skysight-inc/HackerNews huggingface dataset:
I lock down to my IPv6 prefix just to cut down on the log spam of all those failed attempts. Seconds after running up a server and it's full swing of brute force SSH login attempts. Maybe once journalctl gets some better exclusion filters I won't care so much so I can see what's actually going on in the logs.
Do you switch Debian based systems to firewalld or do you just prefer RedHat based systems?
While I want to agree with you, you’re comment is just hyperbole/rhetoric and no substance.
There’s unfortunately a fine line between secure-by-default and streamlined development. I’ve found that GCP is pretty decent at giving you enough feedback to know what principal and permission you need to tweak most of the time. Once you get the hang of it it’s a one time tweak, ideally in terraform, and you’ll never see the same issue again.
"the price of operating the aircraft. Thanks to state-of-the-art stealth technology and radar-absorbent coating that needs frequent touch-ups, the F-35 costs around $44,000 per hour of flight"

- that is absolutely crazy, especially during times of non-war when these machines are essentially up there for patrol and training.
"The only major non-WebKit browser", if it exists, is a title that would have to go to Chrome, and it would require you to consider Firefox a "minor non-WebKit browser". At <5% (on par with Opera circa 2012), that wouldn't necessarily be an inaccurate way to describe it.
Ah! Thanks for the explanation.
More information about proposed amateur TV experiments [video]
of course no one needs $1M salary, but is it morally right to prevent or harm people who want to hustle and earn $1M+ a year?

Ambition and competitive spirit are double edged swords. We should be prudent before trying to social engineer these things away.
>„better“

Is the initial double quote at the bottom something that is language specific?
> As I said, any time a Flask app becomes non-trivial, it's a pain

Results may vary. Small teams doesn't mean small apps. You can have 150 models, dozens of screens, caching, background jobs, rate limiting, multiple payment providers, multi-tenancy, public APIs and other features you would expect in a decently sized SAAS app and it's fine. The popular Flask extensions for certain behavior are pretty well maintained. There's also a number of Python libraries that can get used in a Flask app that aren't specific to Flask but are very well maintained like SQLAlchemy and Celery.

I wouldn't say Flask is better than Django or Django is better than Flask but I think you can be wildly successful building an app with either one. It comes down to personal preference. Your post made it seem like Flask is some graveyard of dead libraries and you can't build anything successful with it but that's not the case.
"Job creators" is the same old horse shit in newer, more marketable, clothes.
> What will incentivize people to work at insane rates if the vast majority of their income and wealth is taxed? Would I be willing to put in the long hours and sacrifices usually required to work up to a $1m+ salary if it’s taxed at a 90% rate?

There are at least three kinds of people working insane rates.

First, there are people working insane rates because they need the money for essentials. They are in low hourly rate jobs, and have to put in insane hours to get enough money for basic things like food and shelter for their families.

Second, there are people working insane rates because they like what they are doing. These are the people that if what they liked was painting would be your classic "starving artist" types, but if they happen to like doing something that people will actually pay a lot for like programming they can end up doing great financially as a welcome side effect.

Third, there are people working insane rates because they want to accumulate vast wealth.

My guess is that the vast majority of people working insane rates are in the first two groups, and that much of those in the third group are working at things for which it would be an improvement if we had less people doing them.
At the end of the day, any curious, sober, normal human will try to make their lives better.

This is why have start ups. But when someone starts company on here we are supportive, soon as they make it big everyone is jealous and that person is evil.

You know, if you go on reddit and say you own a home, it's like going to Israeli in a Nazi uniform.
I mean, you act like businesses are gonna spend the money better and not just pump up shareholder earnings... You know, like they do every time? This line of argument seems suspiciously pro-capital, like, are you personally benefiting from government disfunction?
We ordered a new root server a few days before this, but are trying to primarily use IPv6 anyway. However the more I try to set things up, the more painful it becomes, with services like Github not being entirely available on IPv6, various ISPs not supporting IPv6 at all, so service proxying is needed etc.

