skysight-inc/HackerNews huggingface dataset:
Ask HN: Kubernetes Firewall?
I am curious what firewall configurations one would recommend for internet facing network traffic in a kubernetes cluster?

I am using EKS but would love to hear any and all options, suggestions regardless if only available from another cloud vender managed solution.

My first instinct was to use the new AWS Load Balancer Controller which can create an ALB + WAF setup. This guide seems like exactly what I was thinking of: https://aws.amazon.com/premiumsupport/knowledge-center/eks-alb-ingress-aws-waf/.

However, I learned that the only certs the ALB works with are from ACM. So I looked into setting up my hands free dns + cert management (external-dns + cert-manager) with a ACM cert manager Issuer. But seems like that not possible?!
https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/1143
https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/1084

Cert-manager only supports an add-on for AWS' Private Cert Manager, not for public certs.

Given I do not want to manually deal with certs or have to create them outside of the my ingress defs the ALB approach seems effectively like a dead-end at the moment.

Thanks for your input. Hopefully this tale & post helps someone else as well.

Edit: Not really looking for a CNI setup as I am really looking for "firewall service" I can use at the edge of the cluster. However, would be interested in hearing about how you used CNI to suite this need if possible?
Innovations in Emacs Touch Interfacing
I would say that while it is a plausible hypothesis, Elon Musk has no particular reason to be seen as a credible source in this space, and that opening with that citation feels like its asking for discussion on the merits of Elon vs. the idea itself.
We are also seeing issues with Github Actions. Here we go again...
> Scots is a dialect of English

Beware fighting words

> Modern Scots is a sister language of Modern English, as the two diverged independently from the same source: Early Middle English (1150–1300)

> As there are no universally accepted criteria for distinguishing a language from a dialect, scholars and other interested parties often disagree about the linguistic, historical and social status of Scots, particularly its relationship to English. Although a number of paradigms for distinguishing between languages and dialects exist, they often render contradictory results. Broad Scots is at one end of a bipolar linguistic continuum, with Scottish Standard English at the other. Scots is sometimes regarded as a variety of English, though it has its own distinct dialects; other scholars treat Scots as a distinct Germanic language, in the way that Norwegian is closely linked to but distinct from Danish.
We're Chioma, Uche, and Zach, cofounders at Payhippo. We give loans to small businesses in Nigeria in less than 3 hours. Here's our website: https://payhippo.ng

Most of these businesses are creditworthy, but traditional banks and lenders often don’t lend to them because there are no credit scores and collateral requirements are too high. That’s why we assess businesses, build their Payhippo Scores, and provide financing to them.

Speed is everything for these business owners that are buying goods and need capital. For example, a supermarket may run out of inventory and not have the cash on hand to buy new goods. With PayHippo’s instant financing, that supermarket has the liquidity to buy inventory and make sure to retain the customer in their store. We deliver loans 21x faster than the next faster competitor. We slowed down our disbursement time from 3 hours to 6-9 hours one day. Almost immediately we got emails from two separate borrowers saying that they are disappointed at how long it is taking. This was validation about how important it is for us to be able to serving working capital needs on-demand.

Through our mobile-friendly web app, businesses can apply in just a few minutes. After 10-20 minutes our system has automatically verified and underwritten the business' loan. Once a human double-checks this verification and underwriting, (1-2 hours wait time) a business receives a loan offer. Once they click accept then funds are automatically disbursed to their account.

Please ask us any questions or provide any comments!
If their router is like mine, a guest joins a separate network, and is not able to join the one I use. So they would not find all the devices.
We need a Constitutionally guaranteed right to privacy in this country. I know that's way easier said than done but I think it's time we at least move towards such a thing through debate and consideration for what it means.
I am missing something: which house rules did the author break?
Interesting analysis. I think this is a great manual for how companies should view their value adds, not by gate keeping data, but by providing services that make it easier and better to use that data.
Yes, it does. Apple promised to enable e2e and did not do it.
Upvoted not because I agree. But we have seen time and time again only the founder are willing to stand up against these sort of things. ( I mean Steve gave the biggest middle finger to PRISM ) Managers are always looking at shareholder responsibility, that if they dont comply there might be severe consequences.

