skysight-inc/HackerNews huggingface dataset:
Tell HN: Godaddy canceled my domain, gave me 2h to respond, then charged €150
I use my own domain to host a simple homepage. I also use it as a custom mail domain.
Initially, I bought the domain on godaddy.com when I was getting into the realms of software engineering.
I always found the user interface hard to get used to, but it never bothered me enough for me to transfer my domain.
Especially because I run the DNS through Cloudlfare and, therefore, I have fairly little contact with the interface of godaddy.

Today Proton (my mail provider of choice) surprised me with a warning that there were problems with the setup of my domain. A quick research revealed that godaddy had cancelled my domain. It showed up in the Redemption Grace Period. This status code indicates that godaddy has asked the registry to delete my domain. After 30 calendar days + 5 days following the end of the redemption period, my domain is purged from the registry database and becomes available for registration.

I immediately contacted the godaddy support hotline. Mainly because of my mail account and the services connected to it. They confirmed the termination. The reason given was that I had failed to respond to an e-mail - that was sent yesterday on a Sunday(!) at 9:51 PM. Then at 0 o'clock my domain was terminated. So I had a breathtaking 2 hours to respond. Which is especially fun because I go to bed at 10pm. :-D

To make matters worse, the mail ended up in the spam folder because Godaddy's reputation seems to be bad and was titled: "Update your privacy settings and personal information.". Even under normal circumstances, I would have ignored this email. How should someone suspect that in a few minutes from now on the own domain is going to be killed.

If I understood the service employee correctly, this mail means that something was wrong with my payment data. And indeed, there was an old credit card on file. However, a PayPal address was also stored there, which still worked. Via this address, I was later even debited the penalty fees that I supposedly had to pay.

After some back and forth with service, I was then given an ultimatum: Either I pay €150 fine, allegedly required by my government to be charged for domains that enter the grace period. Or I lose the domain.

The latter didn't sound very inviting, as I like my domain and also don't feel like switching all accounts to another domain/provider. So I paid the fee.

Godaddy confirmed afterwards that there were no further emails or announcements. The service employee even confirmed by phone that apart from the mail and the subsequent generous transition period of 2 hours, there would have been no further information.

TL:DR If you have a domain with Godaddy, just make sure that the payment information is correct. Otherwise, it might get expensive.
If this all worked in a fair way it would be treated similarly to sampling in music where the original artists get a royalty each time a track is used. If that source is clear like where it's "x in the style of y" using these elements of x explicitly. However, the complexity is often too great and how can you prove fractional sampling of your work? Very tricky as the article points out! It's also blocking many new forms of art if you enforce the fractional sampling idea in law.

On the other hand, small startups selling to customers who need to produce proprietary content could incur a risk with AI generated products. Aka the customer won't want to risk their product by including potentially infringing items (like with Co-Pilot's potential use of unpaid labour or open source code and other licences).
> the next release of Deno will include a new HTTP server. It is the fastest JavaScript web server ever built.

I feel unease reading untestable claims (with no numbers) about future releases. I'm made more uneasy by the fact that this is the second bullet point of the main tl;dr. It makes me wonder, what are the organizational incentives driving such a publication?
thats literally worth billions, and could be sold to many governments.

If thr right people don't buy these zero-days, yhe wrong people will.
The nice thing about Sub Zero is that the whole thing can be disassembled so when something does go wrong it can be repaired.

I inherited a 12+ year old one one with my apartment and have been able to strip it down to its circuit boards to clean, maintain, and repair it when needed which I love.

The bad thing is the company treats itself like a luxury car brand so OEM parts are a fortune ($400 for a shelf!) and if you aren't interested in doing the work yourself the certified repair guy is going to rake you over the coals like a luxury German auto dealer's service department for simple repairs.

Luckily, like with luxury car brands, the resale value of all the parts is basically $0 so you can get used parts (or even entire used appliances) super cheap and there are lots of compatible parts out there on amazon for reasonable prices (I recently had to replace the compressor switch which took about 10 minutes and a $10 part but would have been $200+ to have a tech show up).

Net-net it's the best fridge I've ever owned but even so I'm not sure I would have chosen to shell out the $12k for it if I had been the original buyer.
i never expect anyone in silly valley to do due diligence... it was a pretty obvious problem from the outset.

if you are making a product, then using copyrighted material is far from fair use, at least outside of the US.
"compat" mode has been supported for some months now: https://deno.land/manual/node/compatibility_mode
or the opposite - in ML terms more brain will likely just introduce overfitting - while less brain makes way for some neat generalization that is quick and works just good enough ;)
> It makes me sad that we are likely not going to see any new fundamental design rethink for security's sake in mainstream operating systems. It is cost prohibitive at this point to do something that gets security right for the world of 2022 and yet not break all the apps which would never be rewritten!

