skysight-inc/HackerNews huggingface dataset:
Defense in depth.

We can't ever prove that something is "secure", we can only take precautions. Is your SSH server secure? You can't tell, by definition, in a world where 0 day exploits exist.

If you know where your requests are coming from, you can restrict to those IP addresses. It doesn't mean you think your server is insecure - but it's making the lives of people trying to get to it that much harder. If you don't know, then maybe fail2ban is a worthwhile alternative. It doesn't even necessarily mean you are trying to prevent brute forcing (password logins should always be disabled anyway) - but some exploits require multiple attempts.

In the past I was against measures like changing the default port (although it should still be <1024). But these measures are helpful the moment some new exploit is in the wild that could twart naive scanning scripts. Same thing goes for hiding the banner.

The best thing is still to automate things so that SSH access becomes a 'break the glass' moment. If you are always logging in via SSH(and it's a server, not a workstation that you work on), it means that there's something missing in the automation (or observability) that needs to be fixed.
Yeah, I've gotten a lot of pushback on that. One approach I've seen is to reject expressions that would violate standard precedence, and require extra parentheses.
Okay, you convinced me that this is a good idea.

I can get a domain pretty easily but I hate the idea of managing my own email. Do you recommend a particular provider? Zoho or something?
No point in beating around the bush. It's a blatant lie in order to make people click on a link to their website.
>> It is likely that HN has been influencing you into associating writing/coding/building with failure.

Thank you for your opinion, but it does not feel right. I think there might be some truth in that part about trying to impress someone, but I do not think it is HN crowd. I hope this is not going to sound kiss-assy here, but I returned to reading HN after years and it feels inspiring and uplifting.

However, what your comment made me realize with more clarity is that if I manage to work on something again, it should be for me, for some intrinsic value, not to impress someone.
@Fastmail: Another request. If I’m using my own domain, could the email generated be simpler?

Instead of “some.thing1234@”, I’d rather just have “thing1234@“.

Update: hmmm… looks like I can’t initiate an email with masked email though. I can set up my wildcard to do that in the more rare case when I need to initiate email.
nowhere in this article or the HN comments does it talk about funding of surveillance tech. if you want to control surveillance, then control the financing of it with a publicly accountable/transparent external oversight board whose members have as no conflict of interest with the source, path, or destination of the money
My experience is, yes you have your ups and downs and you go through a lot (births and deaths even), but it is a product engine family we have built with heart, and we found the wherewithal, with an extra boost from Tony (thank you!) to basically start from scratch and re-imagine what we would want-- so in some ways it was like starting a new company, with people you trust.
> If you are talking about society then we already know that free market competition leads to the best outcomes.

Who's “we”? I was under the impression that https://en.wikipedia.org/wiki/Market_failure was accurate.
We can go deeper..

the PRC could use low-effort attacks just as fodder which mimics any actual false flag performed by any country. And, this isn't conspiracy, either, yet maybe too speculative for your average HN user (who doesn't seem to think too highly of your post, either), but if its already known that you have a problem with unscrupulous conspiracy theorists then that's a vector for state actors to exploit/inflame/exacerbate it across multiple channels/theaters. I'm not sure if it extends across the entire western countries, but here in America we already have an admitted problem with so-called conspiracy theorists.

I say this much because I highly agree: 60 accounts says this isn't serious. And, if its not "serious" then this is more psychological than cyber.

Also, you have to consider the open use of war games which would simulate a de facto false flag, without being a de jure false flag.

Welcome to the lowest rung of hell, I'd say! The realm of perfidy.
>rich history of fab production

I would rank this way higher. Clustering fabs together makes it much easier to hire.

https://en.wikipedia.org/wiki/List_of_semiconductor_fabricat... Intel, Microchip, NXP, TSMC and Entrepix all have plants in Arizona.