Is there any best-practice for IPv6 VM host setup? I found the IPv6 First Guide [0], but I'm not entirely happy with the bridged networking to VMs being used.

[0] https://ipv6-first-guide.hillbrecht.de/
https://news.ycombinator.com/item?id=29483659
Right, but it's not doing all this while trying to dodge SAM missiles, avoid radars, push the envelope of what it's capable aerodynamically, continuously evaluate a dynamic situation, identify the actual goal (it could be moving, hiding etc.), yada yada yada. Also, losing an aircraft, crewed or not, is further liability - ideally you want to scramble the debris before the enemy can get to it to recover whatever intelligence remains.

The months and years that military pilots spend in training is not just "driving license", but how to best operate a sophisticated destruction machine.

Comparing military jets to the capabilities of commercial drones is massively missing the point of the actual challenges of airborne warfare.

These probably aren't unsolvable problems, I'm not saying we can never replace crewed jets with drones, there are just fundamental reasons why this isn't happening right now.
I like how they haven't done the blocky "retro font" for their IDE that other such systems like Pico-8 and Tic-80 have. Which actually aren't even historically accurate -- 8-bit computers used reasonable fonts not that different from current monospaced ones.
Roe vs. Wade: Legal and Social Implications
Just be aware if you do this and your cloud provider only offers direct terminal (eg. via VNC) as a fail safe you'll be unable to use your certificate in case of some problem with your private key or a firewall issue blocking SSH. A reasonable middle ground might be use a certificate as your daily driver and keep a 100+ long random character password as a "break glass" backup.
No, you're unable to take my point unless I spell it out for you.

Israel is in some important ways analogous to what the Nazis were trying to create. It is amazingly clueless for you to offer the Nazis as an example of why Israel should be around, when in fact they are an example of exactly why Israel should not be around.

The creation of Israel fed into and sustains exactly the phenomenon that you claim it's there to protect against. Having states for "peoples" is part of the problem. People identifying with either real or imaginary "heritages" or "cultures" or "races" or "tribes" or whatever is a bad thing. Building governments around it is a worse thing. That includes Israel. And you compound that when you suggest that the way to protect somebody from violence is to have a state that's in the business of protecting that individual's "people".

And, no, for the slower-minded readers, I am not claiming that anything Israel has actually done is the same as what the Nazis did.
>This is insane. One side is doing everything they can to rig elections

The democrats? https://www.youtube.com/watch?v=WGRnhBmHYN0

that's not a gaffe. If you assert it's a gaffe, you must now explain a ton more.

>And then the other side is judged for being taken aback by that? Are we supposed to pretend like nothing is happening?

Someone could blame the media but that's beside the point. The USA is more divided today that I have ever seen it. According to articles ive read, the divide is larger today than it has been since the civil war. Thusly probable that another civil war is coming but oh boy is this one ever going to be one sided.
> Social media is evil. It will be banned.

How, by getting rid of the first amendment? Seems doubtful.
Think of how dead they would be if the insulin didn't exist. The part of the topic of insulin relevant to a discussion of trickle down economics is whether the insulin could have been researched and invented without letting people become wealthy profiting off of it. The monopoly on insulin that happened recently is one of the evil tendencies of capitalism that needs curtailed with laws, but unrelated to supply-side economics.

In the case of insulin, it was in fact invented with nothing more than research grants and the promise of fame and nobel prizes. But it also took 30 years from the first hints of what might solve diabetes until they produced a drug for it. It's an open question whether that could have happened faster with a profit-motivated company pushing the research.
It is not similar. Mushroom growing techniques are common knowledge, but morels have had only very limited success in reproduction in outdoor environments.
> Isn't a Ubuntu server secure out of the box?

