skysight-inc/HackerNews huggingface dataset:
> Firebase was very clearly designed with this in mind

Yes and no ;)

The original release of the Realtime Database didn't have security rules (though they were thought of at the time), and they were added in late 2013/early 2014 (IIRC). At that point, in the name of "easier getting started experience (don't force users to learn a custom DSL)", the default rules were `read: true, write: true`. As you might expect, it resulted in a high potential for this type of thing, and sophisticated customers cared _a lot_ about this.

This changed at some point post acquisition (probably 2016?) when the tradeoff between developer experience and customer security switched over to `false/false` (or picking something slightly more secure than `true/true`.

Firebase Security Rules were upgraded and added to Firebase (Cloud) Storage and Firestore, with both integrations being first class integrations, as _the whole point_ of those products was secure client-side access directly to the database from day 1.

The tricky part of all of any system in this space was designing a system that's simple enough to learn, highly performant, and also sufficiently flexible so as to answer the question "allow authentication based on $PHASE_OF_THE_MOON == WAXING_GIBBOUS" or some other sufficiently arbitrary enterprise parameter. Most BaaS products at the time optimized for the former, then the latter, and mostly not the flexibility; however, over time, it turns out that sufficiently large customers really only care about the last one! Looks like Firebase solved this recently with auth "blocking functions" (https://firebase.google.com/docs/auth/extend-with-blocking-f...) which is sort of similar to Lambda Authorizers (https://docs.aws.amazon.com/apigateway/latest/developerguide...), which I believe is a pretty good way of solving this problem.

Disclosure: Firebase PM from long ago
check out https://greenhouse.server.garden/
Just curious, what’s flakey about it?

I’m not at Google anymore but I was a core contributor to the Firebase emulators project when I was. I can think of many flaws with the emulators but flakey is a new one to me
I think water flowing through pipes would be perfect analogy for electricity. I believe the author addressed it somewhere and said he couldn't make it work so had to stick to gears and springs. It turned out to be fine but I preferred Turing Tumble honestly (digital rather than analog). But both are very good, can't believe they're indie products.
New guy might be getting more comfort by heating more while still using less total electricity.
I mean, substance abuse is a real problem. I’ve known people who have ruined their life because of it, all-the-while touting that it doesn’t affect them.

Yes, drugs affect you. It also ends up affecting those around you.

That being said, the current state of laws, enforcement and culture is definitely not aligned for success in this arena.
Because there is no skin in the game.

A C# programmer can write Java, but it might take them 3 months to be as fast as an already Java experienced programmer.

And a coder can leave at any time. There is no long termism unfortunately.

So this is the equivalent of not wanting to hire someone who has only been a waiter as barstaff or vice versa, and not wanting to train them, when people are changing job every 6 months.

Google can't afford to be like this, with all their systems no one else uses!
Sure, but what are you going to do about it when most of your voters keep voting for policies that result in this?
Very handy tool!

An improvement might be to make milk type the first choice, and limit the cheese options based on milk type selection. Or maybe just combine both into a single selection with milk type option groups.
As has the former abundance of youth-centric spaces. Many such as malls and arcades don’t exist like they used to. Physical game stores (like for Magic: The Gathering) are also drying up as it increasingly becomes harder to sell enough product as maintenance costs rise. And perhaps it’s just me, but after a certain age parks became rather boring even with a friend group.

Personally, I feel we need more library awareness and “recreational areas” within libraries. They tend to have a large variance of media, and are typically a safe place to be. However all the libraries in my area tend to lack anywhere to hang out, which I understand due to budgeting constraints, but it’s a shame it’s not easier to provide areas for the more “interesting” media available.
For CIA Factbook and Wiki, the focus is on All Information about a subject.

For News orgs the focus is on New Infotmation.

So even though news orgs have professional trained info collectors, and have good access to networks that produce Info they don't think of them selves as a Wiki or Factbook. Why?

