skysight-inc/HackerNews huggingface dataset:
Linode reported it the same day:

Manager Security Incident

Ensuring the security of our platform is our top priority. We maintain a strong security policy and aim to communicate openly should it ever be compromised. Thus, we are posting to describe a recent incident affecting the Linode Manager.

Here are the facts:

This morning, an intruder accessed a web-based Linode customer service portal. Suspicious events prompted an immediate investigation and the compromised credentials used by this intruder were then restricted. All activity via the web portal is logged, and an exhaustive audit has provided the following:

All activity by the intruder was limited to a total of eight customers, all of which had references to "bitcoin". The intruder proceeded to compromise those Linode Manager accounts, with the apparent goal of finding and transferring any bitcoins. Those customers affected have been notified. If you have not received a notification then your account is unaffected. Again, only eight accounts were affected.

The portal does not have access to credit card information or Linode Manager user passwords. Only those eight accounts were viewed or manipulated -- no other accounts were viewed or accessed.

Security is our number one priority and has been for over eight years. We depend on and value the trust our customers have placed in us. Now, more than ever, we remain committed to ensuring the safety and security of our customers' accounts, and will be reviewing our policies and procedures to prevent this from ever recurring.

---

I won't argue Linode is blameless here, but seems like the only reason it had such an outsized impact was because the 8 customers who were targeted evidently didn't do much to protect their assets from someone gaining unauthorized access to their servers--which is always a possibility with any publicly exposed server with or without a breach of the service provider being involved.
How much of the German challenge do you think is due to German being an inflected language? So a search engine that can't figure out the inflected variants of a word are going to potentially miss out on a large number of the relevant search results.
All successes is relative, so I'm not sure there is such a thing as moving the goalposts. I do think it's best to frame "success" based on the question as originally posted instead of some undefined framing from one of the two of us, so let's do that:

Vitalik Buterin is extremely successful. It appears he has never had to worry about finances, even as an extreme outlier for my cohort I still have to mind my p's and q's and worry about financial decisions.

I am successful for my impoverished cohort. At one point it looked like I would hit financial escape velocity where I could essentially retire, which of course would just have gotten me to Vitalik's childhood starting point.

The ability to sit and work on a moonshot for an indefinite period of time, or follow new trends at my leisure, follow a hunch, passion, what have you, without worrying about a safety net?

No, never had that. What he had in his childhood I still to this day do not have as an adult that represents the top %1 of my cohort. Even with my %1 outlier level of "success attributes", escaping the well of gravity costs a lot. In terms of real cumulative stress, health outcomes, missed opportunities, etc. just calculating using a simple base rate I would have been far better off being born into the upper middle class.

I know many individuals who are far less driven, far less creative, people who have generated far less wealth, who had childhoods and young adulthoods well into their late 20's who are still financially ahead of me.

Children/People love to have mastery and create and be recognized, children are mostly born curious, a hungry belly helps no one achieve greatness, we celebrate and immortalize the improbable stories whose success effectively represent _achievement statistical noise_ and we should be honest about that I think.
I guess.

With the current Mozilla leadership it never even occurred to me that it could be a bug. I just assumed that it was something they do on purpose to get more money from Google.
I can't edit my comment.

As I noted elsewhere, there's an opportunity to do the right thing when someone comes to you and says look, someone is coming in on the control plane and resetting my server passwords.

And yes, that includes looking at your staff especially when bitcoin is in the mix as its less traceable to a person.

For some reason, for year after year, there was this pattern. No problem, we have good security, oh wait, we've been rooted for months. Or someone is coming in on the staff admin plane and taking all sorts of action.

It could be outside hackers sure. But linode never seemed that interested in sorting things out.

