HN user

fweespeech

1,915 karma
Posts26
Comments1,448
View on HN
news.ycombinator.com 6y ago

Is there interest in open source mailing list software that sends via SES?

fweespeech
1pts0
www.rand.org 9y ago

The Russian “Firehose of Falsehood” Propaganda [pdf]

fweespeech
17pts4
news.ycombinator.com 9y ago

How risky is a voluntary 90 day sabbatical realistically?

fweespeech
4pts4
blogs.wsj.com 9y ago

Four Nations Are Winning the Global War for Talent

fweespeech
2pts0
medium.com 9y ago

Two years spamming spammers back

fweespeech
3pts1
www.techdirt.com 9y ago

FBI Official Compares Encryption Guru Moxie Marlinspike to the KKK

fweespeech
7pts0
www.reuters.com 10y ago

Turkey rounds up plot suspects after thwarting coup against Erdogan

fweespeech
2pts2
brutelogic.com.br 10y ago

XSS Cheat Sheet

fweespeech
2pts0
motherboard.vice.com 10y ago

'Ricochet', the Messenger That Beats Metadata, Passes Security Audit

fweespeech
3pts0
github.com 10y ago

Code of Conduct for DigitalOcean's Engineering Team

fweespeech
8pts3
about.gitlab.com 10y ago

GitLab 8.4.4 Released

fweespeech
3pts0
www.washingtonpost.com 10y ago

Clinton wins at least six Iowa precincts by coin flip

fweespeech
3pts0
www.docdroid.net 10y ago

Newegg goes after another patent troll

fweespeech
4pts0
www.vox.com 10y ago

A new survey explains one big reason there are so few women in technology

fweespeech
7pts4
www.dailydot.com 10y ago

Senate passes major cybersecurity info-sharing bill CISA

fweespeech
2pts0
www.techdirt.com 10y ago

Senate Rejects All CISA Amendments Designed to Protect Privacy

fweespeech
2pts0
www.bbc.com 10y ago

Google's driverless car is brilliant but so boring

fweespeech
3pts1
act.eff.org 10y ago

Support Tor and Intellectual Freedom in Libraries

fweespeech
69pts19
www.theinquirer.net 10y ago

Microsoft is downloading Windows 10 to your machine 'just in case'

fweespeech
4pts0
www.businessinsider.com 10y ago

China released 3 big economic stats and they were all bad

fweespeech
1pts0
taxfoundation.org 11y ago

The Real Value of $100 in Metropolitan Areas

fweespeech
2pts1
www.howtogeek.com 11y ago

What Is Wi-Fi Sense and Why Does It Want Your Facebook Account?

fweespeech
1pts0
news.ycombinator.com 11y ago

Ask HN: Dividing auth factors into separate internal services Thoughts?

fweespeech
1pts0
www.wired.com 11y ago

House Passes Cybersecurity Bill Despite Privacy Protests

fweespeech
6pts1
globalvoicesonline.org 11y ago

Social Network Analysis Reveals Full Scale of Kremlin's Twitter Bot Campaign

fweespeech
2pts1
www.politico.com 11y ago

New U.S. sanctions treat hackers like terrorists

fweespeech
1pts0

The utility industry has cut electricity generation from coal by 50% in about 15 years. Manchin is right.

The problem is, by common projections such as:

https://www.scientificamerican.com/article/abandoning-60-per...

We need to cut it by another 60% by the end of the year. That is not happening without government intervention.

You have to understand if you aren't 70+, this is going to impact you much worse the longer we wait to make changes.

I don't understand why we're talking about spending trillions so flippantly and none of it has anything to do with health care.

Private health insurance has its bribes paid up.

The corporations this bill has a negative impact on are pinning their hopes on Joe Manchin because they can't afford to bribe the entire Democratic party.

Are bipartisan bills a thing of the past?

Did you ask this question about all the partisan bills passed by the GOP when they were in power? And if so, was the answer not the same?

