skysight-inc/HackerNews huggingface dataset:
> Maybe I'm too paranoid. Thoughts?

Yes. They aren't using these features to serve you ads. They aren't using them to lock you in to their platform. They added these features because the vast majority of users are not particularly technical and they want some dashboard they can login to to see some cute metrics about their system. They added these features because downtime alerts are genuinely useful but it is difficult to implement without some sort of remote connectivity. And if your local utility needs the data for some reason, or needs the ability to coordinate power delivery to the grid, either now or in the future, there is a mechanism in which they can do so.

The number of users who consider this an anti-feature is such a small minority of users that it isn't really worth their time to accommodate. IOT certainly has its issues. TVs absolutely don't need it. For other appliances it can be a toss up. But there are also genuine use cases for it.
> GraphQL honestly gives me the same vibes.

Not that this is particularly relevant to the discussion, but GraphQL is actually much closer to SQL than most NoSQL solutions because it's statically typed and the schema is statically defined. The GraphQL schema acts as the contract of what the API can serve to the client, much like a schema in a relational database.
It'll be a good time to start a company when people no longer want to invest?
I think it's a bit silly to target face recognition. The data's already there, so to say "yeah you can have all this video footage, and you can review the footage all you want, you just aren't allowed to use a computer to analyze it" is dumb. To the extent that further privacy protections are needed they should be enforced at the point of data collection/retention, not at the point of analysis.
Hijacking for tangentially related question:

> It might be wise to engage a security firm to conduct an investigation if you don't have in-house expertise in this area.

Any good security firms you recommend for a small to midsize website?
There is no sarcasm here. Zero.
Some of these features probably lead actual usage. If you'd asked in 2009 how many people wanted to adjust their air conditioner temperature remotely, command their vacuum to clean, or see video of their front door when the delivery driver drops off a package, I'd bet those numbers would be low, but we today have IoT poster children like Nest, Roomba, and Ring making those desirable features.
One Month Without the Internet
Presumably it also applies to humans, but only α and β rays, not γ-rays or cosmic rays. If a space suit or a spacecraft skin can't stop it, your skin isn't going to stop it either.
I hear the Great Chinese Firewall is pretty good at blocking VPNs, they'll likely be able to block this one pretty quickly.
Yeah, Silver simply tells us the odds. Someone did the analysis on it at one point and 538 was "right" at about the rate of their percentages.

i.e. For all the times they called an event 65%, it happened about 65% of the time.

So they weren't "wrong" the other 35% of the time, it's just those are the times the 35% chance bore out.

People have a habit of assuming "is likely" is the same as "guaranteed". Or that that's what the caller believe will happen. And then using the event once passed to discredit the initial analysis.
Its surprising how effective media censorship can be. Anything the media wilfully chooses to ignore immediately becomes a "fringe conspiracy theory" no matter how real it might be. And any attempt to discuss the subject is viewed in this way.
> Your civilization is collapsing because you're fighting each other, not because of climate change

10% of all deaths each year are due to air pollution. There's pretty much no place on earth where unfiltered rainwater is still safe to drink. Ocean acidification is accelerating and killing off the organisms that are both the biggest producers of oxygen and the biggest sequesterers of carbon.
I'm fine calling anyone who lies to immigration a trustworthy patriot. Believe me, I've been fucked with endlessly by DHS/CBP. They even got a federal search warrant and cavity searched me, and racked up thousands in medical bills in my name by cuffing and dragging me to hospitals and lying to doctors claiming there were drugs up my ass. They (CBP) has threatened to deny me entry to the country (with a US passport), to revoke my passport (with no legal mechanism), and all sorts of bullshit -- they're the biggest liars in town! I think people who don't cooperate with immigration services are the trustworthy ones. Hell I think the asylum seekers are probably 'trustworthy' as anybody else -- just often not in their claims.

I understand 'bad-faith' is practically a requirement for many people claiming asylum. I get it.

I readily acknowledge they are generally more law abiding. I only contend that a great number of 'asylum seekers' are gaming the system. I find that perfectly moral, but I aint no fool about what's happening.

>Every study I have come across

The (2/2.5/4x) you cite from the study is undocumented immigrants, not people formally documented as asylum seekers and permitted into the country.

I appreciate you taking issue with my claims. Hopefully this feedback correct your behavior.
You can just use a friend's account ? There is no way of banning someone really.

Growing up with the internet it always felt these companies were playing with fire. I can't explain it. The 90s were a wild time I guess. That generation knows about using fake names and addresses.

I guess I have never seen these businesses as proper businesses like the local mom and pop shop whose owner you know and respect and who respects you.

But google and other such companies always feel like they are trying to use you and you are trying to use them.
I mean, strongly typed flag values are a solved problem. It’s not rocket science, just bothersome to do in C++.
I can imagine people having almost exactly the same conversation in hypotheticals.
A motivation would be to increase the likelihood of one's perceptions of what's going on aligning with what is actually going on (which is what Trump supporters are often criticized for).

