souterrain

Port scanning from a user’s browser is effectively sneaking behind a user’s firewall. The only legitimate reasons I can envision are security research, and this, to me, is such a small edge case that I’m not sure such access is ever warranted.

I’d be all for a user notification that says “fnord.com wants to access 192.168.0.10 on tcp/443, which seems to be a web server on your home/work network. Are you sure you want to allow this?” I’d want to see this for each new access request, such that port scanning would not be a use case that was supported.

Sure, have an about:config toggle to shut this off, with appropriate warnings.

The greater issue is that browsers are allowing code executing from the public Internet scope (scope meaning security domain) network access to the localhost scope or the Intranet scope (RFC1918 addresses.)

If anything, this should require very explicit permission granting from the user. I’d prefer it be something more like an undocumented toggle accessible solely to developer types.

Interesting. Seems like a cousin to https://solidproject.org/ but with Ethereum as a sort of identity provider.

> But now? The spammers helped murder the pingback/trackback -- RSS is still alive but it is often

Spammers are such superb agents of Internet centralisation. It seems both decentralised mail and content netizens have little choice but to seek shelter with large service providers as a defence from the trash on the net.

I’m not saying the large players have a hand in spam, but they certainly aren’t being harmed by it in the same proportion as the individual hosting their own blog or smtp server.

Excepting in this case where the military operates a critical, life-safety infrastructure used by civilians.

I'm frankly more concerned with the FCC acting as a taxpayer-funded telecoms industry cheerleader.

Dear FCC: You're regulators. You're supposed to be regulating. This is what you get for being public servants.

The FCC does not have regulatory authority over DoD.

This is precisely why Zoom is acquiring Keybase. Zoom seeks to become the single "remote work tool", challenging Dropbox, et al. directly.

I'm particularly disenchanted with the growth of these multipurpose tools, but I am not their target audience. (Nor, I suspect, are many HN participants, but this is a baseless guess.) I suppose I'm more of an adherent to so-called "UNIX philosophy"--the best, single-purpose tool for each task, preferably that can be combined with its like for a solution customizable to how a specific user gets work done.

In this case though, one would assume zero objectivity from any paper. The piece referenced is editorial.

PGP has the best UX for its purpose: a social graph tool for nerds.

I love Zotero for my academic work, but I'm contemplating using it more for less formal research as well.

As Luhmann did, I'm trying to more frequently write summaries of articles—both actual academic articles and things like blog posts, news articles, even recipes. I prefer to handwrite these notes.

For web links, I was thinking of using pinboard's caching feature which assigns a url like https://pinboard.in/cached/01234567890a/ and recording down the 48-bit identifier.

Alas, what happens when my online service of choice fails? So, maybe the Zotero citation key?

I'm wondering what others' experiences are with hybrid written/digital research workflows, and cross-referencing. Anyone have a "personal DOI" that works really well?

On the contrary, that tells us the NYC public health regulator is making logical choices in the face of systemic limitations.

Not sure, but Medicare (the U.S. federal public healthcare system which covers older patients and some others) will reimburse approximately $35 - $50 per test.

https://www.cms.gov/files/document/mac-covid-19-test-pricing...

I believe the New York City Department of Health and Mental Hygiene has regulatory authority over healthcare providers within the City of New York.

Their 2020 Advisory #8 COVID-19 Update for New York City [1] directed towards healthcare providers states in the summary that "Outpatient testing must not be encouraged, promoted or advertised."

Additionally, "To preserve PPE for HCW providing medically necessary care for hospitalized patients, the NYC Health Department is directing healthcare facilities to IMMEDIATELY STOP TESTING NON-HOSPITALIZED PATIENTS FOR COVID-19 unless test results will impact the clinical management of the patient. In addition, do not test asymptomatic people, including HCWs or first responders. COVID-19 testing is only indicated for HOSPITALIZED PATIENTS."

[1] https://www1.nyc.gov/assets/doh/downloads/pdf/han/advisory/2...

New York City is rationing testing as a measure of lowering healthcare worker exposure and reducing use of limited personal protective equipment supplies.

"If you think you have COVID-19 and your illness is mild, you do not need to see your health care provider and you will not be tested. Getting tested will not change what your provider will tell you to do to get better. They will tell you to stay home so you do not get others sick.

Unless you are hospitalized and a diagnosis will impact your care, you will not be tested. Limiting testing protects health care workers and saves essential medical supplies, such as masks and gloves, that are in short supply."

https://www1.nyc.gov/site/doh/health/health-topics/coronavir...

