skysight-inc/HackerNews huggingface dataset:
Network services really should have auth by default even if they only bind to localhost. There’s so many ways that a localhost service can become accessible to attackers. Any process with network access, no matter what user it’s running as, can access a localhost service - UNIX sockets on the other hand can be restricted by the usual user/group permissions. A localhost service can be exposed by e.g. an SSRF bug from a web server on the same machine. Or, accessed by a browser on the same machine browsing untrusted sites (an attack model for desktop services which open local ports), and so on. (In case you believe that the HTTP protocol restriction in the latter two cases protects you - protocol smuggling over HTTP is frighteningly effective!)

Of course, as seen here, a network service binding to more than localhost is strictly more exposed - and auth should be required in those cases (even when the service should ostensibly be LAN-only).

Secure-by-default is the best kind of security.
Wow, TIL - I never click those ads because I assume the games are aggressively monetised nonsense but it didn't occur to me that the game might be completely different from the ad.
Psychedelics ("hallucinogens" is a pejorative, inaccurate, and outdated term) are some of the most unpredictable of drugs, but there's been a lot of research that has shown the chances of a constructive experience can be maximized with the right dose, set and setting, especially if trained support and integration is available.

Many of the people who suffer from paranoia and other adverse effects from psychedelics probably take them in the wrong setting, with the wrong setting, and in too high a dose for their experience level.. and often unsupervised too.

Education will help here, but ultimately less than ideal use can't be completely eliminated as some people won't care, won't listen, won't believe, etc... But even that kind of use will be way, way, way safer if the substances they take are legal, since they can at least be certain they'll be taking what they thought they bought and they can be sure of the substance's purity and dosage. On the black market it's all a crapshoot, and lots of people have died that way (even if they don't get shot by a cop in a raid or get murdered in jail if they get arrested and imprisoned).
Seconding Hello Chinese as a fantastic app. But I just want to share the apparently unusual-around-here experience that Duolingo was one of my best tools for learning and retaining Chinese vocab. I suspect it’s because the whole experience is fine-tuned to be vivid across so many sensory dimensions; when I remember a word I learned in Duolingo I can often also remember the exact place I was standing when I learned it. That does not happen for me with Anki or Hello Chinese. It could depend on brain type or something but I don’t think their success is purely a fraud.
What might be missing for you is other input: do you read Wikipedia, watch the news, listen to the radio or anything like that in addition to Duolingo?
I got a helluva chuckle out of this. Thanks.
I think we have to agree to disagree here. Taking away a person's property, freedom, or life for what they choose to ingest and preventing people from voluntarily entering into and being bound by contracts is antisocial by my personal values.
I have a Pixel bought directly from the Google Store, so I assumed it'd have the most recent features, whatever they are! The Pixel 3a, though, doesn't seem to do anything special with QR codes, besides photographing them.
Using Diffbot Knowledge Graph to pull data about startups in Oakland, CA
And now Google is picking up the definition of footgun(1) from Hacker news!

(1) https://i.imgur.com/pHlLFJA.png
There is a novel about this very thing called Ministry For the Future.

In the book, the UN agency formed to enforce the Paris agreement has no teeth. It takes some high-profile climate disasters to get some countries to pay attention, and some eco-terrorism to get corporations/one-percenters to pay attention. Only after that does the agency get any real power to set standards and hold anyone to them.

It’s a broadly optimistic novel despite all that. I’m less sanguine about the outcome in the real world, but I fully expect some of the same tragedies (massive heat waves that kill maybe millions) and terrorism (drone swarms bringing down airliners/private jets) to occur.
The founder (Steve Kauffmann) is a polyglot with a youtube channel where he talks about effective strategies for learning languages, sometimes even in other languages. I can’t recommend it enough.
No one can know in advance what mental state alcohol will put a specific person in when they get drunk, and many drunks hurt or kill others all the time.. much more so than the users of any other drug.