Cause legacy + they are taught media theory not information theory + tech platforms are not taught either and control distribution of info.

But things change as people learn the system is a waste and noise generating. Learning takes time.
Correct: https://en.wikipedia.org/wiki/United_Airlines_Flight_811
BlackRock announces cuts of roughly 600 jobs
> but I don't see apple really supporting you writing code.

I'm sorry.

There is no part of this that I can call intellectually honest.

I guarantee there are more members of the Fortune 100 that are developing on Apple hardware that have ZERO issues developing in anything that's not actually MacOS targeted.

To the point where even suggesting this is laughable
Beato says rock music was completely dead by 2012. It's hard to square that with dad rock phenomena like The National, the apparent favorite band of every standup comedian over the age of 40. Further: 5 excellent post-2012 rock albums, none of which I think probably suffered for want of a session guitarist:

* Courtney Barnett - Sometimes I Sit And Think

* Kurt Vile - Walking On A Pretty Daze

* Low - Double Negative

* Parquet Courts - Human Performance

* Sleep - The Sciences

Before you dunk on me, consider the bar here: Beato related a story of hearing a drive-time DJ play The Verve's "Bittersweet Symphony" 8 times, back to back --- and then lamented that consolidation meant you couldn't get that kind of distinctive taste from a DJ anymore.
LSPosed stopped maintenance because of rumor and defamation
> Clarification: we stopped maintenance mainly because wehave earned more rumor, defamation, racism, curse (seepic, which was said by one the authors of @PixelProps )and clowns than reputation, NOT because of confliction ollegitimacy. Most of us are also Magisk's contributor, ancwe also got curse from the Magisk's community. We arejust too tired of the community, we need rest.
More about the pic. the author of @PixelProps at-ed alladmins for a hidden version of LSPosed. And since heabused /admin command (not all admins are LSPosed'sdev thus this command is used for reporting spam, and itwas sleeping time on our time zone), we thus kicked (notban) him for warning.But he keeps retrying and askedpeople to join our group to send dirty words to our admins(like the one in the pic, and there are more).
I’d expect treatment would not consist of bong rips, pitchforks and 9mm hand guns.
Same. Basically everything that comes from a legitimate mailing list/subscription has it. Even stuff I would personally consider spam like political mailing lists have it.

It’s only the worst spam stuff that doesn’t. The obvious scam stuff sent to any email address they can find, containing every language I don’t speak, with lots of bad obfuscation to stop keyword scanners from 2002.
I haven't heard that, I'm just listing the software I would miss on Linux*

*I have been using Linux and Wine for over 10 years and while one can technically install whatever Windows software, even if it's on a Windows VM inside of Linux... the experience is lackluster.
It would more accurately be called unfree roaming.
It’s incredibly easy now to have a “website” for a vast number of different purposes, via Facebook, Twitter, Etsy, Patreon, etc., all of which come with the added value of discoverability. And as always, the cost of ease is control. There’s value in control, but it will always be a trade off.

So arguing for making independent websites easier is really arguing for another level of granularity in the tradeoffs between “social media presence” and “Wordpress”. And I guess I’m not really sold that that’s all that helpful. The loss of discoverability is a step function you hit the moment you go independent, which means that for the vast majority of cases, there’s going to be a “dead zone” of value where having slightly more control just isn’t worth it. I’m just not sure that that dead zone doesn’t end pretty close to where the current tools are.
> I find code easier to manage when I can see more of it at once. I like to use this style in JavaScript as well.

