skysight-inc/HackerNews huggingface dataset:
I know of no city in the US (although there may be some small towns) where taxi rates are not dictated by either state, county, or local laws. You cannot get a taxi for any rate other than the officially-sanctioned one. Unfortunately, this rate seldom has anything to do with the cost of gas, maintenance, depreciation, pandemics suddenly causing people to use more / less services, etc. This means that for the taxi industry, there are four chief ways of making more money (1) lobbying, which is effective but slow; (2) reducing costs in the extreme, which is also effective, but only to the extent that you are able to reduce your costs further by delaying repairs, doing it yourself, not offering refreshments, not providing great customer service, not developing apps, etc.; (3) working more hours, often in contravention of labor and safety laws. Also effective, but only if you're independent. (4) Breaking the law. A significant number of cab meters are illegally altered to charge more money than allowed by law.

Uber, for all its flaws, provided a service that was better than the taxi companies simply because they didn't require their contractors cut corners, cheat, or provide poor service to make money. People flocked to Uber because it was genuinely a better experience than the local taxi companies. I think in the long run, Uber will compete by becoming as expensive as (or more expensive than) local cab companies, and having a much smaller customer base.
Interesting, I was expecting parsec to close shop after they stopped offering their paid hosting for gaming and refunded people's balance.

Looks like they just pivoted towards business users instead.

Anyway, congrats to the team!
> What original post? It was a google search that reveals some router's remote admin page, that search doesn't mention any specific router brand or model.

It does, click any of the links. The specific search string OP used returns only C6, C7 and C9 routers (I clicked through 2 pages of results).

You saw TP-Link and went off about things that were valid to complain about in the past... but are not specifically with these routers, and probably no new model TP-Link or any sane manufacturer is turning out today.

> And the point I was trying to make is that merely being able to override the default remote admin setting does not ensure that the user has any idea what the ramifications are

Again, if you actually clicked through the OP, you'd notice most of the bare IP address results are dead (meaning they are no longer on the internet), and the ones with CNAME's attached appear to be professionally managed. The assumption is sound.
If by "frequently" you mean "that one day in 1990"... The single highest day of the year for most years is 115 ± 3.
I suggest anyone wanting to see the pages in the search result to click on the google cache version instead of clicking on the link itself exposing your IP address.
The most annoying aspects of this, from a UX POV, are:

* no indication on the PR page that actions are down

* no way to run the actions once actions comes back

My kingdom for a "rerun actions" button...
Even if all of that is updated and secure; with the services exposed, it's less than trivial to make that service eat the small amount of memory it has to work with, and take down the network it manages.
It is not. The purpose is to show misconfigured access points accessible through the internet
Hackers Steal $600M in Likely Largest DeFi Crypto Theft
How to Fine-Tune Bert Transformer with SpaCy v3.0
I don't think that was the purpose of this post.
Never heard of Cinnamon, but if it copies Windows, then that's a shame too.
They can make a comment that says "part 2" and respond to it. Add a pin and it'll be at the top.

Some creators do this, but not enough. Besides with 3 minute videos, this shouldn't be a problem anymore.
It can lead to employees having a say in how the company is run. Of course this is terrible for management, if the management does not trust or reward employees fairly.
I used to arrange rides for people to the airport as part of my job. My experience was that yellow cab was inconsistent, frequently would fail to arrive for morning pickups without notice, operators were consistently short/impatient, even events like calling for a cab and being told 10-15 minutes only to call back half an hour later to be told the same thing weren't uncommon.

Luxury towncar services however did the trick. This was before Uber/Lyft of course.
Uber can probably be profitable. Cut costs drastically. Focus on where the business can be profitable--which probably means effectively pulling out of non core urban areas. But it will clearly be a less good service for a lot of people.

And probably doesn't look a lot better than taxis for many people any longer.

And for not on demand and not price sensitive, there are always private cars as there have been all along in many areas.
DiDi operates in Brazil under name 99. It is usually little bit cheaper for customer than Uber. At the same time DiDi pays more to the driver.
How is DiDi profitable and Uber not?
* Source mine, I talked to drivers and used both apps.
Did you go to High School with the rampant bullying? Popularity is not linked at all with personality traits that make someone a good leader afaik. Traditional hierarchy at least tries to keep people who are a competent in power.
Low taxes and a semblance of culture. :-)
Most of these entities probably don’t have that much liquid cash. Are they going to need to sell a bunch of crypto to pay the fine? $100M is a huge amount in these shallow markets.
>That's making some very generous assumptions.

Disagree. In my current country of living, I'm not even sure how I'd properly expose the router I use to the public internet since I sit behind the ISP's NAT-ing, and even when I lived in the US, I am not confident I could tell you how to publicly expose the modem provided by Comcast for non-local access, much less how someone without any tech experience might do this.