I think people working at RedHat are more competent in moving security forward on Linux than what Ubuntu does. Ubuntu hardly innovates at all. Its target market seems to be desktop users (or server admins that are only familiar with the Desktop version). Personally I wouldn't put Ubuntu (or any other distribution) on a server without an elaborate playbook to tailor it to my needs (on Ubuntu that playbook is always more complex from my experience). This is where Ubuntu fails for me because it makes some weird assumptions as to what I want in terms of security (which are absent in Debian). YMMV.

Although I think that a distribution's goal should be accessibility and configurability - in that regard all of them don't prioritize security features as much as I'd like to see (but knowing myself I probably would complain the second these features become too opinionated - which they most certainly would - which is why I think Debian does the right thing with not making opinionated assumptions).

Ubuntu compared to Debian standard install is more bloated, interim releases are much buggier, and Ubuntu LTS is less stable than Debian stable. Ubuntu's root certificate store is constantly outdated (though the same issue might also be on Debian). Their apparmor configuration lags behind, ... whatever is good they usually inherit from Debian.

All distributions could do more to lock down processes with seccomp-filters in systemd. Would be interesting to see what lynis⁰ discovers when comparing a fresh server install between Ubuntu and others. In over 20 years I have seen some real shit-shows in production with all distributions except Debian (again ymmv).

Jason Donenfeld, the creator of Wireguard said about Ubuntu on the latest¹ SCW podcast:

> Ubuntu is always, a horrible distribution to work with, ...

> Well, they [Ubuntu] sort of inherit from Debian, but they're like not super tuned in to what's going on and like not really on top of things. And so it was just always, it's still a pain to like make sure Ubuntu is working well. but I don't know, it's not too much interesting to say about the distro story, just open source politics as usual.

while somewhat anecdotal I trust that Jason knows what he is talking about having been on the linux security kernel team for ages and familiar with the quirks of various downstream vendors. His development cycle for WG is: implement -> decompile -> formal-verification -> rinse/repeat :-/

All of Linux security is a shit show. This is why grsecurity is charging money for it's service.

⁰ https://cisofy.com/lynis/

¹ https://securitycryptographywhatever.buzzsprout.com/1822302/...
The wording in sspl is awkward in its vagueness of its scope, specifically this clause:

> “Service Source Code” means the Corresponding Source for the Program or the modified version, and the Corresponding Source for all programs that you use to make the Program or modified version available as a service, including, without limitation, management software, user interfaces, application program interfaces, automation software, monitoring software, backup software, storage software and hosting software, all such that a user could run an instance of the service using the Service Source Code you make available

For example providing SSPL software running on AWS as a service is probably/possibly license infriging because you are not able to provide source code for all the stuff you are using.

In practice probably even the most well-intentioned service provider can easily be trapped by that clause.
For those wanting a simple Linux alternative: If you have SSH access as the same user as the one running the X11 session on the remote host, you can do this:

ssh -v -L 5900:localhost:5900 user@remotehost 'DISPLAY=":0" xterm -e "x11vnc -localhost"'

And then

krdc vnc://localhost

or whatever VNC client you like.

For linux-to-linux this has replaced TeamViewer for me, together with zerotier.com for getting through NAT.
Countries adopt first-ever global agreement on the Ethics of AI
> Arguably there is fixed bandwidth on investment

not if there was a lack of food as i initially posited.

There's few places to put in low risk money, but i would say that there's still plenty of high risk investments out there that could return well.
> I did not earn any of that?

>> A doctor's wage is earned.

Your wage is earned.

> invested most of my income in that 20 years in to dividend paying stocks

Whether that one is 'earned' is debatable. From a neoliberal economists perspective you probably 'earned' it by risking your income. Although I always have to chuckle a bit of someone says that speculation is 'investment'. Investment is buying machinery, investment is specialization training of workers, investment is research and development. Playing roulette on the stock market is hardly 'investment'.

