skysight-inc/HackerNews huggingface dataset:
> Heartbleed was in openssl... What does it have to do with openssh ?

Exactly.

I can't speak for Log4J as I have no experience, but I do know that anyone sensible agrees that OpenSSL is a pile of bloated dog poo.

OpenSSH, as I've already said, is written by the OpenBSD crew. They have a track record of having OCD about writing secure and correct software.
That’s also the average ghost writing rate. Not the rate the content farm he uses pays the ghost writers.
I've had this discussion with people before, the best answer I've come up with is this:

Nihilism is less the idea that all things are irrelevant or immaterial but rather that there is no universal valuation to things. What we do may not affect a universal scale observer or tautologically "matter" in some sense but there exists some scale or model under which things have some valuation.

The trick then becomes rather than conform to some agreed scale or model of the universe for the moral or value derivative we instead turn to what we have decided is valuable.

If I am cold is irrelevant to the universe, but it is relevant to me, and as such being cold may only last a short time and can be survived but it still matters to me.

Equally there is no universal sense of being moral, there is however my sense of being moral and as such some actions can be good not by being derived from some universal morals but instead by my own definitions. "Being kind to a stranger" is moral to me in line with my definitions, but "not eating fish on Fridays" has no moral definition within my moral declaration so I can eat fish on Fridays without being immoral.

Nihilism isn't an end, it's the start to a personal conversation on values that are specific to you and become meaningful to you by your understanding of their worth. Once you have defined your values independent of some larger prescriptive whole you have a system you actually understand and can defend the merits of, a much stronger core for reasoning about morality and the goodness of your actions.
I still have that one on my wishlist, there's so much good stuff on the original Gameboy systems that I never could play - our birthday budgets didn't stretch nearly far enough.
Apple has service centers everywhere. Go have them look at it.

I’ve gotten probably $10k worth of repairs for free across my apple devices. I’ve even purchased broken apple devices in warranty to walk them to the Apple Store to walk out with new hardware.
> My worry when I read your first paragraph is that you haven't stayed anywhere for long enough to see the consequences of your actions.

This would be a valid concern, and truth be told I haven't, apart from on/off maintenance of the systems I built for various clients. While I agree that this is a problem, in my experience a decently built system is not going to need some amazing maintenance that only a select few senior engineers can do. It's usually run of the mill maintenance. 80% small changes to the application that realistically can be undertaken by most mid-level developers, and the occasional 20% larger changes to modules, architecture, deployment and / or infrastructure, which might indeed warrant more senior roles, and it's usually when I get a call to be involved. If anything, in my "n = 1" I have found that management is a lot more powerful in both setting up consequences, as well as handling them, than your junior / mid / senior ICs.

> Especially for senior positions: there's a reason why "seagull management" is a cliche.

I've helped build teams that are still performing long after I am gone, with mostly procedures put I consulted with, after seeing so many teams fail / win. But you are right, I wouldn't hire myself for a senior managerial position out of the box because I am just too much of a flight risk and I don't have a visible track-record for this role; I would also not disregard my skillset and breadth of experience when it's needed just because I don't tick a certain pattern.

My plan, whether stupid or not, is to continue accumulating experiences and knowledge for another 5 - 10 years (dare I dream 15?), moving to different projects (1 - 3 years) that suit my fancy, then move on and climb the ranks in a corporation from the bottom, all the way to top technical leadership. I feel a lot of companies will disregard me because I have this kind of fractured CV, but the one that won't might get a person with broad experience that also wants to 'settle down'. I am also very upfront and honest about my outlook.

> It's a real problem, though -- as you say, there's no money or glory in building something for the long term.

One of my most beloved projects (that I was involved in, not mine alone), is also one that I was paid the least amount of money on, and also I feel brings me the most glory; it involves a solution that saves lives daily. It's been running since a decade in production and the maintenance team has slowly dwindled down to only two people (one if I'm being realistic), and I don't think they'll need much more unless a revamp is required. Even though I love the project, my career would have looked a lot different if I chose to stay there and maintain the solution.
100%

Have a stock Kia car? It’s trivially to steal because their key fob sucks and they can all be stolen in the same way.

