skysight-inc/HackerNews huggingface dataset:
How exactly is Tailscale different to literally any other piece of network capable software in that regard?

NAT traversal requires careful coordination between two devices to create a connection, it’s not like any random device on the internet can perform NAT traversal against a machine just because it’s running Tailscale (not to mention every modern browser has NAT traversal built in for WebRTC connections).

And if the issue doesn’t arise from using NAT traversal, then how does Tailscale expose anything more significant than what a traditional VPN will expose? After all the only difference between a P2P VPN and a traditional VPN, is that a traditional VPN bounces all your traffic off a common server, rather than attempting P2P connections.
UFW and Docker don't work well together. Both of them call iptables (or nftables) in a way that assumes they're in control of most of the firewall, which means they can conflict or simply not notice each other's rules. For instance, UFW's rules to block all traffic get overriden by Docker's rules, because there is no active block rule (that's just the default, normally) and Docker just added a rule. UFW doesn't know about firewall chains it didn't create (even though it probably should start listing Docker ports at some point, Docker isn't exactly new...) so `ufw list` will show you only the manually configured UFW rules.

What happens when you deny access through UFW and permit access through Docker depends entirely on which of the two firewall services was loaded first, and software updates can cause them to reload arbitrarily so you can't exactly script that easily.

If you don't trust Docker at all, you should move away from Docker (i.e. to podman) or from UFW (i.e. to firewalld). This can be useful on hosts where multiple people spawn containers, so others won't mess up and introduce risks outside of your control as a sysadmin.

If you're in control of the containers that get run, you can prevent container from being publicly reachable by just not binding them to any public ports. For instance, in many web interfaces, I generally just bind containers to localhost (-p 127.0.0.1:8123:80 instead of -p 80) and configure a reverse proxy like Nginx to cache/do permission stuff/terminate TLS/forward requests/etc. Alternatively, binding the port to your computer's internal network address (-p 192.168.1.1:8123:80 instead of -p 80) will make it pretty hard for you to misconfigure your network in such a way that the entire internet can reach that port.

Another alternative is to stuff all the Docker containers into a VM without its own firewall. That way, you can use your host firewall to precisely control what ports are open where, and Docker can do its thing on the virtual machine.
'Don't feed the troll': German chancellor responds to Elon Musk comments
Perhaps common ailments such as iron insuffiency (anaemia), excess bilirubin, heck maybe even cholesterol?
> Social media pretty much abused every generation.

That's a pretty extreme viewpoint, no?
As applicant, I would pay if:

- it guarantees less competition

- I’m guaranteed to get an interview. I’m not paying to get directly a No as an answer

- it guarantees the company is actually hiring for that role

Unfortunately, I don’t see how one can enforce anything on companies unless it comes via regulations
You have to check out the author's other youtube videos exploring this tower in depth. Fascinating stuff!

https://www.youtube.com/watch?v=6_u8x8V4YYs

https://www.youtube.com/watch?v=wJ-XqQchwEw
Try it: you'll see. Low power recommended.
From what I understand, Intel went with TSMC because their own nodes weren't ready yet, which makes sense to me. I imagine once their node is production ready, they will switch back. It's also interesting that for a single generation or two, they were able to switch to TSMC, with the plan to switch back, which, as an outsider, suggests to me that changing between nodes is not as tall of a task as one might think.

Additionally, I feel a lot of people are forgetting their biggest surefire customer--the United States military. If they get anything operational, even at 2x or 3x the cost of TSMC, the US will buy them and give them the resources and experience to serve larger markets, as the US has done with computing in the past.

They have a mountain to climb, for sure, but the path towards recovery still seems possible as long as Uncle Sam wants to buy from them.
Project Kuiper: Amazon’s satellite broadband network
These phish testing companies always stick a header (X-PHISH-TEST or some such) on the email so the email server can white-list -- easy to just Outlook blackhole filter anything with that header after you've seen one test.
I'm sorry, that's awful.

When your insurance company denied the scans, did they explain why not? Something like, "your plan only covers X scans per year"? Or was it just a "no" and that's it?
While I broadly agree with the concerns about using LLMs for "commoditized", large-scale phishing, isn't the study a bit lacking? Specifically, "click through" is a pretty poor metric for success.

If I receive a unique / targeted phishing email, I sure will check it out to understand what's going on and what they're after. That doesn't necessarily mean I'm falling for the actual scam.
System76 accidentally built the fastest Windows Arm PC
How is compromising a a single node in a tailnet more dangerous than compromising a single node in a traditional VPN?

