skysight-inc/HackerNews huggingface dataset:
I do not know of a go-to checklist but as I work in the industry, I hope I can provide some tips from experience.

Any service that is needed for the day-to-day working of your business should be properly secured. You mention DNSSEC but it starts with the user accounts that are used to log in to your registrar, hosting provider, payment provider, any SaaS...
Generate unique, strong passwords for every business related service. Use a password vault like keepass or a service like 1password for secure storage and ease of use.
Multi-factor everything you can, and prefer to use an app or physical token over SMS-based multifactor. I have recommended Twilio Authy a lot due to the multi-device support and google authenticator compatibility.
Use DNSSEC for your domain(s), enable SPF, DKIM and DMARC for your mail, set up TLS for your website(s). Depending your needs, cloudflare has some great options for the latter.

Security of the endpoints and endusers greatly depends on wether your employees BYOD, what the network looks like and most of all, what you are protecting.
I recommend to search for some public "acceptable use policy" or "security policy" documents, especially in the context of ISO27001 and create an own policy based on that, depending on your needs and environment. Even better than policy is proper training for employees on security hygiene, how to avoid phishing and if relevant, secure development. Ceate an open environment for employees to report potential issues or mistakes.
Regarding secure development, OWASP is a great resource for anything application security.
HN is special, and you all here in this comment tree are the best of the best -- love the fact that everyone is having fun with this in such a civil way and historically knowledgeable way.

For anyone who wants the naming backstory, InvestorsExchange.jl was originally IEXTools.jl, but Julia's package registration automatic name checks didn't like it ("Name does not meet all of the following: starts with an uppercase letter, ASCII alphanumerics only, not all letters are uppercase. Name is not at least five characters long") [1]. So to Wikipedia I went to find the non-acronym name of the IEX exchange, which is "Investors Exchange" [2]. Thank you all for helping me understand why IEX goes by IEX in all of their branding.

[1] https://github.com/JuliaRegistries/General/pull/27989

[2] https://en.wikipedia.org/wiki/IEX
I would be very interested to meet the lawyer who cleared the phrase "While we will generally follow legal orders to restrict security and conduit services," for publication
> Ubiquiti is asking for $425,000 in damages.

- https://arstechnica.com/tech-policy/2022/03/ubiquiti-sues-jo...
That's not really what he says.

He says that Bitcoin, as a store of value but not a medium of exchange, converge to zero.
Next story will probably be that the suit was settled out-of-court :P
There was a lot of discussion from ex-Ubnt employees in a January 2021 thread※ related to outsourcing and incompetent management. From what I've read, they still show ads for their products in newer Unifi Controller web interfaces and don't have a way of disabling tracking.

But now that the Krebs retraction has occurred, my brain doesn't know how bad/incompetent Ubiquiti is these days.

Is there an updated-for-2022 source of info on Ubiquiti's problems? ie. what complaints are still valid, and which ones are not valid due to the cyber blackmail incident?

I was a big supporter from 2015-2019 and I still run their AC Lite AP + EdgeRouterX, but haven't updated them beyond 2019 firmware.

※ - https://news.ycombinator.com/item?id=25735032
Yup. This guy made it his "brand". As with everyone addicted to engagement, they eventually turn into stale repetitive loops meant as song to a certain camp rather than advance any sort of constructive understanding of the space.
Low Water Levels Disrupt European River Cruises
I'm sure it just depends on each product. Where it gets tricky is when customer service costs increase with trial users who aren't paying for the product. I mean, this isn't rocket science. Do you make more money with similar lead generation from credit card upfront or not?
Ha! 26. I sympathise - but have to admit, I am quite excited for this! I just know there are going to be so many interesting people there, doing so many interesting things!
https://archive.ph/cS5BN
Yeah, if there's one thing we all collectively learn from the last couple of decades I hope it's that data is better than blather.
Actually system text json does work with source generators and di can work with source Generators aswell.
Essentially the whole point of modern SSH CAs is to centralize authentication and authorization for servers, and to keep long-lived keys off your developer machine fleet.

