skysight-inc/HackerNews huggingface dataset:
This is an absurd article written by a person with a barely-hidden agenda. A review of their Twitter makes it clear this is not a matter of "renewed concern"; this is a person who has resisted every measure used to fight COVID from the beginning because that "disrupts normalcy" or gives public health officials even a smidge of temporary control over one's life.[1]

I have no patience for works like this, written by people for whom any modification to their existence, even the most minor and most voluntary, is one change too many (and a sign of malign conspiracy to destroy them). Masks? Nah, who knows whether they're effective. Distance? No, it's not a big deal if I just don't. Vaccine to avoid the above? No, it's "too experimental" and I "just don't trust it" no matter whether it's based on decade-old or century-old technology.

The author makes no concrete suggestions about what we should do differently, and I think it's because for them, any change to their behavior whatsoever is one change too many. It's all well and good to try to help people as long as it doesn't require any personal effort or sacrifice after all, and as long as absolutely no mistakes are made and no missteps ever occur. In the mind of the author, anybody who would dare ask them to do anything at all to help their fellow human is a ghoul who must have an ulterior motive. This says much more about the author than it does the people asking.

It's tempting to ask sanctimonious questions, like, how many people would have had to die before this person considered that that loss of life might justify temporarily changing their behavior, or (the horror) listening to the government or working with their fellow man just a little? How bad would something have to be before they'd agree to try, just try, to do something that might help?

What a shame that there are so many selfish and conspiratorial people in American society.

[1] https://mobile.twitter.com/galexybrane?ref_src=twsrc%5Egoogl...
Aren't most smartphones dual-sim by now?
Great to have some healthy competition, as long as they don't force us to login using an Outlook account.
After many years of using it, I am yet to find something as powerful and as relatively simple to set up as tinc.

It might not be the best solution in terms of performance or security (peer reviewed crypto something something).
Yeh, I could photograph and use OCR on the menu, but it's not as reliable because of the varying quality of the printed menu text. A second thing was realising that the realtime OCR wasn't as good as an image and then scanning afterwards.

However, that still doesn't address the issue of having to communicate! I guess I also found QR Code menus to generally have more pics than printed ones, so it covered off both of those issues.

I should add that the QR codes were not just the menu, but also your table so when you placed an order through Wechat it knew what table you were at so they'd literally just bring it over when it's ready.
I do prefer Linux and in fact I intend to run 3 server machines at the place: a router, a file server and a VM server for running experiments.

I thought that for adding networking functionality to an older printer it would be best to use some kind of dedicated hardware print server. Is it really best to use a PC box for that?

EDIT: I would think about hooking a printer to one of my 3 server boxes, but it sits far away from any of them (more than the maximum meters for USB cable)
> they have increasingly started to become something of a parady of themselves.

I think a huge contribution to that were IR35 changes in public sector that created a brain drain. Talent was replaced by poor quality service from big consultancies.
Cheap SSL Certificate Provider 2021
Amazing, thanks I'll check it out!
First word of the article: RACISM.

I'm sure there are more things related to black/African people that can be discussed than racism. There is more than one subject out there.
Rhabdo is rare but potentially fatal. Experts fear rise in cases this summer
https://archive.ph/FXUpM
Okay so run two 0% fee pools. Don't disclose the owner.
I think you're mixing up the projects a bit. This vulnerability doesn't seem to be going via Project Zero. Other google teams are known to sometimes not react in time and when the reports are going through Project Zero, they are disclosed at 90 days, regardless if the project is internal or not. (I remember an unpatched Chrome vulnerability was published by Project Zero at the end of deadline)

So the Zero timeline applies to everyone the same. It doesn't mean fixes actually happen on the same timeline.
I definitely have a preference to have my own database for the purpose of development so I can change the structure, data and such as I need. It is kind of a necessity for developing a good suite of functional tests. All too often I have seen companies share a development database and that is a really bad sign for testability and generally stepping on each other.

So if that is managed elsewhere but I can do all I need that is fine, if not then I tend to host a database locally for this purpose.
That's how both Mongo and MySQL, back in the day, became so popular.

They had super lax security, making them easy to use for newbie devs, who are frequently scared/easily distracted by security settings.

I'm quite convinced the lack of security was by design. Growth hacking and all that. Get everyone onboard and once you have big business going on, you can focus on the minutiae of security, scaling, not losing data.

Node.js, PHP, Docker (heh!) most other popular techs did the same thing: super lax and frequently wrong defaults, just to get adoption.

As a startup it seems you either choose right/security or wrong/money :-)
diffs (and network graphs) seem like a great idea, but they quickly get so big that one can't make heads or tails of the visualization.
Product Development and a Developer's Role – Part 2
Is it possible that the sending address is being spoofed to show his address? This might account for why there is no unusual activity, the email host is not actually sending anything, but when it fails to deliver a response is sent to his address.
I like QR codes, and ordering via phone. You don't have to wait around for the waiter to bring the menu, take your order, take your payment. Don't have to touch a menu that hasn't been disinfected, or is out of date.