As an antiexample, the Bay Area has every negative attribute you could hope to think of for basing a software company there, and yet everyone does it anyway, just for hiring.
Revenge Sleep Procrastination: Are You Doing It and How to Stop
Thanks for the correction :)

I meant to say that I once had an app which was launched as Show HN, but that the app isn't mine anymore.

BTW, closer to the original topic, I just had a lot of fun in the past 1-2 hour(s) twiddling around with Bomberland, the Show HN from 3 days ago: https://news.ycombinator.com/item?id=28640804#28647120.
I'm far from a doctor, so I'd say do a lot of research and start a conversation about it with your primary care physician. Being male (especially mid-twenties or older) and having family history increases your risk. I don't know if there's any way to calculate one's specific risk, but you can do things like have a 24-hour urinalysis, ultrasounds, MRIs to see if you have any kidney stones right now. Then, whether or not there's anything you can do about them is another topic to research.

In my research, there doesn't seem to be a solid, universal consensus on much. However, I've seen these points get a lot of support:

- kidney stone formation scales inversely with hydration. Less water, higher risk of stones. More water, less risk. I can't say how much you have to drink or where it tapers off, but my doctor prescribed me "buckets" of water, so that's a starting point.
- there are various kinds of kidney stones. One type is formed by oxalates, which is a chemical only found in plants. There's zero oxalates in meat or animal products, and the highest concentrations around in things like spinach, beets, chocolate, nuts.
- Being a carnivore isn't necessarily a cure. Meat changes your urine composition because of uric acid (iirc), which can increase your risk of kidney stones.
- Depending on the type of stone formed, any protein can increase risk (I forget what kind this one is)
- Calcium can bind with oxalate in the body and prevent the oxalates from binding to themselves and your kidney, which is what forms kidney stones. So ensuring that you get enough calcium daily, and especially eating calcium with high oxalate foods, may reduce risk
- Various other things may help. Citric acid may change your urine composition in a way that helps prevent stone formation. For example, apparently drinking beer and wine reduces stone risk by 33% according to some sources.

Frankly, a lot of this comes down to your comfort. Kidney stones are very likely my absolute worst fear in life for personal reasons, so I've gone to considerable lengths to do whatever I can to feel informed and minimize my perceived risk. A friend of mine has an elderly relative who often gets kidney stones, but apparently would rather deal with that than change their diet/lifestyle. So don't take this info dump as a reason to panic, but instead gauge your concern/interest and if you think it's worth looking into, again, do your own research and talk to your doctor.
you get prison sentences for spurious lawsuits?
I appreciate what you are saying and how you are saying it. Thank you for that.

In an industry with plenty of founders who have said one thing and then repeatedly done another I don't think it's being jaded to be cautiously pessimistic. If the market for RescueTime ends up being primarily spy tech, then it's naive to think that's not the direction it will go.

Tech is also an industry that has let its naivety blind it to some rather obvious perverse use cases.

You may prove this all wrong becoming a legendary founder who holds the line into perpetuity against selling your SaaS as spy tech even if that's what the market wants. That would be an amazing story to watch unfold.
The difference between investment and spending is whether you have more or less money afterwards.
There is ImgBB. You need to create an account, but it is free.

https://imgbb.com/
Says the person who has no idea that he is not in one bit a serious person. Immigration the way you have been trained to think of it like a mindless dog that does tricks for snacks is a con job of the ruling class to defraud its citizens to increase their profits. And that doesn't even address the fact that "immigration" that you are clearly conditioned to have a co-dependent positive response to, is utterly destructive for the origin society and economy like something out of a scifi movie where an alien ship is just stripping out all the resources from the planet; immigration sucks the life force and potential from a society and destroys the culture so that billionaires can compete to see who is the first to become a trillionaire. And they have you on the hook.