From a moral perspective you probably didn't 'earn' it. You didn't work for it and - since you were able to put it aside for a later use - you didn't actually 'need' it. So from a moral and societal point of view, that money should have rather gone to pay for teachers wages, for infrastructure or anything else that was of immediate necessity. By investing in the stock market, it probably just went to some banker's bank account.
I understand that bitcoin is decentralised, but decentralised what?

Currencies need to have an underlying useful asset or guarantee.

Yes governments used to have gold backed currencies but our economic growth is exponential, so it is now the job of the state. Incase they act irresponsibly it does go into hyper inflation, so they are forced to act responsibly.

In case they do print more, it does go into public good like roads & bridges which adds to the public assets and hence adds to the assets backing the currency.
Our World in Data is not a suitable source for suicide statistics, especially if you're comparing different countries across time.

They don't tell you what populations they're using; they don't tell you how these different countries are counting suicide; they don't tell you whether the methods for counting have changed over time in these countries.
Hmmm... what struck me is that this effect is local, i.e. the skin cells exposed to sunlight will store less fat, and the places usually prone to excess fat accumulation will rarely be exposed to the sun, even in summer. Of course, some sunlight will probably go through a t-shirt, while it certainly won't get through several layers of clothes...
Overturning Roe vs. Wade Can Spark a Sexual Renaissance
https://iobureau.com

Don’t miss stuff listed under “peanuts”.
'Patient is experiencing a decrease in heart-rate'
Hmm. Why don't they have some planes for training (when stealth isn't required) that don't have the special coating on them/maintained (and that might be applied in times of need)?
Wikipedia's explanations of mathematical concepts just aren't very good unfortunately.
People realize “trickle down” was just a made up political punching bag, right?
> do you want to contribute to the Webkit dominance

There is no WebKit dominance. This is not 2012. WebKit, used in Safari et al, accounts for <20% of browser usage. The majority comes from Chrome, which uses Blink.

(Every time you conflate WebKit and Blink, you harm the cause you're ostensibly pledging yourself to.)
Worse - those dividends are primarily "earned" by interest rates being lowered.
Low quality post unworthy of HN.
Zero-cost abstractions is used to mean zero runtime cost (in release builds), so if an abstraction would break that it wouldn't be suitable for this goal.

Like adding a GC for the async feature.
> With regard to lottery play for respondents of various racial/ethnic groups, non-Hispanic whites and Native Americans had the highest proportion of gambling on the lottery (51% for each group); however, with regard to mean levels of gambling on the lottery, blacks and Native Americans had the highest averages (20.6 and 25 days, respectively).

> Those in the lowest fifth in terms of socioeconomic status (SES) had the “highest rate of lottery gambling (61%) and the highest mean level of days gambled in the past year (26.1 days).

The wealthy people are the ones selling the lottery tickets (/crypto).

https://journalistsresource.org/economics/research-review-lo...
It's of course the translation that can contain bugs. Dumb error in a date conversion? Your accounting no longer works.
Keep in mind the danger that if the SSH server crashes other non-privileged users on that box can launch a fake server on that >1024 port to take its place.
How DO you get around this screenshot block? I never figured it out and I am probably not average.
I take the opposite tack. Who, precisely is clamoring for this? Why not "let 100 flowers grow" (present condition) and allow the various solutions to mature to the point that a de facto standard emerges? The claim is made: "choosing a runtime locks you into a subset of the ecosystem," to which I answer, "So, what?" If I want to log my server events or take advantage of a protocol encoding method or compress my data -- all of these and every other "big" choice I make locks me into a similar library ecosystem niche. I despise this "everything's amazing and nobody's happy" vibe. The async library authors have plenty on their plates without some sub-committee crashing in and dictating their features and release schedules.