Now, take that shitty Kia and personally wire a little toggle in the center console that unplugs the Starter with a relay. All of a sudden no Kia theif will know how to steal it. Easily 100x less likely to be stolen than the fully standard car next to it.

Having at least one layer of obscurity should be standard practice. It makes the theif need to put in custom effort. Most people are lazy.
You can do the reverse too. Wine or a vm to run the couple things you still need. If valve can get all their AAA game titles to run using proton, you ahould be able to make it work. I had one tool at work, an xml viewer that was enough better than the competition to be worth running in wine. I stopped even noticing it wasn't a linux app.
> “Using Symmetric Encryption in the Database: ”

Is this the same as encryption at rest? If not, how would you implement this?
This might be more indicative of the view many teachers have towards their profession now. There's a reason there are teacher shortages across the country
> One day it will be openssh.

As I said mate, go look at CVE.

Its been YEARS/DECADES since the last serious vulnerability in OpenSSH.

That's despite being one of the most widely deployed pieces of software on the internet.
Depends what you mean by "99% of the book market". I'm sure the major publishers will not start publishing generated nonsense, and I suspect the small players self-publishing nonsense on Amazon will go away in time.

Of course major publishers may be duped into unintentionally publishing AI generated or part AI generated content by bad authors, but if it's good enough to get through their editing processes, it will hopefully be non-nonsense.
Stainless steel straws was a solution we both agreed on! :)
I loved the “5 monkeys” comparison and I agree that everything depends on the real case scenario.

My point here is that what the article propose it is no “security through obscurity” it’s just good configuration practices. Change username, port…

Security through obscurity goes along in the line: “I have this algorithm in the js that obfuscate the password in the front end, and nobody is gonna guess it because it’s super complex”.
You found out the objective truth? Please share, the rest of us are eager to know.
OP was talking about phone apps.
I mean how else would they legally give out money to their cronies?
Probably because the ultimate end of these course isn't to make money by yourself, but by engaging in an MLM and let it work.

There's a company engaging in MLM sales paying some news agencies to promote its scheme every day during the news (a subtle sponsor, so to speak; it's on regular TV so SponsorBlock won't help). As my family watched the news from this channel often, I would recognize how it works. It would promote an online course along the lines of "Make Money with a Smartphone" and advertised the course it claimed to cost $249.99 at $2.49 (price may vary, depending on who is the presenter, though the course are the exact same).

The news program is careful not to show the names of the ultimate company offering it, only presenting that this person will be teaching. Sharp-eyed viewer, however, can notice that those adverts intend to direct the prospective "client" to an MLM.
Maxing out the RAM on any PC you buy is probably the easiest solution. Modern CPUs are fast, and I can't imagine a user having this much trouble unless there was hardware swapping.

Which leads me to a question: is virtual memory even a good idea with most PCs? Once your computer starts swapping heavily, it's over. I think I would prefer an informative kernel panic.
All this confirms is that kids are unfocused and need someone to focus their attention. Remote learning requires you to take responsibility and takes getting used to. Parents generally aren't going to get involved in students learning, clearly, as this confirms.

If you aren't motivated in some way, you will not do well. In person school was boring for me and wouldn't have made a difference for me since I always looked up youtube videos to learn math and science anyway. We can see here that remote learning needs more work and time in order to catch up to in person school scores.
Every single workday for over a decade. Mac is never the issue. The butterfly keyboards were a disaster but I got those replaced with overnight shipping both ways.
For me, Intel Management Engine was the Rubicon where computing lost its luster.

https://en.wikipedia.org/wiki/Intel_Management_Engine
Likewise buy a business variant of a Windows laptop and also don't have junk installed.
It is the key word on which your argument rests and you used it in every comment in this thread.