But I still dont think it is forced upon by the government, because the whole thing sounds and smells very Apple. Doing it for the child.
Yes! It would be a great fit. We understand that small companies are strapped the most for resources. With that in mind, we wanted to ensure we could provide day zero security for those who are just getting started.

I would be happy to chat further. We do provide a trial and can get any small business started.
Also it would be really nice if it intergrated with ngrok. Phone IP can change randomly.
EU's vaccine program was a shit show:

https://www.economist.com/briefing/2021/03/31/why-the-eus-co...
I can relate, as a neighbor frustrated by rogue airbnb guests next door. That being said, as an airbnb customer, I could not imagine a split second renting a place with cameras checking on me. I haven't seen any so far. I may be too 2019, though.
Yup definitely more than just webhooks - I can't perform basic git operations like push.
Can anyone tell me why since past version 68 of Firefox on Android nearly all my add-ons don't work. Is there an alternative for "I don't care about cookies" . Add-ons working on mobile in Firefox was the main reason I'm still a Firefox user. They have pretty much killed that by breaking compatibility.
> It's funny how people regard reducing carbon emissions by changing behaviour (e.g. moving to flats, using less cars ...) unrealistic, but then put suggestions like this forward.

I'm not suggesting that this is unrealistic or that we should not reduce emissions.

However, my view is that we live and work to make our lives more interesting and enjoyable, not to sacrifice ourselves for the sake of squeezing ever more of us on the planet.

The end of population growth, and even more population reduction, are massive changes to the way society and our economy work, I fully agree.

But ultimately this is unavoidable if we accept that population cannot grow forever on a finite planet (and it is already expected that it will stabilise of even decrease by the end of the century). I'm suggesting that we should therefore embrace this and see it as a positive rather than a negative (which is the usual view) because it has tremendous potential for making quality of life better for all humans in a sustainable way.
Definitely not right now. Let's see how things look in 5 years
Why would a hotel do that?

Cameras in the lobby, the hallways and the elevators, sure. But in a hotel room?

That's a great way to kill your business in no time.
It's a good way to further push away a chunk of your userbase. They're moving towards a touch-friendly UI, but a lot of us just want a compact desktop app that doesn't waste screen space with excessive padding.

The proper solution to this would be to have different modes if this is so critical. To their credit they did put in a "compact" mode after beta, but this is explicitly "unsupported" and even then still has more padding than "large" mode in the old UI.
Well, yes and no ...

Any language model alone isn't going to solve natural language understanding, but some future ML full-brain model surely will achieve AGI and therefore language understanding as part of that.

What's missing from a pure language model, is any grounding in reality and ability to interact with the world to test and extend its knowledge beyond what is derivable from the corpus it was trained on. It's level of understanding is ultimately limited by the content of the training corpus, regardless of how massive that may be.

Something like GPT-3 is really just a statistical twist on Doug Lenat's Cyc; it's understanding is always going to be limited by it's own fundamental nature. Yes, one deals with language, and one with facts, but ultimately both are just large, fixed, self-referential bodies of data.

Cyc really is a great analogy, and for some reason it took decades for Lenat et al to eventually realize that regardless of how much fixed data you added to it, it was never going to be enough. A closed black box can never know what's outside of the box, although it may gamely try to tell you if you ask it.

