skysight-inc/HackerNews huggingface dataset:
Different sources quote a half-life of 3-5 hours in healthy individuals who are not pregnant.

https://sleepeducation.org/sleep-caffeine/
Caffeine begins to affect your body very quickly. It reaches a peak level in your blood within 30 to 60 minutes. It has a half-life of 3 to 5 hours.

https://www.ncbi.nlm.nih.gov/books/NBK223808/
The mean half-life of caffeine in plasma of healthy individuals is about 5 hours. However, caffeine's elimination half-life may range between 1.5 and 9.5 hours,

https://www.news-medical.net/health/Caffeine-Pharmacology.as...
The half-life of caffeine (time taken for the body to eliminate one-half of the caffeine) varies widely between people, depending on factors such as age, body weight, pregnancy status, medication intake and liver health. In healthy adults, the half-life is approximately 5 to 6 hours. Heavy cigarette smoking can decrease the half-life of caffeine by up to a half and in pregnancy, the half-life may be increased by as much as 15 hours. [...] The stimulatory effects of caffeine may begin as early as 15 minutes after ingesting the drug and last as long as six hours.
The idea of merit isn't terrible in the abstract - it's basically the idea that the person with the most aptitude for a specific thing should be one doing it, particularly instead of the most connected, most high born, etc.

That the connected and high born should turn this to their advantage by creating measures of merit that they buy just like indulgences is not surprising.

Because of this, I tend to think of merit as the ability of someone to make the most of their circumstances, as someone with a pedigree of indulgences is of suspect aptitude.
If it was fixed wing, it could be pure electric. Zipline’s drones have similar capability. If it’s a quad copter (or similar), batteries wouldn’t last long enough and so it’s burning a fuel of some sort.
No this is not the right approach at all in my opinion. What stops someone from one of the countries using IP's from another? Teenagers in USA are gonna try and hack your stuff as well... I was one of them in my youth. You can't just block china and half ass your setup. You will get attacked from everywhere always. Anything you put on the internet is a target. Always has been always will be.
I do agree with your primary point: I think there is more to the winner-take-all economy than just technological change. However, when you say "In theory technology should democratize information and power..." In what theory? Technology like the internet, global media, and global supply chains means in the past where you could have many individual regional markets, with regional winners, now you have a lot fewer, but much larger markets, which concentrates power.
it is unfair to require leetcode bullshit interviews from candidates who apply for a job via the normal route but at the same time have programs in place where people can enter some kind of internship or training program via which they can be hired into similar positions without going through the exact same interview process. in fact, it is illegal.
Unfortunately people are greedy. I don't think there's a generous salary that would cause them to not want more. They could be making $50M a year, and they would still want more.

I don't know what the solution would be, perhaps your suggestion isn't too bad and a good start.
I think it’s worth looking into a possible involvement of naval pilots, as sometimes even the best of the best write cheques their body can’t cash or buzz the tower without clearance.
Anyone else remember the Asimov yeast plants in the robot series. Yeast was all anyone ate except for the elites who got burgers
Markdown Monster – Markdown editor with blog publishing and Git integration
Book Review: “Feeling Great” by David Burns
Google Analytics is the last 3rd party thing we use on our site after recently ditching Google Fonts.

One thing missing from GA competitors in my opinion is some explanation of what to expect when switching. I would like to switch but am not just going to swap analytics and have stats go up or down in a wild manner because things are calculated differently.
Good luck!

I appreciate your transparent account of the situation but what does it say about your company if your database got popped by a “script kiddie”?
> The article describes the drone buzzing the original CBP chopper as well as flying an orbit around the police helicopter. It is reasonable to suggest that a collision between the drone and either of those helicopters would be fatal for the pilot. No military pilot I know would ever create the type of risky scenario as described here.

Here's a video of CPB buzzing a crowd in a helicopter kicking up rocks at them. This happened 2 weeks ago. https://twitter.com/i/status/1401952522319843329

The idea of idiot pilots doing asshole things to other people is par for the course. No reason why this couldn't be military assholes either.
Yes but self hosting is just so hard it’s cost effective for a lot of corporate users to freeride on social networking in general
this looks like a kneejerk emotional reaction.

how is this bad?

cryptocurrencies aren’t going away.
Continuously consuming refined sugar and highly processed carbs is relatively new.

The resulting insulin production inhibits fat oxidation and increases fat storage.
if you know about it, why don’t you do something about it?
>base64'ed DES-encrypted primary int64

Block ciphers (such as DES) don't collide. If they did there would be no way to decrypt them because a block could be decrypted into multiple valid plaintexts.
Why hasn’t anyone questioned the order of the presented events? Could he have easily killed himself first, then have been extradited?

