need to also have a smartphone or something available during the test for questions and announcements or something, since the software locks down the testing computer. And there was no way to prevent people from looking stuff up there. Anyway, once they do impose this requirement to not access canvas, a cheater would just make it available offline. Ultimately the way professors spot cheaters is in their patterns of answers.
And if “the individuals” turn out to be operatives of the Russian government?

I find as world events unfold these last few years I have drifted away from my isolationist/non-interventionist views. I wouldn’t say I’d advocate for a military response (either electronic or physically destructive) at this point, but I wouldn’t think badly of our government if they did something like that.

Americans have become a rather stupidly optimistic/ignorant people. Russia and China will absolutely destroy us if we don’t aggressively counter their military aggression. And that’s what attacks like this are: military aggression. We ought to start acting like it.
I get the exact same response when I try to debunk horoscopes to someone who believes that’s just classic Virgo behaviour haha.

Controversial, but also true, is that I get the same response trying to debunk diversity hiring etc. because I happen to be a white, straight male. I am also practically blind in one eye and grew up poor, but I refuse to play the victimhood game or even agree to that frame to win an argument. Also I don’t want to get into the pros and cons of that topic in this thread as that’ll inevitably be a train wreck as always, but I just want to point out how frustrating it is to “lose” an argument because of who you are, not what you actually say. Also, for the diversity people, it’s super insulting to essentially suggest “you’re only disagreeing to protect your own race”. I honestly think the appropriate response is to tell them to fuck off after they bring up your race, gender, sexuality, etc. in an argument.
The headline said that the author was specifically looking to avoid 'xhtml self-contained tags', but that doesn't mean they could assume the document they were looking in was valid XHTML - just that it might contain XHTML-style 'self-closing' tags.

I've seen plenty of plain HTML files that aren't well-formed XML yet contain <br/> tags.
You need the SCADA systems to run the pipeline. They control the pumps, valves, product sequencing, etc. So Colonial purposely shut down the pipeline to prevent the SCADA system from getting affected, which might cause physical damage that truly would be a catastrophe.
This. Anyone with basic investment knowledge knows the lottery is the worst possible thing to do with money you're not just wanting to, for some reason, throw away.
I disagree with some of what you say, but I think your last point is correct.

>you yourself may be mistaken in your JS criticism

It should be easy to verify I'm not. `__proto__` is indeed bad practice [0] and I'm pretty sure criticism of `var` vs. `let` and `const` is a Google search away. Same idea for the other problems I listed, but the details are besides the point.

>There is a clear judgement on your part

I'm not sure what makes you think there is. It was important to first point out that this contribution to HN is a rather poor one on technical grounds. People might have taken away bad practices from the article. Then, I felt it would also be interesting to share my suspicion about the author's state of mind. This is after all what commentators of all kinds do, from movie critics to sportscasters.

>sharing your own [...] shows you speak from experience, and engages someone emotionally into feeling for you rather than just being defensive

This rings true and I could be a better communicator if I applied this advice. So here goes: this [1] is my most upvoted SO answer that I wrote years ago. The code I suggest is rather bad, as I'm sure any experienced C++ dev would agree, and I find the style pompous. It makes me cringe a little, but that answer also demonstrates an interest in technical topics and an eagerness to share, just like the author's article.

[0] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...

[1] https://stackoverflow.com/questions/4788965/when-would-anyon...
QT, GTK, and all these GUI "toolkits" (love that 90s OOP fetishist term btw) are outdated technology. The future of apps is layout engines, not C/C++ libraries with community mantained bindings to high level languages.

All these XP era look alike apps like Clementine are going to be left for the minority of developers willing to mantain these old projects. Everyone knows that true Unix is CLI, and anything user friendly or consumer oriented will either be on the browser, or run in some render engine like Flutter. To me that's great, the future looks bright and cross platform.
Ha, yeah, there's definitely a parallel there. I'm much more of a fan of things like Baldur's Gate, Planescape Torment, and more recently the Dragon Age series (or at least the first couple. Undecided on 3 so far...) I tried to get into both Morrowind and Skyrim, but just didn't find they did it for me. Similar to the Fallout series (which I assume you'd enjoy as well if you haven't played them!)