Since you decline, I believe it is useless to continue the discussion.
I don’t get what your are saying. OoO and speculative execution can increase speed dramatically.

It’s a lot more complex and potentially dangerous, but all high performance cores do this so it’s obviously worth it.
The readme doesn't offer enough information to accept that it can be an alternative to elasticsearch. From what I can gather by skimming the information, it can only do word level matching and that it isn't some form of TF-IDF type index (as is Lucene, which stands behind Solr/ElasticSearch).
Surely children, especially boychildren, never played with weapons before "guns" became the weapon That Must be Frowned At Socially. Truly its amazing how many of our problems originate within the lifetime of contemporary politics, innit.
As the saying goes, there’s a sucker born every minute¹.

An important feature of these scams is to frame success and failure as being entirely in your hands: it’s not the system’s fault that you didn’t achieve success, it’s yours and yours alone, you didn’t want it bad enough. Someone who falls in that hole is bound to do it again, this time for a different grift which looks easier. They’ll do as much as it takes until they strike gold, go bankrupt, or finally understand it’s all a scam. That last one can take a long time to come.

In sum, money making courses don’t need an infinite supply of new chumps when they can keep reeling in the same ones. Offer some discounts and rewards for bringing in new members, and you’ve gone full MLM².

¹ https://en.wikipedia.org/wiki/There%27s_a_sucker_born_every_...

² https://en.wikipedia.org/wiki/Multi-level_marketing
Amazon is full of low-effort products in every category. If you search for certain consumer goods you'll get several different brand names for the same white-label product, for instance. And lots of people buy them! It's not just an easily-ignored spam problem…

I really hope Amazon's sea of garbage devours Amazon before it destroys the remaining un-Amazon-ified online retailers through unfair competition.
Outlawing and adding costs to production amounts to the same thing for many plastic products. If plastic producers were forced to pay the externalities, many cheap plastic things would disappear. Those politicians would vow to remove "the predatory plastic taxes".
> Humans have spent centuries building up social structures to eliminate our worst excesses

And they’ve worked flawlessly.
I actually don't care at all if an insect lives or dies. Insects do not have emotions; no other insects mourn if one dies. This makes them markedly different from humans and other animals; insects are little more than machines and from a moral perspective much closer to bacteria than, say, mice.

The only reason I care is because of the broader ecological effects. I don't care whether my gut microbes live or die either, if it wasn't for the health effects it would have on me.
Because the issue of plastic waste isn't about the carbon emissions? Only you and OP brought that up.
I’ll say first that I think it’s horrible that we have this problem at all.

I wonder if a way to avoid traumatizing workers with entire videos would be to capture single frames from videos, and divide them across all the workers with them still rating the frame for content violations.

Obviously, some frames would be worse than others to see, but I would have to imagine it would be drastically lower in terms of impact for each employee than watching video.
> I think this problem is more with the consumer line.

Not even all of their consumer products are bad. It's often the cheap (sub $600) laptops that I suspect gets subsidised by the crapware that comes preinstalled.

When people ask me for recommendations for a laptop for around $400, I always say "second hand" or "save up a bit longer" because these days spending less than $600 is often a recipe for disaster.
The common application encourages people to apply for schools they aren't qualified for ("what the hell it's only another $30"), a phenomenon which has been exacerbated by the schools themselves. The USNWR ranking includes acceptance rate ("more selective" means a higher proportion of rejections), so schools send letters to kids who can't get in, encouraging them to apply. I saw these letters last year.

In addition, the common app really restricts what you can say. For example two kids might have earned an Eagle Scout rank: one just did the minimum to get a check box; the other might have really used it to learn and develop. In the common app there isn't really room to differentiate unless you devote your essay to it.

Back when each school had a unique application, the burden of applying makes you more judicious in your choices. However it also allowed you to adapt your application to what you wanted to emphasize to each school.