Whether this qualifies for being worth it is largely (but not necessarily entirely) a subjective matter.
Generally I agree with you, but Nate Silver has yet to perform poorly.
An Executive Order is not good enough, frankly. The US needs real legislative change in order to be considered adequate under EU human rights law.
> WFH will reduce middle management and "prestige" employees as more efficient workflows evolve

It also removes geographic limiters that drive up the cost of certain pools of labour.
Agreed.
That's already one of the things I have on the list for v2, "make image summoning more obvious/loading" and also we'll improve the button location for "Summoning new images" because it's likely that users won't want to scroll to the bottom just to generate new images.
Well, when you're driving and you get pulled over, you show your driver's license to the police and they don't arrest you for driving without a license.

It seems like asking to run code on other people's machines is a privilege, too. Unfortunately the World Wide Web has trained consumers to grant that privilege willy-nilly to every web page they visit. I am thankful that code signing and validation is ending the party in that way.
A very subjective opinion. CPU performance depends on many factors. The article does not give the results of `perf` performance tests. There are no given kernel parameters either at compile time or set late `sysctl` parameters. How is the RAM allocated to the CPU cores? How are IRQs used? Does RAM have support for error correction? The only fact the article claims is that by setting the `mitigations=off` flag in the system configuration there is some misbalance which can make certain tasks execute slower under certain conditions.

Pardon my English, it's not my native language.
HTTPS is trivial to break with a man in the middle attack, yes you get a scary warning in your browser about an invalid certificate, but I'd bet that 90% of people will just click through it and ignore it.
Plus, Firefox is soon implementing HTTPS-Only by default if I remember correctly. What was it, maybe 2016 there was a big push for SSL and the majority of the web, even login and payment pages, were HTTP? Now only a small percentage of the web isn't HTTPS. I have HTTPS-Only enabled in Firefox and rarely do I have to click the 'Continue Anyway' button to browse an HTTP page. For most general users that only use popular services, I'm sure it's even more rare.
Good riddance. Fuck cloud gaming. It's a bad idea, with the true goal of blocking access to the very binaries of the games being played.
Or you could use the newly announced Bitwarden + Fastmail email alias integration.

It also works with 1Password. Neat stuff.

[1] https://bitwarden.com/blog/use-bitwarden-to-generate-email-a...
The premise of virtual tables (Postgres FDW) is to not store the data but instead query it from the original source. So, the primary performance challenge is API throttling. Steampipe optimizes these API calls with smart caching, massive parallelization through goroutines and calling the minimum set of APIs to hydrate the exact columns requested. For example, "select instance_id from aws_ec2_instance" will do 2 API calls get 100 instances in 2 pages, while "select instance_id, tags from aws_ec2_instance" would do 2 calls (instance paging) + 100 tag API calls (one per instance). We've also implemented support for qualifiers (i.e. where clauses) so API calls can be reduced even further - e.g. get 1 EC2 instance without pagination etc.

The Postgres planner is not really optimized for foreign tables, but we can give it hints to indicate optimal paths. We've gradually ironed out many cases here in our FDW implementation particularly for joins etc.

If you can tolerate my Aussie accent, I explain many of the details in this Yow Data talk - https://www.youtube.com/watch?v=2BNzIU5SFaw
He spent his teenage years reading terms and conditions, let not pretend he didn't make mistakes.
nextcloud leaves plenty to be desired even for home use. Slow, bloated, buggy, etc.

And at the end it’s just access to the files, that a samba share does too, with native OS applications.
In addition, reasonably strong evidence points towards shifts in microbial communities that can induce cravings. Thus, your microbiome can be "addicted" to certain foods and pass that on to you. Intervention at the microbial level may be helpful for some people, including microbiome transplants. However, my impression is that we're still largely stumbling in the dark in this area.
Sure but that doesn’t mean they should be banned for life. If you commit a crime as a minor does that follow you around for the rest of your life? At least where I live, it doesn’t.
I've at least tried out all of the main game streaming options (GeForce Now, XCloud, Stadia, Steam Link, Parsec, etc). Maybe it depends on what games you play or your skill level, but latency/jitter has really only been an issue with using self-hosted options like Steam Link/Moonlight from a network with low upload bandwidth. And to some extent with OnLive, which doesn't exist any more.
The story here is USA constantly meddling around the world, while claiming to be the victim of unacceptable meddling.

Abandoning diplomacy and international agreed nuclear agreement, in favor of spy and sabotage, planting the seeds for the next "revolution"
Show HN: Light Text Pre-processing – create a chain of built-in regex rules
I had problems with Windows Defender finding a false positive in the output of a product I was working on. This was an EV code signed MSI package with signed exe. This eventually inflamed SmartScreen and despite getting the thing sorted as a false positive by the AV guys it took 3 months for it to stop being flagged.

