skysight-inc/HackerNews huggingface dataset:
It solves partly managing authorized_keys files. If you have a team separate keys can be difficult to manage. Shared keys are even worse. Certs can help with this if you properly manage the cert signing server (like hashicorp vault). All of that is currently free and open source. Also can now have short expiry times if desired.
Twitter Bot To Monitor Stock Trades Made by U.S. Lawmakers
I love the idea of compensation being decoupled from your level and tied directly to impact, and I also love levels being opaque (as if they're more of an administrative requirement). I wonder if there are IC5s that make more than IC10s for example.
Having a spouse and a family is super sweet. Constant emotional support and social fulfillment. An endless stream of small sweet positive moments. The ever-growing feeling of satisfaction that comes with watching your children grow, mature, and succeed. The pride that comes with improving and being a good parent or a good spouse. Having someone who is there for you and has your back 100%.

I'm not saying being single, childless, nomadic, or any other kind of lifestyle isn't also sweet too, or that marriage and parenthood is for everyone, but don't let a few negative comments from one person's anecdote be your definition of parenthood or marriage. When done well, they are two of the most fulfilling and rewarding endeavors you can embark on.

You also can definitely have meals with other people as you like lol.
I'm so glad to hear these stories finally surfacing. I had a one-year-old and a pregnant wife when lockdowns started. It was absolutely brutal, as we both had full-time jobs, and obviously there was absolutely nowhere to go or no-one to turn to for help. It has most definitely coloured my opinions of the usefulness of lockdowns. One of the most dismaying long-term effects of what parents have been made to go through is what I consider the abrupt decline in acceptable parenting techniques - how many young kids have now been deliberately stuffed in front of a TV or given a tablet to keep them quiet, while parents try to hold down jobs? Part of what made our lives so hard was my refusal to do such things.
Real Time Facial Animations for Roblox Avatars
That's not what I said.

I mentioned that one of the solution to stop a specific job is to pick a different line of work, and that even if worse comes to worse, the jump away from work is not that risky because you can come back.

But I also mentioned a lot of alternatives, including charity and government benefits, which are enough in most western countries to not starve.
There's an irony in the breathless "built his very own x-ray machine" slant - x-rays are literally Victorian technology. Not for the reckless or uninitiated I suppose, but I remember books showing how to make x-ray devices from the wrong vacuum tubes and spark coils and such. Probably by Alfred Morgan but I can't find the reference now. Don't try any of this today, only bad things will happen, right?

To quote the more contemporary source below "Any person who regularly works with any combination of high voltage and vacuum should maintain a dosimetry program."

http://www.belljar.net/xray.htm

http://www.all-science-fair-projects.com/science_fair_projec...
Walk us through this line of thinking.
Is this the source code of Infogami, https://github.com/infogami/infogami?
Alphabet seems to be migrating as much as possible from Google to YouTube or Android brands.

Seems doubtful "Google TV" will last long, probably dropped once they discontinue and phase out Chromecast and legacy TV integrations. Looks like they just canceled Chromecast Audio a week back. Saw it coming with Play Music -> YouTube Music.

I could see the "Android Store" coming, with the Play sub-brand now deprecated. They just re-branded Android Auto. How long until "Android Maps"?

"Google" appears to be going back to being just a bunch of SERPs, probably with more emphasis on shopping.
SnapKit is a huge framework with lots of functionality. One key part for the browser integration module (SnapTea) is TeaVM https://github.com/konsoletyper/teavm

TeaVM converts Java code to run in the browser. It provides the ability to call JS functions to access browser features like canvas and XHR. However, unless you want to be coding like Vanilla JS, you'll want a framework on top. SnapKit provides that.
Saying something absurd isn’t automatically a joke that I am expected to get. This is humor on the same level as typing the N word in all caps or just lying. It’s not funny, it’s not clever.
You aren't really paying for computing power and storage - you are paying for power/network/facility/server redundancy and availability.