It would be a convenient front run story to alter public perceptions — and front running would be the appropriate way to classify the death
Also from the referenced article:

> What is beginning to emerge from these multiple sources of data are the increased risks of variety of types of violence, though in particular sexual violence, faced by transgender people

Their conclusion directly states that there is an increased risk of violence for transgender people.

Secondarily, their conclusion also hints at there being empirical evidence that one cannot extrapolate from murder rates to cover all forms of victim-having crime. That would imply that your argument is indeed suffering from the law of averages.
downvoting won’t help you in 20-something years from now
The poster you responded to (or should I say ranted at) told you nothing about their beliefs in regards to other animals.
In a world _no one_ has said skills and tools anyone becomes auto qualified in relative sense
Airtable is the most amazing thing that has happened to UI in years and it's really nice to see their ideas crawling on to other contexts like GitHub here.
> old IIS comes to mind

And msie for which it’s a hard limit not just a default.
More accurately, I might say it's a protestant Christian app, whereas Mormonism considers itself restoration Christianity and may not fit as well here.
Oh look, another conspiracy theory! That didn't take long. Does this one tie John in with Epstein too, like another comment's conspiracy theory does?
You don't lose out on the fields you mentioned when you switch to constructivism. Your assertions become more precise. If anything is lost the mainstream thinking is it was not consistent to begin with.
The world would be a better place if more of you were more like him. RIP
I agree with only the third of those. The other lessons I'd take would be:

1. Be cautious about trendy technologies that promise to make life easy - often they cut corners to do so, and often security is one of those corners

2. Use real authentication rather than network firewalling. Make your datastore TLS-only and require a valid client certificate to connect; that way it doesn't matter if it's exposed to the internet (indeed I'd argue you probably should expose every server to the internet - much like Chaos Monkey, it's counterintuitive but it forces you to build your systems with the right kind of resilience from day one)
Right, and there should be a sense of shame associated with being pwned by, for example, not setting a password on your public internet accessible (redis || postgres || mongo) instances. You didn’t get hacked, you let a child have their way with your application. Hence: script kiddie
(Earlier in the thread I mentioned my affiliation - I am not commenting in any official capacity here)

Sorry about your prior experience. I think early versions assumed a systems knowledge that was at odds with the idea that anyone could just start using a database without any prior database knowledge.
Because CBP encourages assholes, while the military usually kicks them out (at least if they're assholes to civilians). One of the two values discipline, and it's not CBP.
You are conflating sex work between a sex worker and their client, and sex between a boss and their employees. Most of your comments are conflating sex work, and sexual abuse. These are two different issues, and the data shows decriminalizing all parts of sex work, both buying and selling is the most effective way to make sex work a safer occupation.
It was high enough, maybe 60-100ft that it could have been quiet and we just didn’t hear. It was off to the left a little as well.

I say drone only because it seemed about that size, didn’t see it beyond the general shape and darker color unfortunately.
Doesn't seem that uncommon:

https://www.prisonpolicy.org/blog/2020/02/13/jaildeaths/
I agree, and not just for text classification. Its a good baseline for anything that looks like text (if you train a model from scratch), e.g., URLs with some basic preprocessing. This is because FastText uses character n-grams; the consequence of this is substring similarities are exploited.

Some things to note:
(1) FastText comes with a classifier but I have often seen good results with using a difference classifier like LightGBM or a SVM.
(2) If you want other word embeddings to compare with as well, magnitude [1] is an easy to use library.
(3) FastText now supports multiple languages [2].

[1] https://github.com/plasticityai/magnitude#pre-converted-magn...
[2] https://fasttext.cc/docs/en/crawl-vectors.html#models
Use the new rootless mode and you won’t have issues with it inserting it’s rules above UFW.

You can then expose ports to a specific IP and use UFW to allow it.

Much cleaner than any UFW-docker hacks out there, and more secure.

https://docs.docker.com/engine/security/rootless/
I'd argue that that's a backwards approach and actually what lead to this hack - building this system around the database servers not being publicly exposed, thinking the database servers weren't publicly exposed, and then when you accidentally publicly expose them (and you will sooner or later, a network is too big a boundary to protect all of it) it's a disaster.

It's better to build every server for public exposure from day 1 and treat all connections as potentially hostile, even if they're coming from the internal network.
I think by default mongodb has no enabled access control, so there is no default user or password.
I know it's a mirror. As you say still will be, just more mirrored back.

Just pointing out it's already 'on GitHub' as much as it will be.
Honey is antibacterial (it impedes their growth).
I wanted to mention that in practice, most FTP server implementations are not unicode compatible and are very likely vulnerable to effective-power-like abuses of RTL/LTR switching characters as well.