The takeaway I had was that you might not notice if a staff person OR hacker was messing around.
I run an agency. My guidance is camera on for first calls with someone, off every other time. Screenshare should be on 98% of the time anyway.
> poorer and not as white

You had me until here. Poverty isn’t racist. Correlation!=causation.
But wouldn't a zero-mass neutrino travel at c, and thus not experience time, and thus not be able to decay?
It's hard to even imagine this happening now, but it really does seem like it was a smart decision and Howard Phillips was completely correct (based on his gut reaction to playing the Japanese super mario bros 2) about what people did and didn't want, and it definitely does seem like the mario games went in the direction of not being so hard after that, although it's impossible to know if that was the specific reason.
"There’s currently a pump and dump on retro video games but I don’t think the same supply issues exist in Pokémon cards, but I’m not actively monitoring either market."

Can you clarify what the pump and dump on retro video games looks like? To me, there seems to be real demand for retro video games. You can see the interest in various subreddits.
Kustomer Joins Meta
The main past threads appear to be:

What every programmer should know about memory [pdf] - https://news.ycombinator.com/item?id=27343593 - May 2021 (7 comments)

What every programmer should know about memory, Part 1 (2007) - https://news.ycombinator.com/item?id=25908018 - Jan 2021 (26 comments)

What Every Programmer Should Know About Memory (2007) [pdf] - https://news.ycombinator.com/item?id=19302299 - March 2019 (97 comments)

What every programmer should know about memory, Part 1 (2007) - https://news.ycombinator.com/item?id=15300547 - Sept 2017 (12 comments)

What Every Programmer Should Know About Memory (2007) [pdf] - https://news.ycombinator.com/item?id=14622861 - June 2017 (26 comments)

What every programmer should know about memory (2007) - https://news.ycombinator.com/item?id=10601626 - Nov 2015 (53 comments)

What Every Programmer Should Know About Memory (2007) [pdf] - https://news.ycombinator.com/item?id=9360778 - April 2015 (15 comments)

What every programmer should know about memory, Part 1 - https://news.ycombinator.com/item?id=3919429 - May 2012 (79 comments)

What every programmer should know about memory [2007] - https://news.ycombinator.com/item?id=3360188 - Dec 2011 (2 comments)

What every programmer should know about memory - https://news.ycombinator.com/item?id=1511990 - July 2010 (37 comments)

What every programmer should know about memory, Part 1 - https://news.ycombinator.com/item?id=1394346 - June 2010 (4 comments)

What Every Programmer Should Know About Memory - https://news.ycombinator.com/item?id=659367 - June 2009 (1 comment)

What every programmer should know about memory, Part 1 - https://news.ycombinator.com/item?id=58627 - Sept 2007 (7 comments)
I really love the idea, and I think your implementation UX of "Earth to State to City" navigation at the top left is interesting. Great work!
Douglas Trumbull, visual effects supervisor and movie director, has died at 79
I've replaced "site:news.ycombinator.com" with hn.algolia.com and couldn't be happier.
> I'm definitely onboard with the examples, where influential people's votes influence others, or an influential person votes against an expected outcome and draws ires

In fact, I see that as the potential #1 usecase: enabling zero-trust voting, with the "drop" simply being a way to instantiate the set of voters at time t to prevent a takeover by freshly created accounts created just for the vote.

A weighting by history (say give 20% more weight to a vote per year the address has existed) and activity (say on HN to give more weight to people who post regularly comments that do not get too many downvotes) could have interesting feature for online communities
I have some G.Skill DDR 5 and cannot get them to run at their 6000mhz XMP profile. Ive tried a Gigabyte Z690 Aorus Xtreme and an Asus ProArt Z690 Creator motherboard. Wouldn't mind trying another brand of memory but can't find anything in stock.

Looks like a common issue from my research.
> flood the zone with factual-seeming counter information, provide "data" (generally cherry-picked or out of context) to back it up and demand that it must be addressed.