We host out own servers, and the bulk of the time is ensuring that the power doesn't go out, that there is a backup internet connection, that the HDs are on RAID, that the server has a backup server available (and the router, and the switch, and the NICs), and that the management network is available, and that the location has proper security monitoring, and that the offsite backup happens nightly, and that we have an employee that knows how to do all of the above... All of that is time consuming and expensive.

...BUT, some people/some companies actually enjoy that sort of thing, in which case, it can work out financially - though often you're sacrificing one of the 9's in your 99.99% uptime/reliability.
Is there something wrong with installing client public keys in the server and preventing password based logins?

Seems more secure than handing over the security of your servers to a CA?

Managing the authenticated_keys file is trivial and I like simple file based solutions.

I find simpler is often more secure because its easier to understand.

I have had plenty of ssh servers on the Internet even, (on non-22 ports to prevent logs filling) and not had a problem yet AFAIK.

I have also been on call when certs expired gawd knows how many times.
Well, there was this in my post > "I eventually found help through a few different paths."

So thanks anyway but I don't need any help, especially brainwashing. My mind is too analytical to respond to it anyway ;)
Well, can you point to any big tech company or otherwise tech industry segment that actually practices “libertarian“ principles?

Because to me it seems they have been authoritarian left for at least the past ten years.

The model seems to be come up in an unregulated market, take advantage of it to build a monopoly, desire regulation or actively influence politics to keep small competitors out.

Well some of the people who started these companies may have originally talked about libertarian themes, I’m not seeing it.
Neat.

...how do I get the button into the "idle, down" state? (i.e. how do you press a button without first hovering over it? I tried with [Tab] and spacebar to activate it, but that didn't do anything).

------

I'm thinking this page could likely be reimplemented without any JavaScript, using only CSS' interaction state pseudo-classes (`:active, :hover, :focus`, etc) as proxies for the button's state (with the sibling `~` selector to control the state-diagram image). Hmm, though the "held outside" state might be difficult (perhaps `body:hover button:not(:hover):active ~ #stateImage` would work for that?).
In that case, targeting only Russians is sub-optimal, They could as well have targeted everybody, it would have had more impact. There's no reason to target Russia inhabitants in particular, who, I would guess, are mostly against the war.
You still need your own private key plus the certificate.

I have n clients, m servers.

On clients, i sign the lokal keypair with the CA key and log-in via certificate. The client-side certificate basically replaces the line in the server-side authorized_keys. The editing stays locally.

On servers, i register the CA key as "Certificates signed by this keypair are trustable", the authorized_keys file stays empty. No further editing required.

During normal daywork, the CA key sits unused and can be shut away.

Key Advantage: I don't need to edit anything on the countless servers anymore.
Scalable and secure access with SSH @FB
https://news.ycombinator.com/item?id=12482212
Essentially all* USB C cables have microcontrollers in them to negotiate power delivery and what protocols are supported.

* it’s possible to have a USB C cable that’s really entirely passive, but in that case it falls back to USB 2 speed and the default USB power, as if it had a Type A connector on it.
This isn't so much of a protest as much as an nonviolent indiscriminate vigilante terrorist attack.

> The intent is to disrupt.

Presumably the intent is to help Ukraine. People need to stop and think about how their disruptive "protest" is actually going to help their cause rather than blindly chase awareness.
What about Californians throwing Molotov at your house?

My point is analogy is not a valid tool of criticism when talking about policies, because their inputs and outcomes are not simple bool -> bool functions.

Would you be satisfied with 1000000 years on average as the answer?
Why is everyone ok with logs being dumped like it's in a trash can?

I see partial structures and then JSON string as is and then some long blob of string no one can understand what it is with no new lines.

What devs want are pretty simple, structured log with table layout without repeating the column names on every row to make it look insanely verbose for any human to consume.

I'm picking up bits of open source apps to build a decent solution with Vector (which has awesome Vector remap language to parse strings into structured data if it isn't already) and throw it into ClickHouse to view it from Metabase.

