skysight-inc/HackerNews huggingface dataset:
I see everyone discussing how much Docker is at fault, how much Mongo DB is at fault, how much NewsBlur should have had better settings, and I do agree to some extent.

However, the much worse problem seems to be the fact that NewsBlur didn't test their network connectivity with something as basic as a port scan. This wasn't some complex attack based on some complex code injection jumping through legitimate ports or anything: their machine had the Mongo port open when they thought it should be closed. This is the kind of thing that absolutely shouldn't make it past basic testing.
I had the 'opposite' thought: if the whole system were in a VPC, Docker wouldn't have had the authority to expose a port to the outside world.

Looks like the author is ahead of both us. Later in the post he mentions both a planned transition to a VPC, and plans to beef up the security of MongoDB itself.
True, but I think you underestimate how loud traffic is. A lively pedestrian area (which there aren't many of) is probably nowhere near a busy street. It could also easily have 5 times as many people per area.

Edit: Also if you watch the video there's a scene where he steps off a train in Delft and it's very quiet. Obviously densely settled areas must be louder, but perhaps not always loud.
https://en.wikipedia.org/wiki/Sleep_paralysis
Apple Makes Employees Wear Body Cameras to Control Leaks
Edited the message to include a short description of Hasura.
Restaurants open during the pandemic has been a joke. Outside in a tent/wood box never fixed any problem. I have not been to a restaurant since March 2020. Going to different restaurants was my favorite hobby, but the experience has become so hostile that I won’t go back until I can sit inside without a mask, have a menu, and not have to worry about a coughing idiot.
> Why they don't offer this in the app is beyond me.

Lesson instructions are even weirder:

When you take the Japanese class in English, you can read the explanations for each lesson in the app. However, when learning French in German, the instructions _only_ exist on the website. If you use the app exclusively, you'll have to guess all the grammatical special cases through trial and error.
Maybe now that they have less support, but back then it was only spam IIRC, or the same blog posted 10 times
interesting that when you click the compare features, it claims 100% open source, but they dont seem to have any links to the source anywhere.
It's nearly impossible to verify evolutionary psychology, indeed. I see it more as a way to provide a reason for the existence of certain traits. Because the other options are: it appears out of nowhere or it's an accidental property.

It's not rigorous enough to be useful, but then again, psychology almost never is.
If you are betting something will tank then you don't time the market to get to put at the best price. Buying these puts either pays out a lot if there is a giant dive before they expire or is a cost to cover that time period.
It's in production on several chains now. A few examples are Cosmos hub (cosmos.network), Avalanche (www.avax.network), Tezos (tezos.com) and Solana (solana.com).
As an American sitting in Germany right now, I think that wait staff here aren't bothered if you try to actively get their attention like they might be in the USA. Making eye contact or a polite wave, etc. Feels rude based on US service, but I see people doing that more often here.
Okay then, it is just as likely they are only talking with each other in a group chat made specifically for sharing media and coordination, and not any non-present participants.

Sitting down at some kind of place to eat is remarkably one of the only places where there is organic down time to synchronize media.

I do have enough self awareness to joke with my friends that out of touch people think we are probably just disengaged with each other on our phones.
3 x Yes:

1. Because of lower overall bandwidth (in many cases it is a SIGNIFICANT difference between code size before and after treeshaking)

2. Because of better startup performance - less code to process, less pings to the server for new modules, less load on servers too (streaming one file vs streaming hundreds of them separately)

3. Because of better performance (eg. removing conditional branches that will never execute)

;-)
It’s as if Denny’s has been ahead of the game all a long
Most, if not all restaurants I've been to around my area, were already either using or switched to using laminated sheets, sometimes bound in a plastic or leather cover. Plastic-enclosed paper is trivial to sanitize and lasts a VERY long time, plus I would like to imagine a laminator is quite a bit cheaper in the long-term than maintaining separate menu websites for every individual location.

