skysight-inc/HackerNews huggingface dataset:
Fine, just have your webserver give a 401 to everyone other than the IP address you want to access. If you really want port knocking to get in then have your server listn on port 52485 or whatever and add the IP to the allowed list.

I would rather the server doing any processing of the packets be running as a low privilege user than sitting in the kernel.
Interesting that you wrote that just like that.

Now apparently we have just created 1$ out of thin air.

I like that example as it already shows one of the fundamental risks of crypto.

And now you can't even just say BTC or eth or stable coin because this is true for all.
Don’t forget raise prices and make it more difficult to cancel.
Iptables: How to allow only one ip through specific port?

https://serverfault.com/questions/146569/iptables-how-to-all...

Found that by Googling [iptables whitelist by IP and port].
___

Another approach is Port Knocking:

https://en.m.wikipedia.org/wiki/Port_knocking

That said, likely more complex than the solution you’re looking for; also worth mentioning that unless you use the variant called single packet authorization (SPA), where only a single "knock" is needed, consisting of an encrypted packet — the port knocking sequence in theory is observable and reproducible by an attacker.
In the interests of trying to add something new to the conversation- I just finished a poly sci book called The Economic Effects of Constitutions, which argues that presidential systems in general are less regulated, have lower taxes, and have a smaller welfare state than parliamentary systems. As it relates to regulating Big Tech, we can compare the US and Europe here. The book says that the multiple centers of power in presidential systems, especially bicameral ones, means that there are many separate powerful groups that must be appeased to pass even popular legislation with a consensus behind it. Here, a separately elected President has to grapple with a separately elected House, plus a Senate where two-thirds of the members were elected at a completely different time. Plus, party discipline is weaker in presidential systems, so he can't just whip his party to fall in line (most famously with Sinemanchin recently). 3rd party lobbying is then more powerful with weaker parties and separately elected reps who must cater to the marginal voter or power group in their district. Powerful interest groups are more powerful in a presidency!

Seeing as there's a broad but not ultra-strong consensus in both parties to Do Something with Big Tech, in a coalition parliamentary system a bill would've likely already passed. Whether you think that's good or bad is an exercise left up the reader, just wanted to introduce a new perspective :)
The distinction is unimportant, and if you care about it very much then you’re just losing on purpose.
Scientists didn't need to build a bomb, detonate it, and wait years to know that. Politicians just decided to ignore it because they thought that the economical gain for themselves outweighed the human costs for other countries. AKA Imperialism.
In those times i.e. nuclear age, scientists probably dreamed of every solution in terms of nuclear energy or explosions to solve things quickly, much as we think of ML today.

All these technologies have their limitations and it took some careful failures to realize and move to alternatives or tested traditional methods.
That's not that hard because the foundation of banking here in Europe is so strong. We don't run on physical checks here, we have working next-day inter-bank transfers and direct debits with more and more banks additionally supporting instant transfer, and most importantly we have way less fraud because we have actual identity cards for everyone instead of allowing everyone knowing your SSN to use your data to create fraudulent accounts.

The result is that European fintechs can skip a lot of groundwork that every US fintech has to deal with and we need less of them in the first place because stuff that needs fintechs in the US is available for everyone in the first place.
The one formerly known as GraphQL+-
I might just be dense (in fact, I'm sure of it) but it was not a pleasant experience, even if I did get the job done.
When I read comments like this on HN, I honestly wonder if the commenter believes this to be true, or if it's rhetoric or maybe trolling.
I was a programmer in the 80s. We had MS-DOS, Turbo Pascal (with it's damned fine documentation, in an actual book, and help files).

The hardware sucked, but we didn't have to worry about anything other than putting characters on a screen, eventually VGA graphics if we got fancy. There was one platform, the IBM compatible PC, and that was the only one I worried about.

We didn't have GIT, we had PkZip, and a stack of floppy disks with labels like "Source Backup v42 2/3/89". If we made a mistake, we had to manually revert.

I wrote "OverSeer" - a program that managed the inspection of Fire Extinguishers, using hand-held computers and barcode scanners from the Norand corporation of Iowa. Eventually it was adapted to other uses. It was written in Turbo Pascal. All the libraries were my own, including one to do cooperative multi-tasking.

Our customers were in Northern Illinois, and I was the programmer/tech.

As me anything. ;-)

[Edit - Extended description of the stuff I wrote]
That's a relevant point.

I'm right there with you on getting blackout drunk. I've never had any interest in mind-altering substances.
I'm a big fan of them, sadly there are a few issues, other than certificate management - safari doesn't handle them well at all in my experience for example
It does, it just doesn't close all attack vectors used by APTs.

It's an ongoing problem with the pathological Apple-haters that they imagine that Apple says or promise something, and spread that falsehood all over the internet, when in realty Apple promised no such thing. They see what they want to see.

