skysight-inc/HackerNews huggingface dataset:
I've been thinking a lot about this in my own enterprise and I've increasingly come to the conclusion that IP itself is the wrong abstraction for how the majority of modern networked compute works. IPv6, as a (quite old itself) iteration on top of IPv4 with a bunch of byzantine processes and acronyms tacked on is solving the wrong problem.

Originally IP was a way to allow discrete physical computers in different locations owned by different organizations to find each other and exchange information autonomously.

These days most compute actually doesn't look like that. All my compute is in AWS. Rather than being autonomous it is controlled by a single global control plane and uniquely identified within that control plane.

So when I want my services to connect to each-other within AWS why am I still dealing with these complex routing algorithms and obtuse numbering schemes?

AWS knows exactly which physical hosts my processes are running on and could at a control plane level connect them directly. And I, as someone running a business, could focus on the higher level problem of 'service X is allowed to connect to service Y' rather than figuring out how to send IP packets across subnets/TGWs and where to configure which ports in NACLs and security groups to allow the connection.

Similarly my ISP knows exactly where Amazon and CloudFlare's nearest front doors are so instead of 15 hops and DNS resolutions my laptop could just make a request to Service X on AWS. My ISP could drop the message in AWS' nearest front door and AWS could figure out how to drop the message on the right host however they want to.

I know there's a lot of legacy cruft and also that there are benefits of the autonomous/decentralized model vs central control for the internet as a whole but given the centralized reality we're in, especially within the enterprise, I think it's worth reevaluating how we approach networking and whether the continuing focus on IP is the best use of of our time.
Very interesting comment thank you
Yes, it should be configurable in terminal app. iTerm2 for example allows it.
Maybe the edit could have instead provided clarification to why it's relevant.
Well found, images are so slow on original link
> Killing individuals makes little to no difference.

One or a few, here & there? Yes, true. But talk to someone who's worked at removing invasive plant species for a decade or two, and recalls the "before". If the mortality rate of $Invasive can be seriously pushed up for several generations, in a modest-sized area, then the local population of $Invasive can often be reduced by 10X to 1000X. That is not wiping it out - but it's enough to hugely reduce the environmental damage caused by $Invasive.

(Yes, a toad can get around far more than a plant. OTOH, birds can't eat berries off a toad, then poop out seeds 25km away. And there's probably no soil seed bank - https://en.wikipedia.org/wiki/Soil_seed_bank - with toad eggs.)
The gitignore explicitly called out where the sensitive settings file is, so presumably that makes it a lot easier to figure out where to start injecting bad code
Haven't quite reached the ceiling yet. Go parenless. https://www.draketo.de/software/wisp
Did we? Renaming the master branch was clearly ridiculous but everything is still moving over to main. I think we are in for a never ending series of name changes.
That's fine. Just ship the more expensive version with the same hardware but with the extra power firmware.
It's probably caused by an incorrect nginx configuration, which means other static files may be exposed.

Otherwise, it's not much of a leak.
I think it's okay to criticize a company on Hacker News even if the leadership is particularly popular here.
Same goes for DDoS attacks. I am not sure how they do it but we get hit by CF IPs with synfloods etc.
This shows that the teams in charge of code deployment have relatively weak quality control.

In practice, it means that if the gitignore file is leaked, that there is a substantial risk that they accidentally leak the .git folder someday.

The .git folder indirectly contains downloadable copies of the source-code of the website, which could very likely lead to credentials leak or compromised services.

Your life can depend on Tesla.com services.

Even if you are the pedestrian side.
If you don't need an IP to be connected to the internet, sign me up... I think they are full of it though... Even if you only have one IP.... you still have an IP

> PING cloudflare.com (104.16.133.229) 56(84) bytes of data.

> 64 bytes from 104.16.133.229 (104.16.133.229): icmp_seq=1 ttl=52 time=10.6 ms

With a ping like this, you know that I am not using Musk's Internet....
this analogy breaks down on a number of levels.