If "no long-lived keys on laptops" and "central authority for who gets access to what with which credentials" aren't principles for your security practice, then you're right: there's not much of a win to switching to a CA model.
You might want indexing for linear list access. Here we have z in the dotted position of a nested list, which is tricky to connect to a simple index.

Even if we set nesting aside, our z could be in these positions:

z ;; z is the object itself
(z)
(y . z)
(y)
(x y . z)
(x y z)

and so on.

Numeric navigation of the tree structure is possible in various forms. TXR Lisp has the functions cxr and cyr which use a bitmask "address" argument to navigate the car/cdr links. The address 0 is invalid, 1 is a noop. Other than that, bit 1 means car and 0 means cdr. cxr and cyr differ in the order of the bits.

1> (cxr #b10101 '((x (y . z))))
z

I.e.

1> (cxr 21 '((x (y . z))))
z

To interpret the bitmask, we ignore the upper framing bit and follow the 0101 right to left: 1=car, 0=cdr, 1=car, 0=cdr. Of course, this just being a function argument, it can be computed. Any positive integer is a potentially valid address in some cons structure.

Indexing is supported, but doens't reach dotted positions; it is geared toward sequences, not cons structure.

2> [[['(a b (c d e (f))) 2] 3] 0]
f

That could be compressed into some kind of path mechanism where you just have the indices as 2 3 0.

The numeric address idea is inspired by the tree addressing system in Urbit's Nock. This is explained as a layer-by-layer enumeration using successive natural numbers:

1
2 3
4 5 6 7

Address is 1 is "this object". Then 2 is car, and 3 is cdr. Note that these have a binary structure 10 and 11. Similarly 4, 5, 6, 7 are 100 101 110 and 111. You can see that the bits mean 0=car 1=cdr, left to right, after skipping the framing 1 bit.

I swapped their meaning in my implementation and provided a right-to-left function.

I don't remember the exact reason I swapped the roles, but likely it was because linear lists are more common than nested lists. You do more cdr than car, loosely speaking. For instance, the simple positions in a linear list are all cdr operations followed by car: car, cadr, caddr, cadddr, ... if cdr is 0, then these look like 11, 110, 1100, 11000:

40> (cxr #b11 '(1 2 3 4 5 6))
1
41> (cxr #b110 '(1 2 3 4 5 6))
2
42> (cxr #b1100 '(1 2 3 4 5 6))
3
43> (cxr #b11000 '(1 2 3 4 5 6))
4
44> (cxr #b110000 '(1 2 3 4 5 6))
5

In other words, 3 is car, and then we just arithmetically left shift the 3 to get the other positions. If cdr is 1, then we have to left shift and mask in a 1 to replace the 0 that was shifted in.
This bears much similarity with this scam discussed on HN some days ago: https://news.ycombinator.com/item?id=32377063

> go to some platform with public credibility that allows you to insert unverified but credible data (Spotify, IMDb, etc.)

> create entries for yourself

> pay PR sites with some good SEO to publish about it

> use this data to persuade bigger companies staff/algorithms to think you deserve that badge/star/custom box on their products

Guess we'll see a lot of those scams being uncovered as the time goes, a lot of people still think that Spotify/IMDb/etc. has some strong background-check policy for user-submitted content.
Especially with single-page applications, I would love for there to be a way for a page to have either access to persistent store or network connections, but not both. A site could load all resources, then announce to the browser that it would like to have access to whatever it stored the previous time. The browser would grant access to the local information, and simultaneously take away access from ever initiating a network connection again. A newly loaded copy of the page would start in the same state, able to pull in new resources, but unable to read or write local information until it again gives up the right to exfiltrate.