Yet we've learned from the Prohibition of the 1920's and no one's seriously suggesting making alcohol illegal again.
I dated a girl with poor eyesight, and absent a digital version her method was the phone flashlight and holding the menu very close to her face. So the physical version was workable, but a pinch to zoom is still more dignified.
Yes, things like drone controllers run at 500Hz+ and have much higher cost of failure if a single "frame" runs overtime.
> The PRAM model seems a little dated by modern standards

I was just curious to ask, as opposed to what all models?
I read an article a few years back (Though I am unable to find it now) that complained about diners taking longer and longer to order these days, especially because they play around with their phones instead of perusing the menu. (I think this conclusion was based on surveillance tapes)

I do wonder if having the menu on your phone could actually be more engaging to these kind of diners (or at least prevent them from doing anything else), so that the whole ordering food process is sped up?
Lots of things on massive projects don’t make sense. And of course there is more to the story, I was summarizing.

Sometimes what is on site is not always what was in the report. And sometimes land nearby becomes unstable and retesting is required.

Also codes change on projects that take years. The current data center they are building gets changed to the prints almost daily.
Interesting. Haven't heard many using DataStore.

How are you managing a. monitoring b. backups for self-managed?
I think it boils down to a lot of our politicians being old, scared of being perceived as weak on crime, and some pretty heavy lobbying efforts by tobacco and alcohol companies.

I'm sure the DEA is fighting it as hard as they can too. Same with the police union lobby.

I do think it'll happen in the near term, probably faster than people expect just like with gay marriage. Though I also think there will be a few holdout states.
Can I Take Your Subdomain? Exploring Same-Site Attacks in the Modern Web
I’m also a former wait person so I don’t understand why you would punish the server because of the owner’s business decision.
"Most income." They said the "most income for something" (presumably "anything"), not: "income for most things".
I'm nearly completely aphantasic. I can get very brief flashes of images but can't make them happen nor hold them in my mind.

I almost never dream. When I do dream it's fairly lifelike.

I can't visualize anything arousing. When I first learned (at 26!) that my friends can visualize any fantasy at will I was floored. I have zero internal imagery for anything sexual. Have no fantasies.

I can't picture anyone's face. Bodies are only experienced in person. If I can't see it with my eyes, it doesn't exist.
America is the world’s sole cyber superpower, ten years ahead of China
This is very tiring, and I mean that in a kind way. Honestly, whoever you are.

Let's look at the first Wikipedia sentence on tyrosine kinase as a starting point:

"A tyrosine kinase is an enzyme that can transfer a phosphate group from ATP to the tyrosine residues of specific proteins inside a cell."

What's ATP? We both know what ATP is. Is ATP deeply part of metabolism? We both know it almost is a definition of metabolism. I want to shout at you. But I don't know who you are or how to connect with you.

Please, for the love of anything that you find Holy, instead of arguing with me on the internet do this: Read the books I recommended, and start looking for the links to metabolism like I just did for you instead of trying to "see DNA everywhere". You will go so much further and help all of us than just arguing with me.
I believe earlier Android versions did use camera, but now you have to use Google lens. It's extremely well hidden.

On my phone, I have to open up the Google app and click on the icon after the microphone on the search bar to open up Google Lens. Once I am in it, clicking on the three dots icon gives an option to add Lens to home screen.
Alternatively, don't map any ports and instead use docker inspect to find the container's IP address and use that to talk to it. That way you don't have to map different ports for every container
interesting they only had $168,000 earmarked as structural repairs out of $15,000,000. Clearly they did not know the extent of the damage. Most of the work was in waterproofing and balcony repairs.
How much/which exchange? The volume and jurisdiction matters.
That hasn't proven to be the case. People who were willing to use the black market before may go back, but in the states that have legalized the bulk of buyers are now people who never used the black market and would not chose to even with very high taxes.

Also lot of the most popular products are stuff the black market never really went into, like gummies, concentrates, etc.