Traditional VPN don’t usually put firewalls between machines on the network, because traditionally the whole point of a VPN is to avoid the need for firewalls to provide security between nodes on the virtual network, by assuming that only safe machines can connect to the VPN.
Corvus Robotics (YC S18) is hiring a Head of Software to help inventory drones
https://app.dover.com/apply/Corvus%20Robotics/35826b4b-2394-...

tl;dr - hiring someone to lead all customer-facing software: displaying & optimizing millions of pieces of inventory tracked by our drones with a beautiful user experience.

We’re the founders of Corvus Robotics. We’ve built the world’s first fully autonomous drones that help warehouses track inventory. No human pilots, no location stickers, no localization beacons, fully onboard real-time autonomy: https://www.youtube.com/watch?v=C-gO7dCocV8

We have product-market fit. Dozens of Global 2000-sized companies use our drones every day, across the US, to track millions of pieces of inventory. Our customers are expanding and growing quickly.

You:

- Experienced IC SWE, probably with Postgres, GraphQL, React.

- Have experience with, or at least curiosity in, WMS / supply chain software, and high ambition. Like, what does the ideal AI-first inventory tracking of the world’s physical economy look like in the future?

- Obviously, you extensively use AI-enabled tools as a force multiplier.
Scientists pin down the origins of a fast radio burst
A web app I built for myself to use over the past few weeks, essentially it allows you to count anything you'd like whether it be personal goals, analytics, etc.
Musk says Farage 'doesn't have what it takes' to be Reform UK leader
I don't think so; it would have made the malware harder to spot.
Take a 12 year old out of school? That's grade 5. They're learning to write paragraphs and their times tables. Not many business leaders can't write a paragraph or do 7*5 in their head.

Better advice would be to get them into something at school, that allows them to hyper focus. Something that draws them in. Science or programming, or even art.
Not everybody can upgrade RAM due to warranty seal/lack of slot or simply doesn't know how to do it. Software should use as little resources as it could.
The article feels more like satire than encyclopedic. It does not discuss at all the reasons some people consider meritocracy "a myth" that is not happening, but it lists many negative takes from different people. That makes it subjective and biased.

Is meritocracy a good idea? Not discussed, but quite obviously it is: people with the competency and putting the effort should be more successful than the people without competency.

Is it happening? No, for different reasons in different places. In politics, if a party is sending a complete idiot as a candidate, it will be voted by the party fanatics no matter what (not talking about US, but about Earth in general). In companies corruption and specific external factors influences hiring and promotions based on criteria other than competency and results.

Is the article talking seriously about anything? No. Failed.
> Also: if sensor fusion is so hard, why is Waymo able to solve it but not Tesla?

I think Karpathy's point is that Tesla wants to try to avoid the "entropy" that comes from adding a sensor (senior software engineers and higher understand this concept). Every sensor (and every version of it -- sensor hardware does get updated) you add requires recalibrating the software stack, the hardware design, which introduces points of failure every time you roll it out.

According to Karpathy, Tesla does use Lidar -- but only at training time, as a source of truth. Once the weights are learned, they operate without the Lidar.

Have a full sensor suite may work for Waymo at the current scale (limited cities), but scaling beyond that poses problems.

Whereas Tesla has to work with a different set of scaling economics -- that of a mass market vehicle already deployed globally.
Sounds fragile and pretty exposed.

(Also a complete layman here)
I got way worse. I was fined for leaving an unattended baggage at the train station for a bit. The fine came through an SMS message redirecting to a domain which I had to whois to verify was owned by the train company…
DuckDB is the king. Kuzu is a similar king for Graph Data.
There was a DOS port of nethack, so likely it could be made to run on elks.
Generative Agent Simulations of 1,000 People
One word deserves so much blame for the current state of the internet: marketing
Roughly similar craziness: Disk drives mechanically position heads less than 1nm above the platter, with horizontal accuracy of significantly less than the 50nm track width, at a retail price of a few hundred $$ or less.

30 years ago I think you could have gotten any number of experts to explain why both EUV lithography and modern disk drives are impossible.
each side accuses the other of bad faith, but only one side is sabotaging the international body that is supposed to adjudicate trade disputes
It will be year of P2P networking for realsies this time tho!
Chinese companies don’t have to play by the rules in the same way that foreign companies do. China isn’t a rule of law country, and has explicitly stated that it doesn’t want to be a rule of law country. Instead laws are enforced selectively for whatever outcome the official branch wants at the moment (rule by law). They are perfectly willing to fine American companies when Chinese companies cheat (and not apply anywhere near the same enforcement to the Chinese company that actually cheated).

Foreign companies have to be heavily aware of context just like Chinese companies do, but they will also be treated very differently in how and when laws are applied (not always to their detriment, China will elevate some foreign companies to show they are fair and open to FDI).
I'm a spreadsheet pro, but I set up this budget stack — Actual Budget + SimpleFIN — for my spouse last week.