These modern language models, GPT-3, etc, have certainly been a bit of an eye opener, and can perform some impressive feats (question answering, etc), but one shouldn't be tempted to believe that if scaled up sufficiently they'll eventually somehow transcend their own nature and become more than a language model... a one-trick pony capable of generating plausible continuations of whatever you seed it with.
"Evidence obtained illegally" applies to criminal trials. These people were not facing even a civil trial -- they were facing being blacklisted and/or not getting their deposit back.
Yes, templates are different. That's why I said that they're "specific DSLs ... compiled into a JS render function"

Anyway there is no other abstraction. Hooks and composition APIs aren't magic, they're functions that you can write yourself. It's basic property change notifications but wrapped up in various levels of automation. Vue's object API can definitely seem messy but the new composition APIs in Vue 3 is standard JS syntax. Maybe it would be helpful to see the code yourself: https://github.com/vuejs/vue-next/tree/master/packages/react...
Would that be so bad? Netscape Navigator 4.6 circa 1999:
https://ia902901.us.archive.org/21/items/netscapecommunicato...

Twenty three years of churn has brought what UX benefits exactly? Hiding the protocol, hiding details about secure connections, hiding the status bar, hiding the text on tiny buttons, hiding the menus: https://mk0ghacksnety2pjrgh8.kinstacdn.com/wp-content/upload...

and for what? Optimising for people on 1366x768 laptops and people who don't want to do very much but search and click one result?
It seems more than just actions/webhooks. I can't push any commits at all.
you could run my self-hosted bookmarking site locally (which includes basic notes) https://github.com/jonschoning/espial
> Can you share any positive stories about a US-led outrage about human rights, followed by regime change, followed by prosperity?

Japan would be the closest I can think of. The motivations don’t align but the occupation and nation building effort of the Marshal Plan is in stark contrast to what happened in Iraq and Afghanistan.
" It's tough out there for Airbnb hosts to be good neighbors."

It's possible that it might be a priori impossible.
Then they must not rent the property (on Airbnb or VRBO). Regardless of pet rules, Airbnb policy is to allow service animals in all units (only exception is shared units where the other occupants have health problems).

https://www.airbnb.com/help/article/1869/assistance-animals

https://help.vrbo.com/articles/What-is-HomeAway-s-service-an...
Or keep them offline, recording to SD cards.
Sure, but just to be clear: the "dictator" in SCT is a particular mathematical model for preference selection. It doesn't imply a political dictator, and it isn't a necessary condition for SCT -- there are plenty of non-dictatorial preference selection systems.

It's not clear from his actual positions that Rawls would favor a dictatorial model, or that he even accepts SCT (which predates his academic output by ~40 years) as a decision substrate. Put another way: "worst off" isn't a blindly overriding position for Rawls; we can all recognize ways in which we would be the "worst off" but also not entitled to preferential treatment via the Original Position (Eichmann at the gallows being an intuitive example for most people).
alastair reynold's revelation space series certainly doesn't have ftl, apart from maybe [jumper clowns spoiler deleted]; the conjoiner drives use [science] to achieve 1g acceleration to get to near light speed, and time dilation is part of many of the plots.
If a guest were to try this at my Airbnb, I have in my house rules that guests may not disable security devices and an onsite inspection will be performed if they do. And that's exactly the type of guest I would immediately terminate their stay.
Your comment is just fanning the flames with no interesting discussion for the audience. When a counter point is presented, you're moving goal posts.

Moderna is selling vaccines for $20/pop. That's a US company.

Vaccines are also purchased by the Governments usually to be distributed for free. In US, you can get a COVID-vaccine shot for free anywhere in any state.
This looks very interesting, just picked a copy on Audible. Thank you for the recommendation.
You may also have cases where no variant is 0 so this case is probably not as straightforward
Describing Scots as a dialect of English is really about a political affiliation than any interest in linguistics, Plenty of people regard Scots as a distinct language.

(Scottish Firefox developer)
Ask HN: How do I get a US salary while living in Europe
Any tips or tricks on how to get a job as a senior engineer with a US salary ($400-500k) while living in Europe? In the UK where I'm based engineering salaries cap out at around $150-200k
I signed up for a new Apple account recently because I needed a developer account. As far as I could tell, it is no longer possible to sign up for an apple account without any 2fa.
I switched from Google Analytics to a Better open-source alternative
Thank you! We do get asked about alerts, both on metrics (as in your example) and on allocation (for example when the activity is significantly and durably diverging from the current expectations).