For a quantifiable difference: back when I was applying to universities in the 1980s, MIT had quite a high acceptance rate compared to its peers, ~18% IIRC. Why? Turns out few people applied because they (probably correctly) assumed they wouldn't get in anyway.
I agree, I think is a great tool, just the user should not abuse it.
2 + 2 = 4

You're welcome.
When that day comes, a machine running sshd on a high port will have to be wiped, because how can you trust that nobody’s scanned your ports, exploited your server, and eliminated the traces?

When an OpenSSH zero‐day gets released, you can bet your bottom dollar people will be scanning full port ranges for SSH servers. And only one of them has to find you.

If that’s the scenario you’re worried about, don’t rely on obscure ports. Run your sshd behind a VPN.
See how long it takes on a core i3 with 4GB RAM (to pull a cheap new laptop from walmart: https://www.walmart.com/ip/Lenovo-Ideapad-3i-14-FHD-Laptop-I... )

Not everyone has top of the line or even mid-range hardware.
Took some finagling, but I made it off the road and onto the endless meadow. Really fun to slide around on and try to avoid the trees. Can't comment on the road driving, as I never spent more than a minute on it. I'm surprised you have an effect for driving underwater, too.
Not just those people either. The people who can conform tend to get stuck in traffic jams as reward.
I hear you guys on the (relatively small time) financial fraud / theft, but the article mentions far worse. If you went to the police with a video and PII of a violent crime, would they still not open an investigation?
> Why Melatonin is Bad For You (coming soon).

I am curious to read why this is bad. My doc thinks this is perfectly fine
I actually upvoted you, but to answer your question - any sports team. It's an environment where you can't get away with "muh opinion is da truth :DDD" type bikeshedding you find when discussing large political issues (eg abortion, immigration, etc). You can try to lie, but if something doesn't work, it becomes obvious.

I think also any team of programmers would qualify - at the end of the day, you can empirically verifiy claims.

On a broader level, you could argue that since modern society is basically built on the laws of physics - our bureacracy and infrastructure is only possible because Maxwell's Equations are "true" in the sense that they accurately predict things about reality [0] - we are living in a system built on truth, and when we communicate on Hacker News, that is only possible because of all those before us who have sought out and shared true things about the universe.

[0] - you can probably use a definition of "truth" different than "accurately models reality", but it's the one I use, and I think most people will accept it as good enough.
Does anyone know of an alternative for the time series side of Elastic?
Android is Linux, and most of those sandboxing changes have been upstreamed.
The problem: Every time you help someone with issues like these, you enable the malware vendor.

Consider the options of the senior in question: 1) Find someone 'good with technology'. 2) Be very unhappy with the laptop, and tell everyone how he bought an €500 brick.

People listen to each other. They won't be fooled twice. Lenovo/Microsoft/.. would soon stop bundling this crap if there were no helpfull people.

As an analogy: You buy a car. It tops out at 5km/h because it is pulling a huge trailer that either bleeps ads or worse is just a dump for useless rocks. Do you expect tech savy helpers to decouple the trailer and accept that as how things are, or blame the manufacturers for their stupidity and greed.
You are suggesting that we are OK with programs using excessive amount of resources or doing things we don’t want? All advantages on getting better hardware in the past decade goes straight down the drain if compensate by just getting more RAM.
Azure Open-Source Confidential Kubernetes
> Xi [told] party delegates that the government would "optimize our population development strategy by establishing a policy system to support birth rates and reduce the costs of childbirth, parenting and education."

Lots of other countries have tried that, with zero or negative effect. Why would it be different this time?
Deep Learning with Light
GDP will likely show U.S. economy grew in the third quarter, despite inflation
Richard Feynman's blackboard at time of his death
"If the older people won't change to our accounts, we'll capture the next generation." The minecraft acquisition was a great business move for them.
And curiously enough, this was the moment she converted to being an Apple user. She expected and found the same quality on her Mac as she did on her iPhone.

