skysight-inc/HackerNews huggingface dataset:
> If someone found an exploit in your web app container [...]

A good pattern here is to reverse proxy all requests to the application through something like nginx. My applications tend to have a back-end application that is not accessible to the internet, with an nginx instance that proxies all API requests itself. Only port 80 is public facing. If someone can get console access to an nginx container and then use that to springboard to another container and get root access there (again, where the only open ports are ports 80, maybe 8000?) to get envvars, they should get access to it all.

If you are worried about secrets, check out the Docker Compose 3.9 documentation: https://docs.docker.com/compose/compose-file/compose-file-v3...
I hate my job but need the income and benefits.
1. People would like to fix vacs too. Cheaper doesn't mean everybody just replaces a vac every year.

2. Fusible links are designed that way for safety. The hood of a car is designed to be opened so that even a fusible link can be fixed.

3. When I asked: Do care have unexpected loads? I answered that question right after I asked it. The question was rhetorical.

I'd rather replace a fuse in a 25$ blender then buy a new one. But either way, you wouldn't throw away a $100 dollar vac or a $500 dollar iPhone just because a $0.10 fuse shorted out.

>Mainstream phones (iPhone, Samsung, etc) are typically designed with adhesive that has removal tabs which deactivate the adhesive and allow someone to remove it cleanly.

True. BUT these batteries are still extremely hard to remove as they are locked into the case. They were designed to be hard to remove so that apple service people can repair the few phones that statistically beat the warranty.

We both know that the iphone is basically designed with a battery that is so hard to remove that it can be basically classified as not removable by the average layman. Very different from the way all phones use to have removable batteries.

>It's hard to open as a result of the design/engineering trade off. Just because it's hard to open doesn't automatically imply that someone must have plotted to make it hard to open. It just means that end-user serviceability wasn't a high-priority design feature.

That's my point. How do you know it's a tradeoff? How do you know it's not a design decision? Basically Apple is incentivized to make the phone hard to open. Additionally all apple policies of "repairing" a phone basically make "repairing" the phone cost as much as buying a new one. With every policy surrounding the phone is positioned, it's more than likely that the decisions are deliberate.

>Your point is valid for instances of proven malice, but one should not assume malice where a valid alternative explanation exists.

My point is valid for instances of suspected malice. The motive exists. Do you trust someone trying to sell you a new crypto just because there's no evidence of malice and that an alternative explanation exists? No. It's stupid to believe there is no malice.

It is far wiser to assume malice exists wherever profitable incentive exists, such is the nature of business.
All the big machines with computers in them run really old hardware. Airplanes, trains, etc have lifetimes measured in decades. The manufacturers stockpile parts, because these old chips are no longer for sale.
Very cool idea. Is the code public? I'd love to see how you implement it.
Curious... Do we have any bugmenot like cookies sharing site?
My answer would be don't waste your time and energy.

We have 6 inch chimp brains. Some types of problems require 7 inch chimp brains or 2000 inch chimp brains or 7 million inch chimp brains.

The only thing you have to understand when you take 2 chimps and throw them into a room with such type of complex problems is blundering ensues.

The focus of all chimps is then drawn to the blundering, whose fault it is, who said what, who did what, who can be blamed, who needs to change etc etc etc but all that just takes focus away from the fact that the problem itself is too complex for a chimp.

This is the Theory of Bounded Rationality (which won a Nobel Prize for explaining why the world couldnt prevent world war 2 after experiencing the devastation of world war 1).

Not everything can be understood. Misunderstanding on the other hand is directly proportional to the complexity of the problem. And it doesn't get more complex that the Israel-Palestine issue.

The chimps will continue to blunder.

The Theory of Bounded Rationality recommends teaching kids that are facing complex problems to ditch them and instead work on simple ones.
Dell's preloads: https://www.dell.com/en-us/work/shop/overview/cp/linuxsystem...

Lenovo: https://www.lenovo.com/us/en/d/linux-laptops-desktops?sort=s...

