skysight-inc/HackerNews huggingface dataset:
Seeing that the west just killed off payments in the Moscow metro, stopped security patches for Cisco networking equipment etc. etc. There is a bit of projection going on: We fear that Russia might do to us, what we just did to them.

But what is the end result of this? Any "potential enemy of the west" will have to do their own tech, and we will only use our own stuff. Sounds like a bad trade for us; instead of selling all this stuff we have already made for a nice buck, we now insists that everyone makes their own.
Most insurances expect you to have an AV installed.
That was true until the GDPR made it not true.
I've been using OpenHAB for a year. I can't recommend it.

It's complicated to understand and use.
It's resource intensive for what it's doing.
I've had all the configuration disappear on several occasions.
It's not uncommon for OpenHAB to hang. Nowadays a crontab reboots my machine every night to make OpenHAB "stable".

Since I don't touch it anymore and the daily reboots makes it stable enough, I haven't tried running Home Assistant yet. But if OpenHAB breaks one more time, I will switch to something else, that's for sure.
ime the primary reason to outsource is to get rid of the responsibility and the long-tail due-diligence that comes with it.
I'm anxious to see what the Steam Deck, one of the first popular, user accessible Linux computers, will do to the Linux landscape.

For ages now, Linux has been relatively virus free because let's be honest, Linux is either used by just a few nerds (who are often just a tad harder to trick than the tech illiterate) or by servers, for which entirely different classes of malware exists.

With effectively no antivirus protection, either because of a lack of options or because the outdated mantra that "you don't need it" because of some peculiarities that Apple used for years to deny the existence of macOS malware, Linux users are bound to run into viruses sooner rather than later. Hackers that are after Steam accounts will definitely try their hardest to infect Linux desktop users.

My best hope is that the way Linux distributions are woefully incompatible with each other will protect the hardcore Linux users somewhat from the viruses that will inevitably be spread across the "common" Linux environment. I'm sure we'll see Flatpak/Snap viruses down the line, but for a short while, we'll hopefully still have time to see where the Linux landscape is headed.
Actually it's not. Just add an exclusiun for C:/ - it still hogs some memory but the i/o drawbacks are gone. There is probably also a way to let it scan Downloads only but I didn't found it yet. In this configuration it still scans USB drives.
Yes, but you can build tens of millions of resistance heaters much faster than tens of millions of heat pumps. They're also trivial to install. I was trying to propose something possible, not something ideal.
The risk is very minimal or non-existent in the current situation though. Maybe once Google or Facebook is properly fined (with those 4% fines everyone was fear-mongering about) then you'll have to reevaluate, but given how it's gone so far I can't see that happening ever.
The same principal about foreign key relationships could be applied to messaging apps, restaurant booking services or anything else where a user's relationships with other entities/users would allow them to be identified.
>> I wouldn't be so adamant about cryptocurrencies crap if they would just do their thing and be quiet about it.

Why do people need to be quiet for you? There's plenty of media I don't want to read and I don't read it. I don't try to silence it because it upsets me.

>> everything ever built by that scene needs to somehow make or cost money in some form or another, and that's a telling sign for me.

Making money directly by creating or building something was the norm until we started paying for it with our data. Paying for things directly and compensating creators doesn't seem like a bad thing to me.

>> Also, most cryptocurrencies in fact do commit towards warming up the planet for no benefit at all. Don't know why you deny this.

I don't deny it but it's much more nuanced than that. As a society we do A LOT of unnecessary things which contribute to global warming and we don't get upset about them. Get off your computer. Stop watching TV. Stop using electricity. We could all get upset at each other or we could work towards solutions that solve the problem and allow us to maintain our current lifestyles with only minor modifications. The people screaming that crypto causes climate change are the same people who think the trees they're planting are the solution to it. In reality it's a much more complex problem that's going to be solved by the
people that are too busy working on the possible solutions to waste time screaming. It's not black and white.
Deepl is an amazing translation service. So much so, that i have seen sdveral peolle blindly writing into it...exposing all sorts of pii, both theirs and other persons.
I often wonder what happens to it.

