skysight-inc/HackerNews huggingface dataset:
The fact scp "worked" illustrates that such "How to secure your server" guides are... at best... poorly thought out. If "remote file access" is not in fact a "necessary service" then you can't very well allow scp to work, and thus you can't allow basic ssh service.

Actually a more sane setup, which I've used, is only SFTP is enabled, no shells. You can fetch files, you can send files, but you can't... for example... run a race exploitation shell script to seize root permissions.

This also has the advantage that if we can only send and receive files, the "server" we're connecting to needn't really exist, like an HTTP virtual host it's just a bunch of "files" and could actually be backed by a database with some blob tables.

There's a lot of scp usage in a typical corporate environment that should actually be files living in a shared filestore anyway, I've seen way too many files which ought to actually be:

* A wiki entry

* Checked into a git repository

* Shared in some cloud service e.g. OneCloud

... but instead they live on Steve's F:\Documents and if Steve is off sick well, here's the copy I made last week, I hope it isn't missing any important updates and somebody make sure Steve gets this when we change it...

The file living in /usr/project/ on testserver03 instead of F:\Documents on Steve's laptop is not a real improvement.
Most businesses that take advertising seriously will have someone in house and then out source the specifics to specialists but the larger strategy is done in house. In the UK generalist agencies like av browne have been hurting bad the smaller agencies have been closing.
Is that one of those cultures that had invented the wheel for a child’s toy, but not for any more practical purpose?
If it sounds too good to be true, it almost always is. (“Good” may be replaced with certain other adjectives such as “exciting” or “revolutionary”.)
Tablets and mobile phones are computers with a touchscreen, and they're more popular than ever. You might not see many in your niche, but the laptop and desktop PC are a smaller and smaller pie of everyday computing.
I am an Apple MacBook user. However, personally I try to use only software that is available for Windows, macOS and Linux. This allows me to switch operating systems more quickly, should I choose to do so. Don't want to make myself dependent on one manufacturer.
Dumb idea, but couldn't you just add the license in a comment or file?
The marketing website totally sold me on it, but as soon as I opened the App Store and saw that it's only 3.9 stars I decided I don't really want to pay for it. The only reason I bother to start using apps under 4.1 stars is if I have no choice. 3.9 stars hints that there is a major problem with the app that the developers haven't addressed. Meanwhile, the similar app Textastic has 4.8 stars.
The Huge Endeavor to Produce a Tiny Microchip
There are several "unopinionated" tookits out there already. Nobody uses them because it is all a matter of popularity. The most popular toolkit by far is called HTML+CSS+Javascript. You might hate it but the point of no return has been passed ages ago. So If you want to make a difference implement a browser with a trusted zone for local applications (which are allowed to occasionally call C-routines to get native speed) that is not controlled by apple or google.
I feel like in theory you’d be able to adjust the mix across the battlefield throughout the battle and it would be less about one plane’s ability to pivot.

And in theory, theory is identical to practice ;)
Yeah I've got that one (and a real 42s) :)
You are talking in that strange manner about both some features (like anonymous transfers) and scares (music is playing = Ponzi is vorking). Also you seasoned that with non-understanding of the fact that USD and any fiat currency is also Ponzi, than you added some nonsence about tulips and posted that all into a random article about Bitcoin. Good luck with such a POV.
> One of the things that has always confused me about twitter is that it seems to be offering a threaded conversation model, yet it tries to "flatten" the conversation and render things in a linear timeline.

They do not flatten it to a linear timeline, they "optimize" it by mixing in the important sub-threads. Generally they show only the first level of replies. and then they optimize it by also showing some replies to those replies, which can go down pretty deep. So basically they give the thread, but selectively hide the unimportant parts. I understand the reasoning here, as there popular tweets can gain many replies of which most are just noise. But the actual result is a clusterfuck of experience which only makes it worse.