I personally hated the original Dell XPS13 Ubuntu's keyboard (loved the laptop otherwise, though the higher resolution screen was very reflective).
In Sweden you get to keep ruffly $33k of that.
Human genomes are typically stored as a diff from a reference genome (100GB -> 15MB), so you could do the same here.

Although if you can disentangle memories from the rest of the brain recording, you'd probably want to try running your own memory on Einstein's brain and see what that's like rather than actually use yours. It wouldn't be you, but a scan of your brain is not you either.
Some might say that, but it's never been true; it's always been fine to make changes to a GPL program for personal use, without even telling anyone you did, much less tracking down the original author to give the changes to them.

The spirit of GPLv2 is "I give you this source code, if you give it, or a modified version of it, to anyone, you have to (perhaps also) give it to them in a form they can actually use.".
I worked as a lab assistant in the Pychology department at the University of California at San Diego from 1974 to 1976. The lab I worked in had a PDP-8 minicomputer. While I was there they added a 32K word hard drive for $5000, and upgraded the core memory from 6K bytes to 12K bytes for another $5000. I sometimes think about what I could get nowadays with $10,000.
Interesting. Since I'm using a stock Pixel 3a, I figured it must be Firefox. But I'll try it on another phone to see if it's as bad there. Thanks!
Where are you from, and where have you lived, visited, and worked to come to this conclusion?

It's not at all what I've experienced as a US born after living on both coasts, a few different states, and a range of small rural and large urban cities.

Food sure, if you only consider culture as the corporate branded chains. That's missing out on a lot though.

Language, accents, nomenclatures, sayings, mannerisms, all widely varied.

Religions, there are dozens of Christian based sects all with widely varying spectrums of beliefs.

Work culture, still many good-ole boys clubs in certain geographies, pick yourself up by the bootstraps types in others, and anything you can imagine in between.
Growing a passion into one that makes money isn't rare. One of the optical engineers I work with is a master brewer at a local brewpub, working on recipes evenings and weekends, after decades of home-brewing. He does his side gig because he wanted to go bigger, meet more experienced people and try new things.
There are lots of ways to measure the harm of drugs. But pretty much all of them result in cannabis being among the least harmful.

Another way to measure is the therapuetic index. It's the ratio of the lethal dose divided by the effective dose. It's about 10 for ethanol and 30,000 for cannabis. Larger is safer.

This means drinking ~10 times as much as your usual amount of alcohol has a 50% chance of killing you. For cannabis you would need to consume ~30,000 times as much (which is probably not even physically possible).
If recovery is critical, use lzip and not xz. The compression ratio is the same but xz archives are particularly vulnerable to corruption.
When I moved to Canada, what really shocked me if that people would drink alone, or be the only one drinking at a table. Alcohol is something social in France.
This is the internal traffic between CF and you. So it's never exposed to browsers.
Apple is actually just really terrible at thermal design, simple as that. It's surprising, because you'd kinda expect them to at least be slightly competent (like they are in other areas), but they're just not.

They've gotten around it with M1 by building an entirely new chip that's power efficient enough that it practically doesn't need good thermal design to perform near it's peak. It's an impressive technical accomplishment, but it's also hilarious that Apple had to go this far to cool a chip properly.
I think this was the first Will Byrd video I saw, and what got me interested in Scheme, and PL.

He has some great tutorials on Youtube too.

I still haven't dived too much into miniKanren, but it's on the list with the Reasoned Schemer.
Ask HN: What is the biggest untapped opportunity for startups?
Biden’s proposed 39.6% top tax rate would apply at these income levels
This isn’t the first time this topic has been posted [0]. A couple years ago, the “who wants to be fired?” post hit the front page. So I disagree with you.

[0]: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
One business I kinda want to exist is a book warehouse/scanning operation. I send them boxes of books; they give me an app with access to digital versions of every book I send them. The whole operation is somewhere in, say, Nebraska, so storage cost is very low.
Wow. He spoke highly of you when I met him. My guess is you had not yet married, though - it was shortly after your visit - perhaps a month or two.