And yes, how is it not factional slavery when the freed person in the USA in 1865 kept 100% of what he earned all his life and paid no property or sales taxes when he bought something … but you pay about 60% of all your earnings over the course of your life to the government that has you enslaved to support others against your will with resources it takes from you. You are a slave to the new aristocracy that is the bureaucratic state that you must pay your serf dues to (which are higher than all serfs ever paid) so that the Lord can use your earnings to bequeath to the aristocratic class their income and assure their loyalty.

If you are not a slave, are you free to leave the USA and life somewhere else? No. Your US government owner will come after you wherever you life to make you pay taxes on your income. Are you free to just quit your job or are you shackled with the bondages of debt slavery? I think we both know the answer to that, regardless of whether you want to acknowledge it.

So try to not be such a mindless herd animal and think for yourself a bit.
What legitimate reasons are there to use Fuchsia instead of Linux? The only reason I can think of at all is to be allowed to make proprietary modifications to it.
Notion is now offering free credits to any startup, partners with AWS and Stripe
> As opposed to the state?

Ok, so you consider the state to be equivalent to sovereign citizens?

Also, how about investigations that never go to a prosecution? It’s pretty simple to harass someone that way.
> Wind output dropping is one of the factors behind Electricity prices surging

Yes, true. Guess what is used to compensate for lack of renewable output? Natural gas fired plants with short ramp up time. This will only drive electricity prices up.

The article is about gas shortages and people at risk of freezing this winter, yet almost everyone here is talking about CO2 taxes and taxing natural gas?
Sources outside the home include avgas which is the largest source for lead in the atmosphere https://www.nbcnews.com/business/business-news/leaded-gas-wa...
UK Guardian owner invests in NFT protocol for subscriptions and memberships
> it is the idea that we are staying up late doing things we want to do instead of going to bed, which is otherwise known as “being a person.”

When you are hungry, you get angry more easily. This is also known as "being a person". But knowing this fact helps you realize when you are only angry because you're hungry, which can help you avoid conflicts with friends/family.

Understanding the science behind "being a person" is valuable in improving your daily life. Understanding why people revenge bedtime procrastinate can help people avoid doing so.

> The answer is probably that they’re intellectually stimulated by the thing they’re doing and like doing it and are more interested in the thing than going to sleep.

This isn't the answer. There's a strong correlation between hours worked / stress level and likelihood of staying up too late. This is why "revenge" bedtime procrastinate is such a fantastic description. You're getting revenge on your workaholic attitude. You spent too much time doing things you didn't want to do, so you're protesting by staying up late doing things you do want to do.

> And now people have a new term for something that didn’t need a term, and can bring intellectualism to “I stayed up until 1am playing Slay The Spire.”

Just because you don't experience something yourself and you don't understand it doesn't mean it doesn't exist.
did he find a way to de-pollute ?
Vaccine passport app exposed hundreds of thousands of users' personal data
Considering that the main purpose was to sell consulting services and certifications, it's "mission accomplished".
sorry about that, they are fixed now!
Trump pushing Microsoft to buy TikTok was ‘strangest thing I’ve ever worked on,’
That's incredible. What sort of levels do you have to put up with? Is there any kind of monitor you can install to detect a spike?
The stack isn't in the C-standard, but it is often minimally defined in the psABIs (e.g., the ELF ABI on Linux) for the architecture. The psABI is generally trying to balance performance of addressability (on the architecture), with security (position-independence), while constraining the toolchain developers' implementation as little as possible. As a programmer you don't have to implement to the ABI, but if you want interoperability and you want to use a C language compiler, you should (good luck creating your own ABI otherwise).

I'm not aware of any way to programmatically query the rules laid out in the psABI. The implementation of the corner cases is often based on mutual agreement (convention) between the compiler and the link-editor.

You could probably write a tool that maintains a representation of these rules and returns the results in some sort of parse-friendly EBNF, but you'd need a convention linter to make sure that the implementation of your tool tracks the change in convention in the toolchain components.

On-the-other hand, you could write an extension to the compiler that warns you when certain C code results in behaviors around the stack that might be undesirable, i.e., if you're passing too many parameters to a function and it's going to spill those to the stack.