And lately they even made it worse, because now they also show irrelevant tweets under the normal tweet-view, and it's hard to see where the original tweet ended.
Or we're blocking ads with pihole.
I'm not disagreeing with you, as an author I would not have risked something like this, but let me try:

- maybe the authors wanted the "AGPLv3 look it's open source!" label

- maybe the authors liked the restrictions that come with AGPLv3 (if you use a modified version on a server, we want the modified source code "back")

- maybe the authors wanted to built upon a license they perceive as strong and solid

- maybe the authors haven't thoroughly checked the AGPLv3 and weren't aware of this particular clause, or actually decided they could add limitations anyway

- writing a license is hard so maybe they didn't want to roll their own

I personally think the Commons Clause license is a bad thing with a bad name, and is only going to wreck havoc and muddy the waters. Widespread open source / free software licenses are complete, self-contained work and internally coherent, adding stuff on top of them is only going to be fragile.
What "burdensome obligations" does the GPLv3 impose on each group? I'm especially keen to know what restrictions the GPL poses for users.
Vim is more of an investment and I tried to really get into vim over the years but I didn’t. I did get good enough with it to use it when sshing into a server. Sublime just clicked. It worked for me from the start. I bought an IntelliJ license at the same time I got my Sublime license and Sublime just worked so much better for me that I never looked back.

So while you might be right from a “logical” standpoint that learning one editor in and out might be the “better” choice, you overlook that I “feel” way more comfortable in Sublime Text and that matters way more for something you use on a daily bases.
GitHub Codespaces works decently well on an iPad as well. I had to send in my MacBook for a repair that took and week and I managed to use the iPad with a bluetooth keyboard and mouse fairly successfully. It was a web project, so that helped.
This sounds interesting, but very error prone, no?

- Some code could throw a legitimate error, that would take the place of the promise.

- Some code may catch the promise and treat it as if it was an error.
Since backwards compatibility is an important part of our discipline, I'm going to say no.
A Gentoo install does not take 8-10 hours a week to maintain. Even installing either of Gentoo or Arch Linux is only a full day's of work if you go off script from the default install instructions.
Rosetta is not emulating the hardware, it's emulating the instruction set
No option to try before buy
win 98 had a bug which would cause win98 to not boot on faster AMD systems.
Sweden sends just 1% of its trash to landfills
Why investors take on bad deals like that?
I have to say that this bears a striking similarity to what stuxnet intended to do and the timing is impeccable with the current Russian invasion of Ukraine.

Not to invoke the Russian boogeyman. But I wonder.
Pictogrammatic Programming Project
Got any benchmarks/write ups on the subject? I did a bit of testing myself a long time ago and basically the answer just ended up being to use rsync because any differences were marginal. That said, I didn't test with millions of files.
How many of us could make a simple match to strike a fire?
Just because it's common doesn't mean it's not special! (Actually, it sort-of by definition does mean that, but come on! It's still awesomely cool!)
You said you weren't a software development team. What kind of functions do you have?

For me, and most people I've worked with, having an all-day meeting specifically to mimic the open office is not something we'd ever propose ourselves. Was it a bottom-up or a top-down decision? Is everyone happy with it?
End-to-End Encryption and Messaging Interoperability
That sounds fine as a quick hack in your own code that you never intend others to use, but if something like that escapes your library into calling code (isn't always properly trapped by your exception handling due to a bug) you are asking others to deal with a significant change to a commonly accepted standard behaviour.
Micro OLED displays are quite rare but probably still obtainable. If someone is interested I can help you grab some.

Edit: Now I see the vufine displays have optics built in maybe that is the harder part to source. Not sure how feasible it is with off-the-shelf optics.
> Easily develop software, view code or take notes on the go

"Develop software", which means writing code without the ability to run them, or the ability to compile multiple files as a "project", like all the other code editors on iOS?