And yes, Paper Upgrade was awesome (especially if he did all the work on it). I was sad to hear he had shut it down.

Oh, and I'll make a note to myself never to work for Apple ;-)
In India, even govt run ISPs inject their ads on http sites.
There are plenty of FDA approved medicines that get yanked after more severe side effects are found.

Seems very unlikely Tylenol would be hard to get approval for today. You can overdose on almost anything. Tylenol is still one of the safer options out there when taken within guidelines.
Also refer these 4800+ posts at macrumors...

https://forums.macrumors.com/threads/16-is-hot-noisy-with-an...
There is ICU Normalization which supports different "Normalization Forms". After two strings, which differ only in a look-alike character, are both normalized according to the same form, they (might/should, depending on the form) compare as equal.

https://unicode-org.github.io/icu/userguide/transforms/norma...

https://www.unicode.org/reports/tr15/
You can click the time of the post, then vouch, another might help bring it back from the dead.
I remember reading something about AT&T consumer DSL and Fiberoptic having ping disabled to prevent ping floods. Maybe Orange does the same thing?
Thanks for the feedback! My idea for messaging is to play off the unity of messaging, gaming and forums together in 1 place.

My business idea is not that I'll be a game studio, for now I just want users to use my users. Once I have say, 1 million users, I'll try to convert to a more game publisher feel.

And 1 little question, if I let users play games, why would they signup?
They’re talking about the cert between edge and origin (I.e. cloudflare and your server). The client never sees that cert because they don’t talk directly to your origin.
Outliers do not invalidate a correlation.
That's just the white budget
WWDC Past Videos
He uploaded the content. You can't safe harbor your own self. Then he charged people for premium access. So blatant. It's humane that the damages were capped by the judge.
> That said, there is a plan to enable @nogc exceptions.

It's been implemented.
You're right that we've repeatedly revised understandings of reality that were based on mysticism and voodoo. But understandings of reality based on Science have only been refined and updated, rather than replaced. Newtonian physics is still accurate for day-to-day purposes. Similarly, the quantum nature of light isn't important for optics, nor steam or internal combustion engines, physical machines, radio, or even fast networks. Electricity concepts like voltage and current are still madly useful.

Scientific understanding has been about filling in fine details about the very small and very large, not throwing everything out the window every 5 years.
It's generally not that simple - you can't scale a 15w part to 150w and get 10x the performance, there's other factors at play.
Of course it does. Even had an amendment trying to ban alcohol. You ban alcohol and you get people in hospitals with withdrawal symptoms.

It is like trying to ban other drugs, withdrawal symptoms.

They are addictions and hard to overcome.
I’ve been running https://kvdb.io as a side project for a while. This weekend, I woke up to a bunch of alerts that the server had run out of open file descriptors (rookie mistake, I never expected to receive more than a thousand simultaneous requests).

It turns out someone wrote a tutorial on how to automate COVID-19 appointment slot bookings and used KVdb to store SMS OTP codes. Never expected it, but a great surprise. Long tail of SaaS is just wonderful :)
Is it though? After about 20 years of Emacs I have never thought it was slow regardless of anything found in etc/JOKES
So far, it's shaping up nicely. I am indeed kicking myself for not doing it a while ago, but I'm a better programmer now than then, and it's going to be a better job.
For people in this field, are we seeing any movement towards smaller, decentralized intranets that would be physically impossible to hack without physical penetration? It seems like the issue with a lot of these hacks of critical systems is that they exist on the open internet, where a team of security researchers in Russia can access them conveniently from home. If more things were gapped, it seems like the security benefits would be huge, and convenience costs could be worked around in various ways.
U.S. taxpayers who make $452k single/$509k married would have their top marginal tax rate increase from 37% to 39.6%. This will happen in 2025 anyways, assuming Congress does with regards to the Tax Cuts and Jobs Act.

