skysight-inc/HackerNews huggingface dataset:
(Bandwidth of an individual satellite) x (the number of satellites they will have when they get the full constellation up) puts a cap on how many customers Starlink can handle and still deliver the specified performance. That cap is way lower than the number of Comcast subscribers.
Inside the risky bat-virus engineering that links America to Wuhan
You could also do a hybrid where each machine gets a volume with an x509 cert and key only root has access to which can then be used to mTLS to a network service (which can then manage the certs)

That'd be a hybrid of cloud init data volume and network service
Love the base load argument… if only there was a way to store electricity, we’d stop hearing these ridiculous “base load” arguments
Well, I'm not an American, if that's what you mean. :)
A global increase in jobs, a decrease in the west.
It’s not clearly true at all. Please tell me what was “great” about Viaweb (how pg got where he is today). It was literally about being at the right place at the right time. I think you’d also be hard pressed to find someone who would call Arc great.

> Is it just jealously and pettiness?

It’s neither, it’s people seeing who gets rewarded, how and why.
I also bet that anyone who went to CMU will read this essay and go "duh, why did he spent this much time writing this obvious stuff"
Are you on a high deductible plan?
"I personally don't have a use for X and it expands the attack surface so it shouldn't be included. These other things I want, while they can also expand the attack surface are fine."
The parent's comment wan't implying that luck was everything, but to point out that luck is also an important factor.

> There are three ingredients in great work: natural ability, practice, and effort.

And luck, Paul. Don't forget luck.

Hard work is only sustainable when you occasionally get that carrot at the end of the stick, before moving onto the next bit of hard work.
No, that substitution helps, but it doesn't solve the problem. You're still introducing foreign mRNA into the body, and the body still has millions of years of evolution telling it that foreign mRNA = invader .
If you’re wondering how your ‘crypto savings accounts’ can return 12% on USD, it’s the option spread from this guy.
Despite all the discussion here, the real answer seems to be that there is no such argument. As the article notes, they won't even admit they're in favor of it:

> The proposed law was reportedly "inserted without prior public discussion," and no state senator publicly sponsored the amendment.

It's purely a favor to industry slipped in by some senator.
if you have a network level firewall blocking DHCP traffic, you will not be able to do DHCP.

The way it works for physical hosts is that all machines in the same rack see the dhcp traffic and the TOR has a special ip helper configured where it's sending the DHCP traffic. So it's broadcast in the rack and after that point to point, but still there is zero to no security when it comes to DHCP traffic.

For VMs, I guess the hypervisor acts as the TOR with the same limitations.
Sage advice, thank you so much. I have actually been trying to apply it in my life in everything (with success thankfully), but I hit a wall lately when it came to marriage and relationships in general. I admit that this isn't just a me thing though, it's actually something that most of the youth in my country face.
The reason why I used the regex match is because the attacker might try to add one or spaces as a prefix and/or suffix, e.g " metadata.google.internal " which wouldn't match "metadata.google.internal" but the spaces in /etc/hosts name would be ignored and still be effective in poisoning the /etc/hosts lookup for metadata.google.internal.
my question is, if the CA cert needs to be rotated, how do you do this for all machines? it can be done, but it's not trivial
Command Line Interface for Signal
> but guess what, all their infrastructure was already running in AWS anyway and their product was already vendor locked in: RDS, S3, etc ...

I laughed, but your response doesn't answer my question regarding engineers comp.
There's also some computers that would need a TPM firmware upgrade from 1.2 to 2.0. So another not mom-and-pop friendly task to add to the pile.
I am an assistant and help handle an edX course at a <fairly well known EU university>, so from my perspective there were a few things that I thought might be interesting to share (though I am quite a few hours late to this thread).

> Nearly 10% of the students have paid for a certificate. I do not know how much server hosting costs, but given the cost of a certificate being several tens of Euros, I wouldn't be surprised if this covered costs (though I'm not aware if the uni gets a cut).

> Apparently the main issue with Coursera (which is why our uni chose edX) was over copyright - edX material remains owned by the creating uni and not edX itself. I wonder how this will be impacted by this change.
> What's wrong with your wired internet that you're considering Starlink?

We had a one week Internet outage earlier this year and there was not a single peep from Comcast. They couldn't say whether they were even working on it, or give any ETA on having it up again. I understand outages, especially related to weather, but the utter lack of any kind of communication infuriates me.

I rely on Internet to get my work done, so I wanted an alternative. Ideally I'd keep both. But that would be a moderately expensive luxury to avoid an occasional outage.

I'm definitely more interested in the mobile possibilities, the farther I get from the outage earlier this year and my anger recedes :)
With ad monetization, search engines have an incentive for you to click on ads. This makes it less likely that you find the highest quality information for your needs.

