skysight-inc/HackerNews huggingface dataset:
Yes. When the attacker can interpose their own server on the network, seen by valid clients, then the attacker can redirect the DNS of those clients to the fake server.

This is a MiTM attack that allows the fake server to be accepted by valid clients (on that network), stealing their credentials and then potentially their information from the server. There are actually many attacks that can happen here, one of which is simply to record the credentials, while passing the traffic through to the server and back from the server to the clients.

Even though the true DNS server has had its DNS record's IP address changed to point towards the correct and true server, the clients are unaware of this change, as their DNS caches have been poisoned to point towards the malicious server.

PS There is a defense against this, certificate pinning, but that is not used much in practice.
it might matter for ranking top in large threads, I'd agree but not so much for what ends up negative or positive.

Early voting matters much more for what ends up on the front page.
Pity that once uploaded there's no way to get your data back from Google. API scrambles EXIF location metatada while Takeout, besides being pain to use on an ongoing basis, fails if you store too many files.
I was referring to your specific use-case. I can go to k8s’ website to check its features, no need to list them here. It seems you are trying to create your own SaaS/PaaS to manage your home infrastructure. However, I still don’t see k8s as proper tool for this, because the scale is not big enough for such. Remember, k8s was designed with the Borg philosophy. But maybe you have a special case, so by all means, go for k8s.

I don’t think anyone is scared of complexity. However, not everyone has easy horizontal scalable web applications. And most of time one just wants environmental organization and isolation, which containers/VMs brings. In home clouds I would see vertical scaling as a critical feature for efficiency in the limited infrastructure that cannot be easily scaled up. And today, k8s vertical auto-scaler isn’t anything but a disguised horizontal auto-scaler.

Proxmox isn’t competing against Kubernetes, because by design k8s doesn’t support containers that run anything other than a single application/process that is supposed to be easily killed.

If anything, LXD is the tool now competing with Proxmox due to its recent support to Qemu virtual machines. Although I don’t see what super advanced use case you have, I agree it is okay to run k8s on top of your Proxmox cluster. And you should check LXE limitations.
>When was the last time you saw a company apologize for their service being too popular?

January this year that I can recall.

https://twitter.com/moxie/status/1350638559301013511
Pigeons sitting on a satellite dish that might look like a waterless birdbath — yeah, I can imagine that might cause problems.
The goal is for the train to NOT be centered when cornering, the cones allow for this. If the train was centered during corning, or simply with non-coned wheels, the outer wheel would necessarily slip.
Oh well if there are human reviewers then we can be sure there will be no abuse.

After all, Youtube copyright strikes have never been abused thanks to the fact that there are human reviewers.

Also, no app has ever been incorrectly removed from the Apple App Store, for the same reason that there are human reviewers.

This is thanks to the fact that human reviewers never make mistakes, unlike the rest of humans.

What could go wrong if we adopt the same system for something that could potentially result in a criminal investigation?
I'm guilty of gzip + base64'ing short files, and copying and pasting them rather than scp/rsync. When the whole toolbox is there, sometimes it's fun to see what kind of Rube Goldberg machine you can make :)
yeah but so are AWS ips
Ask HN: What is your home office setup like?
Just above the gif:

> Customizable cursor height (see :h NvuiCaretExtendTop and :h NvuiCaretExtendBottom)

Ex. :NvuiCaretExtendTop 200, :NvuiCaretExtendBottom 100 (see below)
In proportion of list items, sure. And in most organizations that’s probably roughly proportional. But I don’t think it should be dismissed that cognitive overhead and overly complex solutions are time killers.

My team is wonderful, even astoundingly so, on most of the communication points. My legacy codebase is so challenging that I probably waste 90% of my time.

