skysight-inc/HackerNews huggingface dataset:
You can probably remove Netronome from the list. They stopped developing/supporting P4 and mostly dead. They tried to switch to ebpf but I don't think they succeeded. Sad story
IANAE - but this is my understanding.

Until the early 70's the primary method of managing national economies was via the level of spending a country enacted with less regard given to the level of debt a country held. Economies were more tightly regulated, protections were much stronger in many western countries, and union participation was more common than today.

After a round of economic crisis, with each of them seemingly resistant to influence by the economic tools of the day, countries began to move toward managing their economies through a) promoting the freedom of the market (liberalism) and b) managing spending and economic control through the availability of money (monetary policy), with centralisation of national interest rate levels enacted through central banks.

This worked to a greater or lesser degree (economists seemingly cannot agree) and governments became more open to reform of economic institutions to give more power to the market. This has led to a lessening of strength in those areas of the economy which can impact the free-market (i.e. union membership) and has now become a force for removing non-economic impediments to corporations to seek the lowest wages possible (such as immigration reform to reduce labour costs, etc).

Meanwhile monetary policy has led to ever-decreasing interest rates, which has led to previously "non-economic" goods to become commodities. Housing is a great example, with houses now considered by many to be an asset class which should return continual return in capital value, rather than as a right. Bank accounts are returning functionally zero and less than zero percent returns, which impacts the poor most of all. NFT, crypto, etc, are another - these did not exist prior to monetary policy but they are reacting like an asset class whose existence is used as a stop-gap by those borrowers to avoid holding cash. The world is sloshing with free and near-free money, and it is sending asset classes crazy.

So, costs go up for the poor as they are competing for essentials with rich people who see the same good as an asset class to park investment. The poor get higher interest rates on their loans, so their cost of living goes up. Their wages are negatively impacted through increased competition with people not only in their local area, but globally. Their bank accounts - which previously have returned at a rate higher than inflation, are now being eaten away by fees, negative rates AND inflation.
Kill-or-cure says Coffee both causes and prevents cancer: https://kill-or-cure.herokuapp.com/a-z/c#term133 (same for caffeine (https://kill-or-cure.herokuapp.com/a-z/c#term94)
I don't know if it was deleted, as I can still see it, but it was flagged.

Based on the votes , there should not be a black bar (which is probably why there isn't).
I posted this since I remembered in grad school I had two alums from this high school (or gymnasium) and they used to tell me of all the mathematical resources they had -- evening lectures by famous mathematicians, intense oral exams on topics in mathematical physics, etc. Recently I was looking at Nekrasov's bio (https://en.wikipedia.org/wiki/Nikita_Nekrasov) and he, too is an alum. I think it might be of interest to look at all the famous mathematicians and physicists that graduated from this school.
As of about a month ago, Spotify can download content to watch too.
When not to use Event Sourcing?
Free Bricks are anathema to a company selling bricks.
Doesn't that quote seem odd to anyone else? I wouldn't think he had a "boss" any more being a multi-millionaire. He was certainly an odd fellow, but I wonder how much we know about the provenance of these random forum threads.
Yes if you publish a known insecure service like mongodb, on the standard port, on a well known VPS provider you can expect it to be automatically compromised within hours if not minutes.

As others commented, scanning the whole Internet is even not a problem so scanning a "limited" part where you are likely to see these services pop up is even less of a problem.

I think the takeaway is that you cannot hide in the masses on the Internet anymore, 10-20 years ago you could throw up a insecure server and it could be fine for a long time.

Nowadays you must assume someone will find and try to login to your service, even if you put it on a non-standard port.

Also, if it's a HTTPS service take note they when you get a certificate you will be announcing that domain to the whole world and publish it to a searchable database (for example https://crt.sh/ ).
My speculation is that this story was seeded into media to make people think that the politicians are going after tech. My guess is that they are actually not.