That said, I think OR got it right at about 20% right now, though there's a bill proposed to raise that to ~30%, mostly to raise the local municipalities cut from 3% to 10%.
How would it be unusable? I would still be able to click on links and watch videos.
A music CD has very similar physical distribution costs, and those often sold for less than 20$ if memory serves.
Except in this case the person saying it’s screwed up is a licensed lead engineer on the project.
It happened to me once. The world around me was turning into swiss-cheese holed lego bricks, which was ok. However, it was also 'folding' into some kind of lower dimension (2.5d?), and I couldn't understand the fold, so it became very unpleasant.
When I last used OpenSCAD, I found it rather lacking.

Basic things like 'hollow this object out, leaving a 3mm shell' are nearly impossible.

Anything non-trivial takes minutes or hours to compile, making debugging really hard.

Are these newer tools better?
Yeah, I'm not sure. Even if a direct CAD pairing wasn't available, I've always been able to exchange my tokens for USDT and then exchange that for CAD and eTransfer it to my bank.
The idea that higher-status people would be more status-chasing seems dubious. In the evolutionary environment there would have been diminishing returns to status, and in any environment social climbers are noticeably lower status than those with real "old money" status.
From my view... there are cafes for working and cafes for socializing, and to me they have different vibes and regulars. Or perhaps I'm fortunate enough to live in a city where there's such a distinction, I'm not really sure.

For example, there used to be a cafe around here with a designated 'no laptops, no work' area and some board games (R.I.P. Longfellow's). There's a local chain that doesn't even provide WiFi. Contrast that to the hyper-sterile Blue Bottle Coffee less than a mile away -- I actually do like their coffee, but I don't go there to socialize. It's a space optimized to cycle people in-and-out ASAP.

Pre-COVID I actually ran a small mailing list for people to hang out at rotating local cafes, so I get what you mean to some extent. Even then, you're probably right that doesn't seem as dire to me because I grew up post-2000.
OK, but Tesla makes cars that catch fire while parked, and their "profit" comes from selling carbon credits to GM and Fiat.

I agree Tesla is less of a pyramid scheme, but I think it's still a pyramid scheme.
Agree. It's a trade-off. If one knows how to do a bit of ops then it's feasible to self-host.

what's the scale of the application(s) that uses these data stores? How do you monitor these clusters?
Yep, same experience here.

Tried learning Spanish with it - ok, you get to learn a little vocabulary, but tough luck if you're trying to convey something other than what your cat is trying to do to your pants...
> messages sent...

do you have a moment to talk about our lord and savior email :D
> I've never seen any ads "infesting" the OS at all

That is about to change with Windows 11 "Feeds".
What do you mean "recover soon"? Two month? One year? Three years? Ten years? BTC has survived so many crashes, why do you think this is it, the final straw?
I can relate with a very bad dream I had when I was maybe 7 or 8, it involved not a maze but fractal patterns of eggs and gears (although at the time I didn't know what fractal was, so I perceived it as "growing and growing to no end"). This happened once in my life, and it was 40 years ago, but I still remember how terrified I was, and I also remember how I have been scared for literally years after this episode to have this bad dream again.
> you need to go out into the wilderness where people want to outright abolish money

That seems more like a libertarian position to me.
Ok, so why isn't there an option to just buy the thing at its actual cost without the subsidy and without ads? Are they unable to put a $ value on how much the ads will garner them over, say, a 3-year period?

FWIW, I have Linux Mint on all laptops at home, including the ones used by the kids and the elderly, even though I've already paid for the Windows 10 license by virtue of having purchased them default installed.
I'm with you, sorry, I don't believe you can see shit in a flashing screen. Aphantasia seems like a popular self-diagnosis.
I know I'm aphantasic, but never heard of SDAM. Describes me so well! I remember nearly nothing of my life.
Customer Discovery Is Flawed
I'll wait for https://iwontworkwiththischemical.com.
Short option positions which gp is referring to aren’t really...optional. You sold the option to someone else.
Context: https://www.theregister.com/2021/06/26/linux_kernel_contribu...

