skysight-inc/HackerNews huggingface dataset:
In any serious security design, "the attacker probably won't do that" would and should be shot down immediately. If your security strategy is hoping that an attacker will be kind enough to not exploit your open vulnerability, you've already failed at threat modeling and at security.

If an attacker can do it, you must assume they will do it. Because they will. That should be the starting point for any threat model.
I'd argue it's not better in either case. It's a lot more marketing than actual value. Plus they use all kind of sick lock-in tactics to entrench their position. They are like MS from the '90s in that sense.
"debug" may be the wrong term, but 'diagnose' might be a more necessary skill.

a colleague described a recent scenario. they've got a college kid (... 1st year? 2nd year?) doing programming work, and basically dissing on all tech stuff that he isn't intimately familiar with (which... means a lot of stuff). he managed to get some stuff working on google app engine, but some of the stuff doesn't work. The kotlin stuff has a warm up time ("that's normal"), but some PHP stuff takes 8-10 seconds all the time for on every request. "PHP sucks, it's shitty, everyone's leaving it, kotlin rules", etc.

No one else is seeing that same performance. Most other people hit the PHP instance and get 100ms response times with moderate payloads. He keeps insisting that it's PHP that's horrible, and what he's seeing is evidence that not even google engineers can make it work because it's so bad.

My colleague and a couple others have said to him "you have a network problem - some route to that app engine isn't working right for you for some reason".

"oh no, it's not that. PHP is crappy".

So... over the holidays, he goes home to parent's house. Has a week of doing some work, never once mention of PHP being slow. IIRC, he seemed to think google got stuff working (despite PHP being crappy). Then he's back at his regular place, and suddenly it's all slow/bad again.

Hrm... if you're the only person on a distributed team having extremely slow network issues to one server, then that problem goes away when you access it from a different network, then you have the same problem when you go back to the first network... it's not the remote technology. Or... at least not the tech you think it is.

I'm not saying he can actually debug or affect an actual fix, but diagnosing/recognizing the signs of network problems as actual network problems should be a requisite. If 8 people hit a server and get 100ms or less response times, and your requests take 8 seconds from your house, but 100ms from your parents' house... this is a network problem on someone's end. It's not a PHP (or kotlin, or ruby, or whatever) issue.
> The US left sees far right groups as evil Nazis with only destructive motives, and far left groups as noble warriors

No, it doesn't.

I mean, seriously on the far left, anarchists, IME, view the most dangerous groups as, starting at the worst:

1. Marxist-Leninists (aka MLs, as used by anarchists, the term tends to include any of the vanguardist descendants of Leninism)
2. Liberals
3. Fascists

(Occasionally #2 and #3 are flipped)

For MLs, using the above expansive terminology, it seems to be:

1. Anarchists,
2. Different vanguardist flavors than their own,
3. Liberals
4. Fascists (#3 and #4 are more likely to be equated than flipped.)
Why do they do that? Just to show off to their constituents how egalitarian they are? People must be truly dumb if they buy into it.
Apple has slowly been improving that over the years. You’re right, it’s not to Android levels, but it’s not what it was five years ago when it was totally locked down.
I have done ssh-over-websocket before (so that is TLS + SSH). I did it do get around a restrictive work proxy. Don't tell IT. I even patched socat to support websocket so it was easy to use with ssh's ProxyCommand. I plan to use this scheme instead of having a bastion server to access containers.
Does any airline on the planet accept a quick test done at home without so,e sort of validation? Highly doubtful.
The specific case of Prototype-Fund, which is what's linked on the page, is not perfect but far from the usual level of mess you reference. It's small-scale (<50k€) funding for a wide range of projects.
TLDR about 1600 km/s, half of one percent of light speed. And yeah, in some of these collisions several solar masses worth of gravity waves are emitted.
Usually they pre-treat the highways and roads around the DMV, but it was raining before the snow started so that was not feasible. The temperature also dropped really fast
Author here, that's an apt analogy. Perhaps it helps to understand where I was coming from; I had never written a line of LISP and was struggling to fully grasp the power that Paul Graham had hinted at. So I started at the beginning, and although it was just the brim of the rabbit hole it certainly opened my eyes. And I hope it can help other beginners open their eyes as well.

