skysight-inc/HackerNews huggingface dataset:
No bank is going to give you a mortgage without an appraisal. Do you mean waive the inspection?
I disagree, if you're a company raking in $270B a year in revenue, you want the absolute best running it. The Toyota CEO is like 0.001% of the revenue, an extremely small price to pay for the right management.
I was going to say the same. The accounts I've heard of people successfully using ibogaine to overcome life-destroying addictions focused on the critical value - and content - of the visionary effects in helping them change.
Not if the corporations are making the laws.
Facebook is one Chrome extension away from a privacy scandal
This is fascinating and a great bit of work by Stefan Marsiske. Loved the technical writeup in PoC||GTFO too. This quote from the TFA really shows just how difficult it was for the public to access decent cryptography at the time:

> In her book Operatie Vula, Conny Braam explains how one of her people met a guy, by the name of Floris, in a pub in Amsterdam, who allegedly had developed the PX-1000 [5]. From him they learned that the device had been taken off the market as its encryption was too strong. It had been replaced by a calculator but he suggested to find the older version with built-in crypto.

In all I would say it was a pretty good backdoor for the early 80s, showing how far ahead the NSA's internal understanding of cryptography was. I wonder if they would have anticipated the world we live in today where state-of-the-art cryptography is available and used by everyone on the Internet.
No, you won't see corruption on ZFS. Cutting power to the drive is always safe, you can slice a SATA cable with a guillotine if you want, you'll always see a consistent state of the filesystem. ZFS transactions are entirely atomic.

ZFS (and btrfs) is not "journaled", it's copy-on-write.
>No state is incentivized to make zoning more lenient.

All states are actually incentivized to increase their supply of housing, because an increasing population allows them to eventually gain greater representation in Congress relative to states with less growth. States like California, New York, and Illinois are losing out to states like Texas, Florida, and North Carolina.
I get the geeky joy of monitoring and possibly automatically controlling things, but the added benefit feels marginal at best for a home. It’s less than marginal unless you go big into the automation.

The other thing that jades me to automation is that in my experience with technology, you either get a easy to use, but limited, remotely brickable, subscriptionware, or you have to roll your own, and end up debugging your bathtub. Neither is very appealing.
Google doesn't do this because no one is posting entries like "My trip to X city - Favorite Restaurants" or "Ski Trip - Awesome Demos" on their public personal blogs. There is not enough authentic raw data to work with so google is completely overwhelmed by SEO spam.

We get around this by specifically telling Google to prioritize results from Reddit as we "happen to know" that Reddit is a more-or-less reliable public forum where real people share their real opinions.

The same thing is already starting to happen though. Astro-turfing and bot spam working to manufacture opinion. Reddit is at least slightly resistant to this due to the nature of the arrangement/management of its communities.
dorms and wifi should definitely be NAT. you can always give a public address if someone specifically requests it.
China's alternative approach is hukou, which is in practice the only way US superstar cities could get what they want, to be both quaint and affordable: just ban people from moving there. China is allowing the countryside to urbanize but they are doing it at their own pace; it's not a free for all where every bright kid from every backwards place is simultaneously bidding up the price of housing in Beijing.

In the US these kinds of internal migration controls violate the Equal Protection clause, so they are mostly a pipe dream. Like anywhere, the US has a lot of places not worth living in, but the people from those places are all able to compete for spots in the cities, so those spots will necessarily be competitive.
The idea of a native editor is very appealing. However, I heard that their plugin ecosystem is rather limited. Any experience with that?
A "TLDR" that is not.
Exactly this. I am all too happy for a walled garden on my phone, but spend some of your $$$ actually curating it to prove that your walled garden is worthy. What we need is an ecosystem of competing curated app stores.
Honestly and toxicity are orthogonal. They're not opposite sides of the same spectrum. Seems to me that they are both honest and toxic.
I am a vendor. My clients look at the list of the products I've created, not at what tools / languages I use.
Cloudflare Access is a cool project and gives better security controls than tailscale. I haven't used it but I read a bit about it and I've been involved in creating some similar features at bastion-zero.