And, tbh, being more circumspect, i haven't been bothered enough to try and find out.
> A lot of people got very lucky and very rich through crypto. They have so much ETH that can spend the equivalent of a persons expected lifetime earnings on a picture of a monkey.

The word “equivalent” is doing a lot of work here; because if what you purchased was the nominal “rights” to a URL that may or may not 404 at any moment, you haven’t done anything worthy of jealousy.

Also, at the risk of breaking the HN rules on allegations of astroturfing: the whole narrative of “regular joes got super rich off this” is as turfy as it gets. I’ve looked at wallet balances, I understand a handful of these people exist. But I’ve never met one, and I doubt you have either. Some people win the lottery, too; I’m not losing sleep over it.
For me it has. Killed it's own configuration on several occasions or just hung.
Podcasts for Bootstrappers and Indie Hackers
Does Windows Defeneder not count?
It's about what kind of competence is favored by the market - it favors people who can get funding, which is not necessarily related to the ability to get the job done.
Well not exactly turn key solution but you can do a lot with a self hosted elasticstack instance.

I guess you might be able to do interesting dashboards with grafana.
Seems like the crux of the argument here is in who gets to decide what's a smart municipal investment. I agree with you that sports is a dumb investment.
Nobody cares in Canada either. So "outside the USA" is wrong.
No, it's not a matter of «low-quality cheap»:

things that twenty, ten, five years ago were of high quality - same brand, update of same model - now you buy at a comparatively abysmal quality for a very similar price. It is today easy to find products which are cheap in manufacturing and expensive as a price tag.

This means that, in some way, people in some/many societies are tolerating quality degradation. And a decrease of alternatives is contributing. That, in some areas, it was once not necessary to spend time investigating which product was high or just decent quality (already the price could have been a good indicator), while now it is part of your task, shows that tolerance for low quality has increased. That is not for the 1 dollar item, but for whole range up to many figures.

And, a staggeringly increased inability to perceive degradation in general is evident today visiting some territories (and see what is tolerated now and was not before).
There's a lot of anti-antivirus sentiment in these comments, and while I, too, hate AV and have grown up with it being nothing but snake oil, I wonder if that's still correct in the current era of "zero trust".

I think we've learned that corporate firewalls and VPNs don't really work all that well. In other words, if you can't rely on a safe boundary to the outside world, how do you ensure individual corporate machines are not compromised? What about newer software like Crowdstrike?

What do the big tech companies like Google, Microsoft, Meta, etc do on their employees computers? Do none of them use antivirus?
You need not fear, for if you were an audiophile there is no way you could use Airpods.

Your perceived change in audio quality is more likely to be placebo in the justification of your own platform choices. Spotify high quality is certainly transparent on the equipment you use, as the drivers in those headphones are physically unable to provide enough detail to show any differences between that and lossless.
How about

when light_is_green {
go
} when light_is_red {
stop
} otherwise {
go_very_fast
}

:)
When I read "dazzle walks," I immediately thought of this: https://www.youtube.com/watch?v=eCLp7zodUiI

I'll get my coat...
Good work!

The only "correct" approach is telling Adobe that they need to provide native ports of their software or switching to other software. Regarding laptops, buy business laptops (Lenovo ThinkPad, Dell Developer Edition) or laptops made from vendors with a focus on Linux (Purism, System 76, Tuxedo) and stick with internals from AMD or Intel. So it boils down to knowing things before and giving the right companies your money. It worked somehow, Intel provided first good support, than AMD, Atheros and others followed. On the ugly side we have still ARM, Qualcomm (yep - now Atheros) and of course Nvidia.