You should see the parade of politicians with hands out marching into tech offices prior to elections. You should also notice how tech is now so on message with whatever the politicians push. It is as if they are part of the power structure.
You can send different things to different requesting hosts.

Users at XYZ.gov gets the 0day, everyone else gets what is expected.
Taking in to account he was drunk he must be real
Self hosting is as easy as having the videos on a single location on the shared drive. Most companies that have employees use computers use internal shared drives like this to share files and VPNs for their employees at home to access them outside of the network, and have their own IT departments to handle all of this.
Forto raises $240M in funding round led by SoftBank, taking valuation to $1.2B
I think we do have the answers to all three of your points. It’s the Mediterranean diet. I don’t live in the Mediterranean, and I don’t eat their diet. But I’m pretty sure any honest person that knows much of anything at all would admit that it’s the best in the world based on outcomes. I certainly would like to switch and I am a guy and the midwestern US.
Docker is a minor part of the issue.

The main problem is lack of basic security.
My view is that for most cases the cost/benefit of multiple layers doesn't stack up. Given a fixed amount of available time and effort, you'll generally get better results by focusing that effort on making one really good layer - e.g. putting active monitoring in place so that you detect when your single layer breaks (whether that's an attacker from outside the network being able to connect to inside the network or an attacker with an expired certificate being able to connect to a live system) - than by spending half as much time each on two layers, IME.
For many things I’m sure. But I bet there are some general good principles.
"Lego Creator: Harry Potter" had something like this. If there is more than one piece of software with that title, the one I'm talking about was published... early 2000's? A little bit after the first movie, at least.
Inherited wealth is rather an exception: https://www.cnbc.com/2019/09/26/majority-of-the-worlds-riche...

Of course, rich kid will not end up like poor kid, but they will be much less rich than their parents.
It definitely took more than a weekend but we did launch a product in this space. And it has export.

http://miki.mimix.io
Not just videos, any online content is subject to loss. If you see something and like it, save it locally and back it up, whether its a video, image, text post, or an entire website.
Based on https://news.ycombinator.com/item?id=27570892 seeming reasonable to me, I’m inclined to believe the less sensationalized version of the paper than the breathless headlines that ran.
What strikes me about your reply is that 1, 2, 3 are all absolutely basic table-stakes things. SQL injection mitigation level things.

Have we suddenly stopped teaching the basics?
Can't you already attach arbitrary files as part of a tagged release? You can also direct link to any file you want which works the same as if it was uploaded. I'm not sure the file whitelist is adding any security here.
You still don't get SARS-CoV-2 out of any of the experiments they were doing. The experiments that have been done on chimeric viruses have been using SARS-CoV-1 or the SARS-CoV-1-presumed-progentor WIV1. RaTG13 is still 30-40 years worth of evolution away from being a SARS-CoV-2 backbone and you can't get it from randomly bolting on different hACE2 binding proteins to a RaTG13 backbone. And while the pangolin spike is closest to SARS-CoV-2 it is still not a perfect match.

So they were creating chimeras from a spike they found that was similar to the pangolin spike but has never been published. And they were combining that with a backbone that they found that was RaTG13-like but similarly has never been published. Even though their prior targets have been SARS-CoV-1 and WIV1 backbones, and they skipped over RaTG13, which would have been of more interest to study because of its association with the miners, to select an RaTG13-like backone of an unpublished virus. And then presumably they did all this in HELA cell lines expressing human ACE2 and did serial passage / gain of function so it became well adapted.

Then even if you have all this happen, you somehow need to get that virus up someone's nose. Because petri dishes don't cough. And we know that SARS-CoV-2 doesn't spread pretty much at all from surfaces. And you need to get a sufficient infectious dose. So someone had a party in the lab and decided to chop up a dish of proto-SARS-CoV-2 cultures and rail a line of it like it was coke or something.