After working on Microsoft dev for ~20 years, 2019 was the last thing I touched. I handed everything else over and moved on. I will NEVER deal with that company again. Nothing but fucking shit for that entire time. The grass /is/ greener on the other side.
I really like working inside a terminal, and I like being able to navigate seemlessly between code tabs and terminal tabs as though they are one. I can do this easily in vim+tmux, I can't do this easily in IDEs where the mouse is considered first-class. I do miss certain features of IDEs, but being able to toggle between shells, tabs and code is my killer feature.
Context and intent is also the first to go in the censorship witch-hunt.

Google has fired many an engineer that mentioned that.
> They aren't using these features to serve you ads.

Yet.

Experience tells me that everything will eventually turn into an ad or data collection platform.

Furthermore, even if there is indeed no nefarious intent from the third-party collecting & storing your system's telemetry, if you don't get any benefit from it, why give it to them? It's still a risk they (or a some malicious attacker, or the government) use this data in the future in a way you didn't expect.
IR is incident response, it means you find out everything the bad guys did and how it was compromised and fix it all. You should contact a security company or professional to help you if you don't know. I have used the webshells of compromised sites where the owner tries to cleanup but the webshell is still there hosting different campaigns.

You should secure your site better and have someone who knows what they are doing (there are paid WAF and web security vendors) monitor and respond to security incidents. You are not being punished, MS is protecting its customers. You should blame the hacker not MS for the impact of the hack. It's like someone messed with your car tank and tires and the police stop you from driving it because it is unsafe to other drivers, they are not punishing you but protecting other people from being hurt by your property.
And Gödel, of course.
It seems that both had alleged collaborations with PRISM. The main difference I see between the two wiki articles, is that people complain about Microsoft's telemetry but not Apple's (even though they do have a lot of telemetry [1]).

In general it feels like Apple has won the trust of the public, partially through good products, partially through good marketing.

[1]: https://mspoweruser.com/macos-big-sur-has-its-own-telemetry-...
> Hopefully this feedback correct your behavior.

What behavior?
I read about the multitasking of DOS programs in some round-up of DOS multitasking systems (DeskView et al.), and convinced my boss to fund experimentally adding 4 MiB of RAM and a Windows 3.0 license to my 386-based clone. I got a build (cross-assemble) of my code going, and then entered the Brief editor, and pondered what exactly I had enabled. Then an in-house utility was invoked from the makefile to download my code into the target, and my whole system froze. Thus endeth the experiment.
What could I say to convince people that this is not the case? Like I have a small team trying to revolutionize nuclear power deployment performance with a highly customized PLM app but on paper it just seems to sound boring.
Zed and Helix are both pretty new.

There's demand for plugin frameworks/scriptability in both but neither of them support it yet. I fully understand why people who need to script their editor are sticking with [neo]vim/Emacs — there are very few other options at the moment.

https://github.com/zed-industries/feedback/issues/388

https://github.com/helix-editor/helix/discussions/3806
I remember registering with an non-adult affiliate marketing company as a kid. I'm pretty sure they knew I was young and they just didn't care. Either they used that as an excuse to rip me off or none of my leads ever converted lol
Disagree: $Evil_Site_Owner can easily test MS's blind spots by putting malware on numerous web sites, then seeing which of those sites are flagged. And if MS is not systematically scanning all the URLs...well, "MS failed to notice malware at $URL, which my web server logs say MS has not visited" is pretty useless information.

(Not that I think MS should enumerate malicious URL's, unless $Site_Owner is paying for scanning service. A "we noticed malware at $URL" is generally 95% of the possible value of such disclosures.)
The motivation to commit to strategy applies to one's own country / one's allies.

Putin might want to make sure no one pressures him to reopen the pipeline.

German leaders might want to make sure no one pressures them to reopen the pipeline.

Etc.

I'm not claiming that this was the actual motivation for the attack, of course.
It’s obviously 129 to 127 inclusive, hoping that the implied unsigned overflow has the correct consequences. ;)
And it’s difficult for facebook to argue that apple giving users the option to keep their data private was anticompetitive.

This is the classic problem of building on someone else’s platform. I know facebook tried their own phone and bubble based android launchers, but they seemed to give that up too easily. In comparison to the money being spent on meta, attacking their weaknesses on the device front might have been a better avenue. They could have bought their way in rather than building it.
Forgive me if I am incorrect, its been years since I have used it, but don't you need to link a bank account and social security number to receive money from Adsense?
> Access denied

Why are grocery store websites like this?

