skysight-inc/HackerNews huggingface dataset:
Tailscale and Teleport are similar, but operate at different levels of the network stack. Tailscale governs access and routing at L3 in the OSI model. See Hashicorp's Boundary or VPNs for alternatives. As a generalization, Teleport works at L7 -- doing auth and routing at the application protocol (ssh, psql, k8s) level.

There are ups and downs to both: L3 is relatively technology agnostic (e.g. you don't need different support for connecting to a database vs ssh). L7 auth & routing gives greater protocol introspection, but means more work to support different use cases.

Depending on your scale and use case, the right answer may be both: Do 2FA for both network access (are you allowed to send packets to the ip:port) and application access (are the packets you send allowed to sign in to the database as an intern or a admin?). The most important part is to get a hardware token and SSO on the path to access.

Disclosure: I work for Teleport. I also think Tailscale is awesome and run it for my home lab.
Unfortunately we're US-only, so we don't have to think about GDPR :(
I don't get what a social win/loss is?
Sorry, typo. I meant to say `python` is a symlink to the default Python (you can sometimes change the default Python), but it'll almost always exist and point to a valid interpreter.
Either you are the squatter, you pay the squatter, or you dodge the squatter. It is what it is.
I like the idea of having humans within the flow, getting emailed, completing tasks and marking them complete. What other products are there in this space?
Adding a tariff to goods has three drawbacks

1. very easy to cheat. E.g. during Trump's tariffs on China, there was mass cheating as goods were imported into Vietnam, relabelled as made in Vietnam, and exported to the U.S. When there is big money at stake, the incentive to cheat goes way up. Trying to audit every exporter's Asian supply chain in search of Chinese inputs is tough.

2. Imposing a country-wide tariff does not incentivize any producer to adopt more efficient processes. Imagine if the EU decided the US gas taxes were too low, and so they slapped a tariff on American cars. Would that incentivize Americans to use less gas? Would it make Americans favor an increase in gas taxes?

3. They lead to retaliatory tariffs by the other side. There's no such thing as pure one way punishment, no matter how justified you think you are. The other side will punish you by the same amount, if they can, in order to punish what they view as your bad behavior in trying to punish them.

Now I'm a big fan of trade reductions, but that's because it's part of my personal war on globalism. But make sure you are signing up for the same mass trade restrictions - e.g. blanket bans on certain products coming from all of East Asia - because that's what this is. Don't think you can wage a war against CO2 without also waging a war against globalism. International conferences are fun, but they have no teeth and don't get the job done.
If anyone can pull this, for me it is definitely System76. Love PopOS. Even though I am an archlinux user but of all the distros I have tried(and I have tried a lot), PopOS was the one that just worked. On dozen+ different devices with different quirks, every other distro has caused some or the other issue but PopOS just worked. Even though it felt like a simple skin on ubuntu with a different store but there is definitely a lot going on beneath the surface to make it a solid experience.
Really hope they pull something good off here.
That’s simple. Just do one camera at the beginning, one at the end and you can get average speed by simple math. While it allows you to go above the speed limit, you also have to slow down to “lose” that earned time so at the end it averages back to speed limit. Go ahead and advertise this speed trap well because the more people understand how this works the better.
> I'm never sure what package manager or virtual environment thingy I'm supposed to be using

This feels a bit anti-intellectual to me. Like any other thing, it takes a bit of reading to figure our virtual environments, but its literally one line to create a new one one you know how (I almost always use Conda). I don't see how this is different than the setup used for any development, and I can't imagine it's a major impediment, certainly not a lasting one, to people working in python. You could always open a colab notebook if you really don't want to be bothered.
Everyone seems to forget that it took a freaking tsunami that displaced hundreds of thousands of people to take out a 60 year old reactor design. While coal is killing people every day.
If only there were a way to stop the surprise billing once it starts.