I don’t have any sources, but I thought a sizable segment of the voting public in the US favored bipartisanship.

In the abstract, yes. In reality, politicians get punished for failing to deliver on campaign promises and the GOP obstructs campaign promise success using any means possible. So its political suicide for a Democrat to rely on that. Which leads to:

Just wishing we weren’t so polarized…. Also wishing I better understood what interests were pushing the polity towards polarized ideologies. I’m not convinced it’s a completely organic phenomenon (rather, that there are special interests benefiting from the polarization).

Yup. Its called oligarchy and its the real government model of the US at this stage. Polarization is really just two camps of rich people fighting it out with PR/political campaigns. More polarization leads to better viewing and better base turnout.

One group of rich people who think the rich should be taxed more, that climate change should be tackled, etc.

And one group of rich people who want lower taxes and to obstruct the first group.

He embezzled millions of dollars from his brother and co-owner, who later sued him, and him taking a pay cut and increasing his employees' pay was nothing short of a settlement.

That is not correct. You cannot claim this guy embezzled millions of dollars when his brother lost his lawsuit.

https://www.inc.com/paul-keegan/dan-price-gravity-lawsuit-wi...

Gravity Payments' Dan Price--who made headlines around the world last year when he instituted a $70,000 minimum wage at the company he founded--won a resounding victory in a lawsuit brought last year by his brother and co-founder, Lucas Price.

Judge Doyle wrote in her ruling that "[t]he court finds that Daniel's compensation decisions in 2013 and 2014 were a reasonable business judgment made in good faith," and "[t]he Towers Watson report corroborated the reasonableness of Daniel Price's compensation."

In her ruling, Judge Doyle said, "There was evidence that Daniel Price used the company credit card for expenses that were not subsequently reimbursed. However, Lucas Price has not proven this claim"--along with many others he made in his lawsuit, judging from her decision.

https://www.bloomberg.com/features/2021-millennials-are-runn....

In almost every way measurable, millennials in the U.S. at 40 are doing worse financially than the generations that came before them.

Now, if predictions of a long, post-Covid economic boom are to be believed, this may be the last opportunity an entire generation has to build wealth before heading off into retirement.

Eh, Millennials are measurably worse off than boomers or Gen X were at their age.

1. I don’t want my healthcare to be provided by the same people who brought me a lifetime of experiences at the Department of Motor Vehicles.

The public option still doesn't create that situation because its health insurance. They still aren't going to be healthcare providers.

2. Healthcare is expensive. I’m already paying for healthcare for my family; why would I want to pay for healthcare for others as well?

You already are through Medicare, Medicaid, and the Hospital System. In the articles example, you have people waiting until 65 to get more expensive surgical intervention that is less likely to preserve their life due to the wait.

3. Good healthcare is expensive and I can afford and buy the best health insurance. I don’t want the best to be unavailable to me and my family because we’re all on a “just OK” government system.

Under a public option system, you'd still be able to buy private insurance. No one is banning this.

I think its misguided because the quality of insurance doesn't guarantee the quality of doctor and frankly, unless you are a specialist in their field, its unlikely you'll be able to accurately gauge the quality of care you receive. I've known plenty of people in the profession of manufacturing dental implants/equipment who thought they could judge the quality of their dentists and failed miserably to the point of needing to switch dentists due to poor workmanship.

4. I’m a medical professional and think that I will make less money under a government-provided system of care.

Alright, how do you feel about lowering the federal tax rate for me personally? Not everyone else, just me.

Seems a bit unreasonable when phrased that way doesn't it?

GitHub was down 5 years ago

Have a Gitlab instance or similar that you can pull from instead for CI?

Gitlab, mirrored repo basically.

edit: after a little thought it seems that moving to RHEL might cost us the least amount of money and downtime. Still sucks and not what we need to be working on right now.

And that is exactly what IBM is counting on. Vendor lock in.

