skysight-inc/HackerNews huggingface dataset:
This hit home for me. On a recent penetration test (via an external auditor), an app I'm responsible for was found to have a pretty bad SSRF vulnerability via a server-side PDF rendering component.

Luckily it was a bit obscure to find, had never been exploited, and we patched it within a few hours, but it was the most significant vulnerability found in anything I've been involved in.

Not come across Smokescreen (very cool) but this would have been one of a number of additional measures we could have put in place to avoid our vulnerability. I'm going to seriously consider using something like that going forward for all outbound server initiated requests.
I suppose I will remain ignorant of this until I actually try it but I don't dare:

How's transfer "free" if average transaction fee is a few bucks?

https://ycharts.com/indicators/bitcoin_average_transaction_f...
They want to scan encrypted citizen communication and they aren't the only government with that ambition. It is just the logical continuation of idiocy of security policies of the last decades. It is firmly programmed into their behavior by now.
IEC states what should happen. I strongly suggest making sure that the capacitors are discharged before working on any circuit.
That doesn't mean the plastics industry should be able to pass off their materials as recyclable. This is is a good move by California.
El Salvador Becomes First Country to Adopt Bitcoin as National Currency
ISS has been running continuously for 22 years. Most earth based housing doesn't even have that level of uptime. If it were a cruise or cargo ship it would have been in and out of drydock 5-7 times. It's extremely difficult to have complex systems run continuously for decades.

Unfortunately after we built ISS I thought there would be ISS2 or ISS upgrades planned. And I haven't seen anything like that.
They also want them to have guaranteed availability for years. Anyone not making PCs isn't planning to redesign their boards every few months as some new chip/upgrade comes available, and they don't have the budget for it. Give me reason to think I'll be able to buy this CPU for the next 50 years at a reasonable price, in whatever quantity and I'll be interested.

Lower power consumption would be nice too. We don't always have mains power.
https://archive.ph/55l3b
> I could understand this if they were turning the thumbscrews on individuals but all this talk of switching sounds petty and silly and will probably be false economy

Well, with respect to this post in particular, I don't think Podman is even a "real" replacement for Docker Desktop. RHAT has been pushing it for quite a while, and although they're dogfooding it with their own k8s and Linux distros it's had less uptake outside of Big Blue (the linked article, prominently featured on their web page, is already out of date - not a good look). As many rough edges as my Mac using colleagues described encountering with Docker Desktop, they will see even more if they try to use Podman, so it strikes me as a poor choice here.

Regardless, I think the value proposition of Docker Desktop is questionable. The main thing it does is manage some VM plumbing so you don't have to think about it. Is that worth... much? Even anything at all? In a past life many of us used Vagrant, and it's not like it's that hard to do this stuff yourself.

So really, Docker Desktop is competing on multiple fronts, all of which are open source or at least free. There's old school, with Vagrant/BYO VM, there's "docker alternatives" like podman, and there's the k8s-in-a-box like Rancher Desktop or Minikube (which can expose a docker socket so you can work with docker directly as well).

I'm a Linux user so I don't have a dog in this fight, but if I lived in a world where I needed "run a VM to get a docker for development" it's not obvious to me that Docker Desktop is the best choice at any price point, and the cost is just one more point against it.
One reason to do this is to disrupt activities of foreign intelligence services, increase their paranoia, decrease their morale. The key is to do it randomly and not too often. That is under the assumption it's not a side-effect of surveillance tools, which would also be possible.

To give you a comparison, the East-German Stasi used to enter the homes of dissidents and do things like re-arranging towels, replacing fresh milk with rotten milk, etc. They also occasionally forced or convinced personal physicians to hand out the wrong medication to dissidents, worsening conditions of the patients or creating strange side-effects. They also radiated political detainees in prison to cause cancer. These were called Zersetzungsmaßnahmen.

I'd consider it credible that modern successors of the KGB like GRU and SRV, as well as related or allied agencies, could do something nefarious using technical equipment. That's why US agencies are investigating the reports, I guess.
Hey Congrats on launching this. I really hope it'll grow.