I don't think that's the case though. Microsoft overhauled the entire security post of windows during Vista. It wasn't a good OS when it came out, but Windows is much better for it.

But yes, if you're going to start from the ground up, you're going to lose a bunch of functionality. Not only due to the nature of rewrites, but also because of "what new limitations does the security model imply"?
I guess there's someone who orders the marketing department to say "1 million", while telling the operational side "10k", because his bonus rides on it.
It is not a big difference in geological time.
I'm just not sure why they haven't built in something like Apple's face ID. I know security experts hate anything that isn't locked down with 3 forms of verification but my goal is to have security to the point that it isn't a hastle every time I want to go to a new website.
As an aside, this was published last week, Imagine how much they could of done if they didn't have to do blackbox fuzzing, and how many holes in the device would of been closed.

"Attacking Titan M with Only One Byte" [0]

> ...Titan M, a security chip introduced by Google in their Pixel smartphones, starting from the Pixel 3. In this blog post, ...we show how we found this vulnerability, using emulation-based fuzzing with AFL++ in Unicorn mode. Then, we go over the exploitation and its inherent challenges, that eventually led us to obtain code execution on the chip.

[0] https://blog.quarkslab.com/attacking-titan-m-with-only-one-b...
Applovin, despite their name, would have made much more sense than ironsource. At least the former is not a literal malware company.
Our society is not perfect. A large number of antisocial things are legal. It is completely reasonable to criticize somebody for doing a thing that is both legal and also antisocial.

I feel for this guy. He is getting screwed by a high-violence region. But his approach to solving this problem makes the world worse, not better.
I've lived most my life in the Apalachicola-Chattahoochee-Flint River basin. My Granddad would take us down the Chattahoochee River in the summer on his boat toward Apalachicola and we'd swim at the beaches and eat at Boss Oyster and climb up and slide down a huge sand dune along the bank of the river. It's a shame this happened to it.

> I ask Schoelles why he keeps the journals and what will become of them. “Just for the hell of it, really,” he says. “They’ll probably get thrown in the trash when I’m gone.”

That's a pessimistic thing to say, but I can't dispute it or say I feel differently. Individuals can do everything they possibly can to save an environment -- Not "the environment", a distant idea of rain forests and coral reefs, but a particular environment, one they've spent their lives in and depend on for their livelihood -- and another individual's decision 200 miles upstream (or 1,000 miles upstream, or on another continent) can undo all their work and more, and there's nothing they can do about it.
But are there any of those you’d want to suggest somebody else read?
Now it's working for me too, must've been the good old HOD. Thank you anyway, much appreciated
Co-living is actually pretty great when done properly: it’s not a solution to the housing crisis, and suffers from the same economic problems as WeWork did with office space, but as a resident, it’s great — assuming you want to live with other people.

Most co-living spaces end up going broke (including the one I’ve lived in) so I don’t have much faith in Flow’s viability if it is co-living… but it’d probably be great to live there on VC’s dime (just like WeWork was great when subsidised by VCs).
> If that were true then you'd be advocating for trains and trams, not trucks, buses, or cars.

I am literally doing that. I love trains and public transport. I'm a huge advocate of increase use in local cargo trains. I am even a fan of cargo trams. In the city where I work Zurich they have started using cargo trams for things like garbage and that's amazing.

I'm also a fan of electric trolley lines on highways for trucks rather then pure battery electric.

But we are not debating that right now, we are debating battery trucks verses hydrogen trucks.

> But you presumably still want government handouts for BEV and EV charger development.

Not really actually. I much much prefer that investment going into general urbanism including public personal and cargo transport. Given 75k cars a government handout is insane policy.

What I would support carbon tax and also toll booths for driving into cities.
> Really, what would, in the mind of those on the internal committee, constitute justification for the $1 Million bounty?

Probably something that doesn't require physical access to a key for longer time to extract the keys?
Steam Deck – Full Progress Overview After 6 Months on the Market
>> I’m tired of the dominance of the out-of-order processor. They are large and wasteful, the ever-popular x86 is especially poor, and they are hard to understand. Their voodoo would be more appreciated if they pushed better at the limits of computation, but it’s obvious that the problems people solve have a latent inaccessible parallelism far in excess of what an out-of-order core can extract.

One thing I find interesting is the recent focus on branch predictors. OoO designs like Zen and *Lake have been seeing performance improvements due to better branch prediction (and going back, things like trace cache) which strongly suggests that flow control is very important and therefore, data-parallel code is not the majority. There is no architecture that optimally fits "general purpose computing" so we have OoO, Vector instructions, Hyper Threading, Multi-core, GPUs, and TPUs.

My hope is that GPU/TPU/ML will converge on something that is very good at all 3. But maybe my hope there is due to my lack of hands-on with those.
> hide secrets from its owner.