How do you write with this style in JS?
You don't want to know how many missiles systems out there still run on floppies.
Try telling GPT-4 that the translation is bad, and ask it to proofread the result for a more natural French
I’d say somewhere around half of the marking emails I receive in the USA have one-click unsubscribe. It’s still very common to have unsubscribe links that require you to enter your email address and then select that you actually want to unsubscribe from everything, etc. And some of them still require logins, although those are getting rarer. Not sure if it’s actually a loophole, but one of the dark patterns I’m seeing often is one-click unsubscribe generally only unsubscribes you from a very specific type of notification or topic of the mailing list, and you’ll still get other types of emails unless you fully log into your account and go in your email settings and unsubscribe from everything. Not sure exactly how Google and Yahoo treat those, but it feels kind of like marketers found a loophole that seems to work for them.
I’ll put this politely: citations needed.
So true. There's also the imminent return of Jesus Christ and the subsequent rapture to worry about. Kids have so much on their plate these days...
Do you know if these ads are injected or if the authors are doing this? This is really gross.
I mean FFS I can get a process to write more rows/sec to AuroraPG than Dynamo with needed semantics, with less code and lower IOP cost
> "No contact or thanks has been received back so far, I will amend this comment if/when they do so :)"

They couldn't even be bothered to send a proper thank you.
How does this interact with transactional emails / 2FA / password resets? If 5000 people request a 2fa code in a month, I have to give them a unsubscribe header as well? Or magic login links?

If I don't provide a list-unsubscribe header: do these emails then get blocked and noone can log in ?

If I provide a list-unsubscribe header, what is the expected behaviour if they do click the Unsubscribe button?

- tell them they can't unsubscribe to this email because it's needed to accomplish what they want to do in the future?

- delete their account? what if it's a bank account or something like that?

Would appreciate some clarify from Google at least...
> And sex changes are being used a first line treatment.

Rest assured that we all appreciate the apt demonstration of the other sort of mental illness that results from an oversubscription to social media.
I just want the I Mac that Jeff Goodblum promised me.

Being able to host a website just by putting files in a certain folder already present with a special icon was a magical feature for my then girlfriend.
Sad that in 2024 people continue to set their Firebase security rules to be wide open. Back in maybe 2015-2019 that was excusable because that was the default but now it’s just lazy.

Don’t expose your database / api / blob storage bucket / etc to the public! It’s not that hard to do it right, or at least “right enough” that you can’t get owned by someone scanning a whole TLD.
I feel like people in general more easily diagnose themselves and others with depression or other mental diseases recently. I find it hard to judge whether it’s due to any external factor or some form of zeitgeist.
I've been writing an email newsletter on backend dev for the past few years - https://quastor.org/

Basically, I look through all the Big Tech engineering blog posts and look for interesting posts. Then I'll write up an article talking about the tech stack and the main takeaways.

I've been learning Adobe Illustrator + After Effects recently and am now starting to add some visualizations + graphics to accompany the articles.

I make more than $500 per month but this is more of a passion project and the income is honestly not competitive (at all) with what I earn as a dev.

It also gives me a way to learn about marketing/growth + monetization. Hard to learn that stuff w/o doing.
What is the security of this?

1. If someone steals my laptop & breaks in, can they get access to all my history

2. After breaking, if they run `atuin key` will get them the key for my history which they can use from any device (if they know the userid)

3. If you are running servers passing passwords as command line arguments in that device, they have all that.
I feel I should clarify, the writeup was not the blog but rather than vulnerability disclosure report (PDF) I sent to them directly.
Companies go with Juniper because they can outfit a data center at half the price of Cisco. NYSE did that a decade or more ago with their Mahwah data center.

Its not really a bad strategy. If you're going to have a large team of network engineers work continuously on a the Juniper tech stack, they'll get use to it - even if they were raised on Cisco IOS. Juniper stuff works just as well as the rest of them.
> what about the level of control, structure, and surveillance that most young people have been subjected to over the same arc of time?

Not good enough thats mostly the US doing that
Multi-Cursor Window Manager (2006)
If your parents know where you are with 3m accuracy it isn’t really free roaming.