Actually the "stickers" with the Windows logo from Microsoft are the proof that the hardware runs good enough with the pre-installed version of Windows. And that the manufacturer has spend 80 $/€ or more for this. Some person also name this stickers "tax labels", nasty persons "protection money". Not that I want to encourage the Linux Foundation...
Rescue: Type-safe exception support for Python
What determines the value for a domain? 18k for duderanch.com feels insane.
At around 6:30am all students and teachers gather in an open field facing the flag pole. Started when an opening prayer, then flag ceremony, and followed by 5 minute morning exercise. After that are some announcements from school head. And then everyone go back to their respective rooms.
I would say the following for NixOS (which is a distro itself not a way to make a distro):

- I have machine configurations that if say a HDD dies means I can just replace it and be pretty much where I was an hour later from scratch.

- I can update a configuration (even doing the equivalent of a major OS update) without fear as it's possible to just use the old configuration if something is broken.

For Nix in general:

- Can define versioned development environments which aren't awkwardly sandboxed as they are in Docker.

- It's possible to make multi language/ecosystem builds.

- Builds only build what needs building.

- You can build on one machine and ship the build to another as if that machine had built it.
Barcelona should fit well. If you want warm winters Madrid is not an option. You could take a look also to Valencia that has a Mediterranean climate and is a little warmer. Both have good beaches and lots of tourism. Barcelona has a metro so is a little less car centric maybe.

Lisbon is Atlantic climate and the sea is colder but should be also a competitive option. Barcelona is one of the 3 most expensive cities to live in Spain. Portugal should be more affordable probably.
It’s notable that all blockchain systems use cryptographic signatures to authenticate state transitions.

But how do cryptographic signatures protect you from surreptitious deletions?

On their own, they do not. They are a necessary, but insufficient part of the solution.
DevOps JavaScript – Intro to Writing Scripts with Zx
"I suppose it's kind of liberating to know that you can be dumb enough to fling patient data into an unprotected cloud server and still get a job in IT. The bar is really set that low."

On the other hand, I would argue that there are way too many footguns hidden everywhere, like the default binding of docker mentioned here. So yes, a highly skilled IT security professional knows them all, but they are rare. And I think it should be possible to set things up securely in a straight forward way, for people with their speciality in other areas, of which there are plenty.
I don't think that PragmaticPulp doubts that cheating happens. But "student tries to cheat on important exam" is barely local news, let alone global technology news.

The thing that got this to the front page of HN is the specific claim of a surgically implanted bluetooth earpiece. That is what PragmaticPulp is doubtful of.

Of course, if the claim was merely that the student was wearing a very small earpiece, such as [1], and that when told to hand it over he claimed it couldn't safely be removed? That would be much more plausible.

[1] https://www.amazon.co.uk/COOMAX-Invisible-Earpiece-Wireless-...
Typo: Github sponser
From the article its main focus vulnerability seems to be setups that don't use VPCs, which is default on AWS since long. It discusses human oversights like a server that needs to accept connections from other servers and where they then have opened a too large IP block. But this only makes sense if they were using internet IPs.. within a VPC this wouldn't matter.

With some even rudimentary knowledge of how IPV4 works this wouldn't be an issue on AWS, there are good defaults and tools to help avoiding this, no matter if you run Dockerized databases or bare metal dbs or use RDS.. you really have to explicitly open up your servers to end up open on the net..
TLDR;

* Indie Hackers

* No More Mondays

* Above Board

* Indie Bites

* Hammerstone - Bootstrapping a Software Company

* Growing Software

* Indie Bets

* Startup to Something

* Rework.fm

* Build your SaaS

* The Modest Product Podcast

* The Bootstrapped Founder

* Makers.dev

* Default Alive

* Software Social

* Getting to Ramen

* Startups for the Rest of Us

* FounderQuest

* Bootstrapped Digest

* Slow & Steady

* Product Journey

* Bootstrapping SaaS

* Startup to Last

* Pipeline Meeting

* Keep Going

* MegaMaker
Especially in Latin America, the diminutive is used much more widely than just to communicate "small" (noun), or "a little" (adjective). Perhaps "solito" here can be interpreted something like "quite a cowboy".
Destroying one's body laboring in the hope that one will achieve a life where that kind of labor is no longer needed before one's body is unable to continue doing that kind of labor is a task older than history. Women doing porn are just speedrunning it.
I always assumed going below absolute zero was undefined behaviour. I guess someone just needs to rewrite all of physics in Rust.
We’ve been trying to staff a 3x8 follow the sun model for over 6 months and have been unable to fill the roles in EU and especially APAC.