It's amazing how some can re-invent the simplest of ideas simply for the sake of getting tech rammed into the stream.
I wish I had spent more time in Lyon. The countryside around there probably seems boring to you, since you grew up in the city. But coming from America, it's obvious that the smallest village in France is light-years more advanced, more educated, clever and civilized than the country I grew up in. It has its problems of course, but it's paradise compared to most other places I've been.

Funny, slightly dark story about Avignon. I became friendly with a guy there who was a good musician but turned out to be a bit of a...right wing type. National Front. There was a cafe on the square that was a gay club at night, and my girlfriend and I used to have coffee there in the day. One day this guy walked by and said "don't you know what this bar is where you're sitting?" I said, "come on, chill out, sit down." He took some convincing. So finally he sat down and I said, "I know you like Le Pen. How do you feel about sitting in front of a gay bar with an Filipina/Mexican and Jew/Argentine? Are you angry we're in your country?" He said, "as long as you're here because you're interested in France, I'm okay." Later, walking through town, he saw a kid urinating on the front step of an apartment. He shouted at the kid and the kid pulled a knife out. This guy tackled him. Still later we took a bus to the station through the banlieu and saw the desolation - she said, "what have they done to their country?"

Eh. I shouldn't tell these stories on HN. I guess it taught me that life is complicated and to bring it full circle to the cafe question, your view of the world is very relative to where you grew up, in what time period, and what you expect people to behave like.
Its a shame we cant simply condense the entire menu into a QR code as opposed to a link.
Sorry, I might have mixed up Metamask with https://unstoppabledomains.com/extension
Windows on ARM already had CHPE binaries which mix ARM and x86 in the same address space - i wonder if this new ABI is a related effort,
Also another kiwi: grew up in a coastal city in the North Island and moved to Auckland for uni, dropped out and started working in the industry (best decision) before eventually moving to London.

Been here 3.5 years now (although I still don't know if 2020 really counts) and the tech sector is great here. Maybe not as cutting edge/well funded/as high salaries as America, but I feel like the work/life balance is better in Europe.

NZ is great but I have a feeling I'll head back there once I'm a lot older; it's beautiful but there are very few opportunities when you're young.
I’m not pulling my phone out at dinner.
> No dining out after March 2020... but this will change next month (finally).

Is that something that very much depends on the region, or a personal obligation? I've eaten in restaurants in Hamburg, Berlin and Munich during pandemic (summertime last year until about November, and since June this year). Eating this year has been limited to outdoors, but that's fine.

(None have had this crazy QR code link menu idea. I have always received a traditional menu and ordered by asking the staff what I want at the appropriate time.)
>How long should a pump motor last? Anyone know?

Obviously it depends a lot on the specific type of pump, motors are - generally speaking - very long lasting, I would say (proper type of pump, properly dimensioned, used according to specs, and maintained/repaired) anything between 10 and 20 years.

The more common issues are outbound leaks (from the axle gasket) in external pumps and inbound leaks (from the outer case or gaskets) in submersible pumps, and of course from time to time you need to change the bearings.

In the case of submersible pumps, leaks usually mean also a motor failure (again it depends on the type of pumps) expecially on rarely used pumps as bearings will clog and the motor will then likely need too power, and overheat.

On the other hand, external pumps (air cooled) often overheat because of the poorer cooling, if subjected to lots of "start and stop", electrical motors, particularly if large, tend to create a huge drain of power (often 3x to 5x) when starting (as compared to normally running) and this inrush of current translates in a huge amount of heat (and more generally stress to the motor), so many starts in a limited time are not good for the life of the motor, lately things were mitigated by electronic starters that allow for smoother (less peak Amps) starting.