Meanwhile Huawei is a real big contributor.
https://news.itsfoss.com/huawei-kernel-contribution/
Oh yes of course. I just think it would be a super cool technical project to actually make this work real time in a videoconference, and there would be lots of use cases for it. Eliminating survey biases during interview-style surveys is another.
Basically a GPU, as that's the highly parallel machine you're most likely to program any time soon. I'm not sure there's anything quite like PRAM in the sense that it's a mathematically abstract model that nonetheless captures something interesting about performance, but Volkov's thesis is a pretty good start for modeling both the memory and ALU cost of a GPU computation:

https://digitalassets.lib.berkeley.edu/etd/ucb/text/Volkov_b...
multi-master with conflict resolution is non-trivial.

Do you have automated failover set up?

Also, didn't know about Aurora's per query pricing. That is crazy.
Their Bitcoin holdings seems to add up to about half their current market cap, so that seems to make no sense.

EDIT: From [1]:

> “As of June 21st, 2021, MicroStrategy holds an aggregate of approximately 105,085 bitcoins, which were acquired at an aggregate purchase price of approximately $2.741 billion and an average purchase price of approximately $26,080 per Bitcoin, inclusive of fees and expenses.”

From [2]:

> Market cap: $6.08 Billion

So ~half, and average purchase price is still substantially below current BTC price.

[1] https://dailyhodl.com/2021/06/23/michael-saylors-microstrate...

[2] https://companiesmarketcap.com/microstrategy/marketcap/
> crypto wallets don’t accrue interest

The Coinbase wallet integrates the major lending protocols. Ethereum fees are reasonable these days. So lending USDC or DAI and earning interest has become a great alternative to saving accounts.

If you hold fair amounts of Bitcoin or Ethereum long term, you can use it as collateral and borrow USDC. This way you can not only let your money work for you, you can also use it to borrow dollars for a short term credit — like getting a mortgage but without a bank.

Furthermore, these days there are other emerging financial tools that banks simply can’t provide. Earning exchange fees on liquidity pools, for example, or staking cryptos and earn validation fees like a miner for Proof-Of-Stake networks.

Point is: Lots of innovation, here. When I look at banks nothing really has been happening there for decades.
Why not just setup wifi hotspot, make the captive page the menu.
Maybe next month the guy can write another post: "How to lose money quickly" and gets on the front page again! Win-Win!
"Nobody will mix things they know will get them killed. Nobody will overdose on purpose."

Well, setting aside intentional suicides, this is true. However, that doesn't mean that they won't mix stuff they don't know will get them killed.

Case in point is alcohol and any of a whole bunch of other drugs, which kills people all the time. Alcohol's already legal, and making other drugs legal won't stop people from mixing their (now pure) drugs with alcohol.

Education will definitely help, and I'm all for it. It's probably the most powerful source of good apart from legalization itself. However, some people just won't care or won't listen or won't believe or will be peer pressured in to doing it by their friends, or will already be too smashed on alcohol or some other drug to make the best decision so will mix in unsafe combinations anyway.

"Education and Personal Freedom."

I'm all for both, but we need to be aware that there will still be both intentional and unintentional overdoses. They happen from both currently legal over-the-counter and prescription medications, after all. Legalized drugs will be no different.
The multiples that Tesla trades at arguably are on the assumption that they’ll crack self-driving first combined with their dominance in absorbing a good chunk of the green credits that they resell to other companies.

The former feels sufficiently far out that the multiple is irrational. The latter will start disappearing as competitors roll out their own EVs and government subsidies start disappearing.
Puts are fine but the swings will often get you liquidated if you use too much leverage. I personally wouldn't bet against Bitcoin knowing the state of the wider market (stocks at all time highs, inflation fears but also Fed rate hike fears). If inflation fears kick into high gear it could be enough to push BTC back to retest the ATH
The difference is between exchanging tether and redeeming tether. Exchanging tether is easy as long as there’s a counterparty willing to buy your tether in exchange for USD.

But in principle you should be able to go to the “tether mint”, give them your tethers, and they redeem them 1:1 to USD. Apparently this is not very straightforward to do.