Re books, Character development is probably #1 for me. I like a good plot as well though, but I prefer one that focuses on fewer characters in order to move forward with them more quickly. With something like Malazan or, say, Wheel of Time (which wasn't as well written maybe, but had quite a compelling plot) I find myself spending the whole time looking forward to the 10% of the book with the characters I actually care about; the rest can start to just feel like unnecessary filler almost.
No, one isn’t enough. At least two or three.
I have no idea why they would do that unless the system was not airgapped properly or it was hard to untangle the admin network from the control network (in which case, the control network is effectively not airgapped).
The TI Nspire CX II supports Python. However, I'm not aware if they backported the feature to the older models… In any case, micropython can be run on all models with Ndless.
I could have worded that better, I still think it is odd that the search engine didn't correct you to the most likely correct source.

I honestly wonder what the extent of the accepted arguments are to that court.
Honestly, I have never used Wordpress and I think there is not much difference. Both are CMS.

Things which I liked with Ghost:
1. Easy to write, publish (that's one of the biggest challenge for at least me to write more)
2. Lot of good add-ons (I guess Wordpress also will have same)
> Tensions flared in early April when an anonymous student account on Instagram posted about the cheating charges. Soon after, Dartmouth issued a social media policy warning that students’ anonymous posts “may still be traced back” to them.

It's totally normal and proper for a university to tell students who speak out about being expelled by a kangaroo court of administrators "we will find you".

If they didn't want students looking at the material they should have just removed it, not relied on this insane post-hoc attempt to try and identify cheaters. Using this to try and destroy these students futures in the medical profession is unconscionable.
You need to tell your regex engine to ignore whitespace in the expression. The regex handles that fine.
Most of the internet we see every day is in a race to see who can attract the most eyeballs and squeeze the most money out of them. Ad money has both enabled good content and unleashed a torrent of low-quality junk media. I'm curious to see where things will go, especially with micropayments, platforms like Patreon, and enclaves of people building their own networks away from the "corporate web."
For anyone trying to improve their spec writing, a nice resource is [1]. Not everything is worth following, but the basics are spot-on

[1] https://www.betterspecs.org/
The Python implementation used is Micropython, so it is not compatible with most Python modules.
I've worked with a lot of environments before where these deadlines aren't artificial. Usually these are projects dictated and agreed to by non-technical staff, then handed to technical staff to figure out. I assumed they were artificial, then I look at official signed contracts with deliverables and dates and die a bit inside.

"We said we'd give them X, Y, Z by A for $N. Let's see how close we can get to it." Is not abnormal from my experience with major clients as well. I work in R&D so there is usually an expectation of delays and failures but in this world, the client has an idea of what they want and an upper budget if what they'll spend. People try and feel this out to get as close to their budget as possible and as little as the client with agree to for that budget. Actual budgeting based on requirements and planning doesn't happen, you simply grab the opportunity and run with it. Yes, much of R&D is complete shit show.
These are cartridges for standard vape pens generally available for use with THC, but (as I understand it) DMT cartridges are available on the darknet marketplaces such as Alphabay (if that is still a thing)
How does one read these, without spending a fortune on the anthologies they appear in? I'd love to read "Houston, Houston, Do You Read", but don't want to spend $15 for the book containing it, full of stories I'm not currently interested in. Suggestions?
Modern CPUs have a very large bag of tricks to make the code they execute run fast. These tricks are usually designed for some optimal workload, and (especially x86) the real deal can't actually keep the backend busy. Solution: Duplicate some of the CPU to feed the backend with more stuff to do. This can get you a performance win without the cost of a whole core.

All good so far, for (say) HPC where you have people with guns guarding the machines you can turn on all the performance. The issue is that as CPUs have got more complicated, it's increasingly easy to attack the internal state of the processor. This is already possible in a single thread (i.e. the prototypical spectre and meltdown implementations), however imagine what you can do next door to a completely different "core". The processor maintains separation of structure but not of state, so you can use (say) timing side channels to extract information about what your neighbour is up to.

