skysight-inc/HackerNews huggingface dataset:
It’s pretty shocking but most IP cameras can be accessed with nothing more than their serial number. Here’s a somewhat recent DefCon talk about it: https://m.youtube.com/watch?v=Z_gKEF76oMM

I use Reolink cameras, in the admin interface there’s an option called UID. Turning that off (theoretically) disables the backdoor. I have my cameras and NVR (which is actually just a python script on an old laptop that uses ffmpeg to capture streams) on their own airgapped lan so I don’t have to worry about blackhats or the ccp using backdoors to watch my kids.
Previous discussion: https://news.ycombinator.com/item?id=24437715

(edit: fixed the link)
I'm surprised at the level of scamming we tolerate as a society. As technologists, we have a good chance of not falling for it, but my parents are sitting ducks.

Some combination of new consumer protection laws, infrastructure improvements, and law enforcement attention is desperately needed. I don't know why this doesn't get more attention. Is it just the historical attitude that each of us are responsible for protecting ourselves? Is the line too blurry between a legit business and an outright scam?
tldr: Two passengers had identical bags. Technically inclined passenger used the id number from other passenger's bag to get the other passengers phone number and exchange bags. Phone number was not visible on airline web site, he found it using browser dev console.

I'd hardly call that hacking, but then again my opinion often doesn't match up with what politicians and courts consider hacking.
It's bizarre and hilarious to me how much you're defending a company that has raised $1 billion dollars promising to create one of the greatest social networks on earth - yet the core of their product is a re-skinned open source project (that originally violated the license) and their execution has been incredibly sloppy (wait lists that people have been on for months, 404 error pages when people link publicly to their profiles).

If this company did not have their current political affiliations, I seriously doubt you'd be defending them for a second. Because all the evidence of how well they are performing points to them being laughably inept.
I created an account just to answer this question, seems it seems like a lot of people in the first world can't even phantom the need for people to use an unregulated currency.

Source: I'm from Argentina. I can't speak for the situation in Lebanon or any other place, but I imagine there are similarities. I know there are similarities with Venezuela and (I believe) Iran.

Long story short: when your government deems illegal or at least suspicious for you to save in USD/EUR, Payoneer/Paypal/etc are risky to use. You have several problems:

1. You can't easily use the money on (say) Payoneer. You need a credit card. Credit cards are easy to tract. You'll quickly have someone asking where the money came from. I understand this seems like a good idea in a sane country, but it is not desirable when the only way for you to save is to bend the rules somewhat.

2. You can't put your money into Payoneer/Paypal/etc because, remember, you don't have any USD. You can't buy them. So the only way these are a fix is for people who work for USA/Europe and can maybe get paid directly there.

3. Cryptocurrency is not yet as regulated nor it is easily regulated. Payoneer has to comply with Argentinian law because they are a financial entity. Cryptos are still young and are (at least in Argentina) still somehow being able to sell USD-like assets without selling USD. Example: in Argentina you can buy up to 200 USD per month (well, the lucky ones get 200 USD... won't get into details), but you can buy as many USDC as you want.

4. The _your keys, your money_ moto may be a meme for the YCombinator crowd, but it is not for many people. Payoneer/Paypal and banks *will* ask for documents baking up your funds. Again, this is a good idea if you live in a sane country, but many people do not. You can't just go to the bank and tell them: no, I don't have these dollars declared anywhere because they are illegal to own in my country. I've seen colleague's accounts getting closed due to "suspicious activity" and their assets are frozen. The Argentinian answer is generally: be grateful you are earning in USD, look for the next Payoneer (I think we are using a lot of Dukascopy lately) _or_ switch to crypto.

Anyway. Make of crypto what you will, but people in high-inflation countries with an excess of love for regulation intuitively understand their appeal.
> What am I missing?

People in wealthy and stable countries have it very nice that their strong and stable currency is also legal exchange medium in their country. It's common for governments to make it literally illegal to transact in anything but the official currency of a country.