In addition to the thread above, another example is the dozens and dozens of times on HN where they claim that Apple promises that its app review process will keep 100% of malware out of the App Store. Apple doesn't make that claim. It says that app store reviews help prevent malware.

It's like discussing politics at the Thanksgiving table. People hear what they want to hear.
API used in the PoC is not used during parsing of the traffic. In order to trigger the bug remotely you'd either need to chain it with another exploit or have a way of running arbitrary commands as a local user (e.g. by exploiting webapp).
That may be true of certain political societies such as the local conservatives, I'm not sure.

But Oxford is an anti-Brexit, pro-European place. The academics (there are a large number) and the locals both dislike Brexit and voted against it.

https://www.bbc.co.uk/news/uk-politics-eu-referendum-3661540...
I guess.
I don't like the name "yes" and I think we would have been better off with a more general name since the command is general, but now it's there, so…

However, this is independent from this optimization, "yes" already had this feature of outputting anything, I think?

But I expect this kind of accident to happen in any working system that has been long enough. This seems unavoidable.
So we'd better put up with this kind of mess probably.
Your linked source does not support the claim, but rather talks about efforts to restore Glass-Steagall in some form and their failure, which is not a loosening of regulations, but a continuation of the status quo. I do acknowledge that the repeal of Glass-Steagall itself was a loosening of regulation, but that was 25 years ago.
The part where they torture and kill animals is less cool, I guess.
You can look at the code to see to what great lengths it goes to exploit this.
The author of this paper has done something valuable, but the absolute rant in this twitter thread is frankly incredibly out there. They are dismissive of a purely chemical reason for depression. It quite simply must be due to a stressful event. Ok, so what? Does this mean it can be fixed without chemical intervention? Sometimes it cannot. How do they propose to fix it in those cases?

They are essentially advocating for a stance that the tools we have at our disposal today should not be as accepted, for the simple reason that they do not treat the exact correct thing. By this logic, we should not use chemo. It is short-sighted and really not of the level expected of someone doing any kind of research into psychiatric treatment.
I only know of CA because they bought my beloved Flowdock and did exactly what you describe, and it didn't survive, forcing us to switch to Slack.

I think Broadcom owns CA now.
In the good old *nix days the system provided pretty much everything you needed: C, perl, man pages, and well documented header files. Throw in a couple of good books on programming, and you could do a lot.

That's still the case, but it feels like today's software development reality is different. There are endless frameworks, apis, devops methods, scalability concerns, and n+1 standards with which to integrate and keep up to date on. Knowing your language is only about 25% of the battle, and few projects are developed in a vacuum.

It's not possible to keep track of all those things, so endless internet searches are the end result.
how do you reason about cash reserves then?
> There are sites which provide a temporary phone number for account verification

Wouldn't those all become blocked, flagged, or "already used" pretty quickly?
> Do you need to state where it was used or just that you used it?

If I don't state where it is used, that might work for me, but not for the next guy that comes along and wants to reuse a texture from my game in their own.

This is not just a theoretical concern, some Linux distributions like Debian can be pretty picky when it comes to copyright, so having a clear record of the copyright of every single file would be really helpful. A plain text file is ok if it is properly maintained, but it's also easy to simply lose some files in the process, as it is all done manually. Tools to automate that process that can be integrated into the CI would be very welcome.

My dream would be that tools like Gimp and Krita would be able to automatically keep track of the copyright of the images you copy&paste into them, as that would not just track the copyright of the original images, but also all the remixes that you produce out of them.
You got it a little mixed up. If the web port rejects connections there is no way you cand serve a web page to them, they cannot get to the web server.

Th term that you shoud be searching is "port knocking" though I don't know how easy is to do from a mobile phone, it's not exactly a nice user experience. And then you have to decide how long to keep an IP whitelisted and other inconveniences.

In the end there's real reasons everybody relies on web auth.
Huiuiu something will change the usa health care system.

Old companies should be careful.

And don't forget the other company who is already working in making drugs much cheaper.
DJs and music producers are exceptionally creative, but if they use existing work, they have to license it.
One is grass roots and the other top down.
Programmers. Do you work on your personal projects inside your 9-5?
If you find that, for whatever reason, there's a slot in the day where you can either do / ask for more company work, or work on your side projects... What do you do?
Maybe not in USA.
The process is not important, the idea is that a computer is able to generate new, never seen before, content that a human can understand.

This allows for incredible things, like having a world-class artist create a song drawing based on your prompt (i.e. DALL-E) in one second.
> I think you’re misdiagnosing the cause. Nearly everyone I know—my circle skews highly educated and well compensated—cares more about social issues than economic ones.

That's because they're liberals (or, worse, neoliberals) and liberalism is about aesthetics. It's about appearing to do something without actually doing anything. I don't mean this is any kind of perjorative sense by the way. I know many people like this too.