SimpleFIN is fast and a quick Plaid alternative for just $1.50 a month or $15 for the year. I created my SimpleFIN account, copied the API token, and added a bank account. Then I jumped back to Actual Budget, entered the API token, and linked the account from Actual to SimpleFIN. You can link as many bank, credit card accounts as you want with one SimpleFIN account.
China doesn't want to be an opium den for western powers and have their economy underdeveloped by their firms. I think that's okay and it has been paying off. That's why China is able to develop its economy to superpower status while so much of the rest of the world is locked in dependency on the whims of G7.
It's worth noting that "success" here is getting the target to click a link, and not (for example) handing over personal information or credentials.
Even the connector (host-side) is a world of confusion.

Take a random port on a random laptop, of any vintage you choose. Pretty much every port you can name is easily identifiable and you can tell what it's capable. HDMI, VGA, USB-A (even with 2.0 vs 3.0), 3.5mm headphone, charging, Ethernet, whatever: any high school student with a passing interest in computers will be able to tell you what you can (and can't) do with it with 95+% accuracy.

USB-C, on the other hand, is all of the above and none of the above at the same time.

Pick a random USB-C port on a random laptop. (We'll leave mobile phones out for now.)

If you're lucky, it's got a little lightning-strike icon, and it's almost certainly Thunderbolt 3 or Thunderbolt 4, and stuff will Just Work. Mostly. To tell if you've got TB3 or TB4, plug in a dock and check if your second 4k monitor works, I guess.

If you're less lucky, it will have a USB Super-Speed logo or something next to it. You might be able to connect a display via adapter if it supports the DisplayPort alt mode, but you won't know till you try.

If you're even less lucky, it will be completely unlabelled. So just plug in stuff and see what works. USB4, perhaps? You might be lucky and have optional TB3 compatibility on it. Possibly one of the various USB 3.0 variations, with their plethora of available speeds. Most likely you'll be able to get at least a USB 2.0 connection to plug in your mouse via a dongle. Might be a weirdly-shaped analog headphone jack, but it's possible (in theory, at least) that the only thing behind it is the same old 5v at a few hundred mA that we've had since the 90s.

And none of these details, as far as I can tell, are documented anywhere.

Fortunately, from what I can tell most laptops nowadays at least support TB3, but I'm sure we'll be plagued by unlabelled mystery ports for quite a while yet.
"...The promise of human behavioral simulation—general-purpose computational agents that
replicate human behavior across domains—could enable broad applications in policymaking and
social science. We present a novel agent architecture that simulates the attitudes and behaviors of
1,052 real individuals—applying large language models to qualitative interviews about their
lives, then measuring how well these agents replicate the attitudes and behaviors of the
individuals that they represent. The generative agents replicate participants' responses on the
General Social Survey 85% as accurately as participants replicate their own answers two weeks
later, and perform comparably in predicting personality traits and outcomes in experimental
replications..."
personally, as a retired psychotherapist

Be very wary of ADHD diagnosis, The consequences are huge and have a massive impact on childrens lives.

I hate all ADHD diagnoses, for me I have always seen just naughty children who need time to develop at their own pace and not develop at someone else's pace or for the benefit of any school cariculum or parental needs.

Do not give any child medication to control ADHD, why would you give an amphetamine to any child

I have had this a few times working with children and I have always suggested looking into Dyslexia.

you say "he is good at math but would often misread the problems and answer the wrong question".

This for me is Dyslexia.

how can a child concentrate when he cannot understand what is in the books he is supposed to be able to read.

The child inevitably becomes disruptive so they are not shamed by adults or their peers for being stupid.

call a psychologist and have a Dyslexia test
It's always infuriating getting email from Amazon or my bank "here's signs of potential phishing emails/texts" that doesn't include an exhaustive list of every email address and phone number that that organization will try to contact me from. That should be table stakes when it comes to phishing avoidance, and it's something that can only be done by the business, not the customer.

Yes, like you say, there's always the chance that someone hijacked an official domain - that's where other things like a formal communication protocol ("we will never ask for your password", "never share 2FA codes", "2FA codes are separate from challenge-response codes used for tech support") and rules of thumb like "don't click on shortened links" come in. Defense in depth is a must, but the list of official addresses should be the starting point and it isn't.
#1: An inmate who preaches "criminal wisdom" of questionable quality, like "want to know how to disable a burglar alarm with aluminum foil?"

#2: A telemarketing old lady with a "warm voice and metronomic cadence".

#3: An NYC beggar who "walks up to a table, falls to his knees, interlaces his hands as if in prayer, and begs, at the top of his lungs, Please please please, money, please I need a dollar!"
Advice for you: accept him as he is, and provide support.

