Caligatio

The number of people that itemize has dropped significantly after the 2017 tax changes. A quick search shows that it used to be around 30% of filers itemized, now it's 11%.

It would be easy for the government to send you its automatic, non-itemized calculations and give you the option of itemizing.

Looks like someone made a bash script: https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader/i...

I dual booted my machine Win10 and Arch on ZFS Root. Admittedly I used Win10 like 99% so there was always a laundry list of updates when I booted into Arch. It seemed ZFS broke 20% of the time I updated. It was either the silly GRUB config fix that wasn't upstreamed getting overwritten or the ZFS module build somehow failed. I got so frustrated that I just nuked the whole install.

I realize that ZFS is a weird bolt-on but the fact that kernel modules failing to build doesn't cause significant error messages and/or failure is silly. Arch is great but Arch on ZFS felt like my Gentoo days: I want to have fun using my computer, not constantly fiddling to make my computer usable.

Ahh, you mean Cloudflare Tunnel then?

That's their CDN with a twist.

This makes me sad.

I grew up in the Chicago suburbs and got accepted into the Saturday Morning Physics Program (https://saturdaymorningphysics.fnal.gov/) at Fermilab. Many of the lectures went completely over my head at the time but I was still in awe of the particle accelerator on campus. I actually got lost driving to a different building one Saturday and accidentally drove around the ring (with several people blindly following me). Their neutrino experiment, which was planned to shoot neutrinos to Minnesota (MINOS program), was on the imminent horizon and the staff were excited... apparently that was ended in 2016.

I guess it's a hard life being known for a particle accelerator when you get dethroned by CERN and then shut down your ring.

I think what you call "DNS proxy service" is what I'm referring to as their CDN. As referenced by a sibling comment, I meant their public recursive DNS resolver service when I said "DNS resolutions."

I don't recall anyone advocating omitting the name log4j when that security bug dropped in 2021. How is that situation materially different from this? redis-py fixed the behavior so it's definitely not the case of working-as-intended.

To be clear, I would be up in arms if OpenAI was trying to hold redis potentially legally responsible.

I'm not a lawyer but my guess is it has to do with the liability of transferring "illegal" content. There's no content crossing Cloudflare servers for DNS resolutions but there definitely is for IPFS.

For IPFS vs CDN, I'm guessing relevant copyright laws give a service provider an out when it's a well-defined user/customer doing the copyright-related redistribution; no such agreement exists for content on IPFS.

EDIT: Trying to read the relevant DMCA sections and precedent makes me happy I'm not a lawyer. Cloudflare was previously sued for copyright infringement (Mon Cheri Bridals, LLC v. Cloudflare, Inc.) and found not guilty. In Cloudflare's own blog about the decision, they said the suit was meritless for several reasons including "our services are not even necessary for the content’s availability online." My guess is there is sufficient ambiguity over whether operating a inter-protocol gateway puts them at increased legal liability.

FDIC takes almost no time. From their website (https://www.fdic.gov/consumers/consumer/news/cnfall14/miscon...):

The FDIC almost always pays insured depositors within a few business days of a closing, usually the next business day. Payment is made either by providing each depositor a new account at another insured institution or by issuing a check to each depositor.

Open source: if it isn't perfect, don't bother.

So Ubuntu offering some support where RH offers no support is worse?

To the best of my knowledge, RH won't touch EPEL with a 10 foot pole.

The package in question is libjs-jquery-ui which is in the universe repository. The universe repository is explicitly community supported only and needs to be enabled as it's not on by default.

Ubuntu Pro promises 10 years of security updates to some of the packages in the universe repo.

In Redhat speak, this is like RH supporting some EPEL packages if you have a subscription.

This isn't a 100% solution but you can pin external JavaScript includes in HTML using subresource integrity (https://developer.mozilla.org/en-US/docs/Web/Security/Subres...).

This doesn't help if someone can mess with the HTML though.

I'm also confused about the Docker hate here. The daemon itself is lightweight and the Docker-ized process(es), once running, have negligible overhead compared to running them natively.

I didn't look at the image size but you might be paying a ~100 MB storage penalty to bundle dependencies.

I honestly don't even know what subset of automotive rules apply to e-bikes. Do they have to follow signs for one way streets? Do they go on sidewalks and co-exist with walkers? Do they follow traffic lights? I just moved to Germany and electric scooters are seemingly in the same regulatory grey space. There was a scooter in the bike lane, blew through a red light, and then went up the wrong way on a divided street.