I haven't read anything that suggests that webapp internal authentication is handled by Cloudflare Access. Cloudflare Access as far as I can tell just uses your SSO to setup a tunnel to your webapp, but you still need to authenticate to the webapp separately. If you found something that says different please LMK. I might have missed it.

If you look at how Cloudflare Access does SSH, you create a tunnel to the target host, the target host then runs a webserver that proxies between the SSH-server and your browser and you login to SSH via the browser.

> Cloudflare's browser-based terminal does not access the device's certificate store to gather SSH keys. Instead, users can input a username and password for password-based authentication or paste their private key. The terminal is rendered entirely in the user's browser [0]

So Cloudflare doesn't enforce policy on what Linux user a user can assume on the target host. It just merely establishes a tunnel. You can configure Cloudflare access to use short-lived certificates in which case:

> Access matches based on the identity that precedes an email domain. Unix usernames must match the identity preceding the email domain.

Which is nice but now requires you have configure all your linux boxes to have linux user accounts for all your SSO users. Then you are still mananging the privileges of the linux users in linux. It's doable with LDAP but I've rarely seen it done.

This is different from how bastion-zero works. Bastion-zero allows you to set and enforce policy between SSO identities and Linux users, e.g. Alice@example.com can assume `dev-user` or `readonly`. We are a bit ahead of the curve here. The biggest advantage of bastion-zero is that to compromise security both your SSO and the bastion need to be compromised. I don't believe CloudFlare Access has that yet.

[0]: Connect from a browser-rendered terminal
https://developers.cloudflare.com/cloudflare-one/tutorials/s...

[1]: Ensure Unix usernames match user SSO identities https://developers.cloudflare.com/cloudflare-one/identity/us...
I believe there’s a name for what you’re describing: the Cantillon Effect.

> An 18th century French banker and philosopher named Richard Cantillon noticed an early version of this phenomenon in a book he wrote called ‘An Essay on Economic Theory.’ His basic theory was that who benefits when the state prints a bunch of money is based on the institutional setup of that state. In the 18th century, this meant that the closer you were to the king and the wealthy, the more you benefitted, and the further away you were, the more you were harmed. Money, in other words, is not neutral. This general observation, that money printing has distributional consequences that operate through the price system, is known as the “Cantillon Effect.” [1]

1: https://mattstoller.substack.com/p/the-cantillon-effect-why-...
I struggle with this too. Whilst there is a lot of opportunities for learning and fun when setting these systems up, you soon forget how things intermingle and monitoring, upgrading, or debugging things becomes a chore.

Systems like this balloon in complexity with all of the different server hardware, IoT standards, subnets, cables, etc. For the average user, things that aren't easy or set-and-forget are probably too much. That sense of overwhelm is my personal experience, at least.
Fail? The "myself" is an inactive button; it's greyed out.
One problem with this is that it is a new large, entrenched interest that will be against new home builds and zoning because it's competition to their bottom line. That's a huge problem.
Begging the question, what part of the Apple app store prevents a bricked phone, and why would that not be a feature of non-Apple stores?
Nice! If I understand correctly this is fully local and doesn't depend on cloud stuff? After a few failures I don't want anything that relies on somebody's buggy cloud systems.
The competition at the time was relying on HTML meta tags' keywords. It was purely based on faith that the web developer would be honest and help classify pages. Which was reasonable at the time, before the Web was so commercial, but that ship has long since sailed. Keyword-stuffing was already a thing that was happening, and other sites simply neglected to tag pages. Some search engines were starting to read the page content and count keyword frequency, so a page that had "apple" many times on it would be deemed relevant to a search for "apple."

Google's whole thing was it did something smart, and treated the Web as the big graph it is and more or less measured the in and out degrees of the vertices to rank their popularity. The idea that something relevant would be linked frequently. This was the subject of an academic paper and had associated patents for awhile. https://en.wikipedia.org/wiki/PageRank It was a big deal at the time, but once again the Web has changed.