A friend created an AWS account with a new email address for a one-off side project, and wound up locked out of both the email account and the AWS account. But AWS has the credit card, so a 25 cent mystery charge appears every month.

AWS support is completely useless despite years of attempts at escalation, and of course the credit card company can't stop the automatic payments. The "solution" from both AWS and the credit card company is to... dispute the charge every month.

Forever.
I might be interpreting it wrong, but I read it in the "gentrification"-like way, not in the "they're taking our jobs" way.
WinForms is still around, and works as well as it always did. That or WPF are still the sanest choices for desktop apps in .NET, IMO, so long as you're only targeting Windows. And WinForms specifically resembles VCL a lot.
Lol, we get that question all the time. One day we got offered $17,000 USD for the domain and it wasn't even the best offer that day
Some of us People of Age remember when getting a good domain was easy before squatters :)

And yes its hard now. In real life you can have the same business name in two different business areas as long as it doesn't cause confusion. I think we should get rid of domains all the way, I should be able to register any text and make it DNS resolve.

Only answer for having squatters is to make any "domain" buyable so they can't get all the good ones.
There is a third option, spoil your ballot. It's invalid then, yes, but it's a statistic that the election/party analysts will track.

Up to a certain threshold a spoiled ballot might be considered a mistake, but once over that threshold, it could me something more. For instance, that voters are not interested by the policies of any parties on the ballot.
Worse. He sounds "fake angry" and spent what looks like an inordinate amount of time writing a crappy article to express his fake outrage. His understanding of time series seems OK at best.
It's literally flipping a switch.
Blockchain 101: The Simplest Guide You Will Ever Read
This is the entire conflict in a nutshell. Sometimes it feels like there are no good guys on either side -- obviously not true, but the lack of any real ground truth can give rise to that illusion.

There's more mud than honor in the Middle East, I guess you could say, and probably not because there's a shortage of the latter.
This is just an ad, why is it being upvoted so much?
Shove it in a container/VM, right? That way it doesn't really matter if it turns out to be an infected version.
If you're using Datadog with its AWS integration, you can pull in your billing metrics and set up anomaly detection monitoring. If you set it up as a multi-alert, Datadog can event alert you on the specific category that has a billing anomaly.
We have some software that monitors all network connections. I assume it’s for DLP and perhaps identifying suspicious traffic. As far as I know, management doesn’t use it for anything more than that. But it’s certainly a form of monitoring, even if they’re not using it to enforce a virtual “butts in seats” policy.
I've been using MahApps.Metro[1] and MaterialDesignXAML[2]. Those two libraries have made me feel like sticking with WPF until I retire in 5 to 10 years. I'm constantly getting feedback from clients that the applications look so modern. It's been a nice selling point as my niche is rewriting VBA/VB6 engineering software.

[1]https://mahapps.com/

[2]http://materialdesigninxaml.net/
You don't appear to be seeing the important caveat here: if I want you in my life I make that happen. Random people I don't interact with contacting me out of the blue is not something I really want or need. It's entirely possible to be happy with the number of friends and contacts you have. That's not grim in the slightest, it's actually very nice.
https://csrc.nist.gov/publications/detail/nistir/7966/final
Isn't that exactly what you would see if there was separate hardware that recorded steps, and the main hardware polled it occasionally.
Couldn't someone make an AI that just plays the game?
Is there some way to do this work of memory hacking from OUTSIDE the VM? I've always thought that it would be "safer" to do the work by just being able to scrub the hosts side of VirtualBox, then stuff events back in through the keyboard and mouse rather than getting on the inside of the VM and hooking/injecting inside the target executable.
Not if you count the time needed to man the channel for it to be useful, though.
That's a lot of worries about 3$ per year.
Agreed. Troy is shaming a serial scammer. We don't know anything else about the scammer's background other than that they calls themselves "Muhammed"

Moreover, the presumption that an Islamic name means they’re underprivileged or foreign-born is condescending, maybe even racist. My rich South Asian friends in high school had similar names, similar hacking proclivities and very much the same poorly English in their written correspondences.
>There is plenty of purported evidence