We haven’t started work on this but it’s very likely to happen at some point indeed.
> I’ve read a lot about bulling and social problems in USA schools, but so almost none of that myself i Eastern Europe.

There was some bullying back when I was in school, but possibly less than in the US. However, I think this doesn't have much to do with the curriculum, but with social conditions.

In my case I was bullied in secondary school (by kids in my class) even though school was tough and I was easily part of what you would consider "valuable resources".

The result was that the bullies would copy their homework off of the kids that copied their homework from me and I still got into fights daily.

In highschool bullying disappeared completely, but that's because I went to a selective school (the equivalent of a US magnet hs) where everybody was academically oriented and also came from more stable social environments.

In less academically strong highschools there are a lot of nasty things taking place - students abusing eachother, teachers abusing students, students beating up teachers etc.
Thank you! We would be happy to answer any questions you have. Please send an email to info@contraforce.com an we will be happy to help.
Using Your SaaS Social Media Marketing Strategy for Customer Acquisition
Find out how to create the perfect SaaS marketing strategy for your software business through social media. These tips will help you increase sales.
SteamOS Switches from Debian to Arch Linux
Haruki Murakami - Wind Up Bird Chronicle is my favorite but he has a lot of good novels. They're not science fiction but they're interesting and they have an "uncanny" aspect to them.
Apple being a trillion dollar company overrides all of that in the end.
I'd just be happy if the "system" theme actually honored my system theme. They broke that a few updates back. Now, instead of my focused window having a colored title bar to make it stand out, it's just a drab grey like my unfocused windows. It's little stuff like that which prevents me from using FF as my daily driver.
I’m sorry, could you give some context to non-Americans? What does “taking geometry” mean? My school had geometry as a subject in grades 7-11 (with 11 being the final year), were you expected to pack it all in one? How does that work?
HN being an endless feed of people complaining about things is no more meaningful about the entirety of the digital world than a bunch of grumpy old complainers are of all humanity.
> That said, the economic impact of such cures isn't clear to me. If your population gains, on average, say, a year or two of life, the pay-as-you go pension systems that are already under strain in greying Europe will come under even bigger strain.

And the alternative is? I mean people keep doing this "A is bad" ... okay what's B? Sometimes there's this implied, horrible option B. Sometimes there's just nothing.

Never mind that there is still pretty decent child mortality from cancer. And if you count every disease that mRNA can fight ... there's a few really bad ones in there.

> So it seems that each discovery like that will be balanced by us working longer. Personally, I as a 42 y.o. in Czechia, do not expect to get any meaningful state pension ever. There will be just too many of us.

If medicine can keep us in a fit enough state, physically and mentally, I say bring it on!

If not, there isn't a discussion to be had, because it won't happen.
This is what the article author states. But how certain are you that the dog didn't actually poop on the property or entered indoors?

The author stated before that there were no dogs on the property but was forced to admit that there was indeed a dog. It is therefore plausible he is also taking liberties at his other statements
The cost savings in medical expenses can balance out a lot, this becomes even more apparent as aging itself is cured and the costs associated with diseases brought on by aging, especially expensive end-of-life care, disappear.

Since your attitude is already set, there's less resistance to ending such pension plans for younger people now even as they continue paying in to support their elders. The sentiment with social security in the US is the same. If an administration ever actually tries to gracefully end it, I think it will be easier to pull off than they expect.
Moderna as well: https://www.modernatx.com/pipeline
In a different thread, I found https://www.fueleconomy.gov/feg/Find.do?action=sbs&id=40076 as a useful way of looking at CO2. That's got the Honda Fit as that's the one that was in discussion previously. Its a 33mpg car and the 'energy and environment' tab puts it at 4.4 tons/year. I've got a 2009 Honda Insight.

> Fuel cost estimates assume national average fuel prices and assume you drive 15,000 miles each year, 45% under highway driving conditions (steady speeds with little or no stopping) and 55% in city driving (low speeds with lots of stopping).