Here are my 2 cts.

I've used dokku for this, running Django, for years and recently I moved a customer over to use the digital ocean app platform.

There are a couple of things I find important when evaluating these platforms that I didn't see on the site:
- is there database fail over with the multi server strong and powerful plans?
- does appliku maintain the underlying servers and database?
- is there monitoring?
I can’t tell if you’re being serious. https://tvtropes.org/pmwiki/pmwiki.php/Main/Mundangerous
Unoccupied waters where a ship might have once been?
Quora+
The Matrix Resurrections – Official Trailer
I wonder if the m5paper[0] (esp32 based) is beefy enough to run this.

[0]: https://shop.m5stack.com/products/m5paper-esp32-development-...
I wonder which one the "REST endpoint just JSON serializes and spits out the whole database row" problem falls under now? I previously thought sensitive data exposure included this case.
The Case for the Programmers’ Keyboard Layout
because they are using a layer 2 solution [1]

[1] https://lightning.engineering/
I agree, it also forces interoperability. Regardless of what you think about bitcoin the asset, if it decouples the sender and receiver’s payment technology it might all be worth it.
... and I thought the literature of the Sexual Revolution (e.g. "My Life" and "Les Liaisons Dangereuses", ...) started in the 18th century.
These two examples are effectively cherry-picking two data points to make an extremely BROAD argument that "Canada is not Progressive".
Wearing cameras in your glasses must become socially acceptable. It’s hard to see how technology will solve this social problem.
Thanks for the suggestions :)...

Going to dig into these!
I wonder how closely the State Department is involved in the ISS and associated PR? I don’t mean that in a tinfoil hat conspiracy way but as a genuine question. I can certainly understand that (whether the State Dept. is involved or not) NASA is walking a fine in dealing with their Russian counterparts. I’m sure, like most of us at work, they have to pick and choose their battles and occasionally acquiesce to an official story they know doesn’t quite add up.
Bitcoin valuation "crashed" -$4k USD (I think that's about 8-10%?) just two days ago on the 7th (and within the span of 4 hours, check the charts); if you had created your transfer that morning and they received it the next day to "cash out" to USD, you would have lost a lot of the valuation of your transfer.
Still - one data point does not prove a trend.
You're straw-manning again and still not giving me an objective threshold.

Do you enjoy repeating yourself and making no headway?
Didn't you mind that by the time they converted that Bitcoin to local currency - it could have lost xx% of it's value?
You mean 'The Green Dot'?

This piece of shit thing? https://www.pro-e.org/the-green-dot-trademark

How this has been allowed to exist for so long is beyond my ken. The logo should look ENTIRELY different as it's basically false-advertising for the vast majority of people who have no idea what it actually represents.

- ed spelling
By 88 there weren't many products using the recycling symbol on their labels. The resin identification symbols were the first ones to get widespread usage, and I imagine they used the arrows because they are about recycling, even if they don't mean "this product is recyclable".

The ideas about government policy on product labeling became popular a bit later than that, and the resin identification codes, together with food nutritional values were the main responsible for that.
This is only the beginning of the story. Rockwell would eventually pay a fine that was less than its bonuses, making a profit on the coverup. The Colorado special grand jury is the real story. Foreman Wes McKinley, a rancher, would go to the media after hearing the case, and announce that the government was trying to subvert the grand jury’s recommendation for criminal charges against Rockwell executives. FBI agents involved in the case would eventually publicly support him.
Why do folks keep insisting it's microwaves that cause the illness when no one has found any physical evidence for that? This is just such a hysterical nonsense story in my opinion all meant to grab attention with nothing to show for it.
>> Intel has to become a bigger maker of chips to stay among the few companies that can develop and use leading-edge fabrication technologies....

They are not currently in that category. Nowhere in the article was any mention of EUV lithography, which is really where Intel fell behind. When they get it figured out I'm sure they'll make some rapid progress, but until then they simply aren't on the leading edge. Aside from capacity I'd say they're about equivalent to Global Foundries, except GloFo has some specialty processes too.
About damn time. I've always been confused by the sign - it's on pretty much all plastics, but only a fraction are actually recyclable. And like many people, I chuck it all in the recycle bin and hope some of it gets recycled and that the non-recyclables don't screw up the whole works.