Let alone that probably all server implementations on Windows seem to have been a fork of BSD's original ftpd at some point, which had an RCE vulnerability when the password exceeded the limited bytelength of 256 bytes iirc.

Even software like ProFTPd where vulnerable over 30 years later.

Just writing this to make a point to stay the fuck away from FTP, because software is heavily outdated in that space and never updated to fix issues. Use ssh/sftp, always.
I think this could be great for competition with the big players!
It can execute Lua, I'm sure there's plenty of fun for hackers to have with this: https://redis.io/commands/eval
I suppose we'll find out if/when the data will be leaked as the hacker claims?
When i see these GDPR flashing popups i just close the news pages now.
The road to hell is paved with good intentions.
Thanks! Why do you prefer 1-D notations for paper programming? I think of the second dimension as being one of the primary advantages of using a pencil rather than a keyboard: on the keyboard it is awkward to move around but it is easy to spew out thousands of characters, while for the pencil the situation is precisely reversed.

Thank you for linking me to Grzegorz's post, which is a much better explanation of Plankalkül than I'd seen previously! I just celebrated Zuse's birthday on Tuesday. I jotted down his TPK example in paperalgo and found that it was about 64 symbols (characters and non-character lines), about a quarter the size of the Plankalkül version he gives†:

https://ibb.co/4YpdYnD

But there are definitely some real parallels: the horizontal bracket for the loop and what I take to be the tabular condition-consequent-condition-consequent representation of conditional logic, with each consequent to the right of its condition, and of course the use of subscripts for array indexing. It is a peculiar combination of the comfortable and the rebarbative—why A9 or W2, for example?

______

† If we count by non-whitespace characters, it's a bit over a third the size of his Python, too.
Not just bones. Muscle mass and the rest doesn't just disappear. In the sport i do (rugby), it's been evaluated to be a danger to players (increased risk of injury), and i would wager most contact sports are similar.
The article says “deprived” areas were more likely to have alcohol related ambulance calls.

Dickens wrote over a hundred years ago that alcoholism was the result of misery and wretchedness and not the other way around.

> Gin-drinking is a great vice in England, but wretchedness and dirt are a greater; and until you improve the homes of the poor, or persuade a half-famished wretch not to seek relief in the temporary oblivion of his own misery, with the pittance which, divided among his family, would furnish a morsel of bread for each, gin-shops will increase in number and splendour.

https://www.charlesdickenspage.com/gin-shops.html
Yeah - kinda crazy theres no auth by default AND eval is allowed. Pretty trivial for someone to have it download a script and run it pretty much with free reign.
thanks for writing this Dan, it's a breath of fresh air in an otherwise pretty exhausting thread. sometimes I think I shouldn't even bother in these conversations because it takes a lot of patience but I worry about people on here assuming the bad faith activists you mention speak for me and my trans community. comments like this make it worth it.
Heads up, this depends on what you mean by double shot of espresso. One ‘payload’ of espresso as regularly consumed is usually 15-18g of ground coffee and has about 75mg of caffeine. Confusingly, traditionally and especially in Italy this is called a ‘double’ espresso. Because of that reason it’s better to talk about caffeine in terms of grams in.

Unless you are pulling two shots of espresso into the same cup (which will likely overflow your average espresso cup) your caffeine intake per shot of espresso is 60 to 75mg. I don’t know of any portafilter basket that would let you get to 150mg in one pull, that would be a quadruple espresso.
> I don't think there's a generous salary that would cause them to not want more.

The point is that you give them a generous salary and take it away if they misbehave. Every carrot is a stick in waiting.
Britney Spears asks court to end conservatorship
I guess I completely disagree with your sentiment that somehow being casual means you're being friendly. Those are two completely unrelated actions.

You can be casual and a jerk. You can be friendly and professional. Someone telling me "oof" when my business is offline and losing money (or insert major issue you've caused me) isn't a social nicety, it's something I would expect a buddy to say if I told him I lost money playing poker.
It says more about Docker than anything else. This is an insane default setting, it's something that should have been fixed when it was first brought to their attention.

Computer security is hard enough without loaded footguns like these lying around.
You really should clean up your soft deleted objects. They are a perfect place for hackers to get data that you thought was gone.
Vercel tooling is the best I’ve worked with in quite a while in the web dev world. It makes so much sense for our team to pay for it - it’s incredibly productive. Glad to see this.
Quite often people claim (for example talk talk) that they were attacked by a nation state. It often later transpires that it was a 16 year old from Croydon using a basic SQL injection vulnerability.

