skysight-inc/HackerNews huggingface dataset:
Containers are widely used at our company, by developers who don't understand underlying concepts, and they often expose services on all interfaces, or to all hosts.

You can explain this to them, they don't care, you can even demonstrate how you can access their data without permission, and they don't get it.

Their app "works" and that's the end of it.

Ironically enough even cybersecurity doesn't catch them for it, they are too busy harassing other teams about out of date versions of services that are either not vulnerable, or already patched but their scanning tools don't understand that.
> Just like people shouldn't just buy industrial welding machines, SCUBA equipment or a parachute and "wing it" I think the same can be said here.

I find this to be extremely sad.

Unlike welding or diving, there is no inherent physical risk to life and limb to running a server. I should be able to stand up a server and leaving it running, unattended and unadministered, and then come back to it 20 years later to find it happily humming along unpwned. The fact that this isn't true isn't due to any sort of physical inevitability, it's just because we, the collective technologists, are shit at what we do.
There's some examples of games that you can repurpose to play other existing games on BGG, and they link to lists people have made: https://boardgamegeek.com/thread/1812755/list-of-games-you-c...

More like repurposing games to play other existing games rather than the overhaul you're talking about.
How good are LLMs at reducing code? For example, will they recognize a common problem and build an abstraction around it? I imagine that the solutions they produce tend to have a lot of repetition with small differences that could be improved by abstraction.
Then push up the valuation. Find out how many euros your co-founder is willing to part with (or even borrow!) in order to get that 99% ownership that they want so badly.
That was a 4chan screenshot, analysis of which shows some pretty clear photoshopping [0]. All signs point to it being some kind of troll; I don't know how 4chan pseudonyms works but I can't imagine it having actual identity verification.

[0] https://www.theverge.com/2025/1/3/24335045/elon-musk-4chan-a...
I agree. This seems like they treating symptoms of the problem than the actual cause.
> not to mention geopolitical since said ecological effects will be across the border in India

China is taking full advantage of India's military dependence on Russia. (India cannot afford, let alone win, a conflict with China right now.)
He was already being held in prison so I see no reason to further publish until a trial or settlement hit.

But let's assume he's charged and released on bail or otherwise. In that case, I think it's reasonable for the cops to notify the organizations he's involved with of the pending trial and for a judge to put a restraining order on him. I didn't think anything further needs to happen until he's found guilty or settles with a guilty plea.

My kid's school recently had a related event happen. A guy with a CSAM conviction was released from prison so the cops went around to all the schools to let them know about the dude. (We are friendly with the school secretary and noticed an unusual amount of cops around the school).

Edit: oops, looks like I mixed up your case with the OPs.

But I think what I said still applies and is ultimately what happened in your case.

My main issue is with a public permanent record in the form of a newspaper or news broadcast and not with responsible disclosure by cops.
you make a very convincing argument. /s
That was a super long post to just say “the ratio of mph/knots ≈ π/e … and it’s not very useful, but a cool coincidence.”
HN site guidelines request that the submission to HN has the same title as the article.
> Tim Cook is a CEO and he answers to the shareholders.

This is a personal donation. You can’t weasel an excuse of fiduciary responsibility to shareholders¹ from it. No one has shares on his life.

Tim Cook is a human being and has to answer to his consciousness too. His Twitter bio quotes Martin Luther King.

https://x.com/tim_cook

> “Life's most persistent and urgent question is, 'What are you doing for others?'” - MLK.

He also claimed in the past that ROI wasn’t his primary concern.

https://www.forbes.com/sites/stevedenning/2014/03/07/why-tim...