It would be a one-way street that way. The page can take any network information with it into the private cave, but nothing from the cave may ever come out, nor may it even know if the cave is empty before taking that irreversible step.
This. Your life is your life, your job allows you to trade time for other things you need, it's not your life, or your life's work.
Normally they hired talent to prevent talents join competitive companies ?
Reminder that should be pinned to every time Stephen Diehl is linked. Diehl is the CTO and cofounder of an "enterprise blockchain" company, that directly competes with public chains like Ethereum.

All of which is fine, he's entitled to his own opinion. But what's extremely is that he doesn't disclose this conflict of interest, and in fact goes to great lengths to hide it whenever acting as a public crypto critic.
Intel originally called their copy of amd64 "IA-32e" when they first implemeneted it. I think it was because they did not want to steal thunder from their IA-64 architecture aka Itanium.
Hosting and DDoS protection are different services. Think of them like a landlord (hosting) vs fire department (ddos) situation - one of them can morally refuse their services to people that they think are doing wrong/illegal/immoral things, the other one doesn't.

Not that I agree or disagree with this argument - just wanted to point out what their reasoning seems to be.
I wonder how much we could reduce A/C usage by changing how we build. Contractors seem ignorant of traditional practices that used to help in part no doubt because they think they can throw A/C at bad design.

For instance, what if we used masonry instead of wood frame houses (masonry tends to insulate better; look at infrared pictures of American wood frame houses and European masonry). Also, orienting houses in proper relation to the sun and arranging rooms in a way that facilitates better air flow (embrace the summer draft). Also, evaporative cooling. I am not proposing we eliminate A/C, only find ways and build in a way that allows us to cool houses for cheaper or even for free.
That’s a fun fact. The US also roughly produces as much renewable electricity as total African production. Total African energy production is projected to grow faster than renewable conversion in the US, though.
Don't confuse simplistic world views with facts.

Also, I learned something about Armenia today.
Rings of Power TV show: Jeff Bezos thanks showrunners for ignoring his notes
In my opinion, the most interesting alternative timeline of Apple's history would have been had Pink/Taligent been released sometime around 1993 or early 1994, coinciding with the release of the original Power Macintosh lineup and thus beating Windows 95 to the punch by well over a year. In fact, it would have been quite revolutionary: a workstation-grade OS with protected memory, cooperative memory, etc. but installed on consumer-grade hardware; in our real-world timeline, this wouldn't happen until 2001 when Windows XP and Mac OS X were released (yes, I'm aware that the Amiga had protected memory, and yes Windows NT was around, though it was marketed to workstation users). Imagine everyday users having a rock-solid OS in 1993. Pink/Taligent would have also stolen NeXT's thunder since Pink/Taligent also provided an object-oriented development framework, but unlike NeXT, Pink/Taligent would have had a much larger install base. NeXT probably would have either pivoted or folded, and Steve Jobs would've probably been more well known for Pixar.

Then again, pre-1997 Apple courted larger companies like IBM and Sun for mergers. Apple under John Sculley almost merged with IBM; given the AIM (Apple/IBM/Motorola) alliance and also the fact that Taligent and was jointly developed with IBM, I can see a timeline where Apple and IBM merged as a way for IBM to take back control of the personal computer business from Microsoft and Intel. There are all sorts of fascinating possibilities.
> Crypto is the financial equivalent of astrology mixed with homeopathy

And that is one the main implicit reasons why people like and why it will stay.
I just sent my kids to their first day of school on a 97-degree day. In Portland, Oregon, which is about 100 miles farther North than Portland, ME. My AC has been on pretty constantly all summer. There, of course, is no AC at the school. Why the heck would their be? It's not even in session during the summer in a mild climate.

I remember when we moved in to our current house in 2015; we did the first summer without AC, but had it installed for the next year. Felt like a comfort/luxury thing. We had a bit of cash and thought it would be fun to have central air for the first time. Now I honestly don't know what we'd do if it broke.
NPR Dives into the Rise of the 'Stealership'
From [1], it would appear to be only $425k.