This podcast episode covers the topic well: https://anchor.fm/cas-piancey/episodes/Tether-A-Stable-Discu...
Yeah, heinz tastes weird ... The Indian palate is more used to the Maggi ketchup/sauce taste profile
> commandeer fuel at gunpoint to run their generators if they need to, which is a cute fantasy.

Indeed it is. But sometimes real life has odd moments, and some data can be extraordinarily important:

> The dramatic rescue of title books from doomed abstract businesses proved a greater public good when all official land records were lost [in the Great Chicago Fire of 1871]. John G. Shortall, who forced a passing wagon driver at gunpoint to load his records, would thereafter be remembered for more than the arrangement of legal conveyances.

> Shortall and Hoard, Jones and Sellers and Chase Brothers and Co. - who have saved nearly all of their papers, including the indices to every piece of property in Cook County, and actual abstracts to a large proportion of this property. We have one firm - J.H. Rees and Co. - who has saved copies of all the maps and all the plats ever made of Cook County property.

> In April 1872, the Burnt Records Act was passed by the Illinois Legislature, and the existing abstract records of the three companies were made admissible as evidence in all courts of record.

https://www.ctic.com/history2.aspx
I'm pretty sure that the only compromised credit card I've had in the past decade was due to something along these lines.

I called a restaurant to get some takeout on Valentine's Day (one that I'd been to for dine-in previously, and had great food), and they told me that they didn't do phone orders, only online orders. I placed my food order, and was immediately also hit with a pending charge of <$1 for a utility provider in a difference province where I've never lived. (I get email notifications of credit card transactions.) Called bank and they cancelled card, so it didn't progress any further.

I'm not inclined to eat at that restaurant again, or to ever order food online again.
Every DOB field I’ve seen is just a date, with no timestamp at all.
How is that illuminating? You're linking to Wikipedia, Reddit, and YouTube for a medical condition? Please.
It looks like singledispatch is still relatively new, so it feels like that might not yet be representative either?

But the bigger distinction would be that Julia uses multiple dispatch, not just single, so the argument order does not dictate the dispatch capabilities. And it is little things like that which may sound trivial[1], but add up to be less effort to use (since there isn’t any other kind of function), which then also translated into being easier to optimize and run fast.

It may be hard to show this feature advantage in a single demo, as the advantage to this is better composability of multiple nouns and verbs in the language, particularly when pulling from multiple sources. Thus, Julia doesn’t need a different sin and np.sin function, for example, as the one function is already prepared to work for either caller.

[1] compare also len vs __len__ and __radd__ vs __ladd__ vs +, a hidden property distinction which doesn’t need to exist in Julia

Disclaimer: I work on Julia’s compiler team
The author is talking about buying puts. These have expiration dates and a set price. Not only he believes bitcoin will collapse, he is basically suggesting he has a crystal ball on when it's going to happen.
We have a few independent systems. Each runs on a two core VM with room to spare, so why not run the db server there too? It literally costs nothing.
If you go to a restaurant with boomers it's a huge annoyance. Their older phones can't read qr codes.
Its been what? 10 years? That's not a huge amount of time to conclude people will never change their mind and btc will go to the moon forever.
Docker will happily override your firewall rules even with infrastructure as code. We block the AWS/GCP metadata IP to avoid potential exploits using that to pivot, but Docker also manages to override that sometimes, so we have a cron job that re-applies it.
Show HN: SolidJS, a Compiled Reactive JavaScript UI Framework Reaches 1.0
What did you call it seven years ago before the term aphantasia was coined?
Ugh. Why can't we have both?

First of all it takes a shitton of steps to scan a QR code if you don't have WeChat. On a default Android device you have to click 7 or 8 times to get into the QR scanner thingy inside Google Lens. I carry a 2nd phone with WeChat and I can scan things in 0 seconds flat, but most people don't have it around here in the US.

And then many restaurants' QR menus just redirect you to their website with a terrible experience, and sometimes no pictures.

And then it's annoying as hell to try to read a phone screen in daylight outdoors.

If you can print a QR menu just print the damn menu also. Put the QR code on the menu cover for people who really want that.

These days I often just ask wait staff what they have because I don't want to look at my phone.