Google's search relevance is a function of the changing Web and how it's now highly commercial and populated by everyone instead of being the world's largest community of nerds. Links aren't a measure of popularity, because gulf between the average user and people who operate web sites has widened...and the common denominator has dropped to the point that optimizing for popularity is questionable in the first place.
https://www.passwordstore.org/

gpg "make-key"

mkdir -p ~/.passwordstore/foo/bar

echo "hunter2\nusername: hunter@hunter.com\n" \
| gpg "sign" > ~/.passwordstore/foo/bar/entry.gpg

gpg "decrypt" ~/.passwordstore/foo/bar/entry.gpg

tree ~/.passwordstore/

--

Basically, "passwordstore" is pretty trustworthy, open source, reasonably inspectable, and kindof automates the above steps in a decent CLI (and has a nice git integration for syncing).

There's another plugin: "password-tomb" which basically adds in a "zip -r tomb.zip ~/.passwordstore && unzip tomb.zip" with some extra encryption blobbing around things.

I'm nudging towards wanting all that "junk" stored on a mostly-offline (or read-only USB, or doing something with fetching encrypted secrets over the network), and trying to figure out in a temporary ram-disk to try and reduce exposure-time.

The reason it feels pretty good for me is that it degrades gracefully and can be used with standard tooling. It's totally possible to have a script which does: "foreach password => unlock && dump && append-to-pdf && qr-code => print.pdf" and print that out at intervals, so it's got great survivability characteristics. It allows me to self-host even completely offline using git. If I have the GPG key, I can recover the passwords w/o any tooling. Really it's kindof my ideal situation for trustworthiness.
My favorite: "How did you know it was me?"

"Well, when I saw the crime scene, there was a match in the ashtray, and a lighter on the table. The lighter worked. So I knew..."

"You knew a pipe smoker had been in the room. You weren't looking for a killer; you were looking for a pipe smoker. And there I was."

"And there you were."
I don't think that's a particularly new thing. I used to be a very active reddit user, but I haven't been active on the site for 2-3 years now. But even 3+ years ago I recall plenty of (granted, anecdotal) reports of commercial astroturfing even for relatively nice subreddits.
Emacs.

j/k

Not really though.
https://www.ordlig.se/
Do you have any examples of buildings like this, I've looked but can't find examples online? It seems zoning has a 15% overhead (all things being equal and as best as I could argue with the data I've found so far), maybe it's higher but I haven't found articulable/shareable evidence of that yet. IANAL, so hopefully an expert on HN can help chime in.

I've looked (links below) and have done more querying than a comment thread like this probably warrants but wasn't able to find your assertion articulated anywhere.

Neither Japan or Houston are unconstrained free-markets without land use control so I'm doing my best to roughly/quickly tease out zonings isolated impact on affordability. Neither locations have 0 laws so they are close to apples to apples and since we're just doing relative comparison I'd rather keep things data driven. Houston has deed restriction but that is a simple free-market/libertarian private contract solution. Does Japan ban deed restrictions? Both japan and houston have historical zones

I've linked these two jstore articles as well as a more digestible video.

https://www.jstor.org/stable/724839
https://www.jstor.org/stable/30238667
https://japanpropertycentral.com/real-estate-faq/building-re...
https://www.planetizen.com/news/2021/04/113144-watch-debunki...
> They publish the fact that you have to use their labels. Their refills use RFIDs for verification. Who is enraged, what are the details? It's a logical use of the tech. Why is this an issue unless they mistakenly ship a refill without an RFID tag?

The issue is that you shouldn't have to use their labels. When I buy something, it's mine, and if I want to try to print on some old faded receipts with it, I should be able to, even if the manufacturer disapproves.
The poor and middle class aren't currency holders, they are debtors. Their savings are dollar denominated, but so are their debts, and their debts exceed savings.