In what ways is your experience degraded? You may click on an ad result at the top of the page, while the more useful result is somewhere down below. You may become constantly frustrated by having to scroll past ads that are dominating huge portions of search result pages.

But the problem goes beyond whether or not ads are present at the top of the page. Ad-monetized search engines may hesitate to present organic, non-ad-based results in ways that are easy for you to digest -- doing so might make it less likely that you click on an ad result! For example, if you're doing a shopping query, say for "best air purifiers", the search engine may hesitate to show you an easy-to-use UI with expert reviews, price history, and different possible air purifier feature sets. Showing such a "flashy UI" will make it less likely that you engage with ad results.

At Neeva, we're trying to bring you the highest quality information for your needs, no longer held back by ads. We want to present this information to you in easily digestible and transparent ways. And we want to give you more control over your search results with personalization.

Disclaimer: I'm a Neeva engineer.
>There is absolutely nothing about this service that is...

Your implementation may be good.

Living in NY it should not stretch your imagination to think up what an implementation that meets all those criteria would look like.

Municipal broadband is the hip new thing right now so nobody half-asses it. I expect in time (like over the next 80yr) it will follow the model of other government services and everywhere that can afford the graft, boondoggles and BS will have the graft, boondoggles and BS and the Detroits and BFEs who simply can't afford to do it wrong it will be the only ones left with municipal broadband done right.

That said, if a town or city wants to do their own broadband they should be able to do so without state interference. Local government is best government. Allowing the towns to have a "well we could DIY it and not buy your services at all" option as a backstop when negotiating with ISPs furthers competition in a market that is otherwise mostly devoid of it IMO.
I think luck falls into the natural ability category.
I think other telcos subcontracting their bids to SpaceX is highly unlikely. Especially since their aren't really any penalties for not completing all the build-out they bid on. So the non-speculative part is that SpaceX was awarded $885M, which is a good chunk of money, but a small fraction of the $30B they will need.
Can you point out the second part, specifically where "you're a bad vendor if..." is either stayed or implied py P0?

See instead https://news.ycombinator.com/item?id=27680941, which is my understanding of the stance p0 takes.
The Pandemic Did Change How We Tip
Is scan your eyeball the new proof of work?

Can't read this article- behind a paywall.
SpaceX just needs a customer with a requirement for many launches. Doesn't have to be vertically integrated.
I completely disagree with the author. The browser allows a distribution model that vastly improves, in a lost of cases, on the alternatives. Not always, of course, but those alternatives can be harder to maintain, legacy desktop apps. I love a lot of things that desktop apps stand for - control of one's data, more privacy, less tracking, etc. But that's what businesses want, not something using the web exposes.

WebGL can allow 3D medical, engineering and other productivity visualizations and learning.

WebRTC allows people to mess less with installing 8 different conferencing apps and keeping them up to date.

A built-in PDF viewer allows it to update frequently along with the browser and if properly sandboxes is probably more secure than installing some random PDF viewer setup.exe from somewhere.

Gyroscope, accelerometer and compass APIs allow me to install fewer crappy small ad-packed native apps that I'll use one in a blue moon. Should they be gated by proper permissions? Sure. Why should I trust a random native app with more data than a random website?

I can probably continue with a lot more of these. They boil down to some of:

* If I wouldn't bother installing a native app, then allowing the web to do it enables another use case for me.

* If I don't want to trust a website with a piece of data (gated by permissions), why would I trust a native app?

* The fact that someone wants to use the web just for document browsing doesn't mean there aren't large swaths of users who benefit greatly for using it for many other things.

* There are security holes in the browser. Installing native applications is, in a lot of cases, more dangerous.
If you find a way to build dillo with js support, you'll have it.
> ...all successful people are talented and hardworking.

I doubt it. Most measures of economic mobility show this is becoming less and less true -- if it ever was. I think believing it is important though.
A dedicated point-to-point link costs $300 or less which is even cheaper than Starlink.
TPM isn't necessarily enabled though. And it might require a TPM BIOS upgrade to 2.0.
Canada weather: Dozens dead as heatwave shatters records
Using Shutterstock’s image datasets to train your computer vision models
That's true, but not really relevant, as this isn't about punitive prison stay (which makes you a worse criminal and gives you no options), but about a number of lashes or some such form of corporal punishment (which instills some shame in citizens having done some offense, but otherwise lets you go free without prison time).

One can e.g. compare Singapore (which does that) vs USA crime rates (the former's being almost non-existant, the latter's being the worst in the developed world), with most other things (like development and infrastructure level, education, per capita income, etc) being very close.
I don't feel too strongly about it, though on balance I like the open feel to 9 foot ceilings. It seems to be standardized on most new houses these days, so unless I have another house built I don't expect to be able to make a choice.
Funny you should use that example.