FWIW these issues are more of a problem for Cloud vendors than you or I as they usually require pretty specific knowledge of the hardware being attacked and even then are not easy to pull off.
You may be missing alot. I might be getting old, but to me the quintessential vehicle for science fiction was always the short story.

There are just so many ideas that came out that didn't need a full novel length treatment.
I assume (in good faith) that it isn’t meaning general purpose the way that I interpret the word “general purpose.” But still... it does indeed immediately give an adverse reaction. This phrasing should really be adjusted to prevent further bad first impressions...
I think the real point of the protestant work ethic is that when you have a post-Christian society that replaces church with work, you end up with people effectively going to work-monasteries.

But if you look at the Middle Ages, you'll find something like 100 days off a year, tons of feast days and days off, limited working hours in the remaining days, and not at all a culture that valorized work even thought it was much more deeply Christian than modern Europe. It's all about what you worship.
> if you are a critical service ... for each occurances 10% of your total revenue ... are forfeited

You can achieve the same effect without all the arbitrary political decision-making inherent in this proposal by requiring these companies to buy delivery insurance or something. The insurance company will charge them proportionally to the risk of attack, which will internalize the cost.
Not to be rude but I'm pretty sure you need to check up on your stats. The Chinese do have the oceans.

>Citing the Office of Naval Intelligence, a Congressional Research Service report from March notes that the People’s Liberation Army Navy, or PLAN, was slated to have 360 battle force ships by the end of 2020, dwarfing the U.S. fleet of 297 ships.

[1](https://www.navytimes.com/news/your-navy/2021/04/12/chinas-n...)
I'm not sure a single-process fork is necessary, I'm at 2.2GB with 5273 tabs on Firefox 88.0.1. I run NoScript in default deny mode as well and use uBlock Origin & uMatrix, but I don't use any suspender addons.
These schools want people who are good at cheating without getting caught. Those people become very rich and powerful. They don’t want hamfisted cheaters who get busted. Those people generate bad press, especially when they go to jail.

The enforcement against naive cheaters while leaving avenues open to sophisticated cheaters is a feature, not a bug.
Perhaps a sort of cyber-MAD comes out of the escalation and the Russian government cracks down on the group to prevent their own serious infrastructure disruptions.
I hope you're not talking about the CIA, whose network of agents in China (to pick one example) was rounded up and killed due to either shoddy IT work or a mole in the Agency. Either possiblity reflects poorly on the American intelligence community:

https://www.reuters.com/article/us-usa-china-espionage-idUSK...

>Investigators remain divided over whether there was a spy within the Central Intelligence Agency who betrayed the sources or whether the Chinese hacked the CIA’s covert communications system, the newspaper reported, citing current and former U.S. officials.

>The Chinese killed at least a dozen people providing information to the CIA from 2010 through 2012, dismantling a network that was years in the making, the newspaper reported.

>One was shot and killed in front of a government building in China, three officials told the Times, saying that was designed as a message to others about working with Washington.
Basic security practices like 2FA and not using VPNs/trusting the network would be a great start. There is no excuse for private business like Facebook and Google being more secure than the f*@& United States of America.
Done sponsoring https://github.com/viggy28?tab=sponsoring. Thanks for reminding. I can see how challenging it will be for Ghost to generate revenue.
Your scenario is almost completely based on chance where as the article is saying you should use your money while you have it to try and build other sources of income. The examples are maybe shit though.

I’m a super biased reader though. I get very anxious when it comes to money so when the going was good for me, I used all the extra earnings to secure a moderate income outside my job.
Flash drives.

I used to work in fabs and every couple of years some tool or other would get a virus, sometimes it spread through the network.
Lol this was my first reaction as well, they now have a nation-state on their ass. But that being said its not impossible that this was just a cover for a Russian state-sponsored attempt on US infra
I was thinking that, as I was wondering what these people are doing differently and wonder if that different thing was actually conventional rites of passage.
> That will get them serious about security.

My guess is that they only get serious about security after a breach occurs.