It really shouldn't be this hard.
It is `re.Match object` now, which I think is more readable. Also, matched portions can be retrieved using `[N]` in addition to `.group(N)`
Think you’re looking for Bitcoin Lightning? From what I understand it’s another chain that collects and confirms transactions quickly and cheaply, then puts them on the main blockchain in batches.
> And please don't say "that's different, it affects other people!"

Preempting the flaw in your strawman doesn’t invalidate it. A woman choosing to abort a pregnancy has no bearing on anyone but her. In contrast, the anti-vaccine crowd both directly, and indirectly, contribute to the propagation of disease.

Your right to bodily autonomy stops at society’s doorstep, which is broadly agreeing that the unvaccinated don’t get to participate in the non-essential aspects of society, otherwise furthering the risk to everyone else without reason.
This is a classic "whataboutism" argument.

The Acadians were deported literally hundreds of years before.

Maybe we should demand Mongolia apologize for Genghis Khan as well?
Who is "They" that you hope are not confused? Are you worried about the legislators and their expert advisors?

Certainly some experts at least are academically aware that U+2672 ♲, three clockwise arrows in a triangle, recycling symbol which indicates the product can be recycled or is accepted by curbside recycling pickup programs, is not the same as U+2676 ♶, three clockwise arrows in a triangle with a tiny number inside indicating LDPE resin, which typically means the product is not accepted for recycling.

But this is not common knowledge. I hope you're not confused into thinking that the average consumer knows the difference between the resin symbols and the recycling symbol!
With all due respect, this is not the cited article. I'm sure you mean that when you said "alternative". Thanks for sharing that BTW.
Before reading this article, I thought it was trivial "recycling symbol is used for recyclable items", and "no recycling symbol means that the item is not recyclable", why do they allow them to mis-use it (or mis-use any symbol) in first place?.
I don't know if the tinnitus part can be solved, but sleeping on the side is definitely not a problem. I'm talking about moss earplugs that are entirely contained inside the ear, not over-the-ear earmuffs.
If it’s safe to pretend it’s not happening than it isn’t a useful attack. If they can detect it, they should be able to apply some kind of countermeasure, shielding or (if necessary) threat or sanction.
Regarding seals, you are stepping into a debate which includes aboriginal rights. There is nothing clear cut about that one.
Thanks. I appreciate when someone gives safety advices as they come in handy when starting to tinker electronics. When repairing dishwasher I had to disconnect a huge capacitor... well it looked like it. Knowing what you just wrote about capacitors, it gave me shrugs and I was VERY careful handling that piece of thing.

Can you give any advice on what good fume extractor for soldering does and if hobbyist that does repairs now and then should care?
It sounds really stupid but being desirable by potential partners makes an unfathomably huge difference in your outlook on life.
Why do you think it takes more than 20 minutes to transfer bitcoin?
"Connect to cloud by default" should be banned in any sensible network.

It's probably even more devastating that "default password by default" if exploited successfully.

A single stolen cert, or access to the device provisioning server instantly gets you "keys to the kingdom," and all of the devices online.

A default password, or a vulnerable API on the device, in contract, will still need the attacked to individually find, and hack each vulnerable device.
What do you think virtue signaling is?
> But if you put that recycling symbol in a green circle it means something else -- "that the companies that produces the product is committed to recycling" -- whatever that means.

Presumably you're referring to the Green Dot / Der Grüne Punkt [1]. Its often confused with the symbol that indicates recyclabililty. I'm never sure whether that's intentional or not.

[1] https://en.wikipedia.org/wiki/Green_Dot_(symbol)
It is not a mystery, the media is creating a narrative, and acknowledging this fact would prevent them from continuing this narrative that seems to be profitable. Now, millions of people around the world believe in the existence of a mysterious "Havana syndrome", and will continue reading articles that try to "investigate" it.
Or gained.
FOSS Front-Ends and Alternatives for Twitter, Instagram, Reddit, YouTube
OP link points to a comment instead of the article itself.
People don't work today so that they can save millions for retirement. Most households are lucky to scrape together thousands in a given year. Most people get to retirement and can barely even make that work.