This is also referred to as Gish Gallop and relies heavily on the bullshit asymmetry principle.

https://en.wikipedia.org/wiki/Gish_gallop

https://en.wikipedia.org/wiki/Brandolini%27s_law
It has been so weird seeing all the headlines and rants about CRT as "Critical Race Theory" in schools, because every time I hear it I just think about good ole Cathode Ray Tubes.
You misunderstood. I never said I'm unable to do those things without proprietary apps, or a smartphone. I meant mainly if I'm traveling away from home base (esp. in a city I don't know), and/or not at a desk (e.g. in subway/bus/train/walking). I'm perfectly aware how to research stuff on desktop/laptop and in advance. If I was traveling by myself, or everyone I planned to meet was like you (had a deterministic workday and schedule, and always planned days/weeks in advance), then yes (most people stopped behaving like that in the early 2000s, IME; people are flaky, people have unpredictable workloads). Otherwise, I am saying if the challenge is "find a decent [Vietnamese] restaurant in [price category] near [some subway stop/intersection in NYC, a city I'm not familiar with], text me the location and I'll meet you there in 45 minutes", and you're not seated at a computer, then you'll find a phone indispensable. Yes, I could choose to not associate with 80% of people I know, or try to get them to fit in with my schedule.

- you're touching on underlying cultural expectations: fluidity of people's schedules and movements, which in turn is governed by work-life fluidity, unpredictable work, stuff coming up etc.

- I never said I can't navigate without a smartphone or GPS, or offline map. (I actually navigate very well without GPS and I do that most of the time).

- rideshare companies have made it near-impossible to use them without a smartphone (yes I'm aware there are very heavily restricted ways to use them without).

- 2021 was particularly bad for unpredictability; many businesses temporarily closed, almost all had changed their opening hours and days or indoor/outdoor seating hours/arrangements, some refuse to take reservations esp. for outdoor seating, almost all of them changed their menus and many jacked up the prices invalidating existing reviews, etc. etc. Most of my friends are temporarily/permanently WFH, which means they don't know these local changes, esp. the ones with kids hardly ever emerge from their house. For example, evening maintenance and service changes on the NYC MTA meant it became seriously non-deterministic starting 7pm and worse after 9pm. Also, it became seriously dangerous after 11pm, esp. in unmonitored stations. (Carrying around a laptop in this situation would be risky.) Rideshare prices surged even in low volume hours due to driver shortages.

- as you know during Covid there was an accelerated push towards e-ticketing, boarding passes etc. Covid certs on phone, too. Yes you can partially opt out of that and carry paper versions. But when you need to have a 3-day recent Covid test for airplane, it can be helpful.

Yes, "those actions are usually much more intentional when done on a computer"*, but in order to make this modus operandi work, I'd need to change the habits of the people I meet. The middle-ground is if I'm dealing with a particularly flaky friend I'll say "I'll be at [place] at [time], I have to leave by [time], if you can't make it let me know in advance". If people flake out several times, I communicate my displeasure.
Does mail.app notify you as quickly as the Fastmail app does?

I found mail on both iOS and Mac to be significantly slower. Made me suspect it wasn’t receiving push notifications but rather pulling them entry so often even though my settings were supposed to allow push.
If you make a Bitcoin address, memorize the private key, and never write it down ever, then the only way for anyone to "reverse" transactions is to force you to physically say or write down the private key. This transaction finality seems to be orders of magnitude more final than a credit card transaction or a bank transaction.

So sure - it's technically reversible. But is this really a practical argument? It's like saying nobody is safe in public because you can be a victim of a terrorist attack any any moment. It's alarmist and practically wrong even if technically true.
Insanity. Hope this gets higher up so more people see it and never purchase from new egg again.
I want to disassemble my sous vide device, because I broke it today.

"kitchen boss" "g320" "disassembly"

https://www.google.com/search?q=%22kitchen+boss%22+%22g320%2...

