skysight-inc/HackerNews huggingface dataset:
An ingress packet will end up mapped to a process by the OS, so it should be feasible to extend a network rule to include the process based information:

Example Rule: allow process "squid" with shasum "1a2b3d4" running as user "squidy" to receive packets via "TCP" port "3138"

> How can the wanted functionality not be implemented by applying filters to the port bound by the process?

A port filter is dumb in a sense, anything can be underneath. It's fine for something like a web server, run by root, on a couple of consistent ports, running all the time. Process based rules might be more useful for services with dynamic port ranges or real people running random things.

Your questions concept may be the easiest way around the issue in Linux world. It could be easier to have BPF monitor process start/stop and port open/close changes and modify the allowed ingress to suit the process based ruleset than it is to attempt the lookup purely on the inbound path. Due to the multi process listening feature, the connection > process mapping info may only be available after it's happened which might not be the best point to firewall something.
Well, it’s easier to steal custodial digital asset accounts...

It’s harder to steal properly secured non-custodial cryptocurrency/asset wallets.

e.x. multisig or Shamir’s Secret Sharing, brainwallets or passphrase encrypted wallets, etc
> Russia is also a European democracy. Surprise

Nasty surprises seem to happen to people who credibly oppose Putin. Without free press and free speech, elections don't mean much.
In the US, public agencies are typically required to accept cash in any denomination. This occasionally makes the national media when a disgruntled citizen decides to pay their substantial tax or fee in bucketloads of pennies ($0.01). Private organizations, however, are not required to do so.[0]

[0]https://www.treasury.gov/resource-center/faqs/Currency/Pages...
Regulated is probably the most misunderstood term there. It did not mean the same as it does today.
Docker healthchecks don't actually do anything besides status reporting AFAIK.
Coinbase's Bug
After reading a blog post like this it's hard to think that Tesla is anything less than 8 years behind Waymo.
This is simply not true. Not only is cashless not at all more convenient than cash for minor purchases, and not only are 10% of the US population unbanked, but in addition the access of third parties to purchase records just alarms people.

In my circles, I often see people withdrawing out pocket money on a regular basis for small purchases, and using cash for large peer-to-peer purchases that they're unsure of the tax implications of. Cashless is largely reserved for restaurants and grocery stores.

With government reporting regulations hitting paypal and other fake banks, I bet this pattern will become more widespread. Just let somebody have to fill out an extra form on their taxes because of excessive bill-splitting; they'll change their habits instantly.
Hi there, not sure how you did your price comparison, but typically with native compression, performance improvements, continuous aggregates, etc, you can go much further with the same resources on Timescale Cloud than Cloud SQL (or any other generic PostgreSQL provider). Did your math take those performance improvements into account?
What do companies near the border do? If you are a small firm in NYC I can’t imagine it being unusual to employ people from NJ and Connecticut ad well as NY, and even further afield like PA. in Baltimore I can see you could have commuters from both virginias, Maryland, Delaware, Phillidelphoa, New Jersey and DC.
SPAs were a mistake
I think it’s about as close to a local maxima as any software product I’ve ever used.
> The article leads with drawing a distinction between pop news and more traditional journalism:

Sure, but I don't think it goes on to justify why that distinction is there. Particularly points 2 to 5 seem to work just as well as criticism of written media as TV.

> If you're informed you can make rational decisions on things like giving and voting...I'm not convinced there's a better way of getting an understanding of what's going on in the world than reading a well-curated digest of what's going on in the world.

I used to work a lot on politics at the local level and can't say that's been my experience. Much of the time, the things people's votes have the most impact on are barely covered in the media, or in many cases not covered at all. Including fairly important things, such as when our state party leadership suspended elections for two years and staying on past their terms. Almost zero news coverage.

If you want to be informed and involved in ways that actually impact those around you, I'd say involvement in community organizations is important, reading the news not so much. As his fifth point says, it's easy to pretend you're being an informed citizen by indulging in a media habit when you're doing nothing of the sort.