I live in Canada, I've also lived and worked in the USA.

I suggest you go and live and work in the USA. Be part of their system. Use their healthcare, send your kids to school, walk through WalMart, live your life.

Sure, when you're in the top 30% or so life is pretty good, as long as you can avoid everyone else in society who are struggling HARD. It doesn't take a rocket scientist to figure out why there is so much violent crime, so many people in prisons and so much violent policing in the USA - tens of millions of people are desperate and struggling for the essentials they need just to live.

You simply don't have that in Canada, the social safety net takes that away.
Necessary context is the military's unique needs and the vastly changed nature of warfare, which by themselves account for the value of portable reactors to the military.

------------

In military history, a cliche is that 'amateurs talk tactics, experts talk logistics'. Logistics - boring old logistics - is arguably the most critical factor for winning wars. Napoleon was a master of logistics. Think of 100,000 people in the field (which isn't a lot): Multiply that by around 2 lbs of food per day: 200,000 pounds of food must be distributed daily. Think of parts for repairs, ammunition, medicine. Think of how much battery power they need, for example, just for night vision, handheld computers, etc etc - how much fuel is required, daily? Think then of their equipment, which consume enormous resources - how much fuel does one 70 ton tank need? A combat helicopter? With modern technology, electricity demand has exploded.

But delivering it isn't so easy. Unlike civilian uses, the location isn't chosen based on cost-effectiveness of supplies and access to infrastructure. And much more challenging, often there aren't centuries of infrastructure built, as with a city, and the infrastructure you use sometimes is destroyed.

------------

Also, the nature of warfare has changed dramatically recently. We're accustomed to war against low-tech guerilla fighters, not peers, and to WWII-style warfare (tanks, fighters, bombers, etc.), which will be as useful in the next peer war as mid-19th century warfare was in WWII - it was 75 years ago. The next war will be against a peer who uses sensors and precision munitions (e.g. guided missiles/drones), as the US began doing in the Gulf War. The combination enables you to hit targets accurately at great distances: If you can see the target (e.g. by flying a drone or satellite over it) within range of the missile (up to thousands of miles), you can fly a missile there. It greatly reduces the protection of distance - being far away from the 'front' isn't much protection - and it makes large objects, such as tank formations and bases, into a convenient collection of targets.

Among other tactics, the U.S. military is planning to have personnel operate in small, stealthy, highly mobile groups within range of the precision missiles; look up the new plans for the U.S. Marine Corps for example, which has already scrapped all its tanks. The huge generator and supply depots at the major base will be gone. Supplying a large base under precision munitions would be tough - how does the convoy or ship slip through? Supplying lots of dispersed, hidden, small, highly mobile units seems very difficult.

------------

Reducing those supply needs is critical, and if energy - one of the biggest requirements for modern logistics - could be removed from them because the personnel brought a nuclear reactor, then it could greatly reduce costs, reduce death, and increase effectiveness (because they have enough energy to operate).

I'm not saying it's worth the risks of having small nuclear reactors spread around a combat zone, but the benefits should be calculated in.
> medical

You surely don't want medical data on the web, right? What could possibly go wrong?
until the legal position is clear it you'd have to be insane to allow output from this process to be incorporated into your codebases

imagine if the output was ruled as being GPLv2, then having to go through a proprietary codebase trying to rip out these bits of code

it would be basically impossible
With two competing channels, we won't have to wait long until one becomes an afterthought. I personally hope that QR codes (or whatever requires to use a smartphone) will be the one going the way of the dodo.
They lay their own fiber lines. They don't want space internet.
Creating a gap in the market, so that

the desktop will have linux on it, for the year of 2021

But seriously, MS has a long history of alternating dodgy and solid windows releases. Windows 12 will be a big hit, probably leveraging office/business standardization and games (integrating xbox).
Quantum-computing startup Rigetti to offer modular processors
The difference being that gates was never in any real danger. His credits didn't disappear. He lived in a paid for apartment. He did not have to worry about money, and if he chose, he could've gone back to college at any time. It only puts you at a 'disadvantage' in business circles, because there's a slight chance that people with more experience will not take you as seriously
Ask HN: What Back End Framework with User Management Is Your Favorite?
I am curious what backend framework you would choose to run with for prototyping an application with run of the mill user management requirements. That is functionality along the lines of: session management, password policies, password reset, user verifications, etc.

Sadly it seems there really are not any frameworks that have user management natively supported. The only one I am aware of is [Parse Server](https://github.com/parse-community/parse-server), however it is now somewhat dated and the community seems to be diminishing.