The electrical setup/controls may also play a role, a good, well calculated pumping station (such as those used to evacuate leaks in an underground construction) is generally 100% redundant (i.e. two pumps when only one is needed, in some cases 300%), and have automations that alternate the use of pumps (so that each motor and bearings actually run when pumping is required) and use "the other pump" if there are too many motor starts in a given hour, plus there can be a sort of valve that allows to pump the water within the reservoir, so that even if there is no need to pump water "out" pumps are "exercized" periodically, this latter is also often used to avoid too many starts, once a pump is started, it runs for a given number of minutes minimum, part of which is actually used to pump water outside - i.e. responding to the event that triggered the start - and the rest it runs "idle" pumping water within the reservoir through the by-pass valve, so that if a new event re-triggers the start, the pump is already running and only the valve is closed to make it pump water out.

But otherwise what you routinely (I would say every two-three years for external pumps and maybe 5 years for submersible ones) do is check gaskets and bearings and replace them if needed.
Game changer app Too Good To Go plans to solve world’s food waste problem
Why is everyone trying to cancel motor vehicles. I enjoy driving my car and I'm a foreign student in The Netherlands. I hate the fact that the roads are so small and whenever you say you enjoy driving your car, everyone looks at you with hate.
> Please die.

You can't post like this here.
One thing that is fantastic about digital menus is that you can search in them.
I applaud you for creating the game that people clearly want to play based off of those ads. I think that's a creative idea and you executed it pretty well. I see those ads most frequently on twitter - do you have a twitter bot that just links to your thing whenever those ads get posted? Might get some traffic.

I admit I didn't check to see what the coins were. I just assumed it was some kind of microtransaction. If you don't need to watch ads - why would anyone choose to? Unless, like me, they mistakenly thought you had to (which I would think is just as bad)?

Regarding login, I would suggest just explaining why you need this service, what you get for it, and letting the user choose it or not.

Curious how many users you have and what you make from this game.
Speaking of reality, it's usually more complicated and nuanced than simple narratives about good versus evil.

Here's an interesting profile from the 80s of Charles Rangel, when he was chair of the house narcotics committee and perhaps the strongest proponent of tough sentencing in congress.

https://books.google.com.ua/books?id=3NQDAAAAMBAJ&pg=PA128&r...
I also would have liked that but developers never jumped on that train. Most apps reside on Android/iOS so the appeal for the consumer and developer is that they also work on a Windows phone

Android Java performs really well nowadays. It will be messy to make everything so cross-compatible but I appreciate being able to use my Windows apps on a phone that also integrates with my Android apps. Also, it might save me having to upgrade my desktop. My mobile device might be all I need from now on
Considering that this is just to support the CPU, the next step is the GPU before you'll have anything meaningful running, probably still have a long wait.
When I was last in China (I've been last twice in the last 5 years) I still couldn't even get data on my phone. Does GT work well offline?
That is the exact opposite of what I'm saying. Saying the market place of ideas was an utopian dream that failed is like saying the divine right of kings was an utopian idea that failed. At best, it is something people were conned into agreeing with.

These ideas weren't invented out of thin air, but to defend things that are hard to defend on their own merits. And just as the devinity of kings mysteriously only brought rights and no responsibilities, it is equally telling that the only time the "marketplace of ideas" is ever brought is in the context of why we shouldn't be doing anything about all of the hate speech.
I really despise when the QR code just sends you to the App Store to download some (crappy, probably web-to-native) app, where you have to create an account, verify your email, then add credit card details manually. Extra points off if there's no wifi and the venue is somewhere with poor signal, so it takes 10 minutes and rinses my battery.

A web-based menu that just opens the browser and lets me pay with Apple Pay is acceptable given the current circumstances.