This is an incredibly basic, fundamental fact, and your omission of it in your analysis is telling.
You also "miss the opportunity" to engage in an endless, repetitive non-constructive back-and-forth which is much more common than a back-and-forth-of-personal-intellectual-growth. It's hard to believe notifications (rather than, say, deliberate personal interest and effort) would help drive the latter while we know for a fact they help generate a lot of the former.
I use https://git-secret.io for this. But it's not user friendly enough to be used for everyday web browsing and account access. I personally use it to store things like root passwords or reset tokens, which I very rarely access.
Thank you for the feedback! There was an issue with the timer component, which cause the whole page to re-render.
I fixed the problem, should be online in few minutes.
It's OK, this was me jumping on my usual soapbox, and not a direct response to your article (I should do better at staying on-thread-topic, in general).

In the venn diagram of source-code-related security properties, the fact that proprietary code can be secure and that FLOSS software can be insecure aren't controversial to me, so I think I'll tend to be aligned with your core arguments.

The pushback that I notice (or perceive? maybe they're different?) is that most large tech companies - regardless of background - seem stubbornly opposed to offering their products and services as FLOSS through-and-through, despite what I think are fairly apparent, technically sound, morally conscious and defensible arguments that the code for the products everyone relies on in life could and should be FLOSS.

But: I'll go away and read your post in a bit more depth before adding any further thoughts.
Ford Is Testing In-Car Sound Effects to Alert Drivers to Hazards Outside the Veh
USA M2 graph is on pace to double in 5 years, that's quite a bit different than the 30 year comparison you make with Japan. Real estate happens on the margins, very few people are selling homes as a percent of homes owned. When I look at Japan's chart there are effectively zero inflection points after 1990.
That's why I clarified "Bavarian", it's really very "hah" there instead of "häh".
I live in a former communist country where taxes are still higher than 1950s US were, and our housing system is as fucked as yours.

There are two problems... first is, that "back then" you could build (almost) whatever, wherever, and people built stuff, now with NIMBY-ism and regulations, you can't anymore.

The second problem (the larger one) is, that what was once a thing you bought, because you needed one, and sold, because you moved somewhere else, is now an investment... noone invests in cars, in pasta, nor in pretty much anything that degrades with time.... somehow the housing market got so bubbled up, that it's worth it to buy a house, and instead of prices going down as it ages, the prices actually go up. Limiting investments or limiting number of houses a person can own, would solve a lot of those problems.
What the hell is fan fiction private sector free speech? Also the rest of your comment - what??
> Prime Trust, a Nevada trust bank

From the little I can understand this is offering something like a "backbone" to new fintech companies via some API, definitely with some crypto-coin-related stuff, but also allowing "normal" money accounts:

https://www.primetrust.com/

The "about" page:

>What we do

>The one-stop shop for fintech innovation

>Prime Trust’s APIs and widgets power the world’s leading crypto exchanges, NFT creators, digital wallets, Alternative Trading Systems, RIA platforms, broker dealers, crowdfunding platforms, and neobanks.

though it is not clear (to me) how the actual custody works, from their help/FAQs:

https://support.primetrust.com/hc/en-us/articles/44102221908...

>Does Prime Trust offer $130m in FDIC insurance total or $250k in FDIC insurance per account?

>Prime Trust is not an FDIC-insured entity but does work with FDIC-insured banks only. To learn more about FDIC insurance, go to https://www.fdic.gov/resources/deposit-insurance/
??????

I have a Windows laptop from 2010 still working fine, and a lot of Linux enthusiasts also say the same thing. Six years is pathethic for laptop support. Fortunately Google has realised this, but their insistence on not applying this on existing machines is hypocritical.
Education department to erase $415M in student loan debt
There's no reason to think that, actually. Certainly not to think that it's responsible. You can pick from any of a large set of developed countries - Canada, the UK, much of Europe - they all had different monetary policies but punitive zoning rules and saw the same effects on housing prices.

The ones that stand out as having the most liberal zoning rules see the lowest increases in housing prices.
Show HN: Quickly build a booking page for your spare bedroom
i thought the conspiracy theory was there was a bank run caused by lack of faith in the banking system and then in order to stifle the run banks had some 'downtime' and 'networking' issues.
>Apple and Google do it, so MS will do it too.