The name for this is "allegations," specifically "unconfirmed allegations," AKA "random BS."
Elon Musk and Space-X twitter accounts inundated by crypto giveaway scams spam
I have never seen it this bad before

https://twitter.com/SpaceX/status/1457782822496657409

the entire comments section filled with garbage.

https://twitter.com/JacintoAbraham4/status/1457821906451800065

https://twitter.com/AlternativeCoi1/status/1457795737824022528

This individual has probably tens of thousands of hacked accounts to keep posting this spam

Just change the username to some Unicode gibberish that fools twitter's detection.

I don't understand how twitter allows this to happen in terms of the hacked accounts and constant spam. Are they not aware of this problem? Don't people complain and report the posts?
Jup, bing is so much better than google for image search.
I mean, in fairness, the design outlined in TFA is an intricate, 3D, embossed design, so maybe Ive himself is off the "simple and flat" train ¯\_(ツ)_/¯
>To be honest I’d buy a hypothetical fanless “MacBook Air Plus” with a modest M2 if only it supported 64 GB RAM.

Went this route with my home server. Pn50 in akasa A50 case...8 core zen2, 64gb, passive cooling, 3TB storage fits under couch.

Can't quite compete with the guys running full rack home servers but in terms of self hosting it can do pretty much everything I need (big gotcha is not RAID friendly)
Roblox Reports Third Quarter 2021 Financial Results
I love this -- I would use this if there was Linux support!

Until then, I'll have to get by with SQLime or DBeaver :(
Hi vdemedes—nice work! I'm curious whether you've considered putting this in the mac app store or not, or what your reasoning was around that.

Also curious if you did beta testing if you could tell us anything about what that process was like (e.g. finding people, collecting feedback on bugs or usability issues)

(Just curious since I'm working on a desktop app with similar pricing etc., not in the database space though)
I have no faith whatsoever that they would be forthcoming about the extent of any breach.
And just there's the rub: everyone's eager not to be complacent... until they're not - at least historically speaking.
There were periods where the strong advice was to just wait a minute for non-urgent GP visits and general checkups. Also elective and non-urgent surgeries and day procedures have been suspended in hospitals a few times, either to manage infection risk or staffing shortages.

More than the actual closures though I think there’s been a perception in the public that it’s better to wait a bit. Vaccination rate is now 80% nation wide and over 90% here in Sydney so we’re up and running again.
Nobody is trying to tell you that you have to run an ARM fork of Arch Linux on an M1 MacBook. You're taking this weirdly personally.

How would you feel if people made disparaging comments about your hobbies being the sort of thing that "normal people" aren't "willing to do with their time"?
These are a few videos which present Pythonic style. They do not form a proper curriculum, but they are example-heavy and give a good insight to a very Pythonic mind.

1. Beyond PEP 8 https://www.youtube.com/watch?v=wf-BqAjZb8M

2. Transforming Code into Beautiful, Idiomatic Python https://www.youtube.com/watch?v=OSGv2VnC0go
Slack or Discord live in the current moment. It is hard to get back into discussion which started a week ago. Channels do not provide much historical value.
Being a pedestrian around cyclists is dangerous, but not as dangerous as being a cyclist around cars. So I find it hard to fault cyclists who go onto the sidewalk.
you can also look at it from another angle - those e bikers are now a threat to regular bikers as they are driving much faster.
Really? Care to elaborate how demanding are these jobs in terms of productivity, hard skills, etc?
Interesting observation. Maybe it's a natural evolution of society, that in part it resembles evolution of a person - it starts out young, full of ideals and energy, trusting the people and institutions around them. Then it gets older, loses energy and as perception of corruption blows up, trust becomes rarer. This does not have to be the end of that society like it is for the person, but probably society needs some radical revolution to get things "back on track" again.