Apparently, Kibana, Graylog or even Grafana are pretty bad at displaying logs to even feel tiny comfortable reading it every day.

Logging is such a crucial part of developer life and not sure why that there aren't any sane open source solutions.
Not an applet at all! Apps are easily compiled to JS, including needed runtime, so it’s running native. And only 1MB compressed.
If anything algorithms that drive engagement are mutually exclusive with what people want to see. Most people don’t usually engage with anything but the odds are a lot higher for someone to reply etc out of anger or disgust than anything else.
You don't have to think of addiction as a moral failing when you treat it as a behavioral problem. There's not necessarily a genetic or chemical cause or cure - in the end, addiction is a behavior.
> Being silent about shitty behavior is the same as condoning it, don't you know? Just because you don't like the playbook doesn't mean it doesn't work.

my point is that it doesn't matter. Condemn or not, regardless you can still fork earlier versions. Materially, it's not a threat to you.

> Considering that the developer just pulled a "no russians" stand with their software...

Yeah and look at how much shit they're catching for it. People are forking and freezing earlier versions, he's getting raked through the coals, etc. Is this really the outcome conservatives are afraid of?
I agree, I also gave it a shake and I could not grok it easily.
If you watched the video, I'll have to be the one asking you — why do you think looking up somebody from your comments section, making them sign agreements under a false pretence and setting up an interview, and then making fun of this individual talking about how "embarassing" he is in your videos is not immature? I won't even begin talking about brigading against somebody when you have a vast user base. Content creators have some unwritten responsibilities and such acts are uncommon because they usually do not fall into these things trying to make "a point".
Well that's fair enough, but I take issue more with the title of the post telling me I do "ssh wrong", because I can't be bothered to setup a CA and fuck around with certificates.

To me, setting up a CA is more effort than I would like.
Oh man, don't lure me into this political flamewars, esp. the most vicious of all the Palestinian-Israeli conflict.
MFA for ssh means you can't automate cluster-level ops. Unless, well, you automate the MFA, which defeats the MFA.

This drives me a bit nuts about security people in the age of cloudscale. They assume you don't mind MFA'ing every hour and are manually doing logins and accesses for everything. Yeah, uh, I need to script orchestration on several hundred machines at once, and orchestrate/access on the scale of hours or even days for some things like "Big Data" backups or restores.

If certificates are anything like SSL certs and the horrorshow cli tools / options / management involved in those, no thanks. I'd rather have an automated sshkey switchover, or for stateless just routinely cycle the infrastructure with new keys.

It's been a long time tenet of security that you want an open algorithm that gets broadly and publicly challenged so you know its secure. Well, in the age of the state actors, this might not be the whole truth.

I think layering some klugy not-invented-here obfuscation atop the more battletested methods is a useful and important deterrent/delay. Sure someone will figure it out, but they have to TRY HARD. A lot of the institutional attacks seem to be based on human attacks on standardized systems, which HAVE to allow human access and vectors.

So in AWS land, secrets manager is secure unless you get the permissions. Then you have everything. But if each of those secrets has some whacko obfuscation for the various apps, then that is a big slowdown to the human attack vectors.

And the state actors? Well, even they have budgets. They'll probably move on to easier targets. If a state actor is motivated at targeting your company in particular, well, given that they'll have malware in the firmware of your hard drives and motherboards and the like, you're probably helpless.

Finally, what really bothers me about most security is that it leaves one of the most important "canaries in the coal mines" aspects of security: honeypots. Sure do the diligence on securing the access, but how about some turnkey approaches for setting up honeypots to detect when people are poking around? Honeypots are perfect for that, because the devs only care about the stuff they are working on. The intruders are doing the scanning.
You can get something similar via method chaining: x.something().somethingElse().anotherThing()

C# extension methods aren't the perfect solution for this, but I love that they exist to at least make chaining possible without needing to modify the class that I'm applying the function to. D has an even better version of this called UFCS which makes it so `Bar something(Foo f)` can either be called as `something(x)` or `x.something()` without needing any special annotations like C# requires.
If you don't get the difference between a dedicated adult site, with adult content, and a general public platform I see why you don't see the point.
I think the identity of "recovering alcoholic" is quite harmful.