Or, nature does chimeric (recombination) gain of function experiments all the time, and every confined animal farm in China is a bioreactor in a lab doing stochastic serial passage experiments with "lab workers" who have never even heard of biosafety levels.

https://www.biorxiv.org/content/10.1101/2021.01.22.427830v3

https://www.cell.com/cell/pdf/S0092-8674(21)00709-1.pdf

https://www.nytimes.com/2021/06/14/science/covid-lab-leak-fa...

https://www.nytimes.com/2021/06/14/world/asia/china-covid-wu...

At least everyone seems to have stopped yapping about furin cleavage sites this time.
I wouldn't say unlimited but 'better' or 'much better' - sure. But why does it make a difference? Men and women are different in many respects, and sex is one of them. For example if you tell a woman that getting on a dating site is great, because it will give them 'easy access to sex with multiple partners' - most/many women won't see it as some great benefit, because 'unlimited access to sex' isn't something that women see as priority. As a guy I understand why easy access to sex is great, but that's not how many/most women see it. They go to dating sites for other reasons. And when they don't get what they want - it's just as frustrating for them as it is for guys. Having said that I still believe that dating apps are great for meeting new people.

Try to run your argument about 'unlimited access to sex' outside the dating app world. Let's take bars. A woman may (theoretically) find a new sexual partner in a bar much easier and more frequently than a man (with a notable exception of gay bars). True? True. Does that make her life easy and mens miserable? No. If finding a new sexual partner in a bar every week was the most important thing in the world, gay dudes would be happiest people around. Finding sexual partners in school and universities and workplace is also easier for women than men. Also true. So what? Does it make women happy and men miserable? Not in my experience. I've seen happy men and unhappy women (and the other way around) in and outside relationships. That's life. And 'easy' or 'difficult' are also something to think about. Is starting a business easy? No, it's HARD. Is becoming a doctor easy? No, it's HARD. What's easy is pumping gas at a gas station, but not very satisfying. Again, coming from a personal angle here - but I've struggled with women in my late teens/early twenties. However I became fairly successful in many niches, including interpersonal communications. And I know 100% that should I find a new sexual partner, I will be able to do so and dating sites is the first place I will to go, because that's where women that look form men are. And I've also learned by observing that the most miserable people out there are women who blame 'men' for things and men who blame 'women'. In my 40+ years I've seen INDIVIDUAL people going bad things (both male and female), but despite what's being told do us every day - I've never seen bad gender behavior. Toxic masculinity or toxic femininity, 'men are terrible' or 'feminism has ruined women' - that's simply not true in my opinion. Great people are out there. You can find them. Just don't expect relationships to be easy - they aren't.
Agreed, seems like it’s harder to tell everyday what is considered a serious conspiracy theory and what is beyond the pale. In fact I am not sure any conspiracy theory is now considered beyond the pale, seems like anything one comes up with will eventually generate a set of believers / adherents.
I'm sorry that you have to go through this, it seems inevitable these days. However, while it's nice that you're sharing your analysis of the situation, you start off by downplaying the attack and calling them a script kiddie. If for example someone finds out they can brute-force Facebook's 6-digit password reset token because they didn't put any rate-limiting in[0], are they a hacker? Is there major skill involved in doing so or just a million-iteration loop to go through all the combinations? They received a $15,000 payout indicating that Facebook values their mistake seriously (although I'd say it's worth much more given it's a guaranteed full account takeover.) So regardless of what you think of the attack, easy or not, you still made a security mistake and you should admit that first and foremost rather than brushing it off as a "script kiddie situation".

Other than that, it's commendable that you have working backups and are responding calmly and with a plan. I hope you get everything back in working order smoothly :)

[0] https://www.theverge.com/2016/3/8/11179926/facebook-account-...
I actually have a copy of Data I owned in my own physical property. Not in a cloud server and account. iCloud, still to this day have somehow a small chances of corrupted backup. Apple deleting iCloud Backup after 60 days ( I think extended to 180 days I am not too sure ) if your devices does not connect to it even if you are continuously paying. Fully encrypted iCloud Backup and Photos so Apple dont see any of it.