Take the Democratic Party. In response to the Dobbs leak the Demorats did... nothing. When the decision was handed down they sent a bunch of fundraising emails and texts and did... nothing. Well, other than "vote harder" messaging. The leadership has decided an issue with 75% public support is "too controversial" to tackle.

Why is the Democratic Party in this situation? Because there is always a rotating villain that blocks any action. Currently that's Senators Manchin and Sinema. In past years it was Joe Lieberman. This is by design. Everyone else gets to point at the rotating villain and say they tried but they got blocked and then fundraise off [insert blocked issue here].

Now look at an issue like homelessness. The most important factor that leads to homelessness is cost of housing. The one thing that would help above anything else is a housing-first policy, meaning giving homeless people somewhere to live. But rampant NIMBYism, even in heavily blue states like California, means that's a nonstarter. This is why you'll see people fund raise for homelessness without tackling the root causes.

This is what I mean by aesthetics.
You do a great job on crap jobs to get a good rating so people will look at your proposal for decent jobs. A friend did that for financial modeling jobs on Upwork after doing a CFI course and was making $50 an hour within two months.

And yes, there are many countries where a $1 an hour job would get a lot of applicants.
When I was a kid, I mowed the lawn for a neighbor who was a mechanic. He exclusively worked on Porsches.
He claimed most luxury cars would break down if you bought one and tried to drive it across the country. He rattled off some known issues that were baked into the manufacturing process, but rich people didn't care since it's mostly a status symbol.

This was in the late 1900's....
Or, better, the hash of it.
How about some kind of Firewall which sends requests only to trusted domains and blocks everything else?
There’s also that when you’re kind of big, there’s a brand to be maintained and that rarely involves presenting the dissected view of your stack. In fact at some it’s readily avoided by some.
I recently discovered, for example, that Django-REST is quite often used for big sites. Like Robinhood and Eventbrite.
You can have them, they just can’t be added while the mode is on. So they have to be added beforehand.
A software engineer doesn't know how long a task normally takes, as software pretty much never gets written twice the same way, so the base estimate might be wildly off - far more than any adjustment could account for. I would adjust for this when asked for high level estimates by giving my best guess and then saying that it's ±50%.

One part that isn't mentioned that I think would apply to both construction and software is that, in many cases, estimates are backed into based on budget/time constraints involved.

In my current job, aside from tasks that are small enough (less than a day), most estimates are closer to the minimum potential time to build a feature rather than an honest estimate that accounts for the risks involved.
It also means the server can turn off echo for sensitive things like passwords.
For the purposes of human life, extreme cold is never an asset. It is an absence of energy and will always require energy input to accomplish anything in such a climate.
Generally because the EU Parliament is far less corrupt than the US Congress.

The US is more of a "corporatocracy" than a real democracy these days.

Congress is even incapable of impeaching a president that tried to overturn an election by force. That's a pretty embarassing state of affairs for American democracy.
Mortgage is specifically for housing
Responding to this comment in good faith is easy: just examine legislation that was split along party lines and show that there are substantial differences between the parties on non-social issues. That would be a very convincing argument grounded in fact rather than impressions.
I think bash actually sends just "\n", the LF-to-CRLF translation is handled in the tty driver (it used to be part of the kernel, but no longer. Funny how Linux still has to translate text to use the so-called "Microsoft line endings" when it comes to terminals).
Have you looked at TinySeed? But they don't operate at a Series A scale in terms of cash deployed per investment. I suspect that the power law of returns in VC model requires really large outsized returns that cannot be achieved Without an all or nothing model.
No…You’ve nailed it. Create a hundred million “tokens.” Buy one for $10. Now you have a billion-dollar market cap.
Have you been self-employed before?
If you’re unwilling to make any sacrifice for the greater good then you’re asking the world to serve perfection to you without any effort on your part.

You can’t get a cheap second hand electric car that you can charge for free at your home? That’s unfortunate, but there are other options beyond “well whatever I’ll just get a petrol car then”.

Your government represents you, your government is not a nebulous self-sufficient entity that exists independent of you and your fellow country people. If your government isn’t doing enough, it’s up to you and the people around you to be a force for good, to do everything in your power to create change. Even if sometimes it feels fruitless, do it. Be the best you can be.

Also, the idea that you and I are shouldering the cost of the energy transition is completely ignorant to the realities of the world. The catastrophic disasters that we, the developed world, have created, are an order of magnitude worse in the global south than they will ever be for us. People are dying every day because of our choice to use fossil fuels, we are destroying the planet, your increased cost of living or exposure to the heat doesn’t come close to the suffering of people who are paying the price for our choices. Yes, this heatwave in Europe is painful, as is the cost of living going up, but perspective is important.
Incumbency
You mean "anti-monopolistic" regulations. That also answers all of your questions.