Another issue is that everyone can see how new organizations they don't like can leave people misinformed, but never consider that news organizations they like can do the same. Again, from what I've seen, misinformation is fairly common. It's not even necessarily done for nefarious purposes. A busy reporter might just have time to look at a press release, while local organizations will have people that often go into much more depth and look at the actual meeting minutes or the exact wording of particular pieces of legislation.

People should think of concrete things they're trying to accomplish, not just vague notions of "being informed." I bet that someone who ignores the news and spends an hour looking at Vote411 and reading about candidates on the web before they fill out a ballot is going to make more informed voting decisions than a news junkie who follows national and international news 24/7, already knows who they're going to vote for at the national level, and completely ignores downballot races (a surprisingly large portion of voters fit this description).
From past HN threads, but otherwise knowing nothing, my impression is they probably think it will keep the temperature down, relatively speaking, which mitigates things?

Earlier in the article, it says "the facility’s fire suppression system was activated and had successfully cooled the batteries when his team arrived on the scene "to the point that there wasn't any flame or fire."
I never use my personal gmail account for anything work related. For 2FA I always use my phone.

But I agree that there might be situations where it could be bad, especially if you work as a consultant/freelancer, and/or own a small business.
Bitwarden Encrypts Your Data
I think it's often better to "pick your poison" in terms of cloud providers and commit to it, with a rough migration plan that you can execute if you have to. There'll be common patterns in your systems that can be repeated if a large-scale lift-and-shift has to happen for some reason. But it's never easy, and I've found different clouds to have their own idiosyncrasies that make migration difficult - larger migrations will inevitably take time, effort, and lots of planning.

If you're looking for alternatives, or something lighter weight than Kubernetes, I've used Nomad (plus Terraform and Ansible) and some shell scripts to get repeatable clusters deployed and migrated between cloud providers: https://www.nomadproject.io/
English also has the phrase "the exception proves the rule" - and it's just swell when our general code handles special cases.

I would have not have thought an unreachable host was exceptional, given that it's quite normal.
> Stop conflating anti-vaxx with anti-mandate.

I didn’t at first but the majority of “anti mandate” folk I run into then start slipping things into the conversation like “the vaccines don’t even work” which makes me think the anti mandate movement is just anti vaxxers with a mask on.(pun not intended)

I also happen to think being legitimately anti mandate is an incorrect idea about how covid and viruses spread as we’ve seen leaving it up to people to decide means they just make our hospital networks break down.

It’s pretty much a distinction without a difference to me when looking at anti vaxxers, anti maskers, or anti mandate groups
> The US has 6 border disputes with Canada ongoing.

For those interested in the details, Wikipedia lists 5 current disputes[0], almost entirely relating to maritime borders, with some uninhabited islands being the only land in dispute.

[0] https://en.wikipedia.org/wiki/List_of_areas_disputed_by_Cana...
Unfortunately, that is how populism works. One person can do that.
This is very well put. The only acceptable protests seem to be those which are toothless. Somehow these people found an asymmetric cost situation and now the laws will be updated to take account of this edge case.
The laws always have carve-outs for national security. What if the orders to deny you banking or travel or communications that come prior to a trial come from the state itself?

Laws can't fix this.
> Carrying cash is exactly how you lose it all to police corruption, sometimes called civil asset forfeiture.

If you have police seizing assets for bad reasons, allowing them to automate the process is going to make things worse, not better.

Not to mention that accounts can also be locked (at least temporarily) via software bugs, overzealous security processes and identity theft, all of which happen all the time. Cashless society is a horrible idea on so many separate levels I'm not even sure why this debate is happening.