I stopped paying attention to these apps because of how App artificially limit what apps can do. Writing Java offline? Good, but you can compile one class at a time, and the possibility of importing another user package is thrown out of the window. This makes it only useful for absolute beginners. There are alternative approaches, e.g. using a web browser, online compilation (which is not too different from web browser) and using a terminal that happens to support JDK. I saw developers literally say "Don't write reviews to complain, we have to follow the rules"

Which is sad because these devices as expensive as $1k are very powerful and have all the necessary APIs to make that work, it is only the app store rules that prevent the device from becoming a "real" computer
> a bunch of startup/small software projects seem to be under the impression that AGPL is a magic ward against hosters of software.

I think much of this comes from the atmosphere of fear that anti-GPL activists have managed to create around the GPL.
Let's say I want to emulate my first SMP system, a dual p3 with windows 2000, well, without P3 (and smp) emulation, I can't.

If there was SMP P3 emulation, then I could (albeit at horrible speed, at the moment) but at some point, it'd become quite reasonable.
State-level censors will at first ask nicely to block specific entries for their ip ranges; either the provider cooperates (then DoH won't help at all) or not.

If not, they won't have problem blocking entirety of Google or Cloudflare, collateral damage be damned. It would be as much Google's or Cloudflare's problem as it would be user's, so they won't do it. They don't allow domain fronting either.
Perfetto: Browser Trace Viewer
Most people are going to use the defaults. Giving all DNS requests for 99.9% of Firefox users to two random American companies is irresponsible.
Javascript suffers terribly from the lack of asymmetric stackful coroutines.

All of this bizarre conflation of responsibility and extraneous keywords in the language, when all that was ever needed was `create`, `suspend`, and `resume`.
This is hilarious - velocity vs. bug tradeoffs is a key balancing act that every startup does, and you were totally right in what you were doing, also with your point that other companies may choose differently and that's also totally fine.

But to be deemed as a cowboy - utterly hilarious, given where they ended up. Pretty cowboy with the investor money instead I reckon?
I like to use Lazarus to write native Windows applications, it's FreePascal based and it doesn't need addition runtime libraries installed.

https://www.lazarus-ide.org/
1: I don't get it either. For some reason Krita is okay, but selling your app in some sort of Store is not...
Transformer Models
Sounds super expensive and nothing a javelin can’t take care of
> Working on Linux is also hands tied behind my back because distro maintainers are basically dictators you have no influence over because you don't pay them in any way, in fact they donate their valuable time to you.

What you think MS cares more about your concenrs because the couple of bucks you throw them? This is not the reality we live in.

Meanwhile Linux distros have public bug trackers an the devs are infinitely easier to reach than Windows devs. And unlike Windows you do have the source and build scripts to all components if you want something that the devs don't care for.
I worked at a startup for 6 years before moving to FAANG and other larger companies.

I can confirm this is true.
If you need to use a rejection as a meaningful thing other than an actual exception then it really isn’t an exception is it? Instead fulfill the promise with an object that actually represents the state. Perhaps with a status property. Otherwise your code is going to look like a hot mess and you’ll just confuse generations of developers. Just because you can does not mean you should.
If you have a way to surely differentiate bad deals from good deals, while keeping a low false negative rate (i.e. still being able to notice the next Airbnb/Google/etc...), I'm sure a lot of investors will want to talk to you.

Do you have a good track record on this ?
you should check out https://www.nohello.com/
Some folks at my workplace have been using this to explain their point of view to people who just send Hi/Hello
What is a sigma?
Does it make sense to even discuss the sigma of any deviation?

When you add in the "10% chance that some scientist messed up the maths or something in the experiment", then it's impossible to ever reach 7 sigma...
The Circle is also a novel by Dave Eggers, which is the original version that predates the movie adaptation.
Boris Buden – The West at War: On the Self-Enclosure of the Liberal Mind
Open auctions will help.

In the last year, we've ended up #2 in 6 bidding wars (as disclosed by the listing agents) in one particular area of the GTA. In each case we reached our absolute max and wouldn't have paid any more.

Several times we lost by $100-200k, and once by $250k. These overpayments set new price benchmarks for the area which became sticky. To continue to be competitive, we had to make hard sacrifices to increase our budget throughout the year.