If this was a prevalent problem because of default settings, I'd expect far more than 7800 results; I am not willing to concede every instance is intentional, but 7800 out of the billions of routing devices in the world showing up on this search enforces my understanding that these 7800 entries are special in some way.

>I doubt there's MFA or even rate limiting.

MFA is not common at all on consumer routers, which at least quite a few on the first page result are, same with rate limiting.

Even for Enterprise grade gear, the threat isn't the user-defined password, it's the manufacturer backdoors, which we've seen many of in the last few years. Rate limiting doesn't do much if you have a fair chance that you've got a back door.

What likely __does__ help is that as far as I know, "Enable Web Access from WAN" is by default *disabled* on most consumer routers (and enterprise? that I'm not sure of), so I think that this leads credence to the devices on the Google results being exposed intentionally to some degree. (The owners' knowledge level not withstanding, this is a fairly out of the way setting, at least on my Asus router)
> liability

IDK. Tool rental companies existed for decades. I'm sure the fine print is so good that you're assuming all liability by merely thinking about using their tools
I don’t agree with this comment, because I think these tradeoffs have mostly been shown to be worth it, in most cases.

But I also think those of you downvoting it are Doing HN Wrong.
Full vaccination suppresses SARS-CoV-2 delta variant mutation frequency
When I was last in the USA, I drove through a customs checkpoint between California and Nevada.

There are zero customs checks between states in the EU customs union, because that’s literally what “a customs union” means.

If you don’t like the EU or don’t want to be a part of it, that’s your opinion and yours to say, but what it is includes a customs union.
Consider a tagline that incorporates your vision and current mission/status, e.g. "Lending to small African businesses starting with Nigeria" or "Financing small African businesses, one country at a time".
Are we seeing apex Facebook?

I've been thinking this for years now, but there's really nothing to replace it, it has a huge lock-in, and there's not been an underlying technical shift that enables product re-invention.

"Social networking" has obviously been around forever, IMO that core technical landscape shift we've seen for 70+ years that results in product evolution has been increasing network connection speed. Faster connections drive re-invention on just about every layer of the internet. In this case:

300b ---> 14k+ -> 56k --> DSL/Cable > Mobile 3G -> ??

Email --> BBS --> AOL --> MySpace --> Facebook --> ??

My guess is we'll see a true Facebook killer emerge once mmWave 5G hits widespread adoption. Of course FB will have their own products to compete, but talking to many Gen-Z they are not really interested in Facebook and typically use Snapchat/TikTok/etc. Facebook is losing the mindshare game, so we're waiting on the tech to seal the blow.

On the devil's advocate side, FB has made some shrewd acquisitions like IG/WhatsApp, and tech itself is increasingly headed towards a "cereal box" mindset where a few core companies make all the products you consume under separate labels. A new competitor would need the guts to avoid an early exit.
No worries - the book grew out of a Bash course[1] I developed and ran at my previous and current employer, which mostly goes through a bunch of WTFs and non-trivial syntax and solutions to common problems which turn out to be more subtle than the naive implementation would indicate.

I haven't read the guide you linked to, but scanning the index I'd say my book is quite different:

- A big portion of my book is about quality assurance - exiting early, automated testing, linting, the most readable forms of commands, and the like.

- It's focused much more on scripting than command-line use.

- It avoids common pitfalls like using `which` to determine what will be run[2].

- Rather than give a surface treatment of `sed` and `awk` it treats those as separate subjects which would be better learned from some other source. Personally I avoid `sed` and `awk` in scripts where possible, since a lot of the things they do can be achieved with more maintainable commands, anything non-trivial is really hard to read, and using either is an indication that the problem might better be implemented in another language.

- It's opinionated about interactive scripts. Basically I consider them a bad idea the vast majority of the time because they pretty much preclude wrapping in a sensible way, and add a bunch of extra code irrelevant to solving the problem.

[1] https://victor-engmark.gitlab.io/advanced-shell-scripting-wi...

[2] https://unix.stackexchange.com/q/85249/3645
Exactly, so why have disparate pay by location? I'd expect all remote workers to get the same salary, perhaps a bit lower than onsite workers to account for productivity loss.
It's just a superblock in a developed area. Major roads on both sides.
Here it is in Google StreetView.[1] Looks like they bought up a few trailer parks and leveled them to build this. It looks like an ordinary apartment complex, without parking.

[1] https://earth.google.com/web/search/2025+E+Apache+Blvd,+Temp...
> In my mind, understanding a thing means you can justify an answer.

What if the language model can generate a step-by-step explanation in the form of text? [0]

There's no guarantee that the reasoning was used to come up with the answer in the first place, and no proof that the reasoning isn't just the product of "a really fancy markov chain generator", but would you accept it?