In research, abolishing the grant system and the business model of universities selling credentials in favour of direct financing of learning and research institutions to teach the best students should be attempted. It probably won't come from the academia, it has to come from the state.
Report the card as stolen so it's reissued with a new number :)
reddit.com/etc/passwd
It's an absurd solution, but they can cancel the card and get a new one, and that will stop AWS from being able to bill them.
Almost fifty years between 1949 to "justice" in 1998.

I wonder what experiments today are the most likely candidates for settlements in 2071?
>It was already clear, what
will happen next.

Is it? The attempted murder of innocent people? Is that the sort of behaviour that should be accepted and tolerated? because it sounds like you are saying that.
This was my first thought. Understand that it's a financial risk to work with AWS at both small and large scale.

I have a personal AWS setup that has no costs, at this time. I've run a business account at 50k+/mo. I've never had an account suspended or lost my credentials and those stories scare me a bit.
Alternatively, there is either "ket 0" or "ket 1" [1]

[1]: https://en.wikipedia.org/wiki/Qubit
As for SQLite GUIs, there is also the free open-source cross-platform SQLiteStudio.

https://sqlitestudio.pl
What's the problem with flat design? I love that!
Not just "the modern stack". I work mainframes and always felt the IBM-supplied environment (compilers, transaction processing systems, databases) was rock solid.

Then one day I discovered APARs were a thing.

https://www.ibm.com/support/pages/open-apars-ibm-products-av...
> but remember that both accountants provided detailed testimony in an open court room - not from a torture chamber.

That’s not actually a counter argument for torture here. Tons of torture victims will walk into court and say everything they said in the torture chamber; the threat of continued torture of them and their loved ones is quite the motivator. History is littered with examples of torture victims “confessing” in court, often to crimes that were laughably made up.
> What's the rationale for keeping RSA as a default these days?

I think they recently changed this, but for the longest time RSA keys were the only kind AWS supported for EC2 keypairs.

For staff that weren't deploying EC2 instances, EC keys were fine, but for the ops people setting them up where the EC2 keypair was the initial access key, they needed RSA keys.
Honestly I feel like you're trying to pigeonhole me and ignoring major parts of my comments.
Postman or Insomnia for developing APIs, then try to stick to the OpenAPI specification which will allow using a whole ecosystem of tools https://openapi.tools/ From code generators, documention generators, testing and validation tools.

(OpenAPI used to be called swagger, some tools still use the old name)
I think it's the premise rather than the cost that matters. I'd be scared that $3 turns into $300 or something
> While writing it I needed something that would be 'just data' without any additional 'functionality' attached to it, so I naturally reached for `struct`, given that it exists in the language. The .NET guys asked why it was not a `class` instead. See, somewhere deep inside they felt that not wrapping everything in a `class` is wrong on some fundamental level.

The difference between a class and a struct in C# is not the same as between a class and a struct in C++. In C#, structs can definitely be useful, but also have some gotchas, so they're mostly used only in performance-critical parts of the code.

If you visit a foreign tribe, I think you should listen to the locals, unless you are really certain your way of doing things is better in the local context.
This is a good way to go to collections (at least in the US) and have your credit rating harmed. Probably not for .25c but everyone who says just to cancel a card to stop annoying bills is not a good answer.
https://en.wikipedia.org/wiki/Lillehammer_affair

Not to include the 4 innocent bystanders on the street killed by a Mossad car bombing (they're only terrorist attacks when they're not perpetrated by state security services I guess) when they actually found the right guy.

And to include civilian nuclear scientists are also that: civilians.
Yeah that's right. Not sure where I picked up the term "... buffer" but a search shows I've been using it for a while.
Speaking as Matrix project lead: we'd love to submit an RFC (or W3C proposal) once Matrix has sufficiently stabilised. Right now it's moving very fast though (e.g. we're about to totally change the sync API so that it's O(1) rather than O(N) with number of conversations).