One of the things we've learned is that success with behavior changes happen when you normalize them. If someone is a "survivor of X" as their identity, X is still kind of controlling them. They are still defined in relation to that X. They are "James the rape survivor" and not "James the talented craftsman".
Ah, interesting. I hadn’t considered IRC at all, I’ll have to explore this.

Thanks for the suggestion!
Why did you reply in Lichtensteinian or whatever this is?
sweet rollercoaster isn't it
Uber costs as much as a cab in Toronto at least. Has been the case for about a year, maybe a bit longer. Guess the Saudi + Softbank money ran out and investors want to see some profitability.

"Disruption" is increasingly nothing more than VC-subsidized predatory pricing and regulatory arbitrage.
> In the tech world we are screaming about how the people in that region are getting inconvenienced by the free tools we provide because we are supposed to be above "politics"

It isn't about being above politics. It is about abusing and destroying trust.

If you want to add messaging to your project, that is not harmful to the ecosystem and will just cause some people to view you as unprofessional. If you try to actively destroy people's file, you have stepped up at over that line are attacking and harming people, not just "inconveniencing" them.
Even the one platform where Java is the native language of the UI toolkit (Android) is moving to ditch the Java language for Kotlin.
My phone (Huawei) has a charging animation with rising bubbles (flowing from the cable into the phone). The speed of the bubbles reflects the charge speed. If I use the original charger (and cable) it says "fast charging", the animation is very quick, and it shows the battery level rapidly rising in 0.01% increments. It's pretty neat.

Except that if it's not on that fast charger, the only speed indicator is the damn bubbles, so I gotta watch for a few seconds and guess if it's faster or slower than other bubble animations I've seen in the past. Every other charger in the house has been a mystery for the last 2 years.

I've recently picked up a couple of 65w GAN chargers which seem nicely compact and powerful enough to be the only chargers I use for everything from now on and never think about this nonsense again.
Yes, you've read my mind, somehow. I've gotten into prepping.

The pandemic, supply chain issues, an increasing rise in authoritarianism, climate change, and now the war in Ukraine have all evidenced the fact that the assumption that 'progress is inevitable' is, in many ways a delusional idea - at the very least, to be in a state of denial of world events.

In my view, being a prepper, these days is a 'normal' and very rational reaction. Not being a 'prepper' is perhaps to be being in denial of what's been happening int the last 5-10 yrs.

My grandma who had survived the Great Depression, used to have a huge pantry in her house filled with canned foods. As kids, we were bewildered by it. Now, I completely understand it - as she had lived through many of the things we are living through now.
Colin Furze's videos are much worse in the way he shows not using safety gear. At least an X-Ray tube is hard to come by, hard to use and people generally know it's dangerous.
I'm in the same boat. I ran and maintained my own VPS for a decade to host several WordPress sites. I'm not a sysadmin, and package updates can be a nightmare if you only deal with it once every few months.

Ultimately I gave up and moved to SSGs + CloudFlare Pages, and put the WordPress sites I couldn't convert on managed hosting. My life has been so much easier.

This all will change in the future - I do think the free SSG hosting is a temporary loss leader for these companies. Hosting on a VPS would yield faster builds and serving static files isn't hard. And I'm sure there will be even easier ways to host WordPress sites.
“Crime X can be a form of protest”

“Every protest ever has had people saying that the disruption to them is over the line”

So which crimes would not be acceptable in a protest? And if people will always complain about the line being crossed, does this mean there can be no line at all?
https://www.techradar.com/news/iphone-lightning-port-ban
I'm sure your state/country has not a single unjust law on the books.
Has this actually happened?