By the way, using Go as an example is a joke since -- from the early Go bootcamp I attended in 2014, the best practice has been to use a 3rd-party http router (these days: gorilla? httprouter? chi? etc) instead of the one provided in the standard library. Instead of being _told_ what to use, let's get back to being interested enough that we read the docs, take in the reviews & benchmarks, and decide for ourselves.
> Reality is nearer they'll buy an NFT of a hamburger and then ask for another $20m

let's say for argument's sake, that they ended up doing this - what's the difference than the food buyers in this case? Both is generating economic activity. And if the $20m was spent on food, wouldn't those people also then ask for another $20m after having eaten their food?

My point is, gov't handouts are better off being invested into productivity producing investments, rather than consumption. The productivity investments would allow cheaper consumption in the future, and in the mean time, generate jobs for people to produce for consumption.
Also alternatively, turn on Safe Mode so if you lose access the router will revert to the configuration state when Safe Mode was turned on.
You're getting downvotes but honestly I agree. Who cares about board games? We should've moved on from this once we "solved" chess and Go. There are more important things and it's not remotely surprising that a computer can beat a human when there's a simple, abstract optimization problem to throw computing power at. Make it creative...now that's a challenge worthy of the top AI talent.
I found that I make the most money investing, mainly via Tesla over the past 8 years. I only have about 1% of the engineering skills and work ethic of Elon, but that has been enough to understand what he is doing and ignore all the people on CNBC with MBAs who don't understand engineering.
From what I've heard, they are still working things through. These things take time and we just had a holiday in the US.
I tried watching this, and put up with the insufferable tone thanks to your warning, but I still don't think it's any good! I'd say the first video stands.

The rebuttal makes some exceptionally pedantic complaints at exceptional length (and sometimes they're technically correct! sounds like they resolved some minor confusion around the opening crawl, at least) but never seems to engage with the overall thrust of the first video. For example, the first video makes some great points about the flow of the early scenes; this rebuttal just sneers sarcastically that it's a matter of opinion and maybe it was fine the other way. I know which edit I prefer!

In fact, it misrepresents the thesis of the first video. It says the thesis was "Lucas made a rough cut and showed it to his friends; they all said it was terrible; he hired a team of editors and they saved it". The rebuttal says no, that team of editors was already in place, so the initial bad edit was already their work, not Lucas's; and every film is "saved in the edit" so it's unfair to single out Star Wars.

Now, the title of the first video is admittedly clickbait-y, but that's not actually what it claims. It says Lucas turned to his team of editors to improve the rough cut, not that he hired them at that point; and if we're being pedantic, it never claims that Star Wars was uniquely bad before editing. It's more about how Star Wars became uniquely good due to great editing.

It never even singles out Lucas for direct criticism, apart from some veiled remarks about the later "special edition" reworks. I happen to agree that those later changes were almost entirely for the worse, so possibly I'm biased...?
To be fair if someone was using the “app didn’t work” excuse multiple times, suspicion could be raised.

But for a one off occurrence? Why would you assume a car company knows what they’re doing over the person telling the story? It’s silly.
Agencias de Marketing Digital
En Enroke vemos al negocio desde la perspectiva gerencial y diseñamos estrategias con enfoque en resultados, bajo una metodología inbound.
> The excessive shitting on Lucas has become unbearable

Yeah, even Lucas joined in on the trend and released prequels.
Technically, German should have them, but barely anyone bothers since they're not on a normal keyboard layout. Some word processors replace them automatically though.

Also, the upper one is “, not ".
Sibling comments have explained the detail. The pithier explanation perhaps is that rust is intended as a 'systems language', and it interprets that as meaning there should be no runtime. Or, more simply, it ought to be possible to call a rust function from C without providing an additional argument that encapsulates rust 'environment'. (C effectively defining this area)

Go and Java (with Loom) have these lovely facilities, but it is hard to interface with them if your language lacks these features. I find it odd that C#, javascript, and python don't provide the smoother async Go experience despite having runtimes / VMs.
Can we add 2018 to the title?

The Nature article is from Nov 2017

https://www.nature.com/articles/s41598-017-16689-4