I plan to fall down the LISP rabbit hole one day, and continue this series in full detail.
Ironically escape analysis is the one thing Rust went above and beyond to solve in a novel way.
But then again, if Cloudflare terminates your account, the website is still up; it's just going to be slower, and you're going to pay more to serve the same number of users. There's no lock-in there that I can see.
I'd say this is essentially an instance of the sequential monopolization problem and imperfectly aligned incentives due to a difference in the shape of each party's cost/demand curve.

The classical example of sequential monopolization is a car manufacturer and a local car dealership. The manufacturer wants to sell a large number of cars at a fixed price, while the dealership would rather sell a smaller number of cars so that they can maximize their margin on each sale.

Airports want high numbers passengers to maximize retail/parking/etc revenue (in which they have a monopoly), but don't directly care which flights are more profitable or how much the passengers pay for airfare as long as they fill the airport.

Airlines are maximizing a different demand curve, in which most of their profit comes from a small number of profitable routes while most other flights are slightly unprofitable. Their biggest incentive is to prevent competition on those premium routes, which they can do by monopolizing flight slots.

Sequential monopolization is a high-energy state for a market; absent other forces/regulations, it would be more profitable for the two companies to merge or otherwise form a partnership that looks more like a vertical monopoly.

All that said, we only care about this because of the negative externalities created by the current equilibrium, both in the carbon cost of air travel and the massive taxpayer subsidies for airport construction that are wasted then that airport's takeoff and landing slots are inefficiently allocated.

So, I'd say one possible solution would be to tax the airlines for the carbon used by all flights, perhaps at a penalty rate for flights above some amount of kg-per-passenger-mile.
Where do you get that it's a personal choice? It's not.

I'm not afraid of Covid. I just don't want to contribute to the spread and death.
I've been receiving emails but of the joining as an employee variety. It started as LinkedIn recruiter spam which I ignored but then I discovered they had signed me up to one of their "working at Meta" newsletters. Not only creepy but a violation of LinkedIn's anti-spam policies.
These are good points, there is a lot more going on than the consensus models, even if they are inseparable. Most cryptocurrency developers are not working on that, and are not working on mining. Some are, and some of those are working to improve these issues.

The only approach to the grandparent poster’s “nemesis” all leads to contributing to the cryptocurrency ecosystem, as you can only improve some parts of the stack, as opposed to hoping the stack disappears. And a high probability of making a lot of money in the process.
Lol. Current CEO and his predecessor were sales dudes. They don’t give a shit what code monkey peons think or do.
IIRC only civil cases need a plaintiff with standing. If our antitrust laws were criminal laws, this wouldn't be a problem.
While I didn't know the actual percentage, this has been obvious for years. And this fact should scare Google, Samsung, LG, anyone that's not Apple to death. Maybe Google less-so, since hardware sales are barely a drop in the bucket for them compared to their other revenue, and these kids are still using many google apps even on iphones, but the other hardware companies have good reason to be worried.

Mobile is everything, and no one can make any headway against Apple. Apple and iPhones are just too "cool" - and the iMessage and facetime lock in is very, very real.
> I embrace fear because it is exciting and uncomfortable and challenging. Without it I would be lethargic and lazy.

I thought that for a while, but I found that really caring about the goal of what I was trying to achieve was enough to push me to do well. Not into the frenzied state that I had with a fear of failure, but a much more healthy (and surprisingly more effective) sustained push that lets me be clear headed enough to see where to put emphasis and focus. Now I'm more focused on winning versus not losing and that makes a big difference.
And reporting to a management chain that doesn’t know any of it!
Maybe they don't value the cost of first class. Don't attribute to malice what can be attributed to personal taste.
> There are a number of people of color who feel the media, corporate America is doing more harm than good.