Nothing useful at all. Nothing mentioning disassembly. Not even a YouTube link.
If you keep killing products quickly after launch, people will hesitate to invest in your products. This is also a problem with startups. I need a problem solved, not be part your incredible journey.
If I'm interested in anything technical, I'll search hn.algolia, it's a brilliant tool.
Processes are created to minimize risk--usually because something bad happened, and someone said "If we do this process, we can make sure that never happens again." This is good.

A couple bad examples of processes:

Often, people implement processes because they are aware that <bad thing> can happen and they wish to avoid it. The challenge is that sometimes <bad thing> has a much lower occurrence (occasionally ~0), or cost in a different environment. Meaning that the process they used at another company isn't actually helpful for another company, and may actually cost more than it saves.

Processes can also become obsolete, but are rarely evaluated for that. Again, that means costs without appropriate savings.

Conclusion: Implement processes carefully, and constantly evaluate them for appropriate savings. And don't assume that a process that worked <there> will work <here>, unless you have proof of some sort.
Take a look at this link re: pagerduty and how linode handled things there.

https://news.ycombinator.com/item?id=10845985

Doesn't it seem kind of crazy that folks get full root control plane on linode so frequently?
Yeah, I see a lot of those via Google Finance.
I'd just be happy with a search engine where you can choose to remove an entire site from the results. Sick of getting towardsdatascience pages written by students rehashing chapter 1 of textbooks.
From a skim of the story..."abhorrent"ly poor judgment in speaking near a live microphone, certainly. For any lawyer, that seems a legit termination offense.

Whether the ex-professor is prejudiced against Blacks, or in favor of Blacks, or was merely bitter about the situation which Georgetown's de facto "pro"-Black admission bias put her in, or something else...from the article, I can't tell. And I don't get the impression that either Georgetown or the N.Y. Times care a bit about that.
Spinning rocket launch system could transform access to space
This is facts. Appending reddit to any google search gives much better results.
Don't you just put words or phrases in double quotes when you want to tell it you know what you want?
For a long while Hey didn’t support personal domains. Had to use @hey.com
Supreme Leader is trying to make sure that only true believers remain at FB/Meta.
such a cool video
It's backwards on the original too: https://unicode-table.com/en/202E/
Surely a botnet that is forced to waste time computing signatures before submitting spam is better than one that can just submit spam right away? You can't absolutely secure anything, just make it more expensive.
Should that same existential penalty be applied to every company who had Log4J running in prod a few months back? That was a much more widespread root compromise...
Depends on if it's been dieting recently.
How to create a minimal, reproducible code example
No, I think we are in agreement. I may have misread your post.

People priced out of one housing type will bleed into others.
I am curious why you think that $9/m does not make sense. Is that too much, or too little, and why for either case?
Technical writer of 9+ years here. This is a page out of the technical writer bible. So much wisdom here. Just thought I'd pass it on.
3.11? That shouldn't that be WorkGroups instead?
In a liberal democracy the solution to an illegal protest is to move in and arrest and give citations.

Using anti-terrorist powers to go around the courts and freeze bank accounts, revoke insurance, and do whatever else you want is not the solution.
Note that the decorators standard has changed substantially, and the experimental decorators implementation in Typescript now varies greatly from the existing proposals. The current feature has not been updated in years. I would not use this feature in my code, especially for critical facilities, or build a framework around it.

For what it’s worth, it seems like the proposal may move towards stage 3 soon - another round of review is going on here: https://github.com/tc39/proposal-decorators/issues/442

So, beware libraries or frameworks that rely on this toolset.
If anything, the high-end Android phones are associated with hacker types who want more control over their devices. But there are enough factors that make people move away from Android. So I doubt there is one answer, unlike a good outfit.
In addition to inflections, another factor may be the tendency to use compound words, so that a relevant word in context might not have a space at each end.
All of our giants are passing away. Makes me a sad.

Who is the next generation? I can't think of any names.
> Our phones and computers, really our culture, has been infected with distractions which are pulling us away from what we should be doing towards bad faith actors with junk for sale.