If these are vanilla security cameras, this is a non-story. If, instead, this is the development of a trend of using cameras with live feeds to law enforcement, real-time facial recognition or license tag identification, I think it warrants discussion.

Yes, these are on private property. However, aren’t there ethical issues around these technologies should they be employed, say, at every food store in a geographic area?

I don’t know about you, but when my professional warfighters are duped by amateurish sex scams, I like to tell the world before I respond with asymmetric kinetic attacks against civilian populations.

Network Link Conditioner is new to me. (I’m not a developer.) I find it strange that this exists, because as a mobile application consumer, it has been my experience that many apps don’t seem to consider network quality in their implementations. (Again, just based on my personal use; absolutely zero rigor in my method.)

I suppose this the result of a feature of the human being: be lazy as possible. Rather than write code for poor quality networks (which in my experience are prevalent in rural areas and in older parts of cities) simply declare “we need faster mobile networks for all!”

I suspect this will be a never-ending battle, and developers might consider caring at some point, to reach those eyeballs that will never have the cutting edge mobile networks.

Or, don’t, and said eyeballs will be slightly less likely to become addicted, if this article is to be believed.

I could be crazy, but I’m not certain of the relevance here.

If the US government ran this, you would at least have a chance at congressional oversight. Equifax is largely unchecked in its present corporate state.

I’d argue for a people very dependent on credit, a financial credit score already approaches the burden of a social credit score.

The US would do better nationalising Equifax.

Or, in the case of .io, a colony/possession/militarybase that has been depopulated of its people. (No, it is not the only place that has been depopulated in the name of colonialism.)

https://en.m.wikipedia.org/wiki/Expulsion_of_the_Chagossians

Microsoft’s Office365 will make a similar change in October 2020.

https://developer.microsoft.com/en-us/office/blogs/end-of-su...

It might be a consumer perception issue, either relating to the inexpensive (relatively) price or the Microsoft brand that keeps users away from the Natural versus other more complex designs.

The build looks reasonably straightforward. I suspect I wouldn't be able to use low-profile switches with this, but I'll fully admit I'm not well versed in keyboard assembly.

Thanks for this. I'm getting closer to what I'm looking for.

Alas, it is presently unobtainium. I guess I need to consider building my own split keyboard using Cherry ML switches.

I was looking for something close to this design, particularly with low profile switches. Thanks.

I find custom keyboards to be beautiful, but I have a very hard time using a proper mechanical keyboard. I am not a proper touch-typist, and lack the patience or free time to re-learn.

I tried with an Ergodox for some time, but it became so frustrating that it interfered with my appreciation for the engineering and artistry of the thing.

Any suggestions relating to low-profile, short-travel switches/keycaps that will work in kits found from massdrop, et al?

Perhaps one day bureaucracies will accept proposals via JSON (or other open data format... XML anyone?) rather than Word or PDF.

One could argue that these formats are more accessible than their equivalent pseudo-paper formats. It would eliminate the nitpicking over document format, as the low bar to enter would be enforced programmatically.

This would allow technologists with lesser experience in the minutia of proposal writing to compete with huge government contractors with specialists who deal in final proposal preparation. At least it would in the short term until the big contractors retooled.

Forget for a moment that a bureaucracy is involved.

If your company was bidding on a request for proposal (RFP) for a potential client, wouldn't you want to follow the customer's requirements?

Often RFP teams use failure to follow directions or specifics in a proposal submission as an informal measure of the likelihood the respondent will fail to deliver on other requirements.

I have worked for a company where I had spent 80 hours building a demo for a potential client. We did not make it to the demo phase due to a failure of our proposal writing team to address some technicality in the written proposal. I don't hold this against the client we lost; this falls on those whose jobs are solely writing and submitting technical proposals.

Keybase seems to be enjoying an identity crisis. On one hand, it’s a tool that makes a lot of sense for team collaboration, particularly with its low-effort encrypted git implementation. I even know a couple teams doing software development for the US government using Keybase for collaboration.

On the other hand, the Stellar (cryptocurrency) wallet and the “feature” referenced in this article are something... else. Granted, Keybase is $0/month per user currently, so it’s no surprise it is the founders’ personal sandbox for experimentation.

I thought Keybase were on the right track in the past with their feature conservatism. Now, not so much.

The free market itself is the ultimate hackable test, no? Our society has examples where superb work goes unrewarded financially.

Does pg argue that they simply should ignore this test grade?