Isn't this the same sort of weak argument you're calling out? What people? How many is "a number"? Can you quote any of them on the racial issues they've seen the media feeding to us?
Unable to get keys to home due to a ransomware attack on county
Letter on Finding Your Purpose
Before legalization, maybe consider decriminalization, like in Portugal.

It is not the same thing. Drugs are still illegal in Portugal, and trafficking is a crime, but personal use is not a criminal offense anymore. If you get caught, you can get fined, especially if you are uncooperative, but you won't face a criminal trial and you won't go to jail. But more importantly, they can suggest treatment options if you are addicted.

You won't get safe unadulterated drugs but you can get testing kits. In festivals, you can find booths where they will check your drugs for free.

I don't know how I feel about legalizing all drugs. Heroin is nasty stuff, even if you get the good one, and I would rather not encourage using stimulants stronger than caffeine in our overworked society.
Tell that to Twitch and Ring employees. The consolidation of the tech industry is pretty apparent and I would put a lot of money on Amazon being one of the "final four" of the tech industry. https://en.wikipedia.org/wiki/List_of_mergers_and_acquisitio...
>3000 flights

>squeezing the last few bits

tell that to .us companies that manufacture in China since 70s
bazqux.com not bazcux.

I am a happy customer as well!
> continue to use their platforms to try and spew some sanity into the discourse.

Agreed, great points.
YouTube makes a lot of money. Google can afford an army
There is no such thing as reporter's privilege in the US Constitution or federal law. You're just making things up.
> Affordable. iPhone SE is $400 which is still expensive, many parents may see that as affordable for their teen

Especially amortized over the longer life of the device; $400 over 5 years is only $80/yr and iPhones can reasonably last that long
Does LinkedIn have something like this? I want my successor to post about my demise there, if I die before retirement.
I had no problems navigating there. Every single link in the hamburger lead me to polyhaven.com
Apple won't do the repairs past 5 years in most of the country, up to 7 years in California.

But you can do it yourself.
Repair kits for iPads: https://www.ifixit.com/Kits/iPad-Fix-Kits
iPhones: https://www.ifixit.com/Kits/iPhone-Fix-Kits/iPhone-Battery-K...

Disclaimer: I sell these.
Last weekend I was playing this in a VM where it felt very slow and easy. I went looking and found a fan patch (https://forums.sonicretro.org/index.php?threads/sega-pc-relo...) that allows the game to run on modern hardware / Windows and it was faster than I remembered.
> Is it because everyone is writing their stuff on node.js, putting 500kb of JS in every web page they serve, putting Docker everywhere when a chroot would suffice, microservices, Kubernetes, or hell even writing SAPs when we don't need them?

My response may come off as rude, but that's not the intention. From the above quote you've vastly over simplified all but the most simplistic environments. Someone could run all of the above for well under 10k month - those are not the reasons why costs are high

> putting 500kb of JS in every web page they serve

that's not much and CDNs serve that without issue or significant cost

> putting Docker everywhere when a chroot would suffice

Docker does not have much overhead over chroot with a large drop in security/isolation

> microservices

there are good and bad ways to do this - does not need to cost much. saying "microservices" is so broad to have no meaning in this context

> Kubernetes

think about why someone might run kube. Again, not that expensive unless you're really small where having master nodes would have a big impact on costs

> or hell even writing SAPs when we don't need them?

Do you mean SAP? SAP is the largest non-American software company by revenue. I don't think anyone likes working with SAP. You think people use it for without reason? There are reasons. Think about what those might be

But those are just details - when building anything of a decent size, nothing is a simple CRUD. There are always exceptions, limitation, biz logic, migration issues, schema issues. I don't care if you use Postgres, Mongo, Kafka or $SOMETHING_COOL

Then there's data retention. It's very very easy to keep PB of data in s3 or other data stores for biz or compliance needs

Then AWS gives IAM, which is very helpful in teams > 5
I’ve seen a compromised machine whose sshd had been replaced with a trojan that saved all passwords entered into it. Some investigation revealed that sshd modification to be part of a standard script kiddie toolkit.