So your poor and unstable country needs to be wealthy and stable enough for people to actually afford dollars, smartphones, Payoneers (hard to do that when your monthly income is $10). And at the same time the country has to be poor and unstable enough for fiscal law enforcement to be pretty low on government's priorities.
https://amyunger.com/blog/2020/09/10/staff-engineer-at-herok...

Based on how time is being spent that sounds an awful lot like an EM role to me?

Like EM responsibilities minus actual humans reporting to you?
> by claiming this is "the official resource" (it's not)

Care to elaborate? Harvard Public School of Health is a professional nutritional organization, isn't it?

> both less correct and even more vague.

This is a shallow dismissal, which is against the HN rules.

I'm always happy to be corrected and understand nutrition better.
I feel like a half-idiot but I'm unable to tell how exactly the "unified=1" implements monomorphization. I don't see the extra indirections which OP writes about.
Misleading title. He used his web browser. Equivalent is that we are all hacking HN to read this comment.
Outside the biggest cities it's actually worse. For particulate pollution you need that special mix of cars, off-road equipment, smoke, and dust. Like Fresno. https://www.lung.org/research/sota/city-rankings/states/cali...
> Today we're hiring some more people and it's a team effort!

Have y'all raised capital?

This is really impressive!
We make you prove you know how to implement things correctly in the off chance we ever give you enough time to do so.
Because girls and women are targets of sex trafficking? Now you give abusers the ability to get travel documents with an "X" which makes them harder to spot.

There seems to be this attitude taking hold whereby people who are (probably) overwhelmingly young and ignorant challenge everything they consider "not progressive". Clearly all the people who came before us were a bunch of idiots, so how could they possibly do anything right? It's an arrogant hubris. I say that as someone who is only in their mid 30s.

What I have come to realize is that everything people do (including those things I consider stupid, like organized religion) has a purpose. Once in a while the justification is weak. But if you find yourself wanting to eliminate some social practice because you think it's stupid and can't possibly comprehend why we would do a thing, that's a sign of ignorance.

Only after you understand the purpose can you start to talk about whether something is actually still useful.
The main criticism I remember of the flowhive was that it increases chances of infection and can destroy the cells of the frames. I have no experience with this hive, that's just the common criticisms I remember from the time.
>I'd assume this is Iran, Russia, or some other anti-freedom country.

Hate speech, in particular targeting ethnic or religious groups is an offense in virtually every democratic country, so that's a weird leap to make.

>How is this different than Turkey's president Erdogan throwing people in jail

For starters we're not talking about arbitrary exercise of authority here but straight forward application of the rule of law.
Of course, but this is a gradient. Struggling startup may ask a question that 80% of engineers are capable of answering (through luck, exposure, experience -- whatever dimensions).

Dropbox asks difficult questions, and it's hard to discern why. I don't believe the problems at Dropbox are particularly difficult relative to its peers. I don't think they innovate at a clip that's outsized, etc.. But they do this, and their engineering culture focuses on this.
> You're arguing a technicality, which is a waste of time. We should focus on reality, not imaginary theoretical issues. In reality, that never happens. And people even develop linters (frankly unnecessary) to guarantee it, if you're really paranoid.

Because you aren't? you're projecting.

> This is a social problem, influenced by language design. You need to be thinking about the way humans actually behave in practice, not how they theoretically might behave.

Sure, your problem with Java is also a social issue that has nothing to do with the language.

> In practice people do not accidentally skip errors in Go. In practice people do not handle errors at all in Java. This is the responsibility of the respective cultures and language designs.

This isn't Java's "culture" to not handle errors at all. Go's conventions imposed in its std libs are certainly not a superior model by any measure as I previously showed.

Edit: Answer to your follow up since HN ratelimits flamewars

> This is java's culture, and I assert it from experience. It is a result of the language design (and communiques from language authorities).

Your appeal to authority is a logical fallacy, you have never demonstrated that it is Java culture. I say it isn't Java culture the same way you establish an unfounded claim.