> There isn’t another computing hardware company which doesn’t have a “hot garbage” tier of products.

There were many more vertically integrated software-hardware PC companies in the 80s. A true shame that some of the others didn't survive; I'd love to be writing this message on my 2022 Acorn RISC PC or Amiga. What we witness now is the end result of the Wintel monopoly.
Is OSX on average more reliable than Windows though?

I've never had much experience with it but heard some stories about its bad backward compatibility and not-too-pleasant upgrades. Thinking about finally getting a Macbook instead of my current Linux/Windows dual boot since Macs have the unique combination of professional-grade display, very powerful hardware and full support of proprietary apps that I need. And I mostly dislike Apple UX choices.
And the worse part is that they're not wrong
One positive and unplanned side effect is code density.

Besides taking less memory, if you can “decompress” the ISA faster than memory bandwidth would otherwise allow, it’s a net win.

There are many other downsides to x86, like variable length instructions, of course, but it’s something to consider.
When countries are at war, you don't get to see the opposing point of view. Being said by the opinion writer, is they don't deny the Kremlin did it. Which is on the face of it utterly false. They likely aren't lying and probably believe it to be true. It's really a sign of how bad journalism as become.

If the kremlin wants to shut down the pipeline, they simply shutdown. The sender and receivers are the last folks who will sabotage or damage.

So who did? It's going to be a well funded country with something to win.

Norway just got their pipe online literally 1 day after.

Canada/USA want to export their energy. Well not canada, they lack the capability.

Middle east? Maybe? Unlikely.

Climate groups? Very unlikely.

China or India? Absolutely. They are getting a huge discount on russian energy now.
Which is exactly my point. It’s not cheap or easy to put your money where your mouth is. Talk is cheap. In the end, is $60k too much to ask to save the planet? People should stop being pretenders. If they really care about the climate, do something about it. If they think the world sucks and is going down the drain, do something about it.
It's not a new idea; npm had its run-in with ads a couple years back[0].

--

[0] - https://www.infoq.com/news/2019/08/npm-bans-package-ads/
Pandemic shutdowns lead to largest ever math declines
A still frame from a video can lack extremely important context you'd get from the whole thing.
Proposal to Support Timestamps and Labels in Pprof Events
Same here, very unhappy customer. The new pricing is just nonsense, and now I'm looking for alternatives but migrating out 500 users is not trivial.

Moreover, I'm not too fond of the GitLab approach of replacing all the other typical tools in the DevOps toolchain.
I'm happy with Jenkins, artifactory, etc., and I don't understand why I need to pay for something I'm not using or planning to use.

Is anyone in the same situation? :)
Helm Manager – App Health / Helm Release TTL / Helm  REST API / Helm Web UI
Hey folks, I'm working on a tool that helps better manage Helm applications.

Helm Manager includes:
- Show application health (All deployed workload resources are healthy).
- Helm releases Time-To-Live(TTL) schedule for temporary apps.
- Manage Helm releases across multiple clusters.
- Helm Restful API with basic RBAC.
- Helm UI with basic RBAC.

I would much appreciate your feedback and thoughts!
If you like the project, or find it helpful please STAR
https://github.com/JovianX/Service-Hub
FWIW I understood it pretty easily.
> The free market has always been a fable. The whole economic system is not geared towards maximization of consumers' quality of life

No economist would claim that (and I seriously ask from where you got the "markets maximize consumers' quality of life" claim). Markets rather optimize for the most efficient usage of resources.
It wasn't that many months ago that I had a conversation with a customer that if they wanted to continue to use email (outside the browser) then the best option was to buy a new mac because their current mac version don't support the new certificates required for modern tls and in order to get a new macos version they need to buy a new device.

If I remember right their mac-thing was around 5 years old?
Is this a joke or are you seriously advocating for setting up a concentration camp?