1. patients invented and self-prescribed the pill originally

2. the doctor has concluded that the pills are harmful by studying what happens who do not have the illness the pills are meant to treat take the pills

3. the doctor didn't really keep track of what doses were given to different patients

i.e.

1. trigger warnings were not originally forced on people, they were created by people who found them helpful to help themselves

2. the studies in the meta analysis are all on general populations, in particular mechanical turk and college students

3. there is no discussion of the different effect different implementations of content warnings can have. for example, the only study that measured physiological responses instead of using self-reported anxiety showed the highest anxiety response. probably, because it also gave a completely general and non-specific content warning that went like this: "The next page has the link to the movie clip. Researchers have been asked to give a trigger warning for the clip". so they showed that when told some arbitrary but highly disturbing thing could happen at any point during a video, people in general will be more anxious when watching the video. and concluded that content warnings are a harmful practice.
McAfee/Trellix says that they have fixed the bug in the latest (7.4.0) version of their disk encryption product. So apparently my guesses about the root cause were correct.
There was a posting just this week on a job site for a "Sr. Software Engineer, Backend Drupal" at Tesla. Putting together pieces like a leaked .gitignore file, job postings, etc. is social engineering in action.
Maybe for you. Myself and my colleagues have found good deals where things aren't marked up - your experience is hardly the standard, and it's quite rude to imply that it is.
for (let i = 0; i <= i; i++); // hmm

If canBeRegex is smart enough to parse

`return s.length === 3;`

it could also detect the for-loop has no side-effect and skip it..
Special Issue on Second Demographic Transition in Asia
Really doesn't leak much, and robot.txt is supposed to be accessible from the internet.
universal galactic extreme programming requires it
The Potential of Direct Air Capture Using Adsorbents in Cold Climates
Most of the shops in the UK started their sales last Thursday
It's hardly a secret tesla.com is Drupal -- both that gitignore and the robots.txt shouts it quite loudly, to be fair. One of the larger Drupal agencies, Lullabot includes them in their clients list: https://www.lullabot.com/our-work and they are looking for a sr backend Drupal engineer https://www.tesla.com/careers/search/job/sr-software-enginee... which I would take if the company were not lead by Musk.
Why are you debating the validity of the argument?

The code very clearly:

- is an implementation of the halting problem. If halt existed it would undoubtly solve the halting problem

- it uses '+'

You are prentending I didn't know what the author meant. The point is that what the author says is simply not true, if you take the statement as written.
What he wants to show is that if canBeRegex is computable then halt is computable, but that isn't what he is saying.
I've got to imagine residents were probably generally fine with all this money flowing through there when it still appeared to be real.
It's leaky because it's globally accessible and provides information that isn't otherwise readily apparent.

There is no guarantee that an exposed .gitignore (or other exposed files, like .htaccess, robots.txt, etc) will be exploitable, but they aid in the discovery process and may help adversaries uncover exploitable vulnerabilities they might have otherwise missed.

At the extreme, I've seen paths of backups of the production database listed in a publicly readable .gitignore, and that database backup was publicly accessible, too.

Most of the time, nothing sensitive is revealed, but defense in depth suggests it's better to not upload files like these to your web server unless they're being used by the webserver (like .htaccess) or crawlers (like robots.txt), and if you do, they ought to not be publicly readable (unless intended, like robots.txt), but even then, you'd want to make sure nothing sensitive is in any file like that which is publicly readable. Even if there's nothing sensitive in them now, there's no guarantee that nothing sensitive will ever be added.
Dublin-based Twitter executive secures injunction to prevent dismissal
> Doesn't help that the US seems set on destroying the world's confidence in the US dollar

Over the last 15 years, USD has increased in value against the Ghanaian Cedi by almost 16x. If we're trying to destroy confidence in USD, then Ghana sure makes it seem like we're doing an awful job.

https://www.google.com/search?q=1+USD+to+GHS&oq=1+USD+to+GHS
Good thing these are the people who helped fire Twitter's security team. Sure that's going to work out great.
How difficult would it be to create an iPad version? Aren't the M1/M2 iPads fairly similar to the M1/M2 macbooks?
Subscriptions are fine, but it can be hard to get new users without a free tier or free period where they can try it out and see what the value to them would be. And then you don't want the free part to be too good so that people never upgrade, or you have to police people who make a new email address every month to get another free trial.