In other words, being watched or tracked will definitely affect a kids behavior.
There's a key distinction between operating a vehicle for commercial purposes and a private operation, not just the ability to harm others. There's a reason why commercial pilots licences are in a completely different league in terms of training and responsibility to PPLs.
She hosts people at her physical house, why should her digital home be any different?
The weights aren't needed to make it reproducable. The code and training data are needed. Hopefully if you used those, you'd ultimately reach the same result.
Couldn't you just point DuckDB or a similar tool to the history file?
People underestimate the change that took place between 2008 and 2012 with ubiquitous phone usage. All of a sudden we all started staring at these devices for several hours a day. We never leave this thing.

The resulting impact on our mental state cannot be overstated.
GPS tracking does not brainwash kids...
I'm in Canada, but I don't think that's it.

- Docker Newsletter: `List-Unsubscribe: <mailto:redacted@unsub-sj.mktomail.com>` - but missing http post/one-click header

- Java Weekly: link in body but no header
Expensify: compliant

- Gradle: compliant

- Confluence Digest: No unsubscribe header

- Apache Mailing Lists: mailto header, but missing required http post / one-click

I think the confusion is that it's not just having a link, it's a specific set of headers, dkim signed fields, and form response that allows a mail client to unsubscribe with no user interaction.
https://en.wikipedia.org/wiki/Telecommunications_Act_of_1996

Under the heading “Later criticism” there is a bit of an explanation; I guess the ownership rules changed so stations were consolidated to fewer owners.

> The legislation eliminated a cap on nationwide radio station ownership and allowed an entity to own up to four stations in a single market. Within five years of the act's signing, radio station ownership dropped from approximately 5100 owners to 3800. Today, iHeartMedia is the largest corporation with over 860 radio stations under its name across the nation.
I’m also inclined towards this explanation because I think the world would be better off without it.

But I’m not certain if it is possible to put that cat back in the bag.
I was doing a number of unholy things at the time, effectively monkey-patching and syscall interception of some of the daemons for "seemed like a good idea at the time" reasons.

Also, sometimes, you just want to throw a tool on there to test something.

Today, I'd love to run stuff like tailscale for access to the control plane remotely.

Mostly, however? I did it because they said I couldn't.
There are so many alternative explanations to go through before it "has" to be social media. Already mentioned was time spent outside. For instance, video games are (also) a huge drain on time spent outside.
2023 – A Year of Earth Observation Milestones
But did it go down dramatically in particular in the early 2010’s? Because the data seems to suggest that the teen mental health situation accelerated dramatically in that time frame.

One thing that comes to mind is that during my lifetime, and it’s difficult to pin down a specific time frame, the stigma surrounding mental illness faded pretty dramatically it seems. Now I don’t know if that change inflected dramatically in the early 2010’s—I would think that that process would be more gradual, but perhaps not? Is it possible that an existing problem has simply become dramatically more visible to us?
http://www.tcpipguide.com/free/t_toc.htm covers a lot of the basics.
When I was evaluating Firebase a few years back, the thing that most annoyed me was that their frontend library wasn't open source. Google just shipped an obfuscated and minified JS library. The lack of source mixed with their terrible docs made it a non-starter for me.

I remember having some issue, and thought: well, it's JS, let me just check the source like I normally would! Only to find out that you couldn't browse the full client source code anywhere. At that point my only option was to reverse engineer the minified source which just seemed silly and like a waste of time.

Firebase moat has nothing to do with their frontend library, which anyone could reverse engineer with a little bit of time. And yet they still kept it closed source. I don't know if anything has changed since then, but that was the primary reason why I lost interest in the service.
And indeed, we are talking about Firefox on android here.
Wait, which is it: that we no longer have a collective listening experience to enrich rock music, or that we no longer have a competition among diverse, idiosyncratic stations exposing us to varying DJ tastes? It seems like it'd need to be one or the other, if we're describing a macro phenomenon like "the death of rock".
It's Amazon, anything niche is just not registered...
Asking someone to look up Econ 101 isn't necessary to make your point.. You probably knew what I meant. You probably knew that my point is they control the supply, so they control the price- the equilibrium price if you like.
My brother died from a heroin overdose. The fact that it was illegal didn't prevent it and might have been a small contributor in that the purity and strength of the drugs could not be known.'