¹ And those are getting old. The guy is filthy rich and powerful, there’s no one stopping him from being ethical. He might get fired, big whoop. Makes zero difference to his ability to live comfortably the rest of his life.
This is only an issue if you run Docker on your firewall, which you absolutely should not.
https://news.ycombinator.com/item?id=18730865

Previous discussion on this
I'd like to have a program to prepare and typeset PDFs for newspapers to be printed out of a gazillion of news sources is like to read, very few of which have an rss.
From $0 to Paying Customers: The Two-Page Strategy That Launched Buffer
No. It's not so easy because in most cases you have to choose between security, flexibility and usability. Obviously it's not a 100% accurate example but generally speaking, it tends to be true. Sum it up over several decades of development and you get why we cannot have something that it's really really easy to use, flexible and secure by default.
I want to mention a recent extension to Berlin‘s subway system right in the middle of the city, in swampy ground and below a canal. They injected „freeze lances“ into the ground, turned 43,000 m^3 of mud into an ice block and then carved their way through it. Absolutely amazing engineering, I think planned and executed by a Swiss company.
I would take it as:

Although axillary lymphadenopathy is a known side effect of COVID-19 mRNA vaccines, such changes are transient and contribute only to the perception of breast growth. To date, there has been only 1 published case outlining lasting parenchymal breast changes, presenting as a palpable mass, following administration of the Pfizer COVID-19 mRNA booster. No formal studies have established a link between breast parenchymal growth and the Pfizer COVID-19 vaccine.

It's a one off case and they were unable to draw any conclusions, like if it was the spike protein to blame or if it was the carrier solution.

A bit off topic, but, I had a Moderna booster shot and the flu shot both in the left arm a couple minutes apart - 20 .. 30 mins later I had a notable soft mass form (not from pus like a boil) on the underside of my left wrist (where one would take a pulse) about 7/8 in / 22 mm where it persisted for a year in that state, another year or so on slowly shrinking, (ie more than 2 years) is now approx quarter the volume. That would most likely been from some weird interaction of the vaccine carriers and not likely from covid's spike protein.

Correction edit: My recall is bad, I believer it was not a Pfizer shot (my first two were) but Moderna's vaccine.
TikTok and Fox News and twitter and friends working as intended, sapping ambitions and attention spans and political wills.
> sending this to a woman we worked with that he had a grudge against for some reason or another

Sometimes I wonder what the hell is going on in people's head.
What's your favorite Starbucks app?
I hear there are some clones out there :)

Josh
I like this! I can already see the effect without having to select it and the links to MDN are much appreciated.
Interesting to see xkcd's Randall Munroe's live tour linked!
Thank you for acknowledging, by omission, that you have no real counterargument.
@kaloryfer the exact reason why i OPEN SOURCED it- so you can choose to run it yourself :)
okay, I didn't know that, thanks for the background.
I wonder why the assembler would not optimize this though.

I noticed that I then could also shave of one byte more by using lea esi, [rel msg] instead of lea rsi, [rel msg].
They would for sure because they move independently from brain. They will also tend to be slightly lower most of the time, so the gravity they experience is slightly larger affecting time passage. The relativistic effects of hand motion on age would be small of course, but we are talking about extreme precision here.
> Seems like they opened up a postgres container to the Internet

Yes, but so what? Getting access to a postgres instance shouldn't allow arbitrary execution on the host.

> IIRC docker does this whether you want to or not, it punches holes in iptables without asking you

Which is only relevant if you run your computer directly connected to the internet. That's a dumb thing to do regardless. The author probably also opened their firewall or forwarded a port to the host, which Docker cannot do.
I subscribe to their YouTube channel and it seems like their trash blocking systems they have installed in rivers is probably the most valuable part of the whole thing from the outside observer's perspective. The amount of plastic they pull from these is really pretty incredible. But yeah, the part where they are on the open ocean collecting it seems pretty daunting, but maybe robotics can help one day??
Well, that site also has this:
https://practicaltypography.com/columns.html

The style of the page can use CSS column properties to make use of the width of laptop/tablet displays, instead of defaulting to ugly "mobile size fits all" templates.
The subtitle says "a minimalist discussion platform" yet the form is inert without Javascript.
Previously I've used the "disable styles" shortcut key in the Firefox web developer extension to make unfriendly websites more tolerable. Today, I wish Chrome had a shortcut key for enabling reader mode to do the same.
Isn't "Personal growth" an odd one here, since it refers to the other dimensions?
Yes, the relevant blur here is in your retina, as it tracks a moving screen object, called "sample and hold" blur. 60 fps is not enough when the pixel persists for the full frame duration -- the pixels smear across your retina.
Repost of https://news.ycombinator.com/item?id=42421128 that was down-weighted in favor of https://news.ycombinator.com/item?id=42419469.
I had ~500 kbps sustained attacks against my residential ISP for years.