[1] https://arstechnica.com/tech-policy/2022/03/ubiquiti-sues-jo...
Words have meaning. If you want to understand the difference between hosting and providing security services, here's a good article: https://blog.cloudflare.com/cloudflares-abuse-policies-and-a...
Before AC, Americans mostly lived in cold parts of the country, and heated to get to a comfortable temperature. AC allowed comfortable temperatures in warmer areas, and there's been a huge migration to the sun belt. This process has decreased our energy needs, because the average American now lives in a place where the climate is, on average, closer to a comfortable living temperature than they did a century ago.
Mandatory Yubikeys should be on your list.
Litchi also adds a lot of customizable fly patterns (e.g. follow), and I can confirm that DJI apps have no idea that these other flights happened (to my annoyance, as I actually liked the DJI flight logs feature).

This also means anyone can use the SDK DJI created to run their own drones. If I get a lot of time I might be tempted, though my drone will probably die to my code..
I haven't checked, but I expect the chilling effect is getting most of them to not rock the boat too hard.

If you want an example for such targeting though, Liz Fong-Jones has a thread on Kiwifarms because she's outspoken and worked at Google (and thus being seen as more influential / more of a threat). The thread has also significantly slowed down after she left Google.
>and I earn much more money

Do you think it'd be possible to pursue this if it was the opposite? Instead finding meaningful work but with much less money?

I'm feeling the same way as OP in my current position as the work I do feels very meaningless in the big picture.
When exposed to mutagens like radiation do women fair better then men? If our DNA environment is getting more hostile would same/same chromosomes be more resilient? Would it make any / a measurable difference?
Ask HN: How do I expand my worldview and meet smart people online?
Going to a big school and meeting people with different backgrounds and interests has made me painfully aware of how ignorant I am. I'd like to meet people who will challenge me intellectually and act as a catalyst for my growth. I'm thinking of reading some lesswrong posts and hanging around in the comments and perhaps exploring that part of the internet. It's not perfect but it's a start I guess. What are some of your experiences with meeting people on the internet and how does one go about meeting great people?
And maybe not close their nuclear plants?

The timing of the 2nd invasion of Ukraine 2 months after Germany shut down 3 of its plants is suggestive.
I wouldn't say it is necessarily immature to use a paywall as opposed to ads. I for one sometimes prefer paying for a site just so i dont have to see ads.

Though I do agree, the bait and switch aspect of finessing seo and such leaves a bad taste in your mouth. Glad google penalizes such behavior
Yes GCC and Clang already do this in many cases, but it's not quite the same as what the posted compiler can do.
"This time, I missed the mark and, as a result, I would like to extend my sincerest apologies to Ubiquiti, and I have decided to remove those articles from my website."

I think that's reasonable.
The unspoken variable in many of these cases is body fat percent.
Dropping nazis from your service generally doesn't weaken the case for your service. For example, when Cloudflare did this in the past, it didn't harm their business.
I don't know that I disagree with the broader point here, but long-lived certificates are what you don't want.
It's $110k A YEAR
The subtitle:

> Study on fruit flies shows body cells prematurely die from LED screens
>Everyone makes mistakes.

Fully agree, which is why I said the same thing. :)

>Granted, this is probably in response to some legal action either in progress or already settled, but what more do you want from the guy?

As I said in my post, a stated awareness that he was used in a cyber blackmail scheme, and at least some nominal promise to try and be aware of that in the future. The difference here is between "I made an honest mistake" and "I was taken advantage of and used unwittingly in a scheme." I'm not interested in him self-flagellating and begging for forgiveness, as my concern is totally forward-looking. I believe this type of problem will come again, of people trying to unwittingly use his reputation to push certain agendas. If he isn't aware of that dimension of the problem then it's likely it will re-occur.

That being said, your point about this post made in a legal context is totally fair and had slipped my mind. I can imagine any apology/statement/etc getting neutered by lawyers for perfectly rational reasons.
FDA greenlights robotrippin'
Seems entirely fair, imo.