None of iOS, macOS or Android require an online account.
I guess one of the solutions would be to allow custom store fronts with different editors policies. AppStore is not only reviewers and CDN to serve all the packages but also a lot of infra to validate and sanitize the applications as well. Multiple store fronts solution is not ideal but at least would resolve the problem which is described in the article.
Incorrect. ISPs should use NAT. Users should pay for their own address if they desire.
I think everyone is right there, to a degree. Ie yea, the government is at fault, but who is controlling the government here? etc

The solution is balance. I'm a capitalist, but unrestrained capitalism is difficult to impossible. Unrestricted government or capitalism will fail in both cases imo.
I think the episode 'now you see him' shows off what he does best. He basically breaks down each part of the murder and runs all of the permutations. In one segment he shows how the victim must have known the murderer because of the position of the body using that method. Only some make sense. Then finds the only suspects in the area that fit the profile of being able to do it. Motive, means, and opportunity. In that one he even had means and opportunity before motive.
You still haven't given a reason why they should be appreciating assets.
I think that was the show.

VERY surprising how many people talk to the cops and give them all sorts of information that the cops then disprove, stories that make no sense, or even hand them info / leads that leas right back to them so on.

I want to say maybe the folks in a Columbo episode wold be more likely to talk to a lawyer first / not talk but ... Martha Stewart talked herself into jail...
Ask HN: What if we do away with all taxes and impose only a Consumption Tax?
Well we wont let those same people buy booze or rent a car so we clearly don't think they are responsible enough to make those big decisions.

If we are already deciding what people under the age of 21 can do we should probably add giving someone a unforgivable loan that could put them in debt for life to that list.

Also I'd argue that googling for 30 seconds to determine your future career is just as stupid as taking a check and figuring it out as you go.
Amazing news, so happy to hear
Anyone who claims fact checking is the same thing as censorship has an agenda, and that agenda is to be able to disseminate non-factual information.

I don't think people who make these arguments should have their arguments given weight.
I'd imagine the threshold is a lot higher. Remember that Apple is in the end a hardware company and it makes sense to give up revenue/pay a fair bit for the legwork of their privacy marketing.
The core nuking thing I pulled out of my ass but I guess it sounds serious given a sufficiently fantastical context.

Doing a little more reading I came across the superconducting latitudinal "wrap the planet in a solenoid" thing, as well as magnets at L1 etc. I guess that's possible, but that's more of a 2000-years-out sort of set of ideas.

There's a philosophical debate to be had about how far out humans should be thinking when expending resources. If you build for tomorrow, you solve yesterday's problems. If you build for the next millenium, you solve nobody's problems.
i believe the issue is that audible is marketed as allowing returns at _any_ time in the future, which is a pretty extraordinary return policy that leads to more subscribers. but then the producer has to shoulder the costs of this incredibly lenient return policy.
Not the GP, but “April” isn’t in the word list.
Which valley are you going to drown? Hydro being pretty much at capacity...
> No state is incentivized to make zoning more lenient.

Why not? Wouldn't it encourage more people to move to the state and increase income tax / sales tax / property tax revenue?
Haskell reddit discussion:
https://www.reddit.com/r/haskell/comments/suinws/haskell_err...

and new issue in the Haskell Errors repo: https://github.com/haskell/error-messages/issues/42
Online accounts are not required for Windows Enterprise.
Corn ethanol no better–and probably worse–than burning gasoline, study says
>You are clearly biased and there's no possible way we can have a discussion. Enjoy your day.

Sorry you feel that way. Thanks, you enjoy your day as well.

Oh before you go, if you read the link I provided(section 46). The emergency act specifically disallows charter rights to be violated. So the accounts they have seized already? Under Section 6 of the Charter of unreasonable search and seizure? Ya the government will now be paying them compensation for violating their rights.
Team uncovers key brain mechanisms for organizing memories in time