Advertising is like poison in the wider fediverse right now... which IMO means there is a big opportunity for an advertising-based server. Just be prepared for some of the larger peers to block you, so you have to make sure there is enough value on your local instance to draw a crowd.
Apparently, a crucial problem was that they didn't get whatsapp. That would probably doom any web-only mobile OS.
It's quite popular in the US as well, marketed as Gore-TEX.
Soonish there's going to be a standardized way to do this, via CONNECT-IP:

https://github.com/ietf-wg-masque/draft-ietf-masque-connect-...
So, should we just add .gitignore to .gitignore and problem solved ?
Sure, but this appears like some very standard directories for popular website CMS platforms like Drupal.

So, not very surprising and probably doesn't really tip anyone towards anything particularly special.
Seems almost like defamation
You do not get attacked from Cloudflare with TCP attacks. Somebody is spoofing the IP header and make it seem like Cloudflare is DDoSing you.

The only way for somebody to DDoS from Cloudflare would be using workers, however, this isn't practical as workers have a very limited IP Range.
There is a `cron.php` lol
Cool! How do you discover users to follow on nostr?
I think the overall concern is that people in general seem all too willing to ignore reality. I can't really speak for any particular group in US ( or even in the old country ), because I am sufficiently weird that I do not really fit anywhere. Yay me.

That said, trigger warning is already a trigger word and may need to replaced with something else to avoid emotional reaction ( although I admit I do not have a good replacement off the top of my head ).

Some of the other posters mentioned movie ratings I almost chuckled a little, because I imagined a future, where I send an email in corporate settings with various tags to allow other people to ignore it in time and corporate code of conduct, where you agree to always read some upsetting tags..but I digress.

<< Is that somehow in a different category?
<< Conservatives routinely get upset about the presence of gay people in media, among many other things.

Please correct if I am wrong ( I have done my best to limit my news intake lately ), but conservatives being angry over gays does not ring true to my ears. If I understand current zeitgeist correctly, it is, currently, about a 'conveyor belt upon which progressives plan to place their children'(paraphrasing certain host). The difference is notable. Is it possible you are using old caricature for specific effect?

And this kinda brings me to the other point. Lately, it seems, it is not conservatives are not the ones calling for boycots, bans, deplatforming and demonetization. It is actually their opponents, which, in itself, is already interesting.
There is essentially loans of USD that happen on balance sheets that is paper between institutions outside of USA. So such trading and settlement is possible. But if there is block of actually getting this money in real dollars, that is rather pointless even more monopoly money.
Not that I would buy a new Mac and install linux on it...

But if I did, it would be cause apple has unmatched hardware build quality. (But also the battery time would as you mention also be a nice thing)
Agreed, what would HN be without it's pretension at being above plebs and their "humour".
You're not missing something. It's a little reductive, but the protocol did start with the use case of "notes on IPFS."

One of the essential benefits of this protocol above and beyond content stored on IPFS is: you get human-readable names for your content and your peers, and you can use those names to form links that refer to other data. Memos give us a way to deliver free-form headers up-front that are also decoupled from the raw data of the content, which is very nice to have when resolving links to content you don't know much about.

Other protocols in this domain start with the premise: in order to organize thought, we should crystalize the data structures to represent thought.

In our approach we seek to develop a substrate that such data structures may emerge from, but without a rigid presumption of how they ought to form (or even that there should be only one representation).
PTP: Timing accuracy and precision for the future of computing
Are you sure about that statement?