I am also aware there are many libraries that handle this sort of thing which can be added to a more vanilla framework. If no framework comes to mind I am curious what are your favorite libraries for said use case? Any language works.

Lastly, more generically, what tools / frameworks / libraries / solutions did you use in the last web app you made to facilitate not having to recreate the mundane aspects of user management?

Thanks for your input!
you could, the problem with this approach is how do you manage these volumes and the infrastructure around it.
How do you get the keys on that volume?

Usually, this trust is established when the machine is built the first time and it gets an identity and a cert assigned to it. You have the same problems (of how you control the infra and ensure that you and only you can do this on the network).
I've been using Emacs for more than a quarter century, 99.9999% of the time text-only (whether Linux console, X terminal console, xterm, or SSH client) on a remote server.

My email client is VM, written in Emacs Lisp. I've used it to read mail for almost as long as I've used Emacs. VM (and ancillary tools, like Personality Crisis and mairix)

* does a great of job displaying HTML messages. For the very few that it doesn't, one keystroke sends the message to my web browser running locally.

* sends URLs I select (all from the keyboard) to the web browser

* opens images and attachments

* auto-adjusts the From: line of outgoing messages depending on the recipient

* archives messages to various folders using various criteria

* search my archived mail going back a quarter century at lightning speed

Of course, I can write Emacs Lisp code of my own to extend any or all of the above.
Can someone here explain why this submission just sank like a lead balloon? It nosedived something 20 places in the space of a few seconds.
“I don’t want WASM or JIT hacks” (paraphrased). The author clearly doesn’t understand the von Neumann architecture.
I heard it costs a lot of money to do these builds, for low return. You might even call it a natural monopoly, if you believe in such things like basic economics.
OCW started doing the same annoying 10m chunks with their scholar versions but so far have always still provided the full unedited lecture as an option.
DigitalOcean Launches Managed MongoDB
Would the broadband situation today be better or worse had the Bell System been left in place as a monopoly, with the “universal service” mandate?
github was such a nice place until microsoft fucking ruined it.
interesting, I think I describe my criteria identically to you, but I have different conclusions. The thing aboht markdown and org-mode is that it's fully readable without any extra requirements whatsoever, as opposed to e.g. jupyter, word, etc.

I've read and edited my own org files in notepad on occasion, which works perfectly well (imagine doing that with a word document!), The same is true for markdown files- to such a degree that it is the standard for readme files, and those are definitely supposed to be readable by anyone.

So to me that definitely makes it plain text- all the more as you will be perfectly fine not adhering to any of the rules within an org file, but then suddenly dropping a table with formulas in there and having it work immediately (again, image word here).

So I would say it doesn't _need_ tools, but can _benefit_, as opposed to word/etc.

You might say these are quantitatively less "plain text" in some way when compared with a literal .txt file, which is fair enough, but I think they're extremely similar when compared to a .docx file.
Perhaps, but keep in the mind that Intranets exist. It is possible to have 'private' web services.
I'll believe that biometric security measures are more secure when they are fully protected under the Fifth Amendment, rather than by a few shaky court cases that could be overturned.

https://slate.com/technology/2019/01/fifth-amendment-biometr...

https://www.forbes.com/sites/thomasbrewster/2019/01/14/feds-...
> What if most of serious wealth and success is decided at birth?

There is no 'what if'. It's just a fact. You can pretty accurately predict what a child will be able to attain in life by looking at their zip code.
TPM 2.0 requirement was announced to OEMs back at the 8.1 launch I believe. If they haven't been pushing TPM 2.0, talk to your OEMs.
Essentially this:

> The firewall/router of GCP blocks broadcast packets sent by VMs, so only the metadata server (169.254.169.254) receives them. However, some phases of the DHCP protocol don't rely on broadcasts, and the packets to be sent can be easily calculated and sent in advance.

> To mount this attack, the attacker needs to craft multiple DHCP packets using a set of precalculated/suspected XIDs and flood the victim's dhclient directly (no broadcasts here). If the XID is correct, the victim machine applies the network configuration. This is a race condition, but since the flood is fast and exhaustive, the metadata server has no real chance to win.

> Google heavily relies on the Metadata server, including the distribution of ssh public keys. The connection is secured at the network/routing layer and the server is not authenticated (no TLS, clear http only). The google_guest_agent process, that is responsible for processing the responses of the Metadata server, establishes the connection via the virtual hostname metadata.google.internal which is an alias in the /etc/hosts file.

He appears to spoof the DHCP packets to get the victim to respond to his rogue metadata server, insert the IP address of his metadata server into the /etc/hosts entry for metadata.google.internal, then is able to have his ssh pubkey installed on the victim so he can ssh to the host.