It's not like having cash prevents you from also having a bank account and cards. No, we're debating something that's a pure reduction of personal choice.
Sleep and hibernate are about persisting state and not about boot time. I don't want to spend time reopening everything and setting everything up when I come back to my computer. I just want to continue where I left off.
??? I absolutely love the touchpad on the Framework. I think people got spoiled by Macbook touchpads- no, and I mean NO, Linux/Windows laptops out there have a comparable touchpad to the Macbook. What the Framework has is good for what's available. Honestly I don't mind tap-to-click vs. press-to-click.

I can agree that the speakers aren't stellar but that's something I don't care about on a laptop since I always have on headphones or I'm just using the speakers for video conferencing or something. Never experienced any background static when using headphones.
There are plenty of distributed relational columnstores that can do joins. Timescale is bringing that to Postgres but you already have options from Clickhouse to Redshift.
I care barely drive to a bank within 10 minutes, which isn't the bank I have an account with. It's only open during my work hours (9-5pm M-F), or I have to go on a Saturday. The wait time to see a clerk alone are often 10 minutes or more. And the clerk can't help me make certain payments that require me to use a web portal or mail a cheque.

> The idea that cash is this hilariously inconvenient thing is a complete fabrication.

That's a strong statement without considering that your experience might not match others'.
The share functionality was actually taken from a twitter user who started posting her results in that format. It's a very clever way to show your journey without spoiling the results, and almost certainly had a big impact on the virality of the game.
> If wind and solar play a larger role in the energy mix

The whole point of this debate was that fusion will not unleash a new era of unlimited cheap energy. My argument is that not only will it not, it can not. Will we have more energy available to us than before? Certainly. But all it will do is push us closer to fundamental thermodynamic limits of the Earth's ability to radiate excess heat into space.

Replacing 18.5TW of current power generation with 185TW (10x!) of fusion capacity will already start putting us frighteningly close to those limits. 10x on top of what we have today sounds like a lot, but nearly 90% of the global population today lives in poverty. Bringing them up to a developed-world standard of living will likely eat up well over 100% of that additional budget. Can we augment that with solar? Certainly! But this is hardly "unlimited" energy. A 10-fold increase in energy output will buy us maybe 150 more years of growth.

You may not be happy with it it, but this is the graph of Earth's equilibrium temperature given a consistent 2.3% annual increase in (non-solar) power generation:

https://dothemath.ucsd.edu/wp-content/uploads/2011/07/tmp.pn...

I encourage you to run the numbers yourself. They are correct. And this is treating the Earth as a perfect blackbody which it is not. These numbers are worse when you consider greenhouse gases, even if we manage to somehow go back to pre-industrial levels of carbon in our atmosphere.
Is this in place of an external web application firewall tool? Or maybe in addition to? Just interested in the trade offs between the two approaches.
Lets not conflate "take" and "freeze". There's already enough confusion on that.

Also freezing of your funds can benefit you -- if the bank notices suspicious withdrawals they will freeze your account to prevent you from being cleaned out.

It's never okay to take someone's money/property without any court decision (and that should include civil forfeiture). But freezing shouldn't necessarily be lumped into that because it has valid usages. There just needs to be proper regulations and consequences.
> Trivial solution: I walk to bank some day once a month, give them cash, give them account numbers, sent. It'd be done in all of ten minutes.

I've never heard of any bank offering that service.

> no-one is saying that literally every transaction has to be done in cash, just that it should be _possible_ to do so.

Agreed. But it should also be recognized that there are many people who have good reasons to use payment methods other than cash in many situations.

> The idea that cash is this hilariously inconvenient thing is a complete fabrication

No one is claiming that cash is always inconvenient. Just that for many people in many situations, it is.

> You're talking about moving small physical things

If I have to go pay my bills in person, I have to move me, not just some pieces of paper. And if I pay my bills electronically while I'm sitting at my desk at home, I don't have to move anything at all.
> how to define what "an acceptable level" means

Build yourself a threat model. It's only you that can decide this.
This made me lose confidence in our government and in our banking institutions.