I learned how to do everything through SSH - it is really an incredible Swiss Army knife of a tool.
I came here to say exactly this! Elixir and OTP (and by extension LiveView) are such a good match for the problem described in the post.
> When I check tutorials on how to drill in the wall, there is (almost) no warning about how I could lose a finger doing so. It is expected that I know I should be careful around power tools.

I think the analogy and the example work better when the warning is that you should be careful when drilling in walls because there may be an electrical wire that will be damaged.
Im curious about what the password for postgres looked like.

This exact thing happened to a friend, but there was no need to exploit obscure memory safety vulnerabilities, the password was “password”.

My friend learnt that day that you can start processes in the machine from Postgres.
You literally quoted me saying as much in the other thread, then tried to mock it:

-

[me, quoted by you] maintaining power without relatively widespread support is quite difficult

[you] Strange claim in a thread about the Korean peninsula.

-

I'm sure you know that Yoon was/is extremely unpopular. This was the crux of the issue. If Yoon had an 80% approval, I believe he would be the dictator of South Korea today instead of impeached and with a warrant out for his arrest.

Now obviously you agree with that as well. So where did we disagree? Right, on what happens when an unpopular man tries to declare himself dictator.
C and C++ is not accountable for all evil of the world. Yes I know, some Rust evangelists want to tell us that, but most servers get owned through configuration mistakes.
I sold a laptop on eBay once long, long ago. Someone did the "Buy it now" option but never paid. I'm trying to remember the exact situation (probably more than 10 years ago), but I had exchanged messages with him several times and he always had an excuse to not pay.

Then I noticed he was selling the exact same model of laptop so it was easy for me to realize that he had just "bought" my laptop to remove the listing so it wouldn't compete against his. I messaged ebay support to accuse him but they didn't do anything about it.

Since he had made the order, eBay did show me his shipping information so I ordered a "glitter bomb" which was basically glitter in a tube with a spring. I got a very nasty accusatory email from him, but it was very vague. He wouldn't specify what he received, but that he was smart enough to not open it. That's how I knew he got the full effect.

I just replied something to the effect of "You never paid me. Why would I send something to you?"
A well pruned YouTube subscription is right now the highest quality video entertainment and information service in the history of the world. You literally just need to "like and subscribe" to a bunch of high quality videos and YouTube will recommend you a never ending supply of high quality videos. You can then continue to improve your recommendations with the like/dislike buttons.

If you're seeing "shitty content", clickbait and paid sponsorship, it means you haven't told the YouTube algorithm what you want to see. It's just the push of a button.
Every guide out there says to link Postgres to the application (the one using Postgres). So the Postgres network is not reachable. Then, even if it were exposed, a firewall would need to be configured to allow access. Then, another thing every guide does is suggesting a reverse proxy, decreasing attack service. Then, such reverse proxy would need some kind of authentication. Instead, I simply run it behind Wireguard. There's still plenty to go wrong, such as backdoor in Postgres database image (you used docker pull), not upgrading it while it contains serious vulnerabilities, or a backdoor in some other image.
And this was one of the reason why I switched to Podman. I haven't looked back since.
Reading this as a layman, it looks like releasing ΛCDM's cosmological principle [1] reveals the nontrivial temporal effects mass clusters have via general relativity. As a result, there could be empty regions of space in which billions of years more have elapsed than in e.g. a galaxy. This not only changes how we interpret supernova data (the acceleration isn't generally happening, but an artefact of looking through space which is older than our own), but may also negate the need for dark matter (EDIT: dark energy) and the meaning of a single age of our univese.