I dislike having several single-use apps for random pubs and restaurants cluttering my phone.
Bare bones wireguard? Or some solution like tailscale? Or maybe FOSS
That's not true everywhere. My transferwise from EU to Asia takes a good week to arrive and still costs more than Bitcoin and significantly more than any altcoin or lightning network.
> those with funds call the shots

Look at the distribution curve of people and their funds that can be put at stake and compare with the people with access to cheap energy and capital to operate a mining rig, then come back to tell me which one is the real oligarchy.
>As for the environmental aspect, well, I'm probably going to regret saying this openly. We live in a fully industrialized world. Unless we're all willing to go back to using wind power to transport cargo and carriages to transport people, while simultaneously getting the world population back to pre-industrial levels, it's a bit too late. I don't think you're going to be saving anything with your EV. The messaging around this topic is akin to a man who burned his house down and is now discussing smoke alarms. It's too late, my friend.

It's definitely not too late, this sort of defeatist attitude is not only wrong but dismissive of the dangers.

> I don't think you're going to be saving anything with your EV.

This is also dead wrong, a quick switch to EV will substantially reduce the amount of carbon pollution, no need for mass killings.

We simply need the government too provide right incentives to switch to cleaner and less energy usage
>> if BTC price goes down further, Microstrategy will be forced to sell their BTC by their shareholders.

Your assumptions about capital structure are likely wrong here. Consider:

Microstrategy has its Bitcoin holdings in a subsidiary, Macrostrategy LLC. https://www.microstrategy.com/en/investor-relations/press/mi...

---

> 2) Bond Covenants

> - No covenants -- no one can force a sale of $BTC

> - $MSTR is allowed to raise more debt at the unrestricted BTC co which would be structurally senior to the $3.4B (so original convertible bond holders are potentially getting primed).

>This $MSTR secured bond is just a standard secured bond that has very little to do with $BTC.

> Bondholders basically sold a call option (for 6.125% yield) and a put option... MSTR walks away with a ton of upside optionality, and it has a marginal impact on #Bitcoin

(https://twitter.com/jdorman81/status/1403068157867274253)

---

> [5/N] Their main business makes about ~50M in net profit - basically, Saylor makes enough money to cover the annual interest by 10X.

> - This means that from now till 2025 at least, Saylor CANNOT be liquidated as long as he pays the interest on the 0.75% 2025 bond.

> [6/N] But oh no! what if the board forces saylor to sell?

> Saylor himself owns 25% of microstrategy but he also owns the majority of Class B shares which have 10x voting power giving him 72% of the voting power. I.E
Saylor CANNOT be forced by anybody to sell.

> [8/N] In conclusion

> 1. The latest round of purchase will not have the ability to liquidate his previous holdings

> 2. The interest payment on his bonds CANNOT liquidate him

> 3. Nobody has the power to force him to sell. At All.

(https://twitter.com/hodlKRYPTONITE/status/140216585565644800...)

---

In what scenario could Microstrategy's liabilities exceed its assets in 2025? https://twitter.com/UrbanKaoboy/status/1385644214092898308?s...
Ask HN: I never found out the outcome of Paul Allen’s lawsuits, did he win?
Internet searches completely failed to answer my question (am I failing at internet or internet is failing me?)

The latest news article I found was this one https://www.geekwire.com/2014/court-revives-paul-allens-patent-suit-aol-google-apple-yahoo/
That's true, and something that often gets lost in the acceleration of "devops culture". But, in my opinion, the consequence then should be to try to not use Docker at all, and look for alternatives (like Podman) instead of just taking control from the dev team.
Hmm, you might have a good point there. I'll double check your calculations - but it looks like it's back to the drawing board for me.
I just don't like the fact that most people find it approprate to be treated as goods on sale and the only choice we have is "take it or leave it".
> Adding some sort of Python API to it would be fairly simple given the file format.

Great, as soon as they add some sort of API or script input, I will notify author of article about this. BTW, ascii based file is not a script, STL file is also ascii.
Not necessarily. On my android phone the link provided by the QR code shows up in the regular camera app.
Today is a good day to BUY!
> But of course all this push to EVs is a huge regressive tax applied to the less-off people which is constantly ignored from the public discourse, so this type of attitude does not surprise me at all.