Pay more. It literally solves all recruitment problems.
> First, C# can be written in a way that stack allocates almost everything (much like Rust)

While it works (and game developers using Unity tend to use that A LOT to get decent performances), it's also an enormous pain in the ass because you lose most of the “modern” features of C#.
web3 is for the rich. can you get rich catering only to the wealthy? perhaps, if web3 also has a mechanism to perpetually tax the poor. something needs to keep trade flowing into their trade bloc. as it stands web3, if it were a country, would have. negative trade balance and no GPD (except for fees paid to miners and exchanges)
>> The word “equivalent” is doing a lot of work here; because if what you purchased was the nominal rights to a URL that may or may not 404 at any moment, you haven’t done anything worthy of jealousy.

Maybe I'm not explaining it clearly enough. The jealousy isn't that you've been rich enough to buy a picture of a monkey. It's that you have so much 'money' that you can spend it on something so stupid and not even care. And the fact that you've gotten that money by doing something so seemingly stupid and worthless in the first place. That's pretty infuriating for a lot of people.

I also didn't mention 'regular joes'.
Better Sentiment Analysis with Sentiment.ai
What’s wrong with spending time in airports?

I actually enjoying sitting at the McDonalds or a lounge with my laptop quietly working with similar if not more focus than in the office. My mind is calm and not stressed about missing flight.

Missing a flight means your mind now needs to figure out how to get on the next flight, which is actually time and mentally consuming.
Are these two the only people who study bias in the world?
This was the finding of the case Patrick Breyer vs Germany in 2016

https://www.whitecase.com/publications/alert/court-confirms-...

What makes a dynamic IP address personal data?

The CJEU decided that a dynamic IP address will be personal data in the hands of a website operator if:

there is another party (such as an ISP) that can link the dynamic IP address to the identity of an individual; and
the website operator has a "legal means" of obtaining access to the information held by the ISP in order to identify the individual.
On the facts, if the BRD has the legal power to compel the relevant ISP to disclose sufficient information to identify Mr Breyer, then Mr Breyer's IP address will be personal data in the hands of the BRD.

The CJEU also did not ask the specific question in that case - Were the BRD LIKELY to identify Mr Breyer? If this is something that you have never done before or will do in the future then it is not likely that you will try to identify someone by their IP.
Not my experience. I write C++ backend servers among the other things and use few 3rd party libraries. With CMake all builds like a piece of cake. I of course might not represent general state of affairs but this is my 2c anyways.
I use https://thumbnail.ws/ via curl.
Microsoft Apple Netflix Google Amazon and Meta.
The biggest benefit to being "virus free" (even though it's not), is the package management. On windows, most software installs, updates, etc., rely on you executing a random .exe file, downloaded from some random page online, while on linux, you trust the team of maintainers (who usually know what they're doing) to keep repositories relatively safe.

The same idea came for apple and google, and their software stores, but google mostly fucked it up by allowing a "flashlight app" to access your contacts and gps location, and apple fucked up by not allowing you to sideload a program at all, even when you know what you're doing and trust the software.
100%.

The web evolved constantly from birth and became more interactive over time.

I always hated that silly “web 2.0” branding.
I don't feel overwhelmed by popups asking me to grant permissions for push notifications. But I'm glad that both sites where I care for them, can push them.
Not unlike the silly algebra tricks that “prove 0==1” and other such, which some of us played with at school. We had a good maths teacher who joined in, reasoned & unreasoned a few of them, and pointed us to off-curriculum things we might want to read. A nice lesson on the joy of thinking and applying critical thinking.
> Unfortunately Google is not throwing its weight behind Bazel enough to overcome Bazel's significant up-front costs.