We are switching to Debian-based distros because, frankly, we don't trust IBM not to knife us in the back even on RHEL for more money. Of course we have the advantage of being able to take the time to convert.

https://www.vox.com/policy-and-politics/2017/10/4/16385658/p....

Puerto Rico is a US territory and not a state, so its residents don’t pay federal income tax unless they work for the US government. Even so, workers there pay the majority of federal taxes that Americans on the mainland pay — payroll taxes, social security taxes, business taxes, gift taxes, estate taxes and so on.

https://en.wikipedia.org/wiki/List_of_Puerto_Rico_locations_....

In 2017, Puerto Rico had a median household income of $19,775 — the lowest of any state or territory in the United States.

----

PR residents are actively against the idea mainly because they don't pay fed taxes.

They do. They don't pay income tax which with their low incomes is marginal anyway.

Not everyone uses EC2 which is prone to fall over.

And the disciplined single dev documents their changes. That is why it works in a 1 man shop but not at scale, there is always someone who is unreliable once the group gets large enough.

Is this true? At my last company we wasted a bunch of time every week dealing with the accumulation of ad-hoc changes in different environments creating different behavior.

That is an issue a disciplined one-man operation won't have since (generally) they have a Dev and a Prod environment, the changes would be made in Dev first then duplicated in Prod.

If you have 2+ developers, you have environment drift like you experienced because (generally) Dev is the local environment on the laptop or otherwise a distinct environment for each developer. So now you have 3+ environments you need to sync and then discipline starts to fall apart as you have to communicate every change.

Its mostly in the form of advanced purchases of product and grants. No one is building new factories. This is more about distribution and R&D grants than it is about factories.

https://www.nytimes.com/2020/11/10/health/was-the-pfizer-vac...

In July, Pfizer got a $1.95 billion deal with the government’s Operation Warp Speed, the multiagency effort to rush a vaccine to market, to deliver 100 million doses of the vaccine. The arrangement is an advance-purchase agreement, meaning that the company won’t get paid until they deliver the vaccines. Pfizer did not accept federal funding to help develop or manufacture the vaccine, unlike front-runners Moderna and AstraZeneca.

https://www.hhs.gov/coronavirus/explaining-operation-warp-sp...

April 16: HHS made up to $483 million in support available for Moderna's candidate vaccine, which began Phase 1 trials on March 16 and received a fast-track designation from FDA. This agreement was expanded on July 26 to include an additional $472 million to support late-stage clinical development, including the expanded Phase 3 study of the company's mRNA vaccine, which began on July 27th.

May 21: HHS announced up to $1.2 billion in support for AstraZeneca's candidate vaccine, developed in conjunction with the University of Oxford. The agreement is to make available at least 300 million doses of the vaccine for the United States, with the first doses delivered as early as October 2020, if the product successfully receives FDA EUA or licensure. AstraZeneca's large-scale Phase 3 clinical trial began on August 31, 2020.

October 16: HHS and DoD announced agreements with CVS and Walgreens to provide and administer COVID-19 vaccines to residents of long-term care facilities (LTCF) nationwide with no out-of-pocket costs. Protecting especially vulnerable Americans has been a critical part of the Trump Administration's work to combat COVID-19, and LTCF residents may be part of the prioritized groups for initial COVID-19 vaccination efforts until there are enough doses available for every American who wishes to be vaccinated. The Pharmacy Partnership for Long-Term Care Program provides complete management of the COVID-19 vaccination process. This means LTCF residents and staff across the country will be able to safely and efficiently get vaccinated once vaccines are available and recommended for them, if they have not been previously vaccinated. It will also minimize the burden on LTCF sites and jurisdictional health departments of vaccine handling, administration, and fulfilling reporting requirements.