My mother died as an alcoholic. Totally legal drug that's socially acceptable.

I'm well aware of the abuse potential. But a lot of this (including the current fent epidemic) could be addressed by legalizing and regulating these drugs (including the aforementioned ibogaine).

So yes, the current state of laws, enforcement and culture are definitely aligned for the clusterfuck of what we have today (by virtue of that's what we have).

There will always be risks, but society has shown that it's ok with risks in that alcohol and tobacco are legal. They've just been brainwashed by the drug war propoganda.
If they're selling it at cost, ~$100 is not so unrealistic. It's similar in specs to the GL-MT3000 from GL.iNet which retails for $109, albeit without some of the price-increasing niceties like NVME, redundant recovery flash, or built-in usb-to-serial converters: https://www.gl-inet.com/products/gl-mt3000/
What is a whitebox switch?
Do teens have much to look forward to?

Climate change is already causing severe weather events, which are very likely to ramp quickly.

Careers are a thing of the past, and it seems like no matter how hard you work you'll never "get ahead" and will be lucky not to spend your life living paycheck to paycheck.

Life expectancy has gone down, markedly.

Debt is up.

New wars.
e-ink has a cool and unique aesthetic that LCDs simply can't offer. It also, theoretically, can be permanently displaying information without being connected to the grid.

Neither of these two things are tradeoffs for price - a higher price can't get you an LCD that provides the e-ink aesthetic, and while you could buy a big solar/battery array for LCD, it'd be heavier/less portable and would be more expensive overall, anyway.

Also, the cost is basically zilch:

>For this project I went with a Nook Simple Touch Reader. You can find them on eBay or Facebook Marketplace for $10-$30 used.

$30 for a hobby project is nothing. You can spend more than that on wood.
Ok but that's the cutest airplane I've ever seen
I certainly think a drinking age below the driving age is appropriate. Either by increasing driving, or lowering the drinking age.
> printers, which used to be a good business

Good business as in earning money or as producing customer satisfaction? I don't know about the former, but I do know that HP printers are a horrible user experience these days. The printer is connected via USB, but it cannot be used without an internet connection to their data collection and ink selling cloud nonsense. I will never by anything from that brand again. (I used to be a HP fan since the 1980s.)
A thing not mentioned on urbanist Twitter as much:

Teens are not allowed in malls and a lot of other (effectively) public places now.
If a kid changes behavior because of a parent watching then that kid absolutely needs watching.

It's still free roaming because the kid is 100% in charge of where they will go. That's the part that matters, not that someone can tell where they are.
In my experience, the roads lead back to SQL. It deviates from the relational model. It may even be that SQL was successful because it deviated from the relational model. Perhaps the theory doesn't just work?
People blame social media, but they never ask why social media is like that. I think that the cultural changes that lead to that have been running for far more time than people give credit for, and that social media is just the proverbial canary on the mine that made things explicit.

Those changes are multi-generational changes, and more probably there are a multitude of factors behind it. Family structure, economy factors, crime, drugs, values and taboos changing too fast, uncertainty about the future.

We will probably won't find a culprit, but if I had to bet, I would say that far reaching event like the Vietnam war, reagonomics, the downsizing mania from the 80's are probably more important factors than the recent creation of social networks. If we have to blame someone, maybe we should be looking at figures like Lee Yacoca, Carl Icahn, and Jack Welch instead of Mark Zukerberg.
Clear Channel happened, or as they're called these days, iHeartMedia: https://en.wikipedia.org/wiki/IHeartMedia#Market_share
For what it's worth, ibogaine in particular is more dangerous than more common psychedelics. There have been many fatal overdoses which isn't true of, for instance, LSD.
Does your history store frequency? Could prune those with only a single run until it's performant