In terms of contributions to the Matrix spec; from a quick eyeball at https://spec.matrix.org/unstable/proposals/, there are 95 different authors, of which 31 work for Element (the company formed by the original team who created Matrix). Or to slice it another way, there are 498 spec change proposals there, of which 358 were written by folks at Element (so 70%). Meanwhile the protocol itself is defined by the independent and neutral Matrix.org Foundation non-profit (https://matrix.org/foundation).

In other words, accusations that Matrix is entirely defined or controlled by Element are untrue - by the time we created Element there was already significant contribution from the wider community, and these days there are loads of other individuals and companies like Beeper, Famedly and even Ericsson contributing to the spec.

Edit: oh, and Rocket.chat is adopting Matrix too, which refutes the GP comment even more...
Unexpected to see this here! I have not done a lot of work on this recently, but happy to answer any questions if you have any.
Looks a lot like PostgREST, but with more backends (not just postgres), fewer fancy features (joins? not mentioned here), and with the client-side code generator built in (typescript).

If the author is reading, assuming I'm using Postgres and typescript, in what situations would I choose this over PostgREST + any openapi code generator?
You can do that with native CloudWatch monitoring, too, but it doesnt work well with spikey charges like up front reservations and things billed at the beginning of the month

Technically they are "anomalies" but there's no human interaction required so you get false positive alarms. It also doesn't work well beyond a certain $ amount since the error bars get pretty big

Is DataDog better with that?
I'm also noticing the absence of any 'average American' experiences in this thread...although COVID has disrupted average a little.
Because the title touches a pain point that's existed on AWS for over a decade, and that also exists on every cloud provider. These multibillion dollar operations refuse to implement an option to set hard budget limits even though their customers want it and would benefit from it.
Well, Guest-to-Host escape is a thing, so I wouldn't bet on that with that much confidence, but that's definitely the alternative.
Disabled people. Blacks. Poor people. Etc. We often de facto treat such people as being less entitled to human rights.

It's one of the reasons I don't like the emphasis on organ transplant as a treatment for some things. I'm convinced it's not about quality of life for the recipients. It's about other people's egos and desire to play God while not really caring about quality of life for their "patients" (potentially their victims).
Though I believe the story first broke here[1].

1: https://archive.md/9x8bs
It's virtually impossible to do so in Slack, unless someone ponies up the cash, which is not viable for very large slacks.
What? RSA keys are insecure?
"If You're Typing The Letters A-E-S Into Your Code, You're Doing It Wrong" still applies, even though we now type chacha20. https://people.eecs.berkeley.edu/~daw/teaching/cs261-f12/mis...

We should aim for not having to fiddle with SSH config, and having sane defaults.

That could involve:

* cryptographers advocating changing OpenSSH defaults

* people refining their threat model to being able to accept weaker defaults

* Distributions or config management solutions that improve on the defaults in a careful considered way.

I use NixOS which generates my sshd_config. By default, NixOS:

* Disables root login via password: https://github.com/NixOS/nixpkgs/blob/8605fbd737e526c40ff8f0...

* Sets ciphers according to Mozilla's recommendations: https://github.com/NixOS/nixpkgs/blob/8605fbd737e526c40ff8f0...

Other distros, cfgmgmt, and container systems could do this too.
Show HN: Storeotip – scan e-commerce product page to ensure best practices
Maybe, however Visa has "account updater" which is an API so that companies with saved payment methods can update them to a new number once the old expires or is replaced. They might need to close their bank account if the bank participates in this.

https://developer.visa.com/capabilities/vau
My card expired and now I'm getting every month a notice that my AWS account is going to be suspended. It's been 2 years...
Pretty much 100% of all passenger/cargo jets will be flying under IFR rules, so that wouldn't be the reason unless most planes are red.
I've done exactly what I suggested and I've never had a bill sent to collections. YMMV, of course.
This is really simple to use. I also like how the homepages section will automatically update with the site's title and description once you save

https://ichi.city/homepages