November 12: HHS and DoD announced partnerships with large chain pharmacies and networks that represent independent pharmacies and regional chains. Through the partnership with pharmacy chains, this program covers approximately 60 percent of pharmacies throughout the 50 states, the District of Columbia, Puerto Rico, and the U.S. Virgin Islands. Through the partnerships with network administrators, independent pharmacies and regional chains will also be part of the federal pharmacy program, further increasing access to vaccine across the country—particularly in traditionally underserved areas.

I think many of us have the same feeling. I have a basic x86_64 home server that I keep dreaming of converting to a redundant cluster (x86_64 machines or rasberry pis, it probably doesn't matter).

You can have multiple hostnames per IP. (i.e. If you are using a site that uses cloudflare)

That fact will make it very difficult to resolve hostname to ip address for anyone behind a CDN. That is the reason Comcast is fighting it.

A) Large criminal organizations bypass KYC/AML/ABC just fine.

B) Low-level crooks and privacy minded folks are the ones that get caught.

C) Cost of compliance with KYC/AML/ABC is greater than the money recovered.

https://www.forbes.com/sites/francescoppola/2018/09/30/the-b...

In that connection, a senior employee from the correspondent bank in question assessed that out of ten non-resident customers from the Estonian branch, the correspondent bank would be comfortable only with servicing one given the customers’ characteristics. The employee also warned Danske Bank against Moldovan customers and customers transferring money to Moldova.

Criminal organizations just mule the cash to a friendly bank. Then things proceed accordingly and the correspondent banks will blindly play along for years.

The end goal of these things are not what is sold in PR-speak. It is about expanding the surveillance state for TIA purposes.

https://en.wikipedia.org/wiki/Total_Information_Awareness#/m...

https://en.wikipedia.org/wiki/Total_Information_Awareness

There is a reason they renamed this the "Terrorism Information Awareness" center and then "shut it down". But, of course, other agencies just quietly use the software instead with some superficial changes.

If you think any of these ever really get "shut down" because overreach or the like...yeah. They don't. They just re-named, classified, and better hidden in some intelligence agency's toolbox.

You shouldn't trust the labels on laws.

- Are there any native desktop clients supporting ActivityPub (micro)blogging? I've set up a Mastodon account, and the only way I interact with it is posting via a command-line tool. It's write-only for me because I can't be hassled to use the browser, and it would be nice to change that.

https://whalebird.org/en/desktop/contents

https://thedesk.top/en/

- I don't want to host complicated platforms, all I need is a statically generated blog. ActivityPub could be the way to let people comment on my posts without forfeiting the staticness. Is there any static blog system that integrates with ActivityPub?

I'm 90% sure this doesn't exist right now in a usable form, closest is just something to ping Mastodon when you run your upload.

If you link a comment system in the way you suggest, someone would need to host it for you a la Disqus which is where you'd likely come full circle to "hosted blog platform".

And amazon (and many other tech companies) adjust their salary to cost of life in the area.

Which raises costs for everyone and the "location adjustment" is usually less than what is really needed.

I was expecting it to be a bit further out, like Chantilly/Ashburn/Manassas. Close enough to serve the function but far enough out costs for employees/real estate is lower.

ITT: people dramatically under-estimating the risk to their accounts from credential stuffing and dramatically over-estimating their security benefits from not running JS.

Password are effectively obsolete and everyone should be using multi-factor authentication of some kind. Keys with passphrases. 2FA auth. Whatever.

Making 2FA auth mandatory would be substantially more effective than bot signaling.

tl; dr: Good luck detecting and preventing automation of sign in pages at scale without robust JS based defenses. I think there's a shortsightedness and self-centeredness to a lot of these comments.

If they were, 2FA auth would be mandatory with additional phone-based (i.e. SMS) whenever you try to login from a new geographic area. That would stop anything short of a targeted hack.

Instead, they created an attack on the bot maker's profit margins. Cloudflare, Google, et al. are really just trying to increase the cost of making bots. They are not really trying to _stop_ bots.

Stopping bots requires making unpopular choices.