Additionally, you are not a customer of giphy. So now giphy has to reasonably have the amount of human customer support for non-customers? So, essentially everyone on earth?
>materially it is not a threat to you

Kind of crappy whataboutism there don't you think? What if I'm a VPN user and my hard drive was wiped?

>Conservatives

What does this have to do with conservatives?
I wouldn’t go so far as to say someone can’t worry about stuff like this. Emotions like worry can happen as a result of prior trauma, generalized anxiety disorder, and several illnesses that have paranoia in their symptom profile. It’s fine to have worries and that manage your worries in a healthy manner, such as therapy, medication when appropriate, meditation, and speaking transparently to your partner to try and figure out what is triggering your worry response (rubber ducking your own brain!).

It’s important to separate emotion from action. You can experience an anxiety inducing thought (such as my partner might be cheating on me) and behave in a variety of healthy and unhealthy ways.
So why doesn't the same sites have banners for Ukrainian lives? Russias invasion is for sure a bigger existential threat to them since they got invaded by a foreign state.

I think you're showing your hand, I am arguing for treating everyone the same and that the people in charge of these sites appears to care more about American lives than Ukrainian ones.

If you're gonna have banners, then having them for ukraine is an obvious choice for me. OR.. maybe you could decide not to involve politics into tech with a global audience at all and skip all this bullshit.
It is also a fantastic way of knowing where the owner of the site lives and their daily routines. For example, if the site owner is doing maintenance 03:00 GMT, they probably are in Europe. If they are active during only evenings in Americas, they probably live in somewhere in America and has a day job or they study.

So, activity hours and maintenance hours can be used to pinpoint the timezone of the owner and their daily habits. Randomizing every bit of information is important.
just hold down the mouse outside the button.
But on the other hand, these people are not promising anything, do they? Check the MIT/BSD/GPL etc, all of them explicitly state that the software does _not_ come with any kind of guarantee.

Harsh reality is: It's user's responsibility to test for those. Noone is forcing you to use this piece of code which is given as-is without any guarantees. Noone is forcing you to update. It might be a dependency, but still it's not the problem of the code owner.

Or am I missing something?
RFC: Intent to Ship React 18
I have two complaints about USB-C:

1) The lack of durability and ruggedness. It's very easy to crush the end of a USB cable inside your laptop, or damage the USB port on the laptop's motherboard.

2) The tight tolerances that make it hard to get a good connection. Plugging a high-bandwidth device like a USB-C hub into a laptop is always a roll of the dice. Sometimes I have to unplug and replug several times, meanwhile MacOS is struggling to catch up as external monitors and/or power suddenly disappear and reappear.
Teleport seems like a genuinely cool product.

With that said, the company really needs to improve its interview process--my experience was downright terrible, and Glassdoor shows that other people had a similar experience
the "gun control" people sure did get quiet lately
I'm 6 ft and ride a regular Brompton. They also make a telescopic seat post for taller riders, and the H bars are designed for a more upright riding position. They're surprisingly flexible in setup but I would definitely try and get a test ride.
> how do I get the button into the "idle, down" state?

Click and hold outside of the button, and drag over it.
There is jpackage in the JDK, which can build native packages for Window, macOS, and Linux. There is GraalVM which can create native binaries.
They must be. Gas prices being what they are, how's anybody supposed to make money driving for them?
I recommend Security without Obscurity: A Guide to PKI Operations by W. Clay Epstein and Bulletproof TLS and PKI by Ivan Ristić.

I started working in this space a year ago (I'm on a project deploying zero trust networking at a large company) and these books have been invaluable.

https://www.amazon.com/gp/product/036765864X

https://www.feistyduck.com/books/bulletproof-tls-and-pki/
Is those laws that you should airstrike California? If not, why are you downplaying the significance of what's happening in Ukraine? Context matters in how proportional a response can be.
Kafka,
Cassandra,
Golang http server, websocket server and messsage pusher on Kubernetes