It makes sense to use exactly the same technology even if you are "the owner" unless you are somehow only ever running software you wrote on data you obtained, and maybe not even then if other people are able to influence that data.

Most of use a lot of software we didn't write, to process data we got from some third party who may or may not have our best interests in mind.
You can use a mind mapping tool and limit your expansion radius. I've had some success with that.
Installed it, and the code in the README won't even run, so I guess it's not quite ready for messing with. Looks interesting in theory, though . . .
I think it requires balance. Seems to me like the more you can consider the better decision you can reach, but there is a point where thinking more is negative value, and you must decide.

“The instant of decision is madness”

-Kierkegaard
It is raining 10/12 months.
This. I've received consistent feedback (from mentor, from family, etc) to do less second-order analysis. It can be very productive in some specific scenarios, especially when I used to do initial architecture; but these days, it's a complete analysis paralysis. Moving from technological architecture to people leadership / client relationship management, second order thinking brings up so many pros and cons for each action, with insufficient data to weigh the balancing.
well there are cases where owner and current user aren't one and the same. Like an ATM terminal, or when someone else is using your computer.

The whole security landscape seems to have many catch-22's
Not understanding the question
Since February, yes. But in the decades of the Iraq war and then Afghanistan conflict? They were villainized.
How do you do knowledge transfer in tech teams?
Hi - I want to learn how you manage to do knowledge transfer in tech teams when people are leaving or new folks joining? Is it more of keeping things documented in Confluence or something, or are there any better processes or methods to do it?
Interaction via a hidden physical connection would only be instantaneous if that connection were zero length and only apparently faster than the speed of light when the connection is shorter than the shortest apparent path between the two points.
Staffing would play a major role as well with their HQs on the west coast.
Having all data in a single steam also makes it easier to buffer messages like a complete log entry with colors and then output that by just writing one buffer to stdout.
If in their analysis, they come to the conclusion that they shouldn't be skeptical, does that make them the best skeptic or the worst?
Network wide, or just for your own browser ?

There are a number of addons for Chrome/Firefox etc that allow you to block sites, usually for staying focused during work hours.

If you want to do it network wide, you could utilise something like a PiHole, but that's a bit extreme for blocking access to one site.

The other option would be to put an entry in your hosts file for www.youtube.com etc and point them at 127.0.0.1.
$23M YouTube Royalties Scam
My house is all made of wood: http://giuliomagnifico.blog/networking/2022/01/14/my-home-se...
I'm on mobile and the site does not look like that. Might be your connection
That is the best solution.
I have to admit that I did not see it coming. Ignorant of AI's capabilities, I always imagined it to automate away our boring, mechanical, repetitive stuff. Which in some hopeful utopian scenario would mean that we could focus on the humanities: family, health/sports, culture and anything creative.

For AI to come for art, at the very core of our humanity (the oldest cave painting is 64K y/o) is quite the confrontation indeed. One that will rapidly escalate more broadly (poetry/writing, photography, cinema, music) and more deeply. The amount of AI art will explode, in turn serving as input for even more AI art.

The speed at which this will happen suggests to me we need to be far more alarmist in coming up with answers to many questions. Philosophical, legal, socio-economical, etc.

I really think the attitude "I'm not an artist so this will only benefit me" is shortsighted, and I'm saying that as a non-artist myself. It's like we're at the beginning of a very short and steep exponential curve of total disruption.
Did you read the article?

The article says there might be a flaw, and it would be a huge deal. It does not state those phones are broken. It does not extract keys, which would be needed in the case of Sony cameras to sign fake pictures.

Here's a later followup article from Elcomsoft, one of the best security firms around [1]. The key quote: "checkm8 does not affect the Secure Enclave."

So no, they did not extract keys needed that would be needed to sign new phots for the Sony phone.

And later iPhones have removed this as a vector. It's unlikely Sony made the same mistakes quite old iPhones did, since they have the ability to learn from past security issues.

[1] https://blog.elcomsoft.com/2021/05/checkm8-based-extraction-...
Blitz is very different. Next.js and Remix are comparable, but Blitz is a toolkit you can use with Next.js (and also Remix once we finish a bit more work). Blitz picks up where Next.js leaves off, providing libraries like a type safe RPC layer and auth and conventions like how to structure your files and how to implement multi-tenet apps.
I'm not a Tailscale employee, but Tailscale works on FireTV, so it is clearly not reliant on Google-provided services. They also provide a build for F-droid from the same code base that doesn't use any external services. https://github.com/tailscale/tailscale-android/blob/main/and...