I would like to protect our constitutional rights, but I feel that Canada is too far gone.

Our prime minister called the protesters racists, declare emergency act, froze bank accounts of people who donated.

I am thinking about moving out.
Ah, got it. I get that. With Docker I just put things in their own Docker network and don’t think about it, and use the built-in dns. Docker’s default network doesn’t have DNS for “backwards compatibility reasons” so you have to create one that has it (this is what Docker Compose does). You can also share network interfaces in Docker (like a k8s pod) which is what I think you’re referring to (and maybe where _pod_man gets it’s name).
Node.js – v17.6.0
Sure, that's just config work that might not be straightforward. I personally undertake that kind of config work, but I can understand that others don't want to.

So I was thinking perhaps a subdomain would be a good way to divide it such that you could use @foo.example.com for accounts, but then host your main @example.com with some professional provider. Especially if that commercial provider wants to charge you per-address etc, and you can do catchall aliasing on the subdomain to tag email by sender. I like seeing who's sold/leaked my address this way.
> 1. The person made a donation to the Freedom Convoy.

> 2. Trudeau signed the Emergencies Act, giving rather broad power to freeze bank accounts without due process or clear recourse

The Emergencies Act is not retroactive. If this was the order of operations then their account was not locked because of the EA.
Nginx config seems like a bottomless pit. It gives me the painful feeling that no matter what I have done with it, there's some security or performance issue still there.

Does this mean I should just stick with a more managed solution? Or is this a common feeling that I should just learn to live with? For my fun projects I use Caddy with mostly default settings.
Not to mention chip factories.
This is not true at all unless you're only referring to commodity applications. There's no preexisting model for general regression or seq to seq, for instance. You can say, oh, that's a good fit for an LSTM, but you still need to tune the individual layers to suit the application. Although I am slightly conflating ML and DL, since you mention training which heavily implies DL.
How are there so many comments that don't seem to understand you can have both. YOU can keep using cards for literally everything. Cash just need to exist and businesses should be forced to take it. That doesn't mean YOU have to use cash. YOU can live happily without it and use cards but the less well off should still have the right to use cash. But just because they may sometimes use cash that doesn't mean that YOU will be forced to carry cash. If cash exists that doesn't mean you have to use it. Why does it need to go into a permanent record that I gave my friend $10? Just to reiterate one last time... you can keep ignoring cash and live happily even if cash is around.
This reminds me of the popular-in-the-early-Aughts RSS-based site Freshnews. Which still exists:

https://www.freshnews.org/

Pulls from 33 sites, including HN, leading with Slashdot, CNET, Pinboard, Reddit, Gizmodo, Linux Today, Github trending, Engadget, and Yahoo technology news. User-customisable if you want AFAIR.
I never said whether I agree or disagree that bias exists or where it was, bias exists in all human institutions. Part of modern, respectable journalism is the active task of acknowledging it, even.

What I asked were for some concrete examples. Whenever the discussion comes up on bias at NPR (in particular) people tend to hand wave around "subtle, but fairly clear centre left bias."

In my opinion there is a bias, which I would call "radical centrism" (the Sisyphean task of trying to recognize bias and attempt to curtail it), and I could point to few in the past week as a regular listener, but whenever I hear "NPR has a liberal bias" I can't get anyone to give me concrete examples. It's taken as fact.

My overwhelming interpretation of the national NPR broadcasts are two part :

Firstly, the majority of it are human interest stories. They do not devote a majority of their air time to politics. I don't see how the Moth, Fresh Air, This American Life, or the handful of local shows I listen to regularly about local news stories trends anywhere but whichever direction is compelling to a listener.

And secondly, an opinion that I don't like articulating on HN or anywhere that might ruffle feathers is that facts have a liberal bias. You can argue until the cows come up about the role of government in society, but the cardinal direction of "reality" on the political compass is <- that way.
I'm also curious why people are so keen on needing a device to be powered on and ready to go within a second or two.