(I'm also vaguely remembering a multi-universe model in which empty space inflates quicker than massed space.)

[1] https://en.wikipedia.org/wiki/Cosmological_principle
People have asked for face interviews. I suspect Adrian is enjoying the attention all the confusion generates.

And it’s not “just” because he sounds like Elon. There have been multiple occasions where Adrian has said “I” referring to Elon. Obviously people slip up in speech, but also obviously some people have pseudonyms.

Adrian has lots of in-depth knowledge of Tesla/SpaceX, shows up in the same circles as Elon constantly, has an obscene Twitter addiction (i.e. just participated in a 10 hour live audio chat), defends Elon at every chance including in deeply weird/personal ways like “you are such an amazing father Elon” on pictures of Elon and his kids.

It’s all quite weird and people are absolutely justified to be curious what the fuck is going on.
> it is genererally much cheaper to build a tunnel by cut and cover

Coolo, you are building tunnels in a city that doesn't exist yet.

Start here - https://en.wikipedia.org/wiki/Opportunity_cost

Do you have any interesting examples of modern day cut and cover that are not part of a TBM run?

> TBMs are cool and useful

They are what is needed to move humanity forward.

You have trillion $ centers that using 3D you can add massive amounts of access to. This is not like reclaiming land from water, which is ~stealing, this is value adding through topography, it's creation.
The exploit is not known in this case. The claim that it was password protected seems like an unverified statement. No pg_hba.conf content provided, this docker must have a very open default config for postgres.

`Ofcourse I password protected it, but seeing as it was meant to be temporary, I didn't dive into securing it properly.`
A happy person and an upset person meet. Their emotional statuses are wildly different, therefore drama ensues.
Not that it makes for better policies in respect for human rights on their part...But most Chinese leaders are engineers and scientists in case you did not notice. And I mean real Engineers not Musk type engineers....
I don't have a great opinion of marketing in general and therefore I'm often unconvinced with arguments like "marketing is about fulfilling a customer's needs" or "adding efficiency to the market".

Therefore I feel vindicated when a moderately-upvoted post says the quiet part out loud, namely, "Yeah, we made a fake post and just lied to everyone on the internet. I'm not sorry, because not only was it popular - it became the top post of the day."

Remember, kids: lying is only wrong when it's unprofitable.
It is sure seeming like LCDM needs some work. It's not really clear if a timescape approach solves the outstanding issues though
Just makes me more cynical about everything I see posted. Marketers ruin everything eventually
Not everyone shares your rigor to not buying from strangers.

Pieter Levels is a one-person show that has started multiple businesses with just a single page & a Stripe Checkout earning millions per year and I don’t believe he’s incorporated.

https://x.com/levelsio
Probably not required. Many of them were given debit cards and that's easier to track where a person was and will be again.
Ideally, yes. But in reality, this means that if you just want to have 1 little EC2 VM on AWS running Docker, you now need to create a VM, a VPC, an NLB/ALB in front of the VPC ($20/mo+, right?) and assign a public IP address to that LB instead. For a VM like t4g.nano, it could mean going from a $3/mo bill to $23/mo ($35 in case of a NAT gateway instead of an LB?) bill, not to mention the hassle of all that setup. Hetzner, on the other hand, has a free firewall included.
Some people making money on the Internet is a lot different than what the Internet has become today - and what I meant by money grab.
OpenSSH has no currently known flaws but in past it contained a couple. For example, the xz backdoor utilized OpenSSH and it has contained a remote vulnerability in past (around 2003). Furthermore, some people use password auth as well as weak (low entropy or reused, breached) passwords. Instead, only use public key authentication. And tarpit the mofos brute forcing SSH (e.g. with fail2ban). They always do it on IPv4, not IPv6. So another useful layer (aside from not using IPv4) is whitelist IPv4 addresses who require access to SSH server. There is no reason for the entire world to need access to your home network's SSH server. Or, at the very least, don't use port 22. When in doubt: check your logs.
Program with the LLM the way you should program. Have it always build the most naive implementation, then ask it to clean it up, then ask it to add one feature at a time, then ask for optimizations, then ask for alternatives, then ask if you are going down the right path or not. Keep working incrementally.