> You only showed that it was possible to misbehave in Go, which is totally uninteresting. You have failed to show that your theoretical problem is a practical problem. This is a perfectionist argument.

You don't get to say what argument is deemed interest and which isn't in a discussion.

Ignoring Go errors is as much as a practical problem that not handling Java exceptions. The difference being that Java does force the developer to catch managed exceptions, Go doesn't care, it's purely a convention. A language construct to deal with errors baked into a language is in theory and practically superior to random conventions established by a vendor. PERIOD.

Whatever experience you had with Java isn't representative of Java's culture at all.
You just moved the goalposts.

Please don’t reiterate obtuse questions when reasonable answers were delivered on a silver platter.
Refactoring Uber’s Rider app (prior to rewrite)
Related

Techmap: Find companies using technologies you love - https://news.ycombinator.com/item?id=28897492 - Oct 2021 (47 comments)
Disruption and Harms in Gaming Framework
'Reliable and quick', in the sense that they will almost certainly have a psychoactive effect, sure, but reliable in the sense of 'I can tap into those mystical feelings any time, any where, and turn it off if I need to'? Not even a little. You are not the 'captain of the ship' during a psychedelic trip. Meditation is more reliable in those senses, but you have to learn how to do it and engage with it.

Edit: to respond to your 'easiest' edit in -- it's only easy in the sense that the barrier for entry is lower, but 'lower barrier for entry' is optimising for quantity, not quality.
Ask HN: What would you do if you were in tech?
I know this question has been ask a few times, but I am at the point where I am contemplating leaving the tech industry. I am not FIRE and I am old enough to know money isn't everything. So I want to ask people that left, what tips you have for figuring out what to do next?
>If you don't plan on leaving your country, useful land is a much better hedge.

What? Land is about the easiest thing for a government to seize (and protect, for that matter).

> portion of your portfolio held as hard assets outside the reach of your country (eg a new life startup fund held as physical currency in another country outside their banking system -- or a personal network that has the same effect)

I don't see why you're ruling out crypto as not satisfying the desiderata here. There's no need for it to be physical, so long as it can be converted to a currency you want, and maintains most of the value you put in. Stablecoins would work, then, and avoid the need to keep them in a physical location in the target country.

Terra has implemented stablecoins for ~20 currencies other than the US Dollar, including the IMF's special drawing rights (a basket of the five big ones): https://station.terra.money/swap
Yes!

This is one of the areas we actively explored and validated against. For example, take a look at:
https://vimeo.com/498735070
>I suspect a lot of people who fail these interviews would also make pretty good employees, but I'll never know.

Why don't you take a leap of faith once in a while on someone who hasn't done well? Especially if you ever interview interns and have a bunch on that team, that's a near zero-cost gamble for a large corp.
Good. Now all publicly funded universities should be free for the public.
Ask HN: Any recommendations for an inexpensive developer machine?
Hi HN!

I'm looking to help a close friend that is low-income break into web development. I'm so used to working with a high-powered (and expensive) macbook , and I'm not sure what options are good for developing when the budget is tight.

Any recommendations for a good inexpensive dev setup?
Yeah it's almost a rhythm game when you get to the bosses, or even the hard normal enemies. The boss will do some prompt and you have to reply with the ~correct sequence of inputs in the correct timing. You have to learn what actions to do over time/deaths.

I find it quite fun, but yeah there's a bunch of people who will hate it.
It's always been a Swiss Army Knife. It's a single-threaded-in-memory caching, pubSubing, streaming, distributed-locking beast.
Ukrainian IT specialist exposed a notorious Russian ransomware gang
> We need packaging tools to aggregate and publish groups of packages that relate to a particular domain, and organizational tools to ensure quality and continuity of these package groups over time

Whats stopping you? golang.org/x is kind of like that. Theres nobody stopping you from aggregating packages under foo.bar domain and build a reputation for high quality.
I looked into this relatively recently and AFAICT there's not a true 1 gigabit consumer wifi. All of the ones that claim it combine their 2.4 & 5 ghz bandwidth. Briefly looking at your router it looks like it's pulling the same nonsense. I can't seem to find the max bandwidth for an individual connection, but I doubt it's 1 gig.
Go doesn't have (automatic) backtraces. If you don't wrap errors with a trace or with a custom message you often have no idea where the error came from.
It's very easy to shallowly dismiss something if

- none of your friends or coworkers use it.