They do need to be properly implemented however. That is maybe more a business opportunity than an inconvenience.
How Can I Find and Scrape Emails from LinkedIn Company Profile Page?
The best solution — pandemic or no pandemic — is a tablet at the table that you can use to order directly and also works as POS. Unfortunately, it's seen as low status so unlikely to be widely adopted. The fact that waitering uses a push model vs a pull model is insane.
I have employed tabs and accordions repeatedly during my career to try to simplify pages and have invariably found that they cause confusion among some users when we do real-world user testing. Some folks just don’t recognize them as affordances for uncovering hidden info.

I’ve come to believe that, aside from top navigation, hiding any info on a page is a usability no-no. Users know how to scroll and it’s the easiest way to discover information. Just make the pages taller and use more white space.
A server in every home
Has it been verified that GCE is still vulnerable?

There's clearly a communication gap between the researcher and Google. But perhaps the techies at Google saw it and fixed it and it just hasn't been communicated, or some other change in GCE has closed it or mitigated it?
The timeline for disclosure is set by the reporter, no? "We will disclose this bug on YYYY-MM-DD". The other side can ask for an extension, but has no intrinsic right to one. Unless I am missing something, this has nothing to do with PZ, so their default timeline is totally irrelevant.
Though I don’t use docker extensively anymore , but I think people generally new to tech use it to prevent any haywire situations that happen during configs
I'm aware of those numbers, and they are still both an environmental cost, regardless of how they happen. EVs swap high environmental running costs for high environmental manufacturing costs, and then we in developed countries externalise those costs by sourcing most of the component parts from other countries, and tell ourselves that we have done something great for the world.

Edit: It takes 25MWh to manufacture just the battery pack for a Tesla, or about 18,000Kg CO2 (assuming a 0.6Kg/kWh CO2 ratio for the Chinese power grid, which is a very optimistic number).

Assuming the power grid where the EV will be used is 100% sustainable (which is very very far from the truth), given that the CO2 output for gas/petrol is 0.3kg / kWh or 2.3kg / liter, and assuming an average of 35 mpg or 7.7 miles per liter, as well as adding a factor of 1.5 to account for refining, storage, and transport losses (which I think is very generous) you would have to drive your new Tesla for around
40,000 miles on 100% renewable power before you've paid off the increased CO2 debt of its manufacture over an ICE. That mileage, by the way, is the number of miles the petrol-engined car would have to drive to produce the 18,000kg CO2 that it took to manufacture the EV battery pack. I am also assuming that the manufacturing cost of the rest of the EV is comparable to an entire ICE car, which I think is fair, as EVs generally contain a lot more electronics (which are very energy-intensive to manufacture), as well as at least one electric motor. An ICE is basically a lump of metal, which has a surprisingly low relative cost of manufacture.

The UK has a relatively "green" power grid, for a developed country, and even here, the difference in CO2 output between the grid and an ICE is so small, you would basically never break even in overall CO2 emissions between an ICE and an EV. For reference, the calculated CO2 output of the UK grid is 0.23kg/kWh.

Also, just for fun, the embodied energy of a 1960's Fiat 500 (assuming its entire 500kg weight is made of steel, which is probably a good enough approximation) is 3MWh, or three laptops.

So what is more sustainable? Claiming that I am making an "dishonest comparison" just ignores the issues with the "green maths" of EVs.
parent comment is reffering to the double standards. One rule for google disclosing others vulns, another for their own vulns.
I use an ad blocker so have never seen an ad on Reddit
When I last tried, it, AWS RDS still required EBS-backed disks. It may be acceptable for 99% of use cases, but that means there's a ceiling around 60k IOPS, even with PIOPS disks.

Outside of RDS, you're afforded a bit more creativity in your performance profile: multiple disks in RAID 0, tiered storage (burstable AND, rather than OR, provisioned IOPS storage), and instance store, to name a few. I actually once witnessed one of our databases riding out a 400K IOPS storm for a few minutes.

Before I get downvoted: yes, these introduce risk into your data architecture. It's crucial to understand what these choices will do to your failure profile, and plan accordingly. In our case, fast-failover to a hot spare database, combined with total recovery within two hours, was enough of a compensating factor to manage that risk.
One can be the leading expert in a field and still believe weird things, sometimes to the detriment of said field. Though in this case is more likely Dr. Simard and her editor agreed this was the best language to present her subject to a wide audience... imho, again to the detriment of her field.

> fungi-mediated carbon transfer between trees of different species.