LLM outputs are like clay, you have to sculpt it.
The whole flat thing was pioneered by Microsoft. Boggles the mind as to why Apple and Android copied this nonsense. https://en.wikipedia.org/wiki/Metro_(design_language)
Because they get to leave while others get to maintain the code including their contribution until the end of time.
or, if not sealed up properly, provides an avenue for pests to crawl through.
I'd argue that it hasn't come to pass, but it is not wrong that its a better way to teach. Virtually all education has been set up in an industrial line style of pre-u education -> university -> companies -> profits -> some value to society. Every part has been attempted to be structured to optimise for the subsequent stage - companies optimisie for profits, universities optimise for employment rate and salary, high schools optimise for college entrance rates, etc. Yet because of Goodhart's and organizational incompetence, each part optimises badly, so education gets exponentially disconnected from each. His proposals are valuable to society, but the system is structurally against it.

The only way this works if it skips the assembly line right down to being of value to society, ie you set up a system which explicitly transforms that teaching into things like startups, research, nonprofits etc.
Using the link given from the website

https://imgur.com/a/DkifnBG
Neat. So this is like the free Google Lookout app but more emphasis on the scene than objects.
This is a personal donation Cook made in Apple's benefit in the role of CEO. He would not do this if he was not Apple CEO. You can see the same in elections in the US and other countries. People in lobby groups and their lawyers give large public donations to candidates in behalf of their clients.

Donation buys access. This established way to do business.
> For example, I’m not giving my credit card details to any random website to buy silly stuff unless they are properly identified

You might be putting more thought into this than the average person looking to anonymously send someone a bag of penis candy.

More seriously though, setting up an LLC cost me well under $1000 each in two different states. No, I don't have some elaborate tax dodge going; I moved.
DEI and environmental road blocks come from the other side of the isle.
It's not "this industry" and it has nothing to do with tech. It's how most business endeavors practically work. Someone wants to start, say, a woodworking service or shop? It's perfectly normal and expected to offer discounts for some time to grow. Whoever has time subsidizes their time. Whoever has money subsidizes their money. I honestly don't understand the "surprise" behind what's basic common sense in everyday life.

There is no point in differentiating this like "ah it's on a bigger scale" or something. It's still just pretty basic.
I wonder about the river barriers. I buy that the ocean buoys aren’t effective, but it seems like plastic would be a lot more concentrated in the rivers that feed it into the ocean, and the rivers themselves are a lot shallower. I would be interested in reading an expert opinion on whether those make sense.

Also, the criticism I’ve read runs along the lines “they can’t clean up a huge proportion of ocean plastic,” but the engineer in me can’t help but feel that that’s the wrong angle—it seems like the question should be “how does it compare to other methods on $/(kg plastic removed)”? Of course that question is currently unanswerable because what the critics propose is research, whose results are by definition undefined, but I guess I wish it was the focus of the conversation.
I guess it makesmsense if flex-direction vertical is like switching to a vertical language.
The stages of life breakdown feels a bit too cookie cutter. Certainly it's a common progression, but it's also possible that choices in your 20s/30s mean that you need to make up for lost career/financial time whilst still maintaining/raising a happy and healthy family. I'm not really criticizing the post/method as it seems like a good thing to do, but cautioning that it may not be easy to just put areas on hold whilst focusing on only a couple of others.

EDIT: I do like that in the "fulfilled engineer" radar chart it's not all 10s, but rather 3-5s mostly. There's a tendency in self-help to suggest you can have it all.