The fact that houses continued to move at the prices determined by these over-payments indicates there are some buyers at the higher prices. However, the market is very thin and the pace of price growth in this speculative market would've been slowed with open bidding.

Beyond the blind bidding issue, I don't know why people focus on foreign and large corporate buyers. Yes, they're scary because they represent potentially large sources of demand. But are they actually buying a large percentage of the homes? No. It's the smaller investors who speculatively bought 40% of homes last fall.

But we should definitely protect mom and pop investors, such as our housing minister wink

Real solution? Reduce the incentive for speculation among these groups by treating all gains on non-primary residences as income.
Well yes, and they say why in the article. It doesn't yet have the degree of freedom in its hips to balance properly. That's not especially hard though - a pivot around the main spring axis would do the trick, and the dynamics of that part are well-understood at this point.
It is a setting the author chooses when publishing their book through KDP, and some authors choose not to enable it. Pretty sure it is enabled by default though.
If they distributed those guns a few million years or so before the intelligent life existed...
Daily

-----

Daily standups 15-30 minutes.

About 2 hours of Adhoc Teams calls.

Lunch - I have to book this into my calendar or else they book meetings and sometimes they still book meeting over this 30 minute period.

Weekly

------

Multiple multi hour refinement sessions up to 3 per week.

1 hour meeting with PO every week.

30 minutes catchup call with all the PE's (some seniors) every week.

Bi-Weekly

---------

30 minutes Status meeting with Head of Dev / Principles on current project every week.

15 minute Scrum of Scrums.

1 hour sprint Review.

30 minutes Sprint review Prep.

1 1/2 hour sprint planning.

1 hour call with CloudOps / DevOps.

Monthly

-------

1 to 1 with my manager.

Quarterly

---------

Company All hands.

Company Engineering conference.

Company COO conference.

I think that's about it but there's probably something I've forgotten.
1 sigma = 1 standard deviation
*Apple
Anonymous or pseudonymous online transactions themselves comprise the main “great idea” of cryptocurrencies, I thought. I don’t know if you can implement them without the specific properties of the math used, combined with the distributed ledger and security affordances of specific cryptocurrencies like Monero, or even things like Tornado Cash.

Cryptocurrencies are enabled by blockchain technology. I don’t know that they fundamentally rely on it by necessity, though all current cryptocurrencies that I’m aware of do use some of derivative of a blockchain, even if it may not be distributed, or may not allow the public to mine it or run validator nodes.

Does that make sense? Perhaps you can reply to what you think I’m saying in good faith, and I’ll respond in kind?
7 sigma is actually less than one thinks because these distributions are not normal distributions.
Are you planning to add support for other languages in future, or are those two your main focus?
Try making friends w some people in their late 30s / 40s and have a few beers away from bosses… I bet the charade comes off and you can meet some actual humans.
https://www.enlightenment.org/about-efl
I agree and claim the burden is on those who say "it's fine, actually" to rebut the definitive article[async:0] on the subject:

[await:0] https://journal.stuffwithstuff.com/2015/02/01/what-color-is-... (read it whenever you would like, it's good I Promise).

If you've only ever used Javascript, it's tempting to think this is some fact of nature, rather than bad language design.
Am happy to be living in Europe, neither USA nor China seem to respect basic human rights.

This move is an overreaction by a president who badly wants to turn the public opinion of him.

This is just the wrong way to do it.

https://projects.fivethirtyeight.com/biden-approval-rating/
This:

struct pollfd *pfd = &pfds[p];

... does not dereference pfds. It looks that way, but you need to account for the address-of operator before it. What it's actually doing is:

struct pollfd *pfd = pfds + p;

... and thus it works even if pfds is NULL or if p is out of bounds. The following check before using pfd is correct.
You're not wrong. Most authors of academic papers are not good writers. Perversely, regardless of where they are on the spectrum spanning from good to mediocre to terrible, writers' output is usually made worse when they know they're writing for an academic context—this is why most of the blog posts you're thinking of, with their informal language, make better papers than the papers themselves.