- there are few jobs requiring it.

Basically, you can mock it all you want with practically zero social risk.

Jokes that target people of some specific nationality or regional group are not as tolerated any more nowadays, perhaps depending on the social company, but this is like those jokes. For instance "dumb Polack" jokes.

You've heard the one: "Frederic Chopin and Nicolaus Copernicus walk into a bar, immediately bespying Marie Curie sitting by herself. Stanislaw Lem is tending bar, pouring her a drink. ..."
USD is manually managed to ‘tax’ holders 3% per year in the form of inflation. It is stable, but you do pay for that stability.

Bitcoin on the other hand is not centrally managed for better or worse. It relies on a broad number of holders to ensure stability. Any small crytpo currency is a lot more volatile due to whales rocking the boat. At 100 trillion, there are no whales big enough to move the market significantly on their own.
I'm unclear from reading your comment if you know this or not... but, what the Go team is describing is an intermediate solution. Not the exact one you describe, but it is intermediate. There is no particular requirement to get into the Go package ecosystem, no gatekeepers, it's all namespaced by the URLs you store your source code at, but between what the proxies do and the way the version requirements were specified, you are also not simply naked to every update someone somewhere pushes.

Please note I'm not claiming it's perfect or that you'll like every aspect of it, I'm just saying it is an intermediate solution between the two extremes.
If u put one satellite orbit, are u really a “space power”?
A former Y combinator president, Sam Altman has a blog:

https://blog.samaltman.com/archive
I'm sure you're right about current trends.

I'm thinking/dreaming about a world where prices are orders of magnitudes lower. Is there some advantage to make tin cans out of palladium rather than tin? Then we can just do it because the metal cost is the same!

A bit of utopian fantasizing, sure. But even cutting end user prices in half should have important effects.
I'm honestly surprised he even wrote this if he claims to be an expert.

He literally ignored half of what the rep was saying because he was busy fiddling with the computer, then willingly gave up all his personal information because of the distraction.

You would think an expert would know how to properly use 2 factor auth too. Giving someone the code is exactly how you defeat it.
If it's just meant to be a cheap chromebook-y thing, that's defensible I guess. But it's outright irresponsible to position it as a hacking/learning laptop for kids and expose delicate GPIO ports which they will fry, and not have them be replaceable. It's an e-waste generator, and parents who get one of these for its stated purpose likely don't realize the serious risk of losing their investment.

And no mention of storage. If the poor student does manage to fry it completely, do they lose all their work?
There's a local agency here in the city I currently reside in that touts they're hiring percentage is lower than Harvard's acceptance rate. They're telling you up front its really hard to get a job there and its a very "bougie" place to have on your resume - as if they're on the same level as the FAANG companies.

The interview process is fairly long, accompanied by an office tour which touts the numerous "Freebies" they offer their employees. Then you find out after the entire process that you'll be getting paid 4050K LESS THAN the industry average. At the time I interviewed with them, I had five years experience in UI/UX and mobile development. What they offered me was essentially what I was making as an entry level dev.

It was easy to turn them down. No amount of free Red Bull is going to pay my mortgage.
So It Goes
I wish the title hadn't given away that it was a scam call. Perhaps it could have implied it was a gripe about Wells Fargo at first. Reading it while already knowing it was a scam, it seemed blindingly obvious to me, and it was hard to imagine how I could have made the same mistakes. But that could be overconfidence.
Crypto is "supposed" to do 27 different, contradictory things.