Anyway I just got back from the store. I bought: 2 pounds of pears ($3.50), 1 pound of carrots ($0.90), 1 pound of celery ($2.00), 1 pound bag of chips ($3.50)

What does that prove? Not much, except that fruit seems to be in the price range of vegetables, and I wouldn't characterize either of them as expensive. The celery was a bit more expensive than the pears, and the carrots were 50% cheaper. Both fruit and vegetables are cheaper than junk food, so if you can afford junk food you can afford fresh food too.
That is such a weird take. You get assholes and script kiddies the moment your IP interface starts accepting packets. If you don't advertise to people who can help you (be it customers or potential advocates/partners) then what on earth are you doing?

I put my company's website in my HN profile. Go ahead, make my day.

(I'm not the OP and as far as I know don't have any security issues)
> Police are not funded by Congress...

Yes, they are; out of very roughly $125 billion annually in funding for state and local police, about $20 billion comes from the feds through DOJ programs that support them, and some comes through other federal funding streams.
> Also, someone correct me if I'm wrong, but isn't the bus factor 1 on vim?

There's a bunch of people who are "members" of the vim organisation on GitHub. I don't know if they have full admin privileges or just commit/issue access. I never really understood why this has to be a problem in the first place: can always clone the repo and continue working on it if Bram disappears.
Can you please give a concrete example of what Apple should do, in your opinion, to expand their API targets? And how is that related to web standards complexity?
I concur completely. I was having my young son learn how to use the computer focused on input devices and simple UI interactions by having him annotate buildings and pools in OSM for a few random towns friends live in. I thought he'd very much more enjoy this if it was gamified in some way. He did it, got the hang of the UI, but then it grew tedious so he moved on to something else.
> brutal and gritty world

I think that's the attraction for early adopters who build much of the foundations. Sort of like crypto, web3, DeFi and all that right now. A Wild West were only the smart survive and you can buy drugs and guns if you know how.

Zuckerberg's vision of the Metaverse is blessed by human resource managers who insist everyone follows the code of conduct and no one has genitals. It's bland and comfy, like a mall.
I guess some Simpsons episodes will have to be revised.
They are not guarding the world but their windows users that don't use chrome but edge and IE (MS browsers) in this case, google and firefox also do this by default.

Leave it to HN to get me to defend even MS lol.
What's there to get? Who cares? Pretty much no one, and almost all cases will be unenforceable. It's pretty safe to say that for every case caught there's a ton of cases that aren't.

I would be interested to know what kind of shadiness, if you somehow see this... I imagine similar stuff to what you see in nursing homes; pretty messy business there, too.
Advanced Scientific Data Format
https://ibb.co/TR9sWj8
Free Marketing with Startup Founder Daily
No... It's a demonstration of adherence the axiom "Don't let perfect be the enemy of good" being misapplied.

The "Good" (VPN) is exactly as imperfect as it's complete abscence. There has been no improvement whatsoever. Literally, as far as Privacy is concerned, nothing short of "No one actor has the capability to sit on a full stream of traffic", will suffice.

Either you're MITM'd or you aren't. Use malicious postmen if it makes it easier.

If you have the same guy come, and all of your mail goes through him, he can reconstruct all conversational state.

Now imagine you get a different malicious postman at random every day. He eacesdrops on every packet, but he's not privy to which of his fellows is scheduled to get the next packet. Therefore, it's not practicable to MITM in any practical way. This all goes out the window when someone controls the malicious postman scheduler, of course, because then they can figure out a map of who to go to to reconstruct your conversation.

The above is the concept behind Tor, and why the only effective counter to it is to run a hell of a lot of entry/exit nodes so you can conceivably time correlate given enough consecutive probe points are hit.
> I'd hoped the virtual world would start out and be built organically by people because it was fun, useful and anyone could make a little money, just like the early internet.

The early internet having been so organically developed for fun and utility happened because money wasn't yet involved/in charge.

At this point could there ever again emerge any major new technology that wasn't either developed by a huge corporation or quickly acquired by a huge corporation?

Will we ever see a scenario again where such an important technology is allowed decades to emerge while it's ignored by industry for being too academic, too early, too much for nerds?

Today, even Wordle couldn't stay independent. How could anyone build a multiverse popular enough to have a network effect but not get invaded by spam, money, predation?
The FCC derives its powers from the Communications Act of 1934 (before Sputnik) and a few Supreme Court cases, none of which have to do with satellite communication. That the FCC has jurisdiction over terrestrial radio spectra does not give it the right to create additional requirements for communication with orbital satellites even if there are US-based ground stations involved.
Absolutely. I wouldn't want to paint the former GDR regime in a positive way. But I agree. It paints an interesting picture.
If the 13-year old had killed someone, they could be prosecuted as a minor and they would go to juvie and their record would be sealed after they turn 21 and they could get on with their life.

But stealing a trivial amount of money from a corporation, well that's certainly deserving of an Internet Death Penalty.