I wish there were a culture of (a) always writing a blog post to accompany any paper, and (b) rewriting historical* papers to make them more accessible. On the latter point, undergrads should probably be doing this for at least one paper per semester, despite the general expectation that they ordinarily do not deal with "research".

* Doesn't have to be distinguished ones; just any paper you come across and feel is too hard for you/your peers to follow without more effort than should be necessary, or any paper you thought was interesting but didn't get its due in public, or ones that did but have fallen out of cross-generational memory.
A unit used in statistics:

> In statistics, the standard deviation is a measure of the amount of variation or dispersion of a set of values.[1]

* https://en.wikipedia.org/wiki/Standard_deviation
Your link is giving a ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
ISP-provided CPEs often (usually these days? I wonder if anyone has studied this) allow you to change the recursive DNS servers that they forward queries to. Nor do they let you customize the DNS servers handed out by their DHCP servers.

A while back, Sky Broadband was even intercepting all customer traffic to UDP or TCP port 53, and forcing it to go to their shitty DNS servers, which panic and drop the connection when they see something 'unusual'.
They pay them better salaries and comp too. Startups boast about poaching talent from big tech by matching compensation and putting those new big tech employees at forefront.

It's a fund raising and public marketing trick.
Valid point. I know it's easier for the developers to support only one or two platforms, but I see full support of all major platforms as a sign of maturity.

If it doesn't, it's a sign of issues either with used libraries, programming language or tools.
The alt keyboard layout thing was once appealing but I’m over it for two reasons.

1) I don’t think it is useful to write faster than I can ‘think’. What I like about writing is that I can hone my thoughts to be sharper than they would in everyday speech by reworking them over and over.

2) I grew up bilingual and learned another language to some degree along the way. Most alt keyboard layouts are optimized towards typing in a specific language and might not be “the best” for me. I am happy enough with an international english layout keyboard that allows me to type any extra character I might need.

This sort of mirrors my view on editors. Good enough now is better than the pursuit of perfection and comfort counts for more than purity.

P.S.: Doom Emacs might be interesting to you
Whoa, it kinda makes me wanna stop being an IT worker, drop everything and go drive trucks for Walmart. That's over 4x what I make in a year.
Let's say that in the past they used to have a very clear left-wing bias, but, within that bias, the quality of their news was excellent. And they were independent.

Now, they are no longer independent (the 90's and 00's good days are over..), and you can kind of feel the nonsense they are trying to push down your throat. It's not blatantly wrong, let's say, but it is a more often than not a one-side view aligned with government lines.

For instance, somebody else mentioned a bit higher that they have a "fact-checking" column that was actually a piece of fact-twisting rubbish. And although they are not peddling lies there, per se, it is very "coincidental" that the "true" view being presented there as facts is always aligned with the global trending (government) narrative and other views are dismissed.

It doesn't mean that they are twisting facts, as what conspiracy theorists denounce as the "global narrative" is, I believe, more often than not aligned with the facts, but it's very suspicious that a "dissident" point of view never shows up in those articles.

It's the job of a true, high-quality journalist to look far beyond the facts being presented, to understand if they can be taken at face value or if, perhaps, the non-obvious or non-dominant narrative should be put forward instead. And unfortunately that's not something Le Monde can be relied on anymore.

(As recent examples of "alternative facts" that have been dismissed a bit too quickly recently, one could put forward the Biden laptop hard-drive saga or the lab-made Covid story.. Both are stories with fascinating implications if they turn out to be true, and that warrants hard journalistic questions to be asked..)

In France, if you want interesting news, you have to rely on Mediapart and Le Canard enchaîné. If you just want to keep up with what is happening in the country, Le Monde will do.
Of the 20 or RPis I’ve used over the years, I think only my first one ever got plugged into a keyboard and display. All the others were setup with ssh only.
OpenSUSE doesn’t have a default. SUSE uses and supports GNOME.