Easy just tax the rich more, tax carbon, subsidize EVs
I recommend checking out the jdeps command line tool, that comes bundled with the JDK. Though you probably have to read up on modules a bit first. It can create very lean “JREs” that can be bundled with the program and only load the required classes.
> Is there any other profession were the professional, doing something wrong, would be called the victim? Would an engineer, having made an error when doing structural engineering calculations, be called a victim if the software used was too complex? Or a physician who overlooked adverse affects written in fine print? Or the electrician making errors when fixing things in a house with old wiring?

I don't understand the relevance of this to my original question.

> Of course the behavior of Docker is really problematic in this case, and ditto for MongoDB not having auth active per default. But both applications were consciously chosen by Newsblur.

Or this, for that matter

---

So that you have it, my original ask was: But what's the end user a victim of in this case? Other than a brief lack of availability?
In Java you could make an instance of a class doing

c = Class.forName("tld.something.SomeClass").newInstance();

and if that string is created runtime, it's impossible to rule out usage of any dependency. So you basically have to tell the tools what to remove and what not to.
I think the rate of change in tech & culture (and therefore the attitudes) in last 50-70 years is way more than our societies can cope-up with.

It almost feels like things are in so much great flux today in every aspect of our life than anytime in the past.
It’s hostile to the experience. It takes me out of why I went to a restaurant I the first place. I want to sit down and focus on my present company and forget about my digital life. This isn’t a new experience, Red Robin and Ruby Tuesday have/had a tablet checkout system that was a chore to use. I started removing restaurants that used similar systems from my rotation because they ruin the experience.
Wait for posterior vitreous detachment. It's either unnoticed, or significantly worse than boring floaters. (For me: your milage may vary) it's strongly age related. A good detachment is floaters on steroids. A bad one is a tear. The blood cells resolve as wee discs, its pretty shit.

See a competent optician. There is a very expensive laser treatment I believe for giant floaters but more importantly you may have underlying problems. (Like.. pvd)
I still prefer Dokuwiki: it's open source and doesn't need a database. Pretty simple to run, and not one more thing to maintain. I have eleven years of internal infrastructure and organization notes in there, as well as user-facing docs.
Language Transfer [1] is a little bit like that, (all audio, and you are meant to talk back and just listen, speak and think, not write anything down), but it’s more of a conversational style where the teacher is explaining things to a student and you are supposed to pause to answer before the student does. Actually saying it does make a difference!

I haven’t got all the way through a course yet (need to get back but I’ll have to go back to an earlier point because it’s been a few months) but I feel like I made ten times the process as I did trying to do a course Duolingo for the same language.

It does the same kind of thing with the repetition. “Now remember how we’d say [word]” and it really does stick better than just seeing the word and a picture.

And it’s all available free too (but you can support on Patreon if you want).

1: https://www.languagetransfer.org/
I have a feeling most of our cities would be unhabitable if we had dog ears.
Looking forward to all the new cancer cases due to this. <- obvious sarcasm

But, seriously, manipulating something the way God intended it to be always results in dire consequences.
But of course, no one will care, it's all money money money
I used to bike for Deliveroo in France, as a delivery driver. Nowadays people pay refugees and illegal immigrants 100€ a week for them to deliver in their name.

I've personally met those refugees, I've personally heard their slavers boasting about it. I'd estimate their proportion in Paris around 30% of all Deliveroo drivers. In smaller cities it's not as common.

These slavers will open accounts in the name of their whole family, and they keep 75% of what those poor guys will make.
> but the actual IFR of COVID-19 is 0.15%

* US total COVID-19 deaths: 600.000

* US total population: 328.200.000

= 0.18% COVID-19 deaths of total population. The IFR must be even higher.
Isn't this to a much greater extent UFW's fault? If it claims to manage the firewall for your system, I would expect it to manage all of iptables, not just one particular chain that it thinks is important. At the very least, I would expect it to signal when there are other chains configured in iptables that it can't/won't manager for you.