If, for example only, this was a significant contributor to global warming and impending doom, does it matter that our first world comforts are to blame? We don't get special exception just because we're used to a certain standard of living.

I desperately hope we don't need to abandon first world comforts. And i really doubt we would need to. However if, for sake of argument, that was the only solution - our answer should be to acknowledge the burden and take action.

This is all for sake of illustration though. Just that your comment seemed to imply because our first world comforts use more energy that it was somehow unfair to question the impact of said comforts.
Do I understand this correctly?

There was a minor data breach at Ubiquiti. An employee named Sharp was using this as an opportunity to extort his employer and exfiltrate data. Sharp was telling Krebs some yarn about the data breach being bigger than reported, which Krebs then repeated on his blog, accusing Ubiquiti of covering up a more significant breach. And Ubiquiti is claiming that Krebs knew the truth all along.

This sounds like a weird and complicated story, so I feel like I'm probably misunderstanding.
The public library may not want to curate Neo-Nazi books, but the police should not refuse to protect a Neo-Nazi from murder.
> Life is hard. Individuals consistently fail to act with everyone’s best interests in mind.

Yes, but Christianity gives people the excuse not to question their core beliefs - they just confess, repent, blame it all on Satan and carry on with business as usual.

> The offensive thing about Christians is that they’re a people that have acknowledged that they aren’t behaving appropriately in the first place and have come to the conclusion that they want to behave accordingly to the standard set in the Bible

The offensive thing about Christians is that they are constantly trying to impose rules from the Bible upon other people (e.g. abortion laws in southern US).

> When everyone is out there living their own truth, it can be offensive to learn about a group of people who reject the idea of their own truth and put their trust in the God of the Bible.

In other words, Christians consider themselves eternally right, and everyone else eternally wrong, no matter what evidence is provided.
It most definitely can be.

To have all of your privacy taken away from you.
Ubiquiti is so worried about suing Krebs meanwhile their brand reputation has turned to mud due to the quality of their products, both from my own experience and the general consensus I've heard online. If this incident had never occurred I still would have stopped recommending and using their equipment.
My dad ran a pet grooming business, and he went through probably a printer a year. I always figured it died because of the amount of pet fur in the air clogging up the printer, so at one point I asked him why he didn't put a door on the office to keep the fur out so his printer wouldn't get jammed up with pet fur.

He told me they weren't replaced because the fur killed them, it just wasn't worth replacing the inks since it was so damn expensive. It was always cheaper for him to replace the printer instead of replacing the ink, and because he never held onto a printer for much longer than a year he never bothered trying to keep it protected from the shop environment.

About the only think he ever printed was the occasional door flyer, checklists and general office paperwork, probably a single ream of paper a year at most.
> The negative externalities are interesting though

They're not interesting, because they're absolutely negligible. You're moving heat that was outside, back outside. Your house cooled the outside, and you're just undoing this insignificant amount of energy transfer. The only additional heating is from inefficiencies, which aren't so bad these days.
Or some people could just reconsider if they really needed AC on all that days.. or at that temperature.. how can such facts be perceived so huffy?
Video of Mysterious Drone Swarm over Navy's Most Advanced Destroyer Released
If that happen, that would be a transitory state.

The real value of graphic artists is not there, and it is likely to evolve with the collection of new tools that are being discovered.

In my opinion, and from my experience, anything that increase the productivity of individuals, and make the work "easier" is also something that make it more valuable.
It is meaningful to point out. As the poverty rate declines worldwide more and more people will start consuming like Americans do. There aren’t enough resources in the world to sustain that long term unless we start mining asteroids and find a cheap way to send our garbage to the sun.

The distribution of resources is grossly unequal.
Right, but this is what I’m asking. How do I, as a parent, use technology to better supervise my child when I can’t possibly monitor their screen constantly in person?

Tech can help us find a middle ground between in my day we let them run free in the yard and now my child am become zombie screen addict, destroyer of childhoods.
hysterical title! And if that is true, then it is equally true for all of finance and economics.