We're really walking into Searle's Chinese Room at this point.

[0] https://nitter.hu/kleptid/status/1284069270603866113#m
The cookie law is fine, the problem is with companies who maliciously comply with it (and often "comply" with it in a way that doesn't actually comply at all).

It's sort of like how telcos in America like to comply with various sales taxes by… making something up and adding a line item to your bill purporting to be taxes, but really it's just them charging you for no reason.
>Do you really think they would go to all this trouble and then say oh you don't want to get scanned? Just turn off iCloud photos.

They have literally said exactly that.

>Q: So if iCloud Photos is disabled, the system does not work, which is the public language in the FAQ. I just wanted to ask specifically, when you disable iCloud Photos, does this system continue to create hashes of your photos on device, or is it completely inactive at that point?

A: If users are not using iCloud Photos, NeuralHash will not run

https://techcrunch.com/2021/08/10/interview-apples-head-of-p...
Physicists Spot Turing Patterns in a Tiny Crystal
Of course they can raise prices. But that doesn’t mean people will pay them.

I’ve noticed massive increases lately in Ubers prices. So have lots of other people. In response, people take fewer Ubers. As prices go up demand will go down.

Uber has massive fixed costs. Even if they maximize where supply meets demand (where they can make the most money) if it’s not enough to cover their fixed costs they won’t be profitable.

Uber needs to find a way to lower their costs or grow their users (raising prices doesn’t help) to hit a profitable break even point.

It’s been the VC money that has been subsidizing Uber prices for a while. That’s disappearing. Uber is also trying to expand into more spaces (Uber eats) to acquire customers. Maybe this will work but so far it’s not.
If we suspend the Uber/taxi comparison, and assume Uber is a new taxi-like service but better, therefore deserves a premium? I know I’d pay for that premium. Not everyone will, but I can’t be alone?

So that means the addressable market shrinks. Think premium black-car-only service; Uber’s roots). Why can’t such a service find demand/price equilibrium? I think it can, but not in a manner that can justify Uber’s “unicorn” valuation. And I think that’s at the core of Uber’s conundrum/identity crisis: it provides value, but with tech-company cost structures. However, it doesn’t deserve tech-company valuations because it’s just not as scalable — it’s tied to operating in the physical world, with physical constraints.

If the strategy is to burn cash, continue entrenchment, and eventually leapfrog to self-driving Ubers (mitigating the scaling/cost problem to an extent), then that’s a war of attrition. Fingers crossed.
The list Apple uses is the property of the secret police, which is owned by the government. The government can change the database at a whim and push new targeting data to your phone.
It’s almost certainly his billion dollar net worth insulating him from the worries of the plebs, it’s my standard assumption when someone asks: “Why is (billionaire) seemingly out of touch?”
Well... yea.

People go on TikTok seeking to be entertained. Is this different than any other entertainment platform?
It depends entirely on what technologies you are specifically exposing. If you are serving a page with a web server application like Nginx or Apache, you should read about securing those applications. If you are writing a NodeJS application, you should read something specific to that.

If you want something very general and comprehensive, you can read this, although it is probably too involved for a basic "website":
https://owasp.org/www-project-web-security-testing-guide/sta...
Lol this is 100% considered a transfer under this definition. I do admire the confidence of your IANAL interpretation on the landing page though.

Cool project either way. Just don’t expect it to stay up very long.
90% of communication for humans is body language and sensory cues.

It’s not hard for me to see how our language faculty convinced past humans we were somehow masters of reality beyond other creatures.

Past humans did pass on a lot of dumb ideas.
This is why I miss Flash: by not installing it I didn’t have to deal with blasting audio, video, or sites that required a stupid journey or game in order to simply use them.
(disclosure: I work on the backend at Parsec)

For those who don't know either company: Unity is a popular 2D/3D commercial game engine, and Parsec is a low-latency remote desktop tool that initially focused on gaming, but pivoted to an enterprise product for remote creative teams during the pandemic.
The same thing happens in all new communities re: schools, sports facilities, fire departments, etc. You can argue that the developer should have to account for these needed public goods, but everyone buying knows they don't exist, then immediately complains that they don't exist once they move in.
Pet peeve?
It's as safe as whatever software stack you'd be using on the Raspberry Pi to serve the site, same as if you'd be hosting it on a VPS in someone's cloud (though in your case if there's a vulnerability of a particular kind, someone could gain access to your local network).

Since you're not hosting the site on the router itself, presumably you're forwarding port 80 from the router to the Raspberry Pi, so unless the security of the Pi ends up being broken, the router should be safe.