As far as I can tell, the only Google Play Services API the app distributed on the Play Store uses is Google account authentication via the Play Services Google account picker.
What is hard to understand about "minimum standards". It's a floor not a "get close to"
So how's Flowcarbon doing? Was that a good idea?
The printer market is probably one of the worst when it comes to this. Everything just keeps breaking down and not working and I don't know a single company that makes printers that actually last.
F&M is not actually among the top employers [0]. Whereas in State College, Penn State is the top employer by a ridiculous margin [1].

[0] https://en.wikipedia.org/wiki/Lancaster,_Pennsylvania#Econom...

[1] https://en.wikipedia.org/wiki/State_College,_Pennsylvania#Ec...
For some reason I had the impression that us-east-1 was kind of the flagship for AWS, although actually typing that out seems quite silly.
I run this simple shell script to make daily incremental backups of my home folder using Borg. It works really well, haven't touched it in years [1].

1: https://gist.github.com/adewes/02e8a1f662d100a7ed80627801d0a...
> Asian christians pray in separate churches and are buried in separate cemeteries from White Europeans

I can only speak to my own experience and this is not mine.
With a 4 sided die, the game will end on the first turn about 6% of the time. The Scholar's mate takes 4 moves. And if the other player rolls a 1, then it's a win for white.

Yeah, kings playing en-passant, rule 2, seems useless. The king moves in all eight directions, you can just like, take the piece. If the two kings try to pass each other, the passing king will check the opposing king, end the turn, then you just take the piece. Unless you're automatically checking the piece when your turn starts, in that case, it's just a stalemate as each king is checking the other at the start of the turn and ending the turn.

Third rule is just promotion but for all pieces. This is just saying "and everything becomes a queen".

Fourth rule is just a more relaxed version of castling.

Fifth rule is to just get new pieces on the board, because otherwise, the game ends in a draw. No one is going to willingly put their king next to the other king. Also "starting position" is kind of nebulous. There are 8 of them. Do I get to choose which column to start the pawn on? After that, it's just a race to promotion.

The rule about allowing another turn after check just extends the game. And unless you roll a 1, you should be able to get out of most checkmates.

This is adding more rules, not adding complexity. Every rule is to make the game easier, removing restrictions. The die lets you get around the 1 move per turn rule. Rule 2 is pretty much for decoration. Rule 3 gets you faster promotions. It's about who can get to the opposite row first. Rule 4 makes castling easier. Rule 5 is about not wanting a draw. Because with Rule 1, sometimes the king can take a queen with no assistance. This is a game the creator thinks is brilliant and thinks shows how smart they are because they are virtually undefeated because all of their opponents eventually get tired of playing because it's just so tedious.

It's like all the rules added to Monopoly. They're all to make the game "more fair" or "better", but all they wind up doing is making the game take longer because no one wins.
Own Music Own Books
“Owning media is now an act of countercultural defiance”
>2022-06-20: Quarkslab sent Google a new exploit that demonstrates code execution on the chip and exfiltration of encryption keys from it. A detailed description of the exploitation technique, the exploit's source code, and a video showing its use to exfiltrate a StrongBox-protected AES key were provided.

This sounds close enough to me, but perhaps there's some subtle nuance between device keys and other keys in the chip.
The problem is that the article takes on this hyperbole-laden all-or-nothing tone that does nobody any favours.

If you go along with the all-or-nothing mentality, then local file system access is pretty much game over anyway.

If you want to take the security-in-depth approach, you have to first apply it to these password managers and take an honest look at the problems they solve. And it turns out they’re amazing from a cost:benefit benefit perspective.

Put differently: go read the spectre/meltdown papers. Imagine if _those_ were written in the same tone this is. That’s the problem.
And a lot of electron apps tend to have web versions anyways (I mean why not, right?), so you're probably supporting all the big browsers already, so you might as well use the platform's native webview.
Google started deleting old emails, big companies seems to see record keeping as a liability so it is important for them to control this infrastructure so that no inconvenient messages remains in the system when the inevitable lawsuits comes.
I need to clarify that when I said "more beneficial", I was comparing Japanese with Korean. Chinese should beat them both very handily. When I was started learning Japanese more than 10 years ago, my tutor actually said she regretted learning Japanese instead of Chinese. Even back then, Chinese provides you with alot more opportunity.

Japan has a lot more investment into Vietnam than Korea (both officially from government, see (0), as well as Japanese companies either utilizing Vietnamese labor or making investment into Vietnam. So Japanese has an edge if you want to learn a second foreign language.

Latin alphabet completely replaced Chinese in Vietnamese language. We still have loan word that is phonetically from Cantonese with similar meaning to the Chinese counterpart. They are being spelled entirely in Latin alphabet. They are called Han-Viet (hán-việt).

(0) https://en.wikipedia.org/wiki/Official_development_assistanc...
You can use a single key (e.g. YubiKey), or the security key in a[n Android?] phone.