This isn’t a typical situation! But I want to make sure it isn’t dismissed in a rush to wholly classify this as people problems.
Alexa has been listening in on all your sexual adventures at home anyway, so what difference does this make?
Oh wow it actually works -- I guess I didn't need #require after all. Thanks!
I dream of a world with less deaths.
For US hospitals with emergency rooms, the EMTALA requires them to care for such patients. Denying them care would require a change in federal law.

Also note that there's no completely reliable way for a hospital to determine whether a particular patient has been vaccinated. Most states have immunization registries but those aren't updated in real time and data entry errors are common.
Yes! This is brilliant. I'll be creating one, as will the missus. Great way of showing people what projects are a current concern as what we've worked on in the past doesn't necessarily reflect current interests.
That only works if they are on a laptop.

I work off a desktop with two 28" monitors and my camera sits above them in the center, and the meeting has to be on the left monitor or the right monitor, not straddling the middle, so you will never get that feeling of me looking directly at you.

I am, however, thinking of making something that deepfakes the perspective change correctly.
If thousands of people keep making a mistake when using your product, you can go "purely on them, not our problem", true. Or you can do something to your product to make the mistake less likely to cause a problem.
I live in a trailer and you can see my wifi setup at https://chovy.neocities.org
Not OP, but this looks promising after a little searching: https://askubuntu.com/questions/599825/yubikey-two-factor-au...
It seems like you value the non-decision of university bureaucrats over the professors who actually do the work.
Eww, a 20MB GIF with harsh dithering artefacts. And then another 22MB in two more GIFs. All in the repository.

(a) GIF is not the right format here, use a video format because it’ll produce a visually superior result (proper colour, no dithering needed—not that it actually is even with animated GIFs) and much more usable result (not autoplaying if the user agent’s configuration says not to, allowing scrubbing, showing how long the video is rather than you having to guess “is it still going, or did it start again?”, that kind of thing) in significantly less space.

(b) Things like this emphatically do not belong in the code repository, because they bloat things forever despite being for demonstration only. A repository that would have been 1.0MB and cloned in well under a second is instead 46.2MB (43.8MB of GIFs and 2MB of PNGs) and took me about fifteen seconds to clone (cloning repositories from GitHub is always slower than you’d expect when you’re on the other side if the world, in AU/NZ).
“Russian Flu” pandemic from 1889 to 1891 might have been a coronavirus pandemic
Huarong Posts $15.9B Loss as Leverage Hit 1,333 Times
> I don't take a gender neutral view on this issue either

Why is that? Just curious; like a biological prescriptivist sort of thing? Or something else?
Ask HN: Why do American restaurant chains block their websites in Australia?
None of these are accessible from Australia/NZ...

https://www.applebees.com/en

https://www.daveandbusters.com/sports-bar-and-restaurant

https://www.olivegarden.com/home

https://www.ihop.com/en

https://www.buffalowildwings.com/

https://www.redrobin.com/
Have you used vim since language servers became a thing? I was in the same boat as you for a while, but I've been consistently impressed with how far the language server ecosystem has come.

Yes, there's still the cost of setting it up in the first place still. That comes with the territory. There are some decent neovim distros out there (lunarvim, nvchad, etc) to get you started though!
I've got a desk with one monitor in an office space I share with my partner, but I still end up working on my laptop from the couch pretty regularly because it's so cosy :)

My back and writs protest.
I had a video with 8 digit views get taken down and a copyright strike applied to my account because a “spiritual healer” said they own the copyright to the word “spirit” in any and all uses, and good old Google/YouTube sided with them after appeal.

I’d only used the word in the title (it was part of the name of a ship) and the video was just a video I had personally taken of the ship on a test day. I was authorised to do the video by the ship owners, and there was no talking or music.

I understand it’s a difficult issue to scan and check all the content, but when it goes to review and they STILL side with the bullshit fake claims? Bleh. My hatred of Google and the modern internet is immeasurable these days.
I'm suspect about this gui project, but I setup LSP + neovim for a rust project last week and I think it is significantly better than any IDE I have seen, super productive
Be careful with blanket CTE recommendations. They tend to deoptimize with writes in really surprising ways. If you’re just reading data, they’re great.
Left and moderate politician know the issue, I'm saying normal people and far right won't admit it because they think since they live in their small bubble the entire country is the same.