I knew first from Suzanne Simard in Peter Wohlleben's book "The Hidden Life of Trees". Among other things, it describes how fungi interact with trees. It's absolutely fascinating and can very much recommend. Just as Dr. Simard, Wohlleben likes to attribute personality to trees. From the broad viewpoint of cognitive theory, it kind of makes sense. It doesn't change the fact that these are natural systems worth understanding, modelling and predicting. Anthropomorphizing ecosystems via parables in a popular science book directs public opinion in ways that can be very counter-productive.
If you found this article interesting, I can highly recommend the book (and documentary) "Status Anxiety", by modern philosopher Alain de Botton.

The video has a couple of gems, such as the comparisson between an english country-side vicar, and an american TV preacher.

https://www.youtube.com/watch?v=t1MqJPHxy6g
Filecoin is live and being used, could you clarify what you mean? See eg Textile, Fleek, etc. It is currently storing ~20 PiB across ~1 million storage deals, according to https://storage.filecoin.io.
Duolingo Plus is great value, but I feel like they need more advanced content to help build you up to watching TV series, etc. in your target language.

Also the divergence between the mobile and web content is strange, the mobile app misses out a lot of the discussion forums and the grammatical tip pages. Also the web content is harder as you're forced to remember the words yourself rather than just arrange them in the right order.

It's a great app, I just think they need a way to incorporate more grammar lessons / tips and cheatsheets, and more advanced media (videos with target language subtitles, etc.)
I've seen both, and for the company "Hire Fast, Fire Fast" seemed to be optimal - though perhaps not for the candidate.

When one drags an interview process too long they risk losing out on candidates to faster firms. However, a person's work performance and interpersonal skills are often on-display in about a month or so. This allows one to break contact, ideally with a respectable severance, and keep moving.

At the first professional job I've held, and my golden standard for an employer, they employed this approach. When one accidentally hired a screw-up or a non-team player we simply terminated their employment. The understanding being that our HR handbook is "Be an adult." Putting in rules in a company of 50 to cater to the 1 bad hire, that just punishes the 50 people who did not need the rule.
> But internationally, the type of cheese they make is far better known as "feta" than by its Turkish or Bulgarian names.

Well, tough luck. My home-made cola can be every bit as good as Coca-Cola, but I can’t go around calling it that way.

As other people noted, the regulations are there to protect local producers and consumers, not non-local producers. They can get their own tradition recognised and get their own PDO instead.

> It's particularly unfair to other producers in the Balkans and Turkey, who have every bit as much cultural heritage of producing this type of cheese as Greeks do.

Nobody is preventing them from making any kind of cheese.
I'm OP, and this was in fact my response to my question! Everyone else is suggesting these wonderful grandiose economic and social changes, and I just want a strongly typed (or, hell, even a little bit typed) Internet...
I read something interesting here https://www.clickssl.net/blog/watch-out-for-privacy-issues-b...
> Put another way: the conventional use of “emergent” has a rather passive flavour. What I'm talking about is a much more active imaginative stance, the kind of stance taken by people like Bret Victor or Satoshi or Picasso.

"generative"?
In the US, the old, fat, and vulnerable is 70% of the population.
>I had the opportunity to work with GDS on a project. These folks have a startup mentality and are the polar opposite of what one imagines a governmental office to be.

They gave a presentation at Webstock in Wellington (almost a decade ago IIRC). That was certainly my impression of them at the time. Great to see how little has changed.
I don’t see a way of pornhub realistically fixing its problem with human moderators. They would have to comb through thousands of already existing content AND combat against incoming content. And this isn’t something they can take time to do (time I don’t even believe is physically possible with human mods). It’s either they immediate and effectively remove all child porn off their site or lose even more Potnetial revenue AND run into legal trouble. The only absolute way to ensure that they have no child porn is to nuke every unverified video on the site.

I have no idea if pornhub as a site would be as successful without it’s unverified model in the beginning.
> Why? Is it some kind of hand-holding exercise because the F-Droid team don't trust devs to [snip]

The F-Droid team don't and _shouldn't_ trust devs, period.

Trusting them to build and submit their own APKs is how you get the Play Store.
It's not entitlement. You are entitled to express your opinion that dining in restaurants has become something you no longer enjoy. I think it's worth noting since their existence depends upon pleasing customers.

People forget that restaurants are a really modern invention. They were first introduced in France at the turn of the 19th century to provide more than just a way to order one type of food. The main reason they exist is the service, ambiance, and menu. Until "nice" restaurants came about, there were pretty much just taverns and inns, which were not renowned for their dining experience, and in most locales there was just one or maybe two, and the food selection wasn't great.
Love the 2020-12-03: ... "holiday season coming up"
This.

We've implemented a convoluted solution for this where - if the OAuth user does not exist but the OAuth email is in use by a password-based user - the following happens.

1. We prompt user to authenticate with their password.

2. Once successfully authenticated, we link the OAuth auth method to their user to be used in parallel with a password-based login.