Numerous other things.
Problem is, you need to figure out a way to send and receive data from the backend (an API), a way to show validation errors, a way to do i18n and translations, a way to access your database (an ORM or similar... no, no raw sql, thanks , a way to do authentication and authorization, an admin or a cms to browse your database,a way to do background jobs or long running tasks, a way to send emails, a way to write CLI maintenance tools, a migrations system, and so many other things I could spend all day talking about.

Of course for a todo list list app or a landing page it is an easier solution, but real world applications need a lot more things you'll have to figure out by yourself. I'm telling you this from my own experience with Next. What we used to give for granted with Django suddenly we found out we had to rewrite a TON of code ourselves, and glue togheter many libraries of varying quality and maintenance, and the result wasn't much better or documented or performant or enjoyable as what django used to provide us with.
> But even if we don't get the full benefits of static typing (more useful IDEs, better performance, eliminating certain classes of errors, etc.), at least we mostly don't have to deal with the insane errors that you get with implicit type coercion in JavaScript.

I find vscode + pyright useful for static typing. My only complaint is that pylance is closed source.

Better performance - transpile to a statically typed language. Forces you to stick to a small/sane subset of python.
That, and he was already wealthy by the point the OP ran into him. I’m still poor and every additional dollar I receive increases my happiness immensely. Dollars buy dignity and he had no restraints in life at all financially.
I had a similar experience. I spent two minutes using the site, clicking around - and I still have no idea what it does.
I started to use this product and it's definitely fun! I'm interested in how the others use and if it is accepted by large number of users.
Anyway, I think this merged well of nostalgia and modern service design.
At my org we just have one user with reporter permissions on gitlab which is shared by a bunch of people who just write their name at the end of tickets or comments. For more involved people who need to be assigned to things or pinged, they pay the full license.
So he discovered super viagra? Maybe it was some phizer executive who got him done in.

All jokes aside though rip, McAfee was a really colorful character and strangely inspiring in some ways, it's unfortunate he got himself stuck in a dark place
Yes, one heinous act can outweigh all the good someone did. That's why we lock up murderers. That's not "cancel culture", it's every functioning justice system on earth.
This is the end result of the internet being a firehose left on for multiple decades. Signal is washed out.
Yes, they absolutely have some culpability, but making a change like this without alerting the administrator of the system is the rough equivalent of any process with 'root' privileges on any one of your servers suddenly executing an iptables command to allow all access. You'd only know about it because you got hacked.

Such drastic changes to the security model should only be one after explicit instruction.

The number of companies that operate without access controls between servers on the same segment is unfortunately quite large, database security controls are - again - more often than not left at their default setting and those too are quite often insecure.

Defense in depth always has limited depth, though I totally agree that running a database without access controls is not the way to go.
> This piece of data is highly dynamic and processes every 30 seconds or so based on hundreds of thousands of metrics.

Perhaps you guys need a ... database? Relevant HN discussion few months ago when tailscale migrated from json to etcd: https://news.ycombinator.com/item?id=25767128
It uses an OAuth flow so you're actually entering your credentials on https://authorize.music.apple.com/
which gives this developer a token to access your data (usually a limited subset of your data. I know on the Spotify OAuth screen it tells you exactly what data, not sure about Apple Music)

So if your token gets hijacked then the bad actor would probably be able to view your playlists and listen to your music.
I saw this mentioned on twitter yesterday, Microsoft Attack Surface Analyzer, an open source toolset for seeing what config changed when performing software installation.

https://github.com/microsoft/AttackSurfaceAnalyzer

Interesting to see such a strong example of where tools like this could help the very next day.

Note: I haven't used this yet, just saw it and made a note.
S.F. will require all city workers to be vaccinated
See https://acowebs.com/mongodb-security/
If you want to be even more disgusted look into how nursing home works. A family member got moved into one (against our recommendation) and they've borderline taken everything from her. Social security checks are signed over and she has no autonomy.