Nope. It’s unfortunate that Bazel is written in Java. There is no overcoming that. You have to have been isolated at Google for years to be blind to that.
Am I underestimating the volume of gas, or the energy density?
I don't know if this is what you're getting at, but Chelsea is in London.
Coke and potato chips are not at all inexpensive if you include the health costs.

They're pretty good examples of things that are cheap and don't work very well, if your goal is health and not distraction/entertainment.
People should recognize the business and engineering decisions of YouTube and understand that it's bad.
But this applies to any software that has auto-updates. Can we be sure that Microsoft/Google/Apple don't sign backdoor updates for the NSA for specific targets? As far as I know these national security orders are non-public and we don't even know if it's happening.

But Russia used Ukraine in the past as "playground" for cyber attacks: Some mandated tax software auto-update was hackend and delivered a ransomware trojan without any chance to pay i.e. pure data destruction.
> The underlying technology is valuable

Is it though? Valuable how? Has it been proven?

The core of the issue is that PoW is fundamentally a sort of algorithmic cancer that threatens to basically take over on the order of half of the worlds computational power to fuel worthless speculative trading. IMO there's an important argument to be had that trading on PoW blockchains should be outright banned. Yes, you can't get rid of it completely, but you can get the impact down to a manageable level.. like with cancers.

And yeah, then you have PoS and PoA blockchains. But it's yet to be proven that PoS provides the same level of security as PoW, and there's solid arguments that it never possibly could. PoA is fundamentally different from PoW and PoS, so you can argue whether it's even the same underlying thing. It's no longer truly decentralized. I think it could be very useful. It's just not as sexy and susceptible to fueling pyramid schemes, so it's less popular.

So to me it seems like we really don't know at all yet if the "underlying technology" is even providing a net positive value to society.

If the "underlying technology" here is trustless distributed blockchains (that is, PoA doesn't really apply), then I think there's an argument that the core of the idea is fundamentally broken. There is perhaps no such thing as a truly trustless system (for PoW/PoS blockchain, you're just converging on concentrating de-facto trust with a small clique of trading platforms and mining/wallet app developers), so maybe it's better to just be more explicit about where we're placing our trust (through solid cryptography if we can) and to make sure that those entities are democratic institutions worthy of our trust. But this quickly becomes a very deep and philosophical argument, so it's outside the scope of this comment.

I support further research and development into blockchain-related technology, I certainly think it could be truly valuable. But it's yet to be proven IMO.
Maybe not quite what your looking for, but I found reading Simone Veil's writing on spirituality gave me a bit more ability to rationalize why other people might need it.
>Perhaps I got exceptionally lucky this week, but overall, it was enthralling, and I’m glad I volunteered.

You were very very lucky. Most of my on-call stuff has been constantly the same issues again and again. I have stopped caring. Server A for Customer B fails updating because customer B refuses to pay for extra disk space, time and time again. Corporate president C cannot email because the idiot does not respect maintenance windows he himself agreed upon. Refuses to pay for more server resources though...
At least you didn’t blow it all on likes as I did.
And this was one of the many reasons why neither Safari nor Firefox implemented <dialog>. It was only implemented in Chrome.

In 2018 Domenic Denicola mentioned that it's possible dialog should be fully removed as there's no interest in implementing it: https://github.com/whatwg/html/pull/4184#issuecomment-440405...

Fast forward to 2021, and Chrome breaks the web by removing built-in alert/prompt/confirm dialogs: https://dev.to/richharris/stay-alert-d Now the same very people, including Domenic, were arguing that alert is bad for security, bad for the Javascript engine etc. It looks like browser implementors agreed to remove those from all three browsers. Chrome was just the first.

And yet there's literally no replacement for those.

Skip to Safari 15, and we're suddenly getting <dialog> even though:

- Safari (and Mozilla) have been opposed to the current state of the spec for 10 years now

- Safari (and Mozilla) have had no interest in implementing this element as it's currently specced

- None of the decade-long issues with dialog have been fixed, including these accessibility issues

So something tells me it's there only because of the planned removal of the built-in alert/confirm/prompt, and not for any other reason.