The standard way to avoid unknown behavior in this regard is to explicitly tell the compiler what you want to accomplish by not relying on auto-allocation or parameter passing rules (as stated in the top thread). This means explicit allocation on the heap, rather than than allowing the compiler to auto-allocate on the stack, and using pass-by-reference to avoid parameters spilling to the stack. All of this is slower since accessing values in the stack is often a single instruction operation (small number of cycles), vs multi-instruction loads from far-away addresses (large number of cycles).
There is progress on the front to find a viable replacement fuel: https://www.aopa.org/news-and-media/all-news/2021/july/27/ga...

Without a workable (technically and legally) replacement fuel, banning 100LL was never going to be viable IMO.
Well, getting this up on HN certainly re-kindled my nostalgia for dial-up connections - the images are loading piecemeal, and the table is slowly growing as it's laid out...

But wow, to read Jerry Pournelle's column again.
Self-Parking Car in ~500 Lines of Code
Brooklyn-based designer charlie baker weaves enormous nests for humans
It's never a good sign when a company sees competitors running laps around it and responds with something that will only accelerate migrations to those competitors. Someone somewhere in Intel told them this is the way to beat that upstart TSMC and someone with authority pushed it through against the warnings of anyone with both sense and influence.

Sent from my Ryzen 5 4500U laptop with two Apple ARM chips in close orbit
I wrote netscan years ago and still use it. It's pretty fast too: https://github.com/62726164/netscan
state/federal agencies should never use any third-party software that exfiltrates any personal data of residents (especially google, which already infests governments & schools). it should be self-evident that this creates an irresistable incentive for the state and corporations to consolidate power, capital and influence against the populace.
I run an online marketplace. It's a constant battle against scammers putting up fake items to sell. While I do run "content moderation" to identify the scams, the fakes are identical or nearly identical to the real items. Content moderation isn't the solution for me. As other commenters point out it's just war of attrition or cycle of escalation from a few bad actors.

The only effective method I have now is fingerprinting (i.e., invading users privacy). Browsers are becoming more privacy oriented so at time goes on fingerprinting will be less effective, with more people being scammed online. I don't think those that want privacy at all costs understand the trade off.

In a few months, I will move to an voluntary fingerprinting/identification scheme soon (like GDPR cookies opt in). Where you identify yourself or don't use my website... which may leave me as a "die an MVP" example.
1 - Their portfolio is bigger. Making it easier for existing clients to adopt. Eg. Why a lot of companies use AWS.

This product seems a good fit for their cloudflare workers.

2 - Cloudflare is going heavy on egress costs. Which they have a lot of extra opportunity costs, comparible to the big 3 cloud providers and they are putting their "weight" in good use:

https://blog.cloudflare.com/bandwidth-alliance-charges-forwa...

Egress/ingress costs is also important for pricing fyi.

3 - Cloudflare has a known good reputation for their services ( eg. Uptime and costs) + an active community. ( Eg. Check their blog )

Tbh. I didn't knew Wasabi, will check them out though.

4 - Their datacenters are at the edge. Hard to compete on that physical advantage in terms of speed.

Ps. Yes, I could be considered a fan, similar to AMD in the past ( still do fyi).
I followed a keto die for ~2 years. I lost a lot of weight and generally felt good. The moment I reintroduced carbs though, it all came rushing back with interest. So I only agree with this if you think you can keep it up forever. Another thing to note is my ability to perform high intensity exercise was severely limited. Moderate exercise was fine, but heavy lifting, sprinting, crossfit etc... was really difficult on keto.
Amazon Astro – Household Robot for Home Monitoring, with Alexa
Absolutely the fuck NOT

I've seen Wall-E
The pre-negative-number contradiction here is between the "obviously" true propositions:

A) "undefined quantities can't/don't exist" (practically a tautology)

B) "subtraction sometimes produces an undefined quantity"

The first proposition contradicts any proposition that asserts the existence of undefined/impossible/negative numbers. Keep in mind that, before negative numbers, there would be no valid symbols to express the result of the expression "one minus two"; it is irreducible.