There has been immense pressure in the last years against immigrants in Europe and is true in every European country. Le Pen in France (21% in the last presidential election, 33% on the second turn vs Macron) and Salvini in Italy (Lega got 17% in the general election) are far right and xenophobic parties too. They won't admit it publicly, but they are not even taking the distance from whom in their party are racist as that helps them on getting votes.
He told the students what the rules were for his class, and why his health reasons dictated a more stringent policy for the class than was standard for the University. I see no problems with that. If the students didn’t like his policies, then they could have gone elsewhere.

I think the real concern here should be the harm done to the other students, both by the one student who couldn’t be bothered to put on a mask and the fact that they have now lost their professor.
Too bad there were no postdocs who could've taken the place of this far-beyond-retirement-age professor sooner.
If the university required masks indoors and there was a professor who decided to allow students not to wear them in his classroom, would that be acceptable?
Connection Strings Reference
With Neovim 0.5 you'll get native SLP and treesitter support. And it has first class Lua support, which is a huge improvement over vimscript for plugin writers and if you do larger configs yourself.

These are by no means must haves, and there are workable alternatives, but IMO they're nice improvements that warrant the small switching overhead.
The Bhagavad Gita is one of the most extensively translated texts in the world. Unfortunately this allows a lot of not-so-good and personal interpretations to pollute an unbiased study of the text. I found the following two translations/interpretations pretty good to get at the fundamental ideas;

* The Bhagavad Gita (Oxford World's Classics) translated by W.J.Johnson - This is a very good and succinct translation in the spirit of the original text and should be the first one you read.

* The Bhagavad Gita (2 vols in 1) translated and interpreted by Franklin Edgerton - Contains one of the best interpretations of the Gita based on the underlying Hindu Worldviews. Edgerton was a giant in Sanskrit studies and his brilliance shows here.
Sounds like a fun project, many years ago I built a POV led wand that used an 8 bit parallel adder made from transistors, a 555 timer and an EEPROM.
That might be a good hello world type project to tackle on your way to the CPU goal.
So could you say he thinks he is Above the Law and the SEC is Out For Justice? Hopefully Seagal isn't Out of Reach and the SEC gets the Maximum Conviction.
I recall a classic Mac OS hard drive indicator icon to the left of the Apple menu that would roughly correspond to the crunching of the physical disk.

I had no idea what this article was going to be about, but determining behavior based on physical characteristics of the hardware is something I miss with modern, quiet machines.
This is actually a really complete table of issues created by engineering that harm the organization overall...
I don't think any current AIP subs can generate their own LOX. It's possible in theory, but the fractional distillation machinery is bulky and power hungry. So that's why range and endurance are severely limited.
But is that not the locations that are inexact, not the quantity of electrons?
Gvim isn't really an "or" in this case, it's just a GUI for vim.

Some things I like about neovim over vim.

- Lua integration as first class citizen.

- Treesitter

- lsp built in

- Feeling that the community is super active and in a period of movement.

I love being able to hack and add specific functionality to my own workflow in lua just as part of the editor. I can add features in a way that I just can't in VS Code or vim. It's no emacs level of hackability, but it's a happy medium for me.
What’s your opinion on adult male prisoners who initiate sexual relationships with female prison workers, often for favors or sometimes even for help escaping [1]? Do you also see them as victims?

[1] https://abcnews.go.com/US/police-concrete-leads-inmates-fled...
Age of Empires 2 does something similarly tricky for beta/trial versions - when it's check_expiration check fails once, it writes some "hard to find" registry value (Software\X\DT2 to 1 for aok and Software\TC\XPX to 7 for aoc), and then thereafter also fails if this value exists and is the previously written value to prevent you changing your system clock to circumvent that check.