> This looks like it will kill competition and harm European innovation

I don't really understand how you got from "you are not allowed to stifle competition" to having less of it?
Zendesk is one of those… what’s better? Products… used many over the years and while I don’t like zendesk i can’t think of anything better.

There’s most likely is better but donno what is.
I'm aware of kdb+. It has an SQL interface and clients in multiple languages. How many of their users use the APL interface? And how many financial companies are planning on building new products on top of a technological dead-end from the 1960's?

There was a time when APL was taught in universities, and some computers came with APL-specialized keyboards. That time came and went because the bulk of mainstream software development went in a wildly different direction.
HELOC says hello
I haven't seen anything about that being the case.

So, if revisions to Apple's internal policies and review processes aren't posted in Techcrunch, then they didn't happen?
The Birdsong Project Features 220 Musicians Paying Tribute to Birds
The uncertainty doesn't have to result in people standing around though; that should [0] manifest as periods where the job site is empty because there is a short period of slack in the schedule.

And it is easy to over-sell the variance of tasks. These things have regular and predictable times with rare outliers. The challenge of scheduling them is nothing like the impossibility of scheduling a software project accurately.

[0] Lots of exceptions, yes. No I don't know anything about construction but I do know quite a bit about scheduling work.
One of Plowshare's proponents was Edward Teller. Teller designed the bomb that was tested as Castle Bravo. Castle Bravo's yield was far above expected and was a fallout disaster that was known at the time[1].

Castle Bravo was in 1954. He began to push for for Plowshare in the late 50s. Here he is in 1965 advocating for it.[2]

Read "The Firecracker Boys" if you are interested in a lot more detail.[3]

[1] - https://en.wikipedia.org/wiki/Castle_Bravo#High_levels_of_fa...

[2] - https://www.youtube.com/watch?v=Oa-IqOHDr_k

[3] - https://books.google.com/books/about/The_Firecracker_Boys.ht...
Politicians, executives, and celebrities are under constant attack. You can't just expect they halt communication.
It varies hugely from company to company.

In the bad case, your PTO rarely gets approved, and you never accumulate any to be paid out. Peer pressure is used to convince people to not take time off.

In the good case, leaders lead by example by taking time off frequently, and encouraging their reports to do the same. PTO is approved more often than not. If people start "abusing" the privilege, they get spoken to personally, instead of the whole team/company being punished by changing the policy.

I've worked at a place with unlimited PTO, and it was the latter case, and it was great. I never had to budget my time - I never had to worry that spending an extra day at the beach during the summer meant that I would have one less day to spend with my family in another state during the holidays. The time I took off seemed much more worthwhile than being paid out for 3 accrued days or whatever.
It's just one click and hopefully a password away. I use "personal CAs" everywhere, if you share the p12 file via a webserver it's installed by the browser when you click on the link, and share the password over phone or another medium.
Ancient DNA from Southern China Suggests Native Americans' Asian Roots
What made them so confident in their assessment of a low micrometer density in the first place?

Even as a freshman engineering student I remember that the exposed mirror design seemed oddly overconfident.
Well, if you live long enough, the definitions of words change.
Yeah, hash first, photos later may make the most sense.

Thanks to people chewing through this for me. Always a good exercise.
When it comes to "marriages to eight-year-olds" you get into the fact that minors have very limited autonomy. The overriding law would (presumably) be that it's not legal in any state, even the one that permitted it. But of course I'm just guessing there; the Supreme Court makes up whatever rule it wants.

The Full Faith and Credit Clause was widely discussed before Obergefell. Many people went to Massachusetts to get married when they were the only state, and were pushing precedents that it meant they were married in every state. Test cases often involved divorce.

As for point #2, yes, I concur. That's my point: the Supreme Court has absolute authority, and nothing shy of destroying the Constitution can override it.
Ask HN: Help? My YouTube channel was suspended
This morning I woke up to find my channel suspended.
My channel has one video, a walk through how to use a command-line tool I built in python. I have no idea why this would trigger a suspension.
Has this ever happened to you?
Is a link to pypi.org considered a "Links to websites or apps that install malware" that violates YouTube's external links policy
this is the kind of FUD that needs to be stopped. sure, if you get telegram spam, wont you be able to block telegram from messaging you so whats the big deal about this?
a bank approved someone's second mortgage to buy cryto? that's awful! i really do hope that crypto takes traditional banks out of business :)
are you pretty confident people are not taking home equity loans to buy crypto?
There's no guarantee your replacement phone number isn't already used in someone else's inactive amazon account.
Taking bets on first country to get into crisis mode: my money is on Italy
LV2 is a multiplatform plugin format
This is so jank. Why not just text them a password and use HTTP basic auth. It’s built-in on most webservers like nginx.
it certainly benefits US corporations at the expense of other countries' economies