Are you 100% sure that every machine you log into remotely with your very strong password isn’t logging that password?

That’s one advantage of keys.
Are you kidding?

I have to assume you're not trolling, and really can't conceive of an entire large category of people who might, in response to a Facebook post, follow step-by-step instructions to change their default search engine without understanding the ramifications thereof, or how to change it back.

There are more people in that category than in the category of people who change their default search engine for good reason, knowing that it may deliver a less-optimal experience than Google under some circumstances.
Only if your idea of fairness is five for me, and one for you.

India's entire CO2 output is less than half that of the United States, by the way, and its per-capita output is one-eighth. [1] (And gods only know much methane is leaking from American wells. We really aren't interested in counting that.) If you're going to put the squeeze on someone, it should be on the latter... But because we aren't going to squeeze ourselves, we deflect, deflect, deflect.

[1] Since it seems to get by on emitting one-eighth what we do, it sounds like there's plenty left to squeeze from our emissions.
I use the Platinum Preppy 02 pen. Bought it when I went to Japan. Kicking myself now because can't find it here in India.

I love the pen because, writing with the nib in normal position gives a smooth writing experience and a great smooth flow. Flipping it allows me to write razor thin lines, perfect for my drawings / notes / etc. (But flip side is a lot more rougher). Also, the flip side of the nib allows me to write on paper that blots.

I am from India. Any info on where I can buy quality fountain pens online?
This review is horribly mistaken, confused and hard to read. This person seemed like they watched the movie but missed the point entirely.
The USA is the 2nd largest emitter of CO2, on a per-capita basis it's almost double that of China.
Out of the box suggestion: I moved to Taipei.

There’s no COVID here so besides the 2-3 month lockdown last year I’ve been able to go to many in-person meetups like normal.

Virtual is _fine_ but for my personality meeting in person is still my preferred way by far. I can’t recommend moving here enough to anyone who needs a place to live a normal life and wait out COVID.
That's not really that big a deal. Sure, you might pay lower taxes if the bonus is split between two years, but the difference on tax would surely pale in comparison to typical gains in the stock market or other investment.
It’s difficult to encourage change when your own per-capita emissions are three times the global average and cumulative emissions are still double that of the nearest country. We need to change first.

https://ourworldindata.org/per-capita-co2
https://en.m.wikipedia.org/wiki/List_of_countries_by_carbon_...
Good for them. But thats 20 people who are not working elsewhere and the macro supply/demand ratios are the same.
A lot of projection there. Product is brought north on i95, rarely on yachts to the NE.

Miami prices are hit or miss, if you don’t want something that’s been stepped on too much you’re still at $80/.8.

NYC is actually cheaper. $60/1.0
About 10 years ago I (as a BMW owner) was invited by BMW to participate in a consumer research group. We were shown a number of different possible future BMW developments, and asked our opinions of each. By the end of the evening, I had guessed which of the developments were actually on the drawing board, and which were decoys (because at the time I worked in a technology development area).

The color "personalization" development was the most talked about option, and it seemed to me that they were very close to releasing it. I wonder why it took 10 more years...

Now I wonder, once this becomes available, what will be the TTP (time to penis).
No, it's a danger because a person that commits violence against women is engaging in misogynistic behavior and can't be trusted to treat female subordinates and colleagues fairly.