Not every Auth provider might support linking multiple Auth methods to a single user, we use Firebase Auth and for us this works fine. We even support multiple OAuth options (FB, Google) and do the same matching between the providers.
> When I containerized MongoDB, Docker helpfully inserted an allow rule into iptables, opening up MongoDB to the world

Can Docker really be blamed here?

It sounds like when they ran MongoDB they explicitly published Mongo's port to the internet by either adding the ports property to docker-compose.yml or the -p flag with a Docker command to open Mongo's port to the outside world.

Not to pour salt on an open wound but why are they blaming Docker for this? Surely an ops person should have thought to check if any internal services are exposed to the outside world? This goes with or without using Docker. This would be like explicitly opening a port with iptables by copy / pasting something off the internet and then blaming iptables because it opened the port.

If anyone is curious, years ago I've blogged about the difference between expose and publish for Docker at https://nickjanetakis.com/blog/docker-tip-59-difference-betw....
> Speculative, and likely contains errors, misconceptions, and omissions; thoughtful, informed comments are welcome. Intended for a general scientifically curious audience, not requiring much detailed specialist background.

I enjoyed the reading, it is well written. Like you, I think there is a bit too much speculation to consider it an article suitable for a "scientifically curious audience". From my point of view the parallels and the "connections" between phylogeny, elements, matter and physics make it very little pseudo-scientific and too metaphysical.
As someone who knows nothing about networking, can you plz explain why they set up the config as this? Does that mean the third byte from top must be 0a?

BTW I just checked my corporate intranet setup and MAC has nothing to do with the ip address.
That seems to have been a random quote from a random individual. I would put exactly zero weight on it. Vague hand waving about weather is all I took away from the article. In other words, no one knows.
Nice post, thanks for making it :)

I'm always curious, though - there are some things that we want to censor for good reasons. The usual poster child (sorry) for this is kiddie porn. But there's other stuff - revenge porn, libel, etc that we as a society might want to censor. How do we do this on infrastructure like IPFS?
I use tinc myself and like it. I like that I only have to update a single node and all the other nodes will accept those peers from that node. I've been playing with wireguard, and having the other nodes discover and communicate with each other directly doesn't happen without you adding the other's public key to both peers.

I remember there was talk about switching the backend for Wireguard for security and speed, but it seems to be on the backburner: https://github.com/gsliepen/tinc/issues/179
It is not for tech sake, this is building a database. Never attribute to incompetence what can be adequately explained by bogus engagement KPIs
Facebook is a good example.

It might not have succeeded if Zuckerberg had been accountable to others. (Who’d have believed it?)

Today it looks socially harmful, and, looking back, it didn’t escape the MySpace cycle (what was once was hip is now passé) it just buys competitors one cycle at a time. It is still around but it is running on a treadmill and if it falters two cycles in a row kids will be asking their parents ‘what was Facebook?’
I think the one case you missed is

`docker run -p 6666:6666 ...` which defaults to `-p 0.0.0.0:6666:6666`

I can't find it in the article, but I suspect this what actually happened. It's a bad default and unfortunately most examples build on it.

Similar, it's easy to deploy MongoDB without a password. But it's also easy to set one, the docs even mention it https://hub.docker.com/_/mongo

And everyone can run a portscan with nmap against their servers. Unfortunately the MongoDB default ports 27017-27019 are not part of the top 1000 ports which nmap scans by default.
No, most aren't.
The problem with baseball is not that teams are solving it, but that the game and it's rules and structures are not optimizing to adapt and make it more difficult. The most surprising thing to me is that the game wasn't "solved" a long time ago. We shouldn't lament when teams play a game very efficiently, we should design better games.
that's cool. I get the impression they're not really interested in monetising or data mining if all these loopholes exist, and that their platform is supported by those who wish to engage in microtransactions, which do not hinder functionality in any way e.g. pay for privileges. good on them
Hi All,

I made this library so that it is simple to add all Tailwind Utilities to your existing Framework such Bootstrap, Bulma etc. All you need to do is include a single ~8Kb Javascript file.
Wouldn't counting Google as largest competitor actually strengthen the case? Those two companies did have their share of questionable, competition limiting backroom deals that leaked into the open.
By your analysis Hong Kong’s share of that 1.4 Gt would be 14.5%, which hardly seems reasonable.
I'm not quite sure if I understand what they're trying to do. Are they trying to say that it isn't just skin color? That's the entire point of "racism", that it's not just visible characteristics.

By the way, why there is no author?
> Are there finally fat binaries?

No, it's more than that. It's a mix-and-match of x86, and arm binary code, so you don't have to keep a two separate copies of every binary.
Std. Grafana + Prometheus + node exporter + specific data source exporter
State in a Phone: Inside Ukraine's Effort to Replace Bureaucracy with an App