At least they’re being honest up front. but yes it does show a naivety and inexperience of basic security.
You mean like people judging others on Twitter based on gossip and quotes out of context? Society could do a lot better by imitating the justice system standards a bit more. The system was created that way for important ethical reasons.
No hacking skill or knowledge required to simply download and run someone else’s script. That’s why they are called “script kiddies”.
Yeah, it's been more than hour. How dare the police not apprehend anyone yet!
> What stops someone from one of the countries using IP's from another?

That's why this approach is only really complete if supported at a national level. Cloud providers in the US shouldn't be allowing foreign actors to rent them, for instance.
Yeah, there's the whole "zero trust" possibility which I didn't mention. If you do authentication/authorization really well, you can stop doing (2). For things like databases, I think it's better to treat them as if they _could_ be exposed to the open internet, without actually doing so. It's generally not the case that anyone on the internet needs to query your DBs.

As described, you're _only_ relying on client TLS to protect your database. What if the TLS key leaks? So you're down to one layer again - one mistake and it's game over. So maybe you need Hashicorp Vault so you can have client certificates with very short validity periods. So do you expose Vault to the Internet, so you can fetch your client certificate to query the DB? What if Vault has a bug? And it's turtles all the way down ...

I love zero trust designs. But I think saying you can just slap client TLS on the problem and be done is laying the foundation for a repeat of this event - however you look at it, you want redundancy in your security.
The n-word is a slur, yes, that has no bearing on whether other words are slurs or not. Do you have a point or should I just accept that whatever word you deem a slur, is one?
Nope. The Air Force doesn't conduct unauthorized UAV flights in civilian airspace. They're paranoid about causing an embarrassing incident that gets a general hauled in to Congress for questioning.
Shameless plug: if your team uses Pull Requests but finds GitHub code reviews to be somewhat painful, I'm building https://codeapprove.com to solve your problems.

I think with the right tools and processes GitHub PRs are an amazing collaboration tool.
I didn't claim they were, just pointing out it's 'on GitHub' as much as it will be already.
Respectfully, all of the suggestions are good, as are your two. But, segregating your public traffic and private traffic is an excellent way to prevent these sorts of issues from happening. While it doesn't prevent someone who's compromised your network from accessing the DB, it means someone can't fat finger a port and open a DB to the public internet.
I agree. The "AI model" on the website takes that into account.
> I'm not trying to have a conversation, I'm trying to debate

I can tell, please consider relaxing a little. I appreciate the time you put into responding to me, but FWIW your extra long reply is almost completely straw man from my point of view, and getting unnecessarily aggressive and hyperbolic now. I don’t need to debate this, because you’re not actually addressing my points, because you haven’t actually understood what I’ve said, because you’re trying so hard to debate. This conversation wouldn’t have gone down like this face to face, and as engineers there’s a pretty good change we’d agree. Good luck, TTFN.
Debian has no firewall rules by default. Up until recently also home directory permissions that were not good for multi user systems. Both by design.

Defaults are often insecure but maximise interoperability or general usability. Look at Windows !
>No military pilot I know would ever create the type of risky scenario as described here.

While I agree with your general sentiments, I vehemently disagree with that point. I have no doubt there are endless undocumented instances, but here's a pretty major public one:

https://en.m.wikipedia.org/wiki/1998_Cavalese_cable_car_cras...
This is probably a bigger deal to you than it is to the company. Your CEO may have an emotional attachment to you, as you do to them and the company, but your presence is not going to make or break the company, at this point.

Be straight forward with the CEO, or a trusted board member, and tell them it's time. You're not in a rush to leave, and can work with them, within reason, but it's time for you to move on. Then, see where it goes.

Staying, when you don't want to be there, is going to damage you and everyone around you. You are doing the right thing, but that doesn't mean it's not difficult.

Best of luck.
What is manual about a bee like barista?
If you give out your personal information to, for example, newsblur- the odds are very, very good that this wasn’t the first time you’ve entrusted a company to protect your privacy, and whether you realize it yet or not- you have already been sorely disappointed.
Yeah, even if we permanently solved crime somehow, dealing with aggressive large predator wildlife is another oversight of national level gun control absolutists.

Assuming we want to continue allow humans to camp in the wilderness, I think we should allow people in remote areas to have guns as a last resort protection measure.
Not sure what part you're referring to but it's more or less overt that many of them think trans men are basically women. This combined with what they say about trans women is most of where the accusations of essentialism come from.
Could you point to this explanation? The various explanations that I have encountered use a combination of ridicule and a disregarding of multiple-sensors multiple-observers and instead only talk about camera failures, sensor failures, human eye-sight failures and vision phenomenon.