At the higher pay end of the spectrum I am sure SOME people work at FAANGS to say they work at FAANGS, this is just statistics. On a larger scale, I agree, people don't work to flaunt who they work for.
I'm not an economist, but I'm curious as to what may happen to the local banking system if all the remittances, (23% of the GDP), no longer enter the bank's accounts in dollars (or cash). And instead remains in crypto.
> The capability of plausible deniability is that the encrypted file is indistinguishable from noise; There is no way you can find out the amount of data stored in the cryptocontainer.

The problem with deniable encryption is: if the attacker can watch the file changes, one can determine the rough size of the data in the volume. The attacker makes note of where in the file changes occur. Once you get them to unlock the file you see if the data is shorter than the size of file changes. If so, you know there is more data.

Once an attacker can see your encrypted volume, you can no longer make changes to the hidden data.
> or a system that only supports VGA for some reason

AFAIK, nearly all modern servers only have VGA, serial, network, and a couple of USB ports, so it's much more common than you think. Of course, most of the time you'll be configuring them through the dedicated management network interface, so the VGA and serial outputs are mostly a fallback.
Because companies probably found through research, that adding a recycle symbol, increases revenue by some percentage.
AWS SA here, I know several AWS Services that are now built on top of EKS or using EKS. One example is managed Apache Flink on Kinesis Analytics.

"Kinesis Data Analytics deploys Apache Flink using Amazon EKS. Multiple Kubernetes pods are used in Amazon EKS for each AWS region across availability zones."
https://docs.aws.amazon.com/kinesisanalytics/latest/java/dis...
Are these specifications on how to define APIs?
Incorrect. You didn't buy it in the first place if there is a contract. That's part of the meaning of "Sale".

One is a completed transaction, the other is a contractual relationship, and the ease of entering into one-sided contractual relationships on the software age has me thinking we need to take a hard look at contract law to figure out if we're using it in a way that is really helping society in the long run. If you go off the essential intent and spirit of contract law, you should have direct, trivial access to those you're trying to enter an agreement with to alter terms. You don't have that. No one does.
>According to my parents that used to be standard practice in the United States.

You're making me feel old. I used to sort bottles as a kid.

Soft drinks are just another example of gigantism in corporate life, economy of scale uber alles. There was a time when practically every small town had one or more bottling plants, the owners were pillars of the community sponsoring softball teams and the like. Delivery trucks typically had shelving rather than bays.

Following that there was a huge spate of consolidation. Small distributors/bottlers had their franchises taken away, canning became owned by the mothership and absolutely huge. The more centralized the more of a pain it becomes to sort/return/clean bottles.

I suppose it's like the history of car dealerships as they become fewer and larger. For that matter, a significant (most?) percentage of the US used to be self-employed instead of wage slaves.
Saddle Up: The Story of the Horsehead Nebula
A young man said to his libido-driven wife: "What should we do, darling? Eat or have sex?" She replied: "You can choose. But there's not a crumb in the house."

OK, that's quite good. I can easily imagine one along those lines in a standup set today (probably more along the lines of "So, the other night my boyfriend asked...").
When there was a fire on Mir, Nasa said "Small Fire Extinguished on Mir" [1], and the actual thing was pretty severe: "The flames were large enough to span the breadth of Kvant-1, cutting off access to one of two Soyuz escape capsules", "Thick smoke rapidly enveloped the entire station, forcing all crewmembers to don oxygen masks." [2]

Given all the recent trouble Roscosmos had with the new module in addition to the engine malfunction, I wonder how bad the situation really is. What's the worst that can happen here?

[1] https://www.nasa.gov/centers/johnson/news/releases/1996_1998...

[2] https://sma.nasa.gov/docs/default-source/safety-messages/saf...
Why shouldn't we talk about it. I mean; Yeah, we're pretty much done for.