Furthermore, Alex was reported to Github HR by multiple people for verbal abuse and nothing was done about it under Nat Friedman's leadership.
I wish there were a service to sort through the ideas in my head and point out the flawed ones too — until I realize that a) I'd have to agree to one implanted product preference for each hundred thoughts scanned, and b) many of my thoughts would be placed behind trigger warning overlays.
https://loader.io is a nice tool for that
Best paper awards correlated to highest subjective rankings of CS departments? No surprise here. like I said earlier these best paper awards are really an Ivy League circle jerk which is also evident based on that the top schools only hire each others grads students or worse their own! CS academia has been devoid of any new ideas for decades, also because the brightest minds work in industry where the Googles/Microsofts/Apples couldn't care less if you graduated with an Ivy League degree.
A rack is about 20k street price.
Elizabeth Holmes' Guilty Verdict Won't Change Silicon Valley
You genuinely think a carbon tax would cost more than all the other costs associated with flying an empty plane? Pilots, cabin crew, ground services, fuel, depreciation of the aircraft, landing fees, ATC service fees, etc?

It wouldn’t be. The massive cost already isn’t stopping it.
Provide a double blinded study with a statistically valid sample size that demonstrates the homeopathy works.

What we knows is that at the dilutions proposed there is none of the original chemicals present.

even if they were present, we know that the chemicals involved have at best minimal involvement with human biology.

And we also know, through many many double blinded studies that people are bad at correlating events.

If you have a cold and you apply your homeopathic mix, and get better, that means literally nothing. It doesn’t matter how “immediate” the effect is. Because you don’t know if you were already getting better.

Even better is that this human behavior reinforces itself: after day 1 it doesn’t work, so you take it the next, and then the next,etc until you’re better. Homeopaths will claim that the homeopathy therefore worked.

Here is the very simple thing you have to do. Find an illness you can treat with homeopathy. Get 10 thousand people with that illness into your study. Have one half of them use plain water, the other use the homeopathy.

If homeopathy works, you will see a difference.

Saying people “know” homeopathy works is like doctors “knew” you had to keep pus in the body. Like people knew you didn’t need to wash your hands before surgery. Then someone actually studied outcomes, and behold the outcomes match we now know. Those outcomes also match our understanding of basic biology and physics.

Every homeopath knows that proving homeopathy works is a trivial exercise. That is why they don’t do any studies. Because it would show that they’re snake oil preying on desperate people.
Never used an Iphone, but am impressed with parental control features on Android via Family Link. Very configurable - can do the basics like block apps and request permission for app installs, time limits, etc. But really like how you can both have time limits but exempt apps(for more time or forever). So I can let the kid listen to music before bed, but not say, open YouTube.

Sorry if that all sounds basic to you, I'm new to this and just speaking from the Android front.
I’ve spent way too much money on fountain pens, and these are the ones I like the best: https://www.muji.us/products/aluminum-fountain-pen-e5a2 - less than $16 bucks too. Only Muji sells them so you won’t find them on the list here. But do buy ink and paper from jet pens.
Ah, the big eraser looks like just the thing for me. And you can get them with 0.9 mm lead. I'm such a clumsy writer, and have pretty much given up on pens. We're not required to use them for lab notebooks any more.
Almost a perfect quote of GM in the 80s when Japanese cars took over it's market share

> For something like photopea, there aren’t sub-second alternatives out there.

if there is't one now, there will be. Besides, with a little CDN and tweaking you improve your users enjoyment. Why not?
> All fun and games until you find yourself on travelling in Asia

Leave a cheap droplet running somewhere, whitelist its IP, and SSH through it. I'm in Asia and I do exactly that with my U.S.-based servers. Actually, I've blocked all of the rest of the world as well, except the proxy droplet. It's like a global bastion host. There's no legitimate reason for anyone else on this planet to try and SSH into those boxes.
I guess you are clearly correct that some will find it offensive... I think I'd be happy to laugh and offend said people as a mechanism to keep them away. It can be pretty toxic when people assume the worst of others (even if they are nervous)
> Why Tony Blair is singled out, for something in hindsight, and the other 411 people are given a pass?

Your point that the legislature voted on the invasion is a reasonable one, but Blair's government gave them incorrect information on which to base their vote.

Blair was the head of the government that produced that bad intelligence. It makes sense to single him out.

"The buck stops here," and all that.