Of course that's all rather silly since a 1 byte change in WinMain also defeats this, but that requires modifying the program ...
It's on archive.org in printed form @ https://archive.org/details/Captain80BasicAdventures/page/n1...
I find people make the mistake of thinking about how long it takes them to read 20 lines rather than how long it takes them to read x piece of functionality. (Of course it's much harder to compare the latter, but that's like the drunk searching for his keys under the streetlamp rather than where he dropped them). If there's a dense 200 lines of Haskell (or APL) takes you a week to understand, does that mean that Haskell is hard to read? Well, maybe, but if those 200 lines are replacing 20,000 lines of Go, then maybe not.
Strong disagree. There’s very little reason college classes even need to meet in person. If they do, it would be very easy to protect the lecturer. A plexiglass divider is all that’s needed. A university that doesn’t provide that is essentially either being negligent to save a few bucks, unjustifiable given their massive revenues, or willfully trying to push out a tenured professor. I hope he sues big and wins. Universities have long outlived their usefulness. They’re just corporations that exist to provide the elite with sinecure jobs and nurture endowments that mostly sit idle.
There is an website[0] set up already to show to show how easy it is to find collisions with a photo of a beagle.

The left side photos are all apparently kitten photos but what if it was a photo of the Nirvana baby and, as a human reviewer, you had no access to the right side photo because it was just a hash in an anonymous database?

[0] https://thishashcollisionisnotporn.com/
Could Eve then just register bob.com and point it to bob's random bucket to mess with him?

And shouldn't Alice be able to register Alice.com and point it at Bob's bucket if she feels like it?

It seems like the answer already exists: don't create CNAMEs haphazardly.

(But please explain it to me if I'm missing something here)
Back in my days of programming shiny round discs, we had a client request to put a time bomb in an interactive CD-ROM. To test it, we adjusted the date on the computer that did our MPEG-2 encoding for DVD. As was bound to happen, the date did not get reset to current time, so that some DVD encodes were encoded in the future. It took so many calls back&forth with support to figure out why these files were misbehaving.

TL;DR becareful when adjusting the dates as there may be unintended consequences
So, I'm highly attracted to the marketing (I work in the "personal server" market, mostly reselling NAS devices). Overall I'm a bit disappointed with the price per capability ($450 + $100 every year after that for a 1TB server from what I'm reading). But as one the first forays into what I feel is a huge upcoming market, it's fair to start at a premium price point as you experiment with different form factors/features/costs/etc.

I more personally lament the creeping buzzword-ification of "personal server" messaging. There's a burgeoning array of different underlying meanings for the terms "personal", "server", "own your own data", "full privacy", etc. It seems likely that terms like these will continue grow in popularity with adwords searches, so you can expect more companies and products to use this claim to sell a particular architecture with a potentially large set of technical trade-offs between various ideas of "server ownership".

Ultimately where I think the general trend towards "server ownership" will land, like all new important technologies as they get integrated into the rest of society, is with a company/product that best navigates a rather tricky balance between the affirmed value of "ownership" (et cetera) vs the individual's willingness to get their hands dirty with a slightly more sophisticated, but more robust understanding of the underlying architecture.

Put simply; the less the "end-user" knows about the fundamentals of their personal computing stack, the less capable they'll be when it comes time to reason about the right decisions for them regarding privacy, security, modularity, longevity, and the other various desirable properties of a personal computing stack that truly meets their needs (as parents, citizens, businesspeople, etc). The victor of this trend will be the one that best facilitates true "end-user" empowerment, with minimal gotchas.
Yep, but not many are setting up standalone git servers and most people are wholly dependent on the web UI for some nontrivial organizational or personal git management. Either that, or they're using gitlab. Which is also RoR (iirc)
Not sure if it's a bug but found this odity

1 >> 1 == 0

...