On my Framework (running Windows) I have it set up to hibernate when the lid closes to preserve battery. It takes about 10 seconds to get back into the desktop when I open the lid again. It's not like I'm opening/closing the lid dozens of times a day; I open it, work for a few hours, then close it. It's not like a phone where I power it on for a few seconds every hour or so to check notifications.
Linux laptop battery life issues are a constant, right? This has been a problem across laptop brands, across Linux distros, across many, many kernel versions. I just want to temper anyone's false expectations that they can just update from a 1-year-old kernel to one released last week and it'll fix these long-existing issues.
The OP does a terrific job detailing the simple beauty of Wordle.

Is it OK if we like it more because it was born out of love?:
‘Wordle is a love story’
https://www.nytimes.com/2022/01/03/technology/wordle-word-ga...

And in the space of a month went from ‘introduced in NY Times’ to ‘bought by NY Times’?

‘The New York Times Buys Wordle’
https://www.nytimes.com/2022/01/31/business/media/new-york-t...

In many ways, I think this is the perfected ideal of what engineer-creators hope for.

The intense focus on making something that feels magical for one - even better that that one is magical to you.

Sharing the creation with a few friends and having them experience the magic too.

And having the world recognize, and then pay $ millions, for your creation done in the name of love.

No years lost in the lab, no fighting with corporate suits to keep ads out, no long marches of ‘growth’ tactics that feel icky.

It is the Romantic Ideal of Engineering.

Does any other story come close?
All were less than $250M, all were US companies being sold to US-headquartered companies.
> It also brings players back into the game, but not in an annoying way like Farmville Facebook notifications.

As someone who doesn't play, it's getting more and more annoying. Especially now that there's stuff like Wordle Except It's Four Games At Once demanding space on my social timelines.
The Mound reeks of the kind of bizarre projects that are usually accompanied by significant graft. I have a feeling that somewhere in the WCC there's a person who was planning on getting kickbacks from the construction or demolition company or some such nonsense.
I've not been able to get my credit report because of something incorrect in my credit report that they were asking me to verify...
Thanks for asking, but it's not going well at all. I dumped US$250 into Facebook ads targeting Business Page owners and didn't get a single customer.

Neat trick, but it's a tough market to crack.

Fortunately, I have other side projects that need attention. :)

Next up is Headlamp. It's a Chrome plugin for web test UI coverage & test team monitoring/coordination. It's been offline and broken for years:

http://goldcreekgroup.com/headlamp/
Just because a business has to accept cash, does not mean every transaction must be cash.
The comment I responded to was directly advocating having different laws for self driving cars, or at least I took it that way:

> Sure human operators need to stop every time, look both ways, proceed cautiously. Makes sense. But a car with sensors operating 24x7, never getting tired or taking an intersection for granted? The rules can be different. Should be different.
FiDi's residential population is about 60k now, which is triple what it was in the early 2000s (and probably around double what it was around OWS). Notably the US census includes Battery Park City in FiDi, which significantly skews the numbers versus the business streets (where the protest was).

By contrast, most of the residential neighborhoods in Manhattan easily clear 100k people, and are not as segregated in terms of business and residential streets.
nginx config increasingly feels like a bunch of foot guns waiting to go off for me.

For smaller projects, I've really enjoyed Caddy's "best practice by default" approach to webserver/loadbalancer config where you can generally only choose to remove best practices, not try to build them up from scratch. Has SSL and LetsEncrypt enabled by default, etc. This avoids a lot of the pitfalls of incorrect webserver config altogether, keeps the configuration file really small and easy to read. I wish this style of config was more common.

> https://caddyserver.com
I'd be surprised if that were the norm in most places in the US. I have a $20 bill stuck in my wallet--which I carry mostly as a backup in case something goes wonky with my phone--but I mostly don't carry cash except on trips and I expect I'm more careful than many.