What it does do is provide a speculative bubble with no backing assets.
Also in play is that some parties have patents on certain kinds of control systems using CEC, so just implementing something that seems useful can get a device manufacturer in legal trouble :(
I understood what was meant by these terms.
I was never attempted scammed online, and I think (naively like the author) that it wouldn't happen to me.

But I was pick-pocketed twice in my life. Both failed attempts, but only because of dumb luck. And I thought that would never happen, "because I'm that much present always."

One time I'm wearing a hoodie, and a cheery guy distracts me and sticks his hand into a double-ended pocket and my hand, resting in the other side, instinctively grabs his; a trigger-happy hand-shaking mechanism and a bad choice of pocket. I quickly walk off because his grumpy friend looks like someone who would stab you.

Another time I'm running for the bus, my phone is thrashing forth and back in my pocket, so while running, I quickly grab the phone and stick it in another pocket; two seconds later, a young guy bumps into me, and his hands reach all the way down in the now empty pocket. We land, we stare at each other, and I run for the bus rather than him; I'd have no chance catching him anyways.

So... with some humility: The only way to stay out of trouble is to apply really dumb protocols.
“Expert”
Can you point me to surveys to back up this claim? I interview lots of people from lots of companies, no one is using anything above java 8. Sure this evidence is anecdotal, but i've probably got evidence from around 150 companies.
Off topic but: Since I assumed this was about physical supply chain attacks (where someone nefarious will either intercept your package to install custom firmware etc. or even change the physical device in some way) - does anyone know where I could find a good guide on mitigating such attacks?
This is a pretty genuinely confounding response, and I mean that with absolutely no offense intended. There is a tremendous amount of fighting between devs who prefer Go and Rust, and a tremendous amount of elitism as well, truly from both perspectives. Rust gained a reputation for elitism long before Go did; “Rust Evangelism Strike Force” was never meant to be pejorative, and “Rewrite it in Rust” was never meant to be a joke, but it became one anyways. It’s not hard to see why; Rust is genuinely novel in a way that few other programming languages are. It feels the most like the “future.”

But I still like Go a lot. I like Go because of how easy and simple it feels. There is definitely elitism over simplicity, but the elitism I’ve seen and even received from Rust and C++ programmers (…despite that I have been coding C++ forever and do have a few Rust projects as well…) has been pretty much the opposite: Go is too stupid and simple; real programmers need absurdly complex metaprogramming to make basic CLI tools or what have you. Now for what it’s worth, that has cooled down in many regards, and also, Rust is amazing and there’s nothing wrong with advanced metaprogramming. (It’s just another set of tradeoffs, after all. Unquestionably has its benefits.)

However, whereas people who have hated on Rust have often come to see it for what it is (an immensely cool, novel programming language,) Go has received the opposite treatment. People soured on it. Now everyone seems sure the GC latency (which of course is just about state of the art) is simply too much for most use cases. It’s seen adoption in all sorts of places and even been competitive with Rust software in performance, but it is commonly discussed as if Go is inherently obsolete because Rust is a better option in every way that matters. Bringing up Go in certain places often subjects you to ridicule, and I’m not joking. The memory ballast is a favorite among detractors to prove that the language is stupid and bad for production environments.

So when people do try to tout the benefits of Go, it’s routinely discredited and downplayed for some reason. It’s a nice language to use with a stellar standard library, nice tooling, and pretty good runtime performance.

This article doesn’t mention Rust (that I noticed) and Go is still being measured up to Rust in the comments. They both trade blows in different categories, but I truly believe that the fact that Go lacks the novelty of Rust with its borrow checker and language design has caused a lot of people to view it very negatively, and I think that is sad. People loved C for a lot of what it didn’t have. Go is a lot different than C, but for me, the sentiment is very much the same.

I think people see what they want to see. I like Go and Rust, but I find myself going back to Go for various reasons and it feels like every year it leads more and more people to ask for justification that they wouldn’t for other languages. It’s a little tiring.