It’s like game developers chasing graphic over game mechanics or simplicity.

I’m currently at Disney World and feel like was an executive decision to make all new rides a technical marvel. There aren’t as many rides as there should be (2 hour wait times) and they are broken down half the day.

I don’t feel like Walt Disney or Steve Jobs chased technical achievement at the expense of simplicity and experience.
> The idea LocalStorage-based apps are safe is silly if you're always loading them from a remote server.

This is true for any web page you load from a server in a browser.

My point is that Wordle's developer had to do almost no work to achieve a very high level of security. Literally the only things required are to (a) set up TLS correctly and (b) protect the app's static resources (and the server that's hosting them) from being compromised.

Depending on his choice of hosting provider, code repository, and build/deploy, those tasks may have been taken care of automatically.
Max Payne and NFSU2 looked amazing under a CRT. Under an LCD panel NFS2U it's unplayable.
Personally, for weekly all-hands meetings, I turn camera on. It's my own way of "being there" or being "visually present" at least once each week.

For most other chats, or daily stand ups, camera off. But, on that matter, I would encourage you to have a decent photo in lieu of the default user avatar.
Probably a bug, browser history shows the title as "[object Object]", which is what happens if you print an object value that cannot be 'adequately' serialized to string in javascript e.g. ({}).toString()
I feel it is something that people need to decide for themselves, and everyone else should respect their decision. There are non-verbal cues that can be gained from cameras if you are in a small group. But there is no point on large groups. And we rarely turned them on for one-on-one calls.

The best approach is just to talk about it with your team, and choose your own culture.
Hey thank you. Seriously I appreciate the feedback and encouragement to share Andi with HN. I know there have been a few comments and questions, even though I'm trying to not get off-topic because this is such an interesting thread. You're absolutely right that this needs it's own thread where we can answer questions properly.

So we're definitely planning to share what we're building with the community here soon. Andi's very much an alpha and a few things are broken, but we're working on a new release that fixes them, and then we're going to share it and learn as much as we can from the feedback and wisdom here.
Represent it as a bitmap - people are good at seeing patterns.
> Ever lived in, say, the SF Bay Area?

I would never live in the Bay Area. I lived in DC, and the economic inequality was soul sucking. It was especially depressing only ever meeting non-white/Asian people in service roles. I got my family the heck out of there.
I hunted ages to find a CRT a year or two ago, and it's not even very good :-/

If you find an old (studio, rather than consumer) CRT in good condition in the back of some old company's shed, you can pretty much demand whatever you want for it.
> `innerText` doesn't include the RTL marker

I'm too under the weather to dig into this, but this might be a mismatch between Firefox and the spec. I don't see in the spec [1][2] where this character could be removed since it shouldn't count as whitespace for whitespace processing.

It looks like in Chrome `innerText` contains the override. And the innerText spec is only 6 or so years old (!) so it wouldn't be too surprising if there were was a lingering incompatibility.

[1] https://html.spec.whatwg.org/multipage/dom.html#the-innertex...
[2] https://drafts.csswg.org/css-text/#white-space-processing
>They're less color accurate,

No.
because immunization is centuries-old public health policy, there's no new "covid policy" here
I used them (PRU in Beaglebone) to implement e-fuse burning with JTAG (the chips stops working if you take a little too long) and MDIO (the interface for controlling a network PHY).

My interesting battle story around this is that I first implemented the MDIO as bit banging in the kernel. This used quite a bit of CPU, which I wanted to use for other things. I switched it over to the PRU and CPU usage dropped to 1%. Great! But the data rate was much slower, with huge latency spikes. It turned out that the CPU usage was so low that the CPU governor thought the system was idle, so was throttling the CPU to just a few hundred MHz. I had to change the governor to keep the CPU clock to 100%, then everything was about 10x faster.
What is a virtual uart?