1 >> 31 == 0

1 >> 32 == 1

1 >> 33 == 0

Edit:

Oh and on the left shift too

1 << 32 == 1

I think the bit is wrapping around

1 << 64 == 1

1 << (32*300) == 1

Edit2:

What are you looking for help with on the language side? (Todo.md?)
I was replying to this:

> In my experience, Commony Lisp is a deeply opinionated language, and its most dramatic opinion is that "your code and your data should have identical representations and structures." And for the right problem, that restriction is extremely powerful.

Code in common lisp is almost entirely in a tree structure via nested linked lists. However, when programming in Common Lisp, I don't use this specific data structure very often for things that aren't code. Furthermore many other Common Lisp programmers write software this way as well, which is a bit of a counterexample to the assertion I was replying to.

[edit]

I think an opinion common lisp does have is that code should be easily manipulable as data. As much as scheme programmers like to call CL macros "unhygienic" it's far easier to write a correct general-purpose CL macro than a correct macro in other languages.
> Are people dying from the vaccine?

No.

> Are the vaccinated experiencing adverse reactions?

Occasionally people will experience mild adverse reactions. This is actually covered in the article above.

However, adverse vaccine reactions are happening at a much lower rate than actual DEATH of healthy individuals from Covid19 itself. Let along "long covid" symptoms.

> Have vaccines in the past been proven to be dangerous? Looking at you anthrax vaccine.

Gulf war syndrome has not been established to be caused by the anthrax vaccine. So no.

> None of these are zero.

They don't have to be zero, but 0.0003 is a much smaller number than the adverse reactions to catching Covid itself.

> If you can pass the throng test and argue why their might be hesitancy, it would make you more understanding.

I don't know what "the throng test" is but I don't think WE are the ones that do not understand. It is you who does not understand.

The fact you site a conspiracy theory about gulf war syndrome makes me believe you are not being honest.
Last I checked Github doesn't support embedded videos.

It's far from ideal, and I doubt anyone is claiming otherwise, but GIFs in Github READMEs are entirely standard practice.

EDIT: Well, there you go. Video was introduced within Github this year: https://github.blog/2021-05-13-video-uploads-available-githu...
Did the university give him permission to dictate a more stringent policy for his classroom? If you are elderly and have pre-existing conditions, you can choose not to work in an environment where you are around large numbers of people and masks are not required.

Ostensibly, he (and probably other staff) had voiced their concerns to the university and the university still decided not to require masks. One might disagree with that decision, but that doesn't give people who disagree with it the right to dictate their own rules.

Finally, it's pretty clear that the professor was already looking for a way out and found a trigger he could pull:

> "I felt some relief as I had been getting more concerned as the COVID-19 pandemic unfolded in recent weeks."
No one would know? iOS is constantly analyzed by people around the world for security vulnerabilities, strange behavior, etc. Why would this be different?
Agreed, the professor’s conflict was with university policy that he agreed to follow per his employment. He can’t supersede rules made beyond his position. He has a job to teach in that classroom. At least, he used to.
> I'm pretty confident anyone can become really good at anything, given enough motivation and time.

And I'm pretty confident that some people can become really good at said thing faster, due to some form of innate talent. And as we all have finite time, that's a pretty important trait.
Global warming, hello?
For the privacy centered people Synology has a nas that does all of this and more.
Does it do the auto person/object/place recognition + tagging + search?
Systematic Review of the Protective Effect of Prior SARS-CoV-2 Infection
Magic Earth?
>What stuff might be interesting in Bhagavad Gita for a scientist like him?

A specific Worldview and cultivating a Mindset to go with it which takes Death and Total Destruction as part of a Universal Lifecycle.
Excellent summary and exciting that we may be able to finally use CPU limits in k8s! I remember running into this in the early k8s days and being pretty disappointed that such a fundamental feature wasn't recommended or effective in real-world usage. Hope it doesn't take too long for this to roll out to all the k8s cloud offerings.