I had three sons so diagnosed. One was a soldier and now a Process Engineer. One does software in Silicon Valley. One is a musician and works as a programmer at a major retailer data center. All three quite successful.

Understand that help from doctors and schools are all about pushing him back into a box for their benefit. When they have challenges dealing with school processes, they double down on those processes (instead of adapting them so he can succeed). They drug him to remove objectionable parts of his personality. They'd rather blunt his intellect with drugs to make him fit, than direct his energy usefully.

Advocate for him! He's being told on all sides that he is defective or abnormal, instead of just a different kind of person.
At the moment, we are primarily focused on expanding the team in the US and EU. However, please don't hesitate to reach out – we may be able to make an exception.
That’s really interesting considering China is exporting fentanyl to the USA and much of the western world today.
I think it was a rant, but still related to the post. Its point is that we need to minimize the attack surface of our infrastructure, even at home. People tend to expose services unintentionally, but what's so bad about that? After all, they are password protected.

Well, even when these exposed services are not built to cause harm or provide admin privileges, like all software they tend to not be memory secure. This gives a lucky attacker a way in from just exposing a single port on the network. I can see where comments on memory unsafe languages fit in here, although vulnerabilities such as XSS also apply no matter what language we build software with.
Actual quote from the video:

Why yes, I am a third world dictator. How are you?
Elsevier rewrites academic papers with AI – without telling editors or authors
> but it's nice to have something for mobile too

what's wrong with uBlock Origin on mobile? (available in Firefox)
Both parties are owned by the same oligarchs and security state. The owners don't care who you vote for, the system is a political World Wrestling Federation.
Well, I would say: it's only complicated if it's constrained by politics... which it definitely is.
- This is not a recent development; Mississippi had a GDP per capita similar to Germany when the German economy was booming as well.

- Mississippi has a relatively larger petroleum industry; oil always has an outsized influence on GDP per capita, see Qatar.

- As a German, and speaking purely for myself, I don't consider a 0.1% reduction in real GDP to be "real trouble"... certainly not good, but hardly worth losing sleep over.

- What makes Mississippi the "armpit of the US" other than simply being the state with the lowest GDP per capita? Which is not that bad in absolute terms.
Dynamic analysis, optimal control of competitive information dissemination model
Does this also mean exploiting their cheap/slave labor for manufacturing and importing materials is also off the table?

Very naive to think the incoming US administration would do anything to help the middle class. He sold voters as “America first”, yet his actions speak for the billionaire class.
The weights are my training data. I scraped them from the internet
It's an FAA, FCC, Department of Transportation, Airline and Flight attendant ban.

And that's before you get to the ban in law because the FCC mused about letting airlines decide. In 2018
It is a Red Herring.

That is because the Jones Act in context to the gross entirety of the USA and PRC economic relations is at best utterly irrelevant. Besides, you might find it interesting to learn that the protectionist parts of the Jones act are in fact common around the world. Many counties prohibit port to port shippments without first visiting an international port. Mind you, many folks here would agree these kind of laws are stupid, and I would personally agree... However, that does not stop this talk about the Jones act from being a Red Herring. I'm glad you found a topic of great interrest to you, and that's great.

What does this have to do with Akamai, and many other American companies, ending services in mainland China? Nothing... What does export tarrifs on Chines exports have to do with Jones act? Very little, asymptoticly little... to the point one might say the topics are orthogonal, or more plainly they might say Red Herring.
The parent is nuts, please discard anything it says.
Science and researches are very effective for ADHD, that's a chance!
Today's world is too transparent and connected. I can open the web page of an university where a bunch of PhDs research this and send them an email. There are legions of nerds that would immediately spot any inconsistency and make a total online outrage out of it.
How’s that “if we make China rich they’ll naturally become a Western democracy” plan coming along?
Content Extractor – Open-Source Tool for Document and Image Analysis
I don't think this is something that can be solved with code licensing and it's also too rare for you to worry about.
Nah, she's grifting now too. https://www.bbc.co.uk/news/articles/c938l80ekejo
> Email and web browsing relies on “deny lists” rather than “allow lists”. So anything goes but you block bad addresses, rather than nothing until you get permissions/trust/credibility.

But this is fundamental to an open Internet. Yes going whitelist-only would stop bad actors but it would also hand over the entire internet to the megacorps with no avenue for individual success.
Fast forward to now where essentially every YT ad is some guy convincing you his trading and market strategy is better than anyone else’s.
Also wrong about the learning something that's a waste. ADD can show up as soon as 5 years old. I noticed symptoms in my 5 year old kid. They were slight, but they reminded me of me. She was learning shapes and colors, and how to spell 'cat'.

Should I have taken her out of school so she could avoid learning how to spell?