Personally, I would like bikes/e-bikes/scooters to just be predictable and predictability means laws and regulations.

100% disarmament will simply never happen because the country that hides a few nukes while claiming to have none will win if push comes to shove. Best case in that scenario is every country is hiding nukes which is arguably not a lot better than the status quo.

With Russia explicitly nuclear war if other countries interfere in Ukraine, I also don't see any nuclear arms control talks occuring in the near future.

The geographic numbering scheme was thankfully stopped for anyone born in June 2011 or later ( https://www.ssa.gov/employer/randomization.html)

I actually served on a Federal jury (as an alternate) for a trial against a pill mill doctor. I wasn't there for the deliberations but the doctor ended up being found guilty and sentenced to jail. From testimony, the owners were nailed as well as support staff like nurses.

It was eye opening how blatant this was, the doctor was starting people on 160 mg/day of oxycodone which is absolutely insane.

Yep, that's me!

It's a niche project (even more so when I started it to salt/hash passwords client side during the expensive SSL days) so it's almost never worth advertising :)

I got the email on Friday telling me I'm one of the fortunate few to get $550 and cynically thought that it was some sort of GitHub credit; needless to say that I was pleasantly surprised that it was actual cash!

I've been solo maintaining my project since 2008 and average about ~425,000 downloads/week per NPM. My sum total of donations prior to GitHub's was maybe $5. Making money on a JavaScript library was certainly never my goal but I sincerely appreciate the acknowledgement that my project has worth that someone is willing to pay for.

I sadly forgot where I read about it (maybe "Under a White Sky" by Elizabeth Kolbert) but the States do already pay people to mass-cull these Asian carp by the literal ton (found https://blogs.illinois.edu/view/7362/827782934 specifically about this point). It's crazy what extremes governments are going to try to contain these fish - to include generating an electric field in rivers that selectively kills fish over a certain size (i.e. Asian carp).

This sounds similar to the Great Hanoi Rat Massacre (https://en.m.wikipedia.org/wiki/Great_Hanoi_Rat_Massacre) where people got paid per tail but ended up breeding more rats to get more tails.

Bison take much longer to have a calf (9.5 months + 7-8 months of nursing) and typically only have one calf per go around. Carp, on the other hand, produce about two million eggs per year. It's much easier to depopulate bison than invasive carp.

SOCKS explicitly supports DNS but no other UDP.

Whose "interest of security" are you referring to? If it's the security of Eastern European countries like Georgia and Ukraine, it's self-evident that counties would want to join NATO. If it's existing NATO members, there may be a general interest in expanding to countries who are under threat by the country that caused NATO to be formed in the first place.

Blaming this situation on NATO is like shooting someone with a gun and then blaming them because they bought a bullet proof vest because they were concerned that you would shoot them with a gun.

If you're the sole user, it's probably not worth self-hosting {Bit,Vault}warden. However, the ability to share passwords and, optionally, TOTP codes is super helpful. My wife and I both used KeePass before and the combination of syncing the DB across devices and inability to share (a subset of) passwords was a killer.

{Bit,Vault}warden} both now support emergency access which will be useful if it's ever needed

I would have more of a problem with this if it was a simple fork with a few variables modified to enable features rather than a complete rewrite with a compatible API. None of the paid features are technological breakthroughs (e.g. one just checks HIBP to see if passwords have been leaked) so, imo, it's really the re-implementor that did all the work.

I do feel a little bad using the client applications for free given their business model revolves charging for the backend only.

PEP621 literally includes how Poetry lists dependencies as a synonym for the PEP's "dependencies" section. Poetry does, in fact, adhere to PEP621.

Replace "Apple" by any traditional car company and you should immediately become concerned. Shouldn't a car company have absolute, one-sided control over the cars they sell? Like should the car stop working if you agreed to obey the speed limit but then sped? Or stop working if you didn't use their branded fluids?

Ghostscript was initially released 1988 (per Wikipedia) so it definitely is more in the history making rather than learning from history category.

By this standard, there is practically nothing that qualifies as open source. Compile something yourself? Well can you really trust your compiler unless you compiled it? How do you compile your compiler without a compiler? Obviously this is possible but no one does it; therefore no software is truly open source.