Noting that I'm not the typical home worker, but I went from an average of 600 miles/month (7200 miles/year) to 30 miles/month over the past year and a half. This took my carbon footprint for driving from 1.7 T/y to 0.1 T/y.

The flip side of this number is (for me) that I went from heating the house only a few hours a day in the winter to heating or cooling one room to comfortable. I don't have good numbers on my electrical footprint change. This would again be different with different life circumstances (number of other people in the house, size of house / apartment, etc...)
I see no problem with that. I downloaded the most recent version of Netscape Navigator a few days ago and while it's unusable for HTTPS websites, plain HTTP browsing is quite pleasant and surprisingly fast (even though it uses only one core). What is particularly nice is the SERP page of Google - very tidy and without any ads.
>Can anyone tell me why since past version 68 of Firefox on Android nearly all my add-ons don't work

Because they switched rendering engines or something. Now addons are restricted to a small subset that they've validated. You can use a custom addon collection to install untested addons (see: https://blog.mozilla.org/addons/2020/09/29/expanded-extensio...) to get around this, but there's no guarantee that the addons will work.
Depends what city you’re in
Small amount of googling: https://julianoliver.com/output/log_2015-12-18_14-39

Next time I'm in an airbnb I'm definitely nmap'ing and trying this out. ;)
I see the point that someone views this as a direct (almost arbitrary) loss for the worker. Why should they simply get less for working from home? But realistically speaking, let's assume 261 working days in a year, which comes out to 522 hours of commute. That's 522 hours of unpaid travel, every year. That's 65 8-hour working days.

How much is your time worth? For me, it's far more than the 10% pay cut. And I haven't even included the direct cost of travel (gas, wear and tear on vehicle, etc.), just hours lost.
Clients lying should not be a good motivation for a landlord to break the law. I'm not saying this landlord did, but am challenging your reasoning here.
...the theme I had settled on after the last update is no longer supported...

Definitely problem on a author ends.
Interesting, the opposite has been my experience, friends keep talking about how they can now move farther out of town and not have to deal with neighbours anymore. I'm considering similar.

Ultimately, people are more of a pain to deal with than a pleasure until you really get to know them. I suspect this is the same reason suburbs seem to be more appealing and costly than condos.
I receive messages from short codes all the time on my GV account.
ArchiveBox is built to solve most of those issues, but it's not great at categorization beyond tagging (e.g. no nested folders or stuff like that).
Op is probably talking about the additional guest (daughter) a night early and the dog on the property. IMO calling this breaking the rules is a bit of a stretch?
I think by law they have to make it as easy to opt out as to opt in. So for almost all the websites I see, clicking 'More options' defaults to everything off. I now do 'More options' > 'Save' on autopilot (and if one or two bad 'uns slip through the net, so be it - life's too short).
Wait.... These are only EXTERIOR cameras? What a click baity title - he seems to imply that you need to "hide stuffed toys" or check the light bulbs for cameras, but sounds like there were no cameras inside. So what's the problem?
The app can and will show you a lot of ads and you can't block them.

Your browser happily blocks them.
self-hosted pinboard https://github.com/jonschoning/espial
Interestingly the writer of Richard Donner's 1997 movie "Conspiracy Theory" [0] used the book "Catcher in the Rye" as a plot device.

[0] https://www.nytimes.com/1997/08/08/movies/sure-he-s-paranoid...
The gateway feature, where Minio works as a local cache for actual AWS S3 buckets, looks pretty nice.

https://docs.min.io/docs/minio-gateway-for-s3.html
My $1000 hardware is my property, not “Apple’s platform”. Also, messaging is a protocol… which is not a platform.
> Now, if you click on Settings > Privacy and Security > Cookies and Site Data > Manage Data, Firefox no longer shows individual domains that store data. Instead, Firefox lists a cookie jar for each website you have visited.

How is data from previous versions of Firefox handled? Will data from ad networks be listed as a "website you have visited", made unavailable for the embedding site's cookie jar, and re-fetched upon the next visit?