The root of the problem is that classical logic doesn't have good tools for dealing with ontological deficits, in this case, the lack of a well-defined concept of "negative numbers".

All of Plato's classic "laws of thought" presume the existence of a well-defined universal set of things/ideas/truths that they can operate over, which is usually a flawed assumption. In reality, the baseline is that everyone has their own ontology derived from personal experience and it takes serious collective effort (or pedagogical browbeating) to establish shared ontologies on which systems of communication can be built.

On the other hand, a core feature of dialectical reasoning is resolving contradictions through the synthesis of novel orthogonal concepts.
A digital-only publication cannot survive without playing the same content strategy games as all the other publications out there.

A new BYTE would quickly start diluting its value by offering a podcast, YT channel, IG/Snap Stories, affiliate links and a website slathered with Adsense ads. You'll wonder why they bothered rebooting it in the first place.
If you have a medical or academic source for that, I'd love to read it. I did research and could only find this tea mentioned on no-name websites. The closest I could find was this article about dandelion tea from Livestrong, but even that has no sources and mentions 'purported' benefits rather than giving any evidence

https://www.livestrong.com/article/546304-the-benefits-of-da...
> So you effectively cache all of the space your program needs forever.

All the space your program uses at the largest stack size, you mean, which is different. Until you touch it, the huge stack is purely virtual. And it only lasts until you restart the program.

Yes, if you default to a 10 GB stack, then recursively tree-search over 9 GB of data, then close the data and spend the next week with 1 MB data that only touches the bottom of the stack, you'll have 8.999 GB swapped out, which does suck.

But that only happens if you run the program on that 9 GB of data. The alternative was to fault when you overflowed the smaller stack when that data was imported.

It does mean if there's an infinite recursion bug, instead of crashing quickly with a stack overflow, you have to wait while it pages out other programs and fills the whole 10 GB of stack...
What is "22m" ?

22 meter?

22 millies of something.

I do not follow?
This is false. 4chan, some early reddit, voat, and a number of other sites.

Moreover, that's the point: it's as i.possible to have a healthy anonymous forum available to the world as it is to have a large society with no laws or government, that isn't dystopian.
Maybe so (that sounds believable, anyway). What he's saying is that the other 1% is unmoderated because there's no central authority [1]. The problem here isn't that people will share bad things if you don't stop them, the problem is that you're in a position of being held responsible for something outside your control. If it's illegal, it should be reported (or found by law enforcement whose job it is to enforce the law) and if it's offensive, offer some user-side filtering.

[1] this is starting to change, though - Amazon took Parler offline completely at the hosting level. Although they eventually found another hosting provider, it's not unimaginable that in the near future, service providers will collaborate to moderate the underlying traffic itself.
Views are unique per IP address (/48 subnet for IPv6) so continuously refreshing the page wouldn't work. I had problems like this in the past, but rate limiting mode seems to have solved it. I have had little abuse complaints in that regard the last few years.

But thanks for the suggestion, I'll look into it.
I would recommend you a different approach, such as using metadata like their location etc.
There used to be a fair chance that you'd stumble on CSAM on 4chan. Without filtering and aggressive moderation, that's what ends up happening (yes 4chan did have moderation to delete the stuff back then and dish out IP bans, but it wasn't fast enough to save people from seeing those things)
Bill require Secretary of Treasury submit to Congress report on virtual currency [pdf]
Use sendmail for that.
I went to this article expecting that it would be the obvious thing: integrated FPGAs.

I came out with a dystopian "monthly recurring license fee to use parts of the processor you already paid for"
Laws requiring content moderation in social media will only serve to be a form of regulatory capture that inhibits competition
22 million.
Wasabi is actually pretty great. +1 on this.