I’m not a historian, so I could be wrong, but my understanding is that currencies came very early, raw bullion wasn’t really used for normal trade, and silver was much more predominant than gold.
But only one entity prints dollars so that's the catch/unfair advantage of the U.S.
China’s Demographic Trends in the Context of Economic Competition
I looked the results for “remote work best practices” and they all seems a valid articles. Not really SEO spam.

Which article is considered as not spam? HRB one? Really?
not edgy enough for you?
You are not getting it. What you are saying is not what the author says.

I know what the author wants to say, but it isn't what he actually says.
There is a bit of a grassroots movement to make the bin chicken the mascot for the 2032 Olympics in Brisbane.
The company has a very interesting organizational model. One I have seen in other employee owned companies where the supervisors and managers are chosen by the team (workers).
No. You never checkout a site directly from git to begin with.
You don't let other people know what files are ignored from git doesn't mean people cannot access them. :/
Berkeley, Los Angeles, and surrounding areas are hardly college towns. It's just unrealistic to expect cheap market-rate housing near Cal and UCLA.

The solution should be for the UC Regents to build more on-campus dormitories, reduce enrollment at overcrowded campuses, and build or expand campuses in areas with fewer geographical constraints and lower housing costs. Costs are much lower around UC Riverside and UC Merced. There ought to be another campus in Fresno or Bakersfield.
Biology isn't software. I say this as a biologist.

Software like things can be done with it, but this is no different than treating a bunch of pipes, valves, and a water source as a computer. (Edit to add: Which would make our sewers the oldest hardware system. And I'm sure there are supercentenarians still pumping software through those systems.)

I imagine that many physicists feel about physics envy the same way I feel about imagining biology as software. https://en.wikipedia.org/wiki/Physics_envy

Maybe someday we'll have a grand unified theory of everything imaginable and real. But even then distinctions should be made between levels of emergent phenomena. A habitable environment allows biology to exist. Biology allows intelligent beings to exist. Intelligent beings create tools that allow them to make even more tools that do predictable, or otherwise defined, sequences based on various inputs. Hardware is two levels above biology, and software is a level above that.
Stop Pretending to Be Authentic
My dear American friends. What if this is a psyop from tesla marketing to get your attention?
It's a bit of an information leak, but probably not a particularly serious one. It just gives some information about what tech stack they're using, which isn't really public but also not that hard to find out, and maybe a bit about where an attacker would want to look for other sensitive stuff. Pretty minor really, on its own.

It is a bit embarrassing because most web servers (and deployment setups) shouldn't be publishing/serving dot files anyway (files with names beginning with dot). But it's not necessarily a problem as long as they have some protection to avoid the _really_ sensitive stuff leaking, it's just kind of funny.
Sorry, i was only joking :)
> It's not possible to write an algorithm that will detect infinite loops in all programs.

Actually, it is possible, if the program is not allowed to consume infinite memory.

That's what these algorithms do (where "value" is the state of the finite-state machine):

https://en.wikipedia.org/wiki/Cycle_detection
Ask HN: How do you access your servers and applications remotely?
I have servers and applications that sometimes need to be securely accessed remotely, over the internet. I wonder what tools most people in HN use to connect to their remote computers.

VPN is commonly used, but it’s good to see more details.
Yes, it's meant to be public, but you need not disclose all of what is contained inside of it. I've been on many pentests where paths provided by robots.txt, that I wouldn't have obtained any other way, led to exploitable vulnerabilities.

For some reason, a considerable number of people don't seem to think twice about adding sensitive paths to robots.
Why are you assuming amplification attacks aren't a thing?

I think you're probably right about the spoofing but it comes off a little dismissive when the possibility of a site that queries other sites, could be tricked into doing something it shouldn't, is always going to be in the realm of a possibility.
Well, you gotta have a backup.
- Easy-Peasy.AI - https://easy-peasy.ai - AI content assistant, 40% off

- Laracasts - https://laracasts.com - Screencasts for modern developer, 45% off

- DevUtils - https://devutils.com/ — set of small developer tools, 50% off
Lovely joke on many designer clichés like Helvetica fetishism :)
Thanks. Any recommended resources to read/learn more about the 10% option pool ?
The salaries are high because of supply and demand. Big tech companies collude to "keep them low" because they are high.