(Also I'd recommend using Let's Encrypt to get an automatically-renewing TLS cert so you can serve https on port 443 as well, and even redirect port 80 to it. It's not that difficult to set up, and you'll be improving the privacy and security of those who visit your site.)
Trillion Dollar Paint Job – By Mike Solana – Pirate Wires
One thing about large systems, even ones that are quite reliable overall, is that if they reported an outage whenever a single customer saw a problem, their dashboards would literally never be green. That'd be true in some sense but not very useful.

A teammate once made a "problem" light for Gmail as a joke and coded it to be lit when there were any alerts firing at any severity in the internal monitoring system. I think most people would say that Gmail is pretty reliable, but if the bulb ever went out, you could safely assume there was a problem with the bulb or the monitoring system.

That's why big systems have SLOs like (to give a simple example) 99.9% of requests succeeding rather than 100%, or 99.999% of customer data being currently available rather than 100%. (Sometimes they can get more complex like at least x% of customers have no more than y% of time periods in which more than z% of requests fail.) And if they have per-customer SLOs, those are generally much less strict than site-wide SLOs and require a certain traffic level to take effect.

In today's case, I think github's problems are widespread enough that whatever SLO they've set is being violated, but the point stands in general.
Here is another example of what Google wasn't designed to do: https://www.google.com/search?q=intitle%3A%22index+of%22+mp3
Reddit's more popular subs at least used to be usable. But over the last couple of years r/all has turned into reposts, outrage clickbait, misinformation, and propaganda exclusively. I started putting more and more sub on the ignore list, but eventually there was nothing worthwhile left. I've unsubscribed from an increasing number of mid-sized subs as even those have more and more turned into complete circlejerks. At this point, I'm down to a handful of smaller subs that I visit semi regularly.

Maybe it's just me and my tolerance for this kind of BS has declined over the years or maybe the site is steadily getting worse as it gets bigger.
(Outdoor, Careful) Meetups Everywhere 2021 – Seeking Organizers
Not silly at all, it's an important consideration. The following is based on what we've seen work well.

The first place I'd start is by outlining your team's week in the Weekly. I'd finish any ongoing projects in their current tools and link to those other tools from the Weekly. This way those projects aren't disrupted, but you've now gained a central hub for your team.

As you start new projects, you can create a project doc in Clarity for each of them. Eventually the existing projects will be finished, or you can migrate what's left.

Next, I would start to conduct meeting notes in Clarity because any action items that come out of those meetings can be delegated and managed alongside your projects and their tasks.

Finally, you can start posting articles, ideas, research, and customer feedback in the shared notes feed in Clarity (rather than posting them in Slack/chat). This way chat is less distracting, and you can resurface those notes later by using tags. The notes feed gives everyone a chronological feed of notes shared by the team, without the distraction of chat.

Rather than conducting a huge migration from your current tools to Clarity, I find it's less overwhelming if you bring information over as it's relevant to your work. Not only is this less up front work, it also starts your knowledge graph off with a useful foundation.

Happy to elaborate further and answer any scenario-specific questions.

As for pricing, we are rolling that out this week. All Clarity bases are free to use for an unlimited period of time and with unlimited members. Each base has 1,000 free blocks per month [1], and can have up to 100 active tasks [2].

When you exceed either of these usage limits, you'll have the option to upgrade your base to a Pro subscription that is billed per member per month.

This is our only business model. We do not sell your data or any metrics derived from user activity. Privacy is our top priority.

[1] - A block is a unit of content (e.g. a paragraph of text, an image, a video embed, a checklist item). All documents in Clarity are composed of blocks. The 1,000 block limit resets at the start of each calendar month.

[2] - Tasks created, but not marked done, are considered active.
Based on the occasional comments here, some analytics sites seem to track how many % of visitors actually accept cookies through the banners.

It's not a surprising thing to do, but it pretty quickly leads to the percentage becoming yet another metric to "optimize".

I think it's save to assume there is no practical way to make more visitors want to accept more cookies.

That leaves only one way to optimize that metric, and that is dark patterns.
No hate, but everything has a cost. Denos strengths over other JS runtimes don't come from its native typescript support, but from the much simpler and streamlined tooling compared to the rest of the JS ecosystem.

JS is the smallest common denominator for that tooling. If people want typescript support they can run the compiler themselves. TS is the odd feature that's there because Ryan likes it, but why favour TS over Reason for example?

I'd rather see good WASI support and a more finegrained sandboxing model, and have the community take care of transpilers.
Someone mentioned Alpine, so I'll mention htmx:

https://htmx.org/
There's a difference between having the concept of number and reacting to quantities or having expectations that are unmet. There is no need for abstract concepts. All animals (in the phylogenetic sense) other than ourselves perceive reality utterly concretely. I am not sure how these brain scans are supposed to really show otherwise.

Show me an animal that can describe and argue and you will have my attention. For now, I only see signalling and expression, but no language showing signs of description and argumentation.