I don't see how we are going to survive the social upheaval created by millions and millions of displaced climate refugees. We've seen how Europe struggled with the refugees from the Syrian civil war and how quickly xenophobic parties took over the discussion. It will be "Das boot is Voll [0]" more quickly than you can say "The industrialized world is primarily responsible for climate change."

[9] https://en.wikipedia.org/wiki/The_Boat_Is_Full
I'd imagine part of it is institutional. The State Department is not what I'd consider a bastion of technically-adept people.

This is the org which, from all accounts, can't even run email or basic IT reliably.
Has anyone noticed this kind of sound at certain positions when swimming around a boat with it's radar on near shore?

Just anecdotal I don't know for sure, but I've experienced it a couple of times, at first thinking it was dolphins or whales, but it's more of a continuous noise and seems quite positional as if it is a reflection and superposition... pretty much all boats have some kind of radar that operate in the microwave frequency range, so it seems like a strong candidate for the source.

It wasn't so strong to be nauseating, just noticeable and weird sounding... then again I wasn't trying to sleep through it.
A Python Guide to the Fibonacci Sequence
>Most earth based housing doesn't even have that level of uptime

are we including mud huts and/or poorly built apartments in chinese ghost cities here? If we only considered american timber framed houses, I don't see why 22+ years of "uptime" would be hard to achieve.
Huh. I have a Dell monitor that suddenly started showing these kind of smeared stripes instead of a proper picture. Took it apart, looked carefully at all the capacitors and other components on both boards, but none looked bad. Disconnecting and reconnecting the ribbon that goes to the LCD panel made no difference whatsoever. What could it possibly be?
Code.org, Tech Giants Enlist Teachers to Sell Kids and Parents on 'CS Journeys'
This is exactly why in the U.S. when there are evacuations for things like hurricanes, most towns and cities sometimes send firefighters to knock on doors and notify people. They used to send cops, but too many people simply wouldn't come to the door.
I think they are using the Lightning network. It takes a few seconds for the transaction to clean off chain.
How about these guys: https://rebellion.global/ ?
More accurate headline: Russian batteries start to smoke and melt plastic onboard the ISS
Congrats on the launch!

> Create as many instances of Postgres, PostGIS, Mysql, Redis and RabbitMQ as you want. They are hosted on your servers and we don't charge extra for them.

I'd love to learn more about this, I couldn't find any details. Is there a page with more information? Specifically, I'd like to know more about backups and upgrades.
On year-by-year basis you're looking at noise. On decade basis there's mostly steady acceleration of CO2 concentrations in the atmosphere:

https://gml.noaa.gov/ccgg/trends/gl_gr.html

Lower growth may also be corellated with human depression, strife and war. So the human systems are working against decrease of CO2 growth.
$25 for an international bank transfer sounds really expensive. I probably pay something like that too if I wanted to do it physically, but it’s $5 online and free within the EU.

If both ends of the transaction have bank accounts, and the sending end has internet banking (should be pretty universal even for expats in the EU at least, unsure about North America and elsewhere) then using Western Union seems like a complete ripoff.
More strangely, it’s on many styrofoam packaging products.
My family stores the bags in the trunk of our car. They are always available for random shopping trips. Public transportation would make reusable bags much more inconvenient for our family.
Am I the only one that's worried this means the last hardware platform that was reasonably standards adhering is about to be broken up?
Places with cheap energy (e.g,. the Columbia River with hydroelectric power) could inexpensively recycle glass, aluminum.

Of course it does take energy to get the recyclables to these places. Curious — are trains no longer efficient?
I never said masks couldn't affect airflow and thus oxygen. I said a mask cannot affect airflow and thus oxygen more than it affects COVID. That is, the "masks do nothing to prevent COVID but cut off air supply" arguments are dumb.

Personally, I don't consider that reduced airflow relevant to me or anyone I know. The people with reduced lung capacity do complain about having trouble after 15 minutes, but continue to wear them. In fact, people with reduced lung function are the most aggressive mask wearers I know.