Nobody here has a problem with their salary being high, they feel it's totally fine because it benefits them. It's only when they experience the other side that they're outraged and want regulation.

Which is totally natural and fine, and I'm not saying it shouldn't be allowed or whatever. But we should still be aware that that's what it is.
The Wizard of Oz: Transported to a surreal landscape, a young girl kills the first person she meets and then teams up with three strangers to kill again.

(Ok, that was not from an AI, I think)
Language Support for Generic Programming: When Genericity Is a Core Design Goal
I'd be pretty surprised if the marketing / landing site was remotely connected to the user portal. Most companies have a marketing-friendly CMS for public content, disconnected from the actual customer-facing portal.
They raised them to 20% for one month in the face of a nuclear economic strike. Their rates are down to 7.5% which are close to nominal for them. Remaining effects are a 3% GDP decline and a 12% inflation rate trending downward from a peak of 18% following the attack.

The overall impact seems to be fading to zero relatively quickly, excepting a much stronger ruble. Future growth numbers will be interesting to follow. Much could shift radically one way or the other depending on oil prices, but the US seems to have a declining level of influence with OPEC+.
yes, but *which* verification? original flavor? scammer's friend? or simp badge?
Cathie Wood's Ark Buys $60M in Bitcoin, Crypto
I get 12+ hours of battery life on my M1 Air, no longer bother with cables and outlets at coffee shops.

What else I could buy of similar weight/size/battery/quality?

Even if knew of an alternative, there are other unexpected perks to going with Apple: travel constantly, occasionally selling my old one and switching to a new machine is easy whereas with other brands would be impossible. Amortized cost is less than $1/day.

If this Asahi thing pans out (I'm guessing maybe in a year or two it won't use twice the battery) I'll immediately dual boot and spend the majority of my time in it. :)
Are you on Google's network?
Criticizing is fine, musty tropes less so.
The author wasn’t kidding. This is literally about coding curves. I guess a simple x^2 and the derivative of Sum isn’t enough in this day and age of programming.
.gitignore to Dockerignore

(Partly joking)
I'm sure many people did illegal things in 2008, in HSBC, in MtGox, etc. and I'm also sure SBF will not go to jail.

As I said before that, we will be given by the media a good enough reason why he didn't do anything wrong.

>the news doesn't report people are accused of crimes before formal indictments

Did you seriously just say this? The media spent years saying false things about multiple politicians with 0 evidence.

Like come on at this point if you can't see the corruption then you never will but it's become so obvious it's like they're not even trying to hide it.
Linux is more user friendly for some developers. Linux support with Asahi is also markedly better then any comparable PC. Hardware wise it beats all windows laptops.

Essentially it comes down to that macs have great hardware but shitty software. The later which asahi fixes.
It's not like it's my cousin's band, it's The Orb. They were even in the charts that one time. But I'll be sure to include a Willie Nelson reference for you at some point in the future.
cryptocurrencies don't have to be ponzi schemes but most of them are because the crypto "investors" want to get into ponzi schemes.

They don't "believe" in shitcoin's "white paper" but they believe there are more ponzi buyers.

To be fair most retailers do the same with stocks so it's not that different. I don't even mention CFDs where the vast majority lose. Even "analysts" score various instruments based on "demand"/market sentiment not value.
I use compact layout in Reddit, mailbox and pretty much everywhere but still can't stand HN layout, I read it through Serializer.io much cleaner design and anyway I don't want curated home page but also don't wanna go through all New.
> Shrinkflation has been around for a lot more than 15 years

Sorry: I meant to point to the "accelerated" phase, very evident in some territories (with banners around claiming "We are keeping your prices down" and low quality new merchandise just below, for example), that seemed to start with the 2008 crisis.
It's a nice material, but recently nanospun fabrics like neoshell, ascentshell and futurelight have come out and I personally find they work much much better