The people who this applies to generally fall into the Top 5% of Earners tax bracket (Top 5% in 2018 was $309k+). [1]

[1]: https://www.investopedia.com/personal-finance/how-much-incom...
> You can drink openly at the beach.

In CA at least, drinking at most beaches is not legal: https://beachlifeexpert.com/beaches/alcohol-guide-california...
I am not debating the "I wish there were more options than SUVs/CUVs" point, as I ultimately _feel_ similar to you - I dislike the current market and I too wish we had more choice.

We don't, though, because people are buying SUVs/CUVs.
aight, i see my shortcomings, indeed it's pretty unsurprising that it messes with your emotions long term.. i only saw the usual removal of inhibition on occasional drinking.
How to Find the Median in O(n)
If anything I'd say the problem is we don't understand enough about how soil and its corresponding ecosystem works, the article even says that:

> Currently, regulators completely ignore pesticides’ harm to earthworms, springtails, beetles and thousands of other subterranean species.

Pesticides and herbicides are designed to kill certain things, with the assumption that "this is bad because it's not what I want to grow or it damages my crops", but that's missing a big part of the picture.

The permaculture movement seems to be taking the right path, hopefully some of those concepts can be adopted by big ag before they damage the soil too much.
Not to a desktop CPU no, but I'd rather see comparisons to laptops that don't have terrible thermal design. And to AMD as well as Intel - they're doing significantly better than Intel in the high power efficiency space afaik.

It just seems like a cherry picked fight - there's more to the laptop market watt/performance wise than 2019 macbooks.
Managing Complexity of IoT Sensors, Endpoints, Gateways, and Network Bottlenecks
How to find profitable opportunities on the Shopify app store
Critical digital infrastructure for financial services
Thank you I am going to give this a listen!
I'm not talking about running GDB ON the microcontroller (that's unlikely to be possible in most cases), but instead using OpenOCD (or JLinkGDBServer, or equivalent) to debug the running image via JTAG/SWD using GDB.
> While there are some computer algorithms that can help dewarp the pages after capture, it is always more reliable to just capture flat pages in the first place.

I’m sure this is technically true, but curious how much it matters in practice today? Reading Google’s book scanning patents I found a description of a de-warper based on capturing a 3d depth scan of the book, which I assumed they were using in order to achieve the scale of scanning all books on earth. Capturing and de-warping a 3d depth scan would also be leagues more reliable than trying to do a purely 2d image based de-warp.

> The lights must also be positioned to minimize glare and reflections.

For my personal photo scanning and archiving project, I used a polarizing filter on the light and on the camera in order to eliminate specular glare, it works amazingly well. Would that be impractical, and/or not work as well on books for some reason?
Bitwarden Experiencing Outages
Remind me to buy a pack of cotton t-shirts with "Stop pesticides" logo

https://en.wikipedia.org/wiki/Organic_cotton#Ecological_foot...
> The original author contributes the code under "or any later version".

That’s the part I’m stuck on. How would I do that on code I do not own, because I wrote it for hire?

I’m guessing there a legal answer to this question somehow, it has to have come up at some point.
If people cared they wouldn't be doing it
There isn’t much Vim can do which ed cannot, though.
Unsure about IA, but gloves are typically advised against[0] unless you have a suspicion that the book will be dangerous (arsenic ink in bindings[1], dust, mold or frass (sadly)[2]). Hand-washing before is typical advice but YMMV

[0] https://www.nationaltrust.org.uk/features/why-wearing-gloves...

[1] https://daily.jstor.org/some-books-can-kill/

[2] https://www.ifla.org/node/93094
I'm thinking of the regular wagons, like the Chevy ones from the early 70s. Just an ordinary car at the time, nothing at all special about them.