You can view it all as strengthening an immune system. Without attacks, and the occasional successful ones, nobody is going to bother to harden anything.
> As we have touched on previously, there are already enough UI toolkits available for the Linux desktop.

What exactly is enough? I think this author clearly does not understand what problems Flutter is trying to solve or why someone might want to use it

> Additionally, Google doesn’t have a particularly good track record when it comes to maintaining projects. Just take a look at Google Glass and Play Music

Those are not projects, those are services. This is open source. If needed it can be forked or moved to different owners. Golang? Kubernetes anyone? Both are huge and started at Google

> Ever since the creation of Linux in 1991, major corporations have mostly left it alone.

Nonsense. Corps make a huge part of commits to the kennel and other projects

Unclear what world this author lives in
I was just looking for such a tutorial - thanks, Ivan!

Question; besides your books - which I have just discovered - would there be any intro to math and engineering books that use Sympy / Python that you'd recommend? I posted that question earlier a while back but didn't get a lot responses.
I'm really confused: the pipeline is resilient to a hack: they just shut down the pipeline so it won't be 'affected' (hacked?)?
I built some of the SCADA and IT systems for Colonial Pipeline.

Many industrial SCADA systems (nearly all) send data from their "OT" systems (PLC/DCS/SCADA) to their "IT" and business layers (Historians/Timeseries Databases, Dashboards, Power BI/etc). This almost always happens through a two-way link (think TCP/IP, HTTP). While the software should not allow data flow backwards, the hardware absolutely does. So how much do you trust the software?

I often advocate that industrial SCADA systems utilize "data-diodes", one-way opto-isolators, or other physically verifiable methods of confirming that no information/data/instructions can get from a "higher" layer (OSI Pi, PowerBI) to a lower layer (Allen-Bradley PLC, Siemens PLC, Emerson DeltaV DCS, etc).

Convincing the powers-that-be to do this has been incredibly impossible in most places and a large reason why I'm trying to transition to a different space - I simply have had ethical concerns about providing engineering services to critical infrastructure without building in best practices.

Stuxnet was over a decade ago - I don't understand how these protections aren't mandated by the DHS already.

Disclaimer: I don't think it's reasonable for non-involved people to assume the OT side has been compromised. I do think Colonial will need some time to verify the integrity of their SCADA systems and it makes sense to keep the power to the physical devices (valves/pumps) offline until they do. I understand why they chose to shut down but I don't think there's any evidence that they'll be unable to start back up again.

Lastly, I saw a quote in one article:

>>> Digital Shadows thinks the Colonial Pipeline cyber-attack has come about due to the coronavirus pandemic - the rise of engineers remotely accessing control systems for the pipeline from home.

I strongly doubt this. It's possible, of course. But it's extremely unlikely to me that employees would have remotely accessed OT/SCADA systems from home. No one I've worked with has had that capability enabled.

Many companies use products which have been shown to have flaws, like Citrix or various corporate VPNs. These could be compromised to get access "closer" to the OT layers but never directly into it.

Onion layer security is very much practiced everywhere I've been.

Edit: I have heard of some petrochemical facilities moving towards allowing operators and engineers to manipulate valves/pumps on their iPhones. This horrifies me for many reasons. I've never actually seen it implemented and I always bring up Stuxnet when I hear people mention it. I personally believe that DHS should make this sort of thing illegal for critical infrastructure. Many good engineers disagree with me.
i assume they mean "Managed install & setup"
Sexism, Racism, Toxic Positivity, and TailwindCSS
Is it illegal to pay the ransom?
While it's not an integrated savings/budget app like Simple, I think YNAB has a similar spirit as Simple + a great community. It's a pure budgeting app, but you'll know exactly what every dollar is doing.
Online Learning Prototype
Online learning platform that I am working on
Those remote workers wouldn’t have to be ‘remote’ if there were other workers hired on site.
I am pro-Nuclear as the next guy, both from environmental and job creation perspective.

But renewable can reduce emissions and has been proven to do so.
ha same this stuff used to bother me, but basically "saying first still works"

so I skip past that and just try to see if I can glean what something actually does
Its just some 400 pound hacker in his mom's basement. Seems like overkill