There is no glory in getting old. The elderly are robbed blind at every turn.
That's fair enough, I'm in agreement. I think what I should have communicated (as dentemple did) is that the benefits outweigh the consequences.
Agree. Then again if you use JXL in your Jira you have a more agnostic spreadsheet view of your issues as well. Pretty neat. https://jxl.app
Yea, sure he does. For a day a month probably.
I feel like kids learn a lot about how to socialize from other people. How much worse off will they be learning from screens and people acting (pretending to socialize) instead? Additionally, they won't have the ability to practice socializing either.
> A genuine meritocracy would...

You have it right there, most businesses that claim to favor meritocracy actually favored signalling / credentials / pedigree. Why? Maybe they assume credentials are a good proxy measurement for capability.

Regardless, I don't think people are capable of evaluating people more capable than themselves. Kind of like Dunning Kruger at work, or how a writer isn't capable of writing a character more intelligent / capable than themself.

So, the only place where you can find 'genuine meritocracy' is where the most capable and individuals have not only risen to the top, but also haven't succumbed to the Peter Principle along the way. These are highly creative and adaptable. They aren't afraid of making and learning from mistakes. Rare.

All that to say, just because meritocracy is hard and most businesses fail to achieve it in any meaningful form, doesn't mean it does not exist, nor does it mean it isn't worth striving for
There is a great misunderstanding of what I wrote.

> I agree that that using destructive blanket terms for groups and making caricatures of people is not novel ...

You are agreeing with something I didn't say. I said: "we both know we are engaging in an old debate about double-standards and 'reverse discrimination'. Let's not pretend it's some novel thing we're proposing"

Also, you keep using the world 'subjective' like it is disqualifying. You can see my GP post for why.

The idea that we don't know about many vulnerable groups in our society is absurd and theoretical; there is plenty of objective evidence and it's obvious who they are. I'm not even sure what you wrote really says anything to the contrary.

It would have been great to have a genuine conversation.
Is it a boneyard, or is it just a boneyard?
As many are pointing out, this isn't about pushing prices down. They're free to raise prices as a way to take less from restaurants.

You're making an implicit assumption that these companies deserve to be profitable, or break even. But they don't, and they shouldn't be allowed to abuse their position as a platform to squeeze restaurants who don't have a lot of choice. Food delivery for low prices is not a sustainable business.
I did a quick search of Twitter.[0] Lots of uses of "TERF" and all of them have extremely negative connotations. "TERF" is equated with transphobia, "hate"/"hate speech," bigotry and even an intention to murder.

I'm not sure how specifically you would define "slur," and I'd be curious to learn, but to my mind "a word used almost universally to defame and cast hyperbolic, inaccurate aspersions on an outgroup" seems like a reasonable working definition that encapsulates all other slurs as well as this one.

[0] https://mobile.twitter.com/search?q=TERF&src=typed_query
Neobank tackles problem of emergency medical debt, betterbanking.app
Fat models are clearly a bad idea. But DDD (also called view models elsewhere in this discussion) seem to be better than function based views.

My bias comes from working in a dot-com era startup which had a single 2000 line java function to compute tax.

+1 for static typing and avoid embedding types in variable names.
1. I didn’t say that sex is binary, just that it’s objective. You’re male, female, or intersex, and this is decided by objective facts. Gender is not.

2. Transgender is not new. But the broader public debate about the distinction between sex and gender is recent.
Seems unlikely to be a quadcopter given the 100mph airspeed it was capable of
It's possible to check every IP on the Internet nowadays so you don't need to keep a list. You can just brute-force check every IPv4 address in less than an hour. I've written on the subject a few times:

https://blog.shodan.io/its-the-data-stupid/
I know at one point she said she is happy to remain under conservatorship so long as it’s not her father in charge. Her situation, if accurately described, sounds monstrous.