They used to be ubiquitous, suburban moms all drove them, and today it's like they never existed.
I've left after day one. I've left the first day 20 minutes in. HR presented us with a contract it said I agreed to not work for another company doing games for a year. I asked them to remove it but the guy acted like I asked for something no one else ever did. He pretended to ask HR and than said you have to sign. I took his sheet for review and left. The ride home was quick.
Etta | Denver, CO | Contract | Ideally Onsite, Potentially Remote | https://www.etta.io/

Etta is an AI-Dermatology decision support tool company started by 2 engineers and 3 dermatologists, that instantly identifies, screens, and scores the whole body for cancerous lesions and rashes. Etta is used by clinicians for Dermatology triage purposes, and is used by patients at home to map and monitor skin lesions and diseases in between appointments.

We've raised money, partnered with a research hospital, and are performing clinical trials this fall; there are additional health systems across the U.S. that are adopting our product post-trials.

We're hiring a computer vision scientist to help us with some of our gaps in imaging expertise. Our ideal candidate would have a strong background in computer vision (ex: geospatial imaging, autonomous cars, manufacturing, etc).

If you're excited about working with a small team and a research hospital that are reaching new frontiers in cancer detection, email us at hello[at]etta[dot]io

Further details and application portal here:

* Computer Vision Scientist https://angel.co/company/etta-io/jobs/1384472-computer-visio...
The HN Algoila page also doesn't link back to HN: https://hn.algolia.com/
I got a panic like that on macOS too.
Discovery Sound Technology | Nashville, TN | Full-time | Primarily Onsite, Potentially Remote

We predict hardware failures before they happen using ultrasound! Our main product is a handheld tool that allows technicians, primarily for HVAC, to quickly and easily detect issues sometimes years before the issues can cause downtime. We're an eight-person company looking for our 3rd Software Developer, ideally experienced with React/React Native. Bonus points for Machine Learning, AWS, or hardware experience

Email me if you're interested: `michaelp` at company website

Company Website: https://discoverdst.com/
I have to keep track of many unrelated things. I use two things to keep organized. First is my Outlook calendar. I have a repeating daily appointment with no end date. Inside the appointment is (a) list of short goals (b) long term goals (c) little notes to myself. My daily routine consists of scanning this list of goals and ensuring I schedule meetings and carve out focus time to perform tasks related to my goals for the next two weeks. I update this appointment daily with statuses. Second is a document I keep on google drive. It is a many page document with URLs. I long abandoned trying to keep a journal or onenote. I google the information I need and save the URL. If an article doesn’t exists I would write a blog post and save the URL. The document has headings, table of contents, and tags to make find and search easier.
stop treating self-issued certs as inherently insecure, please.
For side projects I generally run docker-compose via docker-machine. One VM with all my images. Works great!
And that’s 10,000 1976 dollars. Today that would be at least $25,000, or more.
A quick search makes me think it's called "pseudo locking" but I couldn't find documentation on how to use it from userspace.
Now that is a fascinating tidbit.

All this tax advantaged retirement savings is an almost entirely shadow-world when it comes to compensation. In tech places like http://levels.fyi has done amazing at leveling the playing field, but something small like an employer offering after-tax 401k, or only having horrible high fee fund options, makes a significant difference over the years.

Can you use a throwaway and name some names of employers that you know offer the after-tax-401k-to-personal-Roth option?
https://en.m.wikipedia.org/wiki/If-by-whiskey
so they'll believe them. You can disprove/prove it but you just won't convince them: the certainters on either side. The situation you describe is different to proof, it's more subjective, more to do with resistance.

It's an exact mirror of the practice you see of people who don't want to believe in aliens visiting Earth, inventing new ways to avoid the evidence, whether it's sensor data, witnesses whatever.

"The evidentiary basis for that (fairies and ghosts) is no stronger than that for aliens."

That's an objective sounding statement, but it's just your interpretation and preference. By what standard? If we had hundreds of thousands of people around the world saying they'd been raped / kidnapped by a gang of roaming miscreants dressed up as pirates, and these people had missing time, missing clothes, and then we had the EU maritime agency come out and say, "We've captured what seem to be swarms of pirate ships on radar". Would you still not believe them?
Back when this was a more popular problem, I saw a number of projects that used a rubber tipped stick to automate page turning.

I wonder why this never took off?
Clonezilla is good too. So is PING.