MurphyA/hacker-news huggingface dataset:
by 1vuio0pswjnm7 | 2025-09-22 16:00:39+00:00
TLS exposes hostnames in plaintext via SNI. If using TLS version below 1.3 hostnames contained in the server certificate are in plaintext, too. ECH still "experimental", not in widespread use, no delivery deadline.

In theory encryption is something that protects the "common person", but SillyCon Valley's version of encryption, "TLS", is, unfortunately, mostly used for data exfiltration by third party intermediaries, so-called "tech" companies, i.e., opportunistic "business people".

Rather than protecting the "common person", the _primary_ use of "TLS" is to faciltate violation of the "common person's" privacy for profit, and to protect the third party intermediary's privacy intrusions from detection by the "common person", by making it difficult for the "common person" to monitor the outgoing traffic from their computers.

The privacy risk created by this third-party controlled encryption ("TLS") is why corporations must perform "TLS inspection". They have to decrypt TLS connections and then re-encrypt them in order to monitor the outgoing traffic from their networks. But the opportunistic "business people" in SillyCon Valley know the "common person" will not do TLS inspection.

But that's not all. Further third parties, more opportunistic "business people" called "certificate authorities" play a disproportionate role in brokering TLS connections, deciding on behalf of the "common person" who is trustworthy and who is not. This largely relies on "ICANN DNS", another laughable SillyCon Valley implementation, and is thus severely flawed, but that is another topic.

SillyCon Valley's so-called "tech" companies utilise this third party "CA system" to make it difficult for the "common person" to exercise control over deciding who they want to trust or distrust, e.g., by frustrating the use of so-called "self-signed certificates" by the "common person". Meanshile, the SillyCon Valley companies ensure that _by default_ the SillyCon Valley companies' certificates are trusted. In some cases, the certificates (or their digital fingerprints) are hardcoded into software used by the "common person".

Despite what the average "tech" worker would like the "common person" to believe, "TLS" is not synonymous with "encryption". Nor is criticism of TLS necessarily criticism of encryption. TLS is only a lame, user-hostile implementation of encryption that the "common person" must suffer while so-called "tech" companies use it to protect their surreptitious data collection from the "common person".
by velcrovan | 2025-09-22 16:00:39+00:00
If AI companies continue to grow and be successful, and if they continue to depend on scraping human-written content to train their models, and if any tech can gain enough adoption to prevent AI from doing so without paying (and without hurting non-scraper readers), then creators will get paid. That is what the claim seems to be here. You can say it's a long shot, but it's not fundamentally at odds with the existing legible incentives.
by dylan604 | 2025-09-22 16:00:39+00:00
Did you actually provide a shorts link? What's the world coming to? At first, I thought maybe it makes sense since it could be updated for mobile. Nope. It immediately changed aspect ratio so it is portrait oriented piece with letter boxing. :face-palm: yet another square peg/round hole example

otherwise, looks like it might be fun to play for a few minutes
by unshavedyak | 2025-09-22 16:00:52+00:00
What would this look like for other language backends to support? Eg would be neat if Rust (my webservers) could support this on the backend

edit: Downvoted, is this a bad question? The title is generically "web servers", obviously the content of the post focuses primarily on TypeScript, but i'm trying to determine if there's something unique about this that means it cannot be implemented in other languages. The serverside DSL execution could be difficult to impl, but as it's not strictly JavaScript i imagine it's not impossible?
by jmyeet | 2025-09-22 16:01:25+00:00
The "but the millionaires will leave" trope is just propaganda to justify massive wealth transfers from the poor to the already rich. There are two big reasons why this isn't true:

1. Physical assets, particularly real estate, can't leave. You can't pick up parts of Manhattan and move them elsewhere. Likewise, resource assets like mines, farms and oil wells can't move either; and

2. As long as there's profit to be made, companies won't leave regardless of tax rates. This one comes up a lot with the rent-seeking pharma companies in the US who will sell something here for $1000 but sell it in France for $10. What you have to remember is that if selling for $10 in France wasn't profitable, they wouldn't do it.

The one thing we need to clamp down is allowing people to avoid paying for the society that makes wealth possible. Want to own property in the US? Great. Your worldwide income is now taxable. Want to avoid tax by transferring your "IP" to an Irish subsidiary and then paying royalty payments? Yeah, let's stop that.

We need to stop people getting the benefits of owning assets in a society while avoiding all the obligations.
by HankStallone | 2025-09-22 16:01:25+00:00
I find that following a few rules helps to keep my heterodox views from hurting my karma too much.

1) Keep them to myself most of the time. Pick my spots, in other words, and don't just toss off quick replies every time I disagree (who's got that kind of time anyway).

2) Don't make a factual claim without a link to back it up, even (maybe especially) if it's something everyone knows. There seems to be enough respect for the process of researching something and backing up your claims here, that people are less likely to downvote a fact they don't like to hear if you make the effort. (This is one thing that distinguishes HN from Reddit.)

3) Make the case dryly and impersonally. People are less likely to be triggered by disagreement if they don't feel like you're laughing at them or calling them stupid.

4) Include a "to be fair" balancing point if you can do so truthfully. For instance, if you're criticizing the Democrats, point out where the Republicans are also wrong on something.

Of course, none of this would be necessary to keep my karma positive if I were left-leaning, but that's okay. Communities should be allowed to lean whichever way they want, and there's nothing wrong with dissenters having to work harder to fit in.
by IncandescentGas | 2025-09-22 16:01:26+00:00
Would you consider renaming the note to contain a reference to the generated code? Such as "Thoughts on Hedgehogs.md" becomes "Thoughts on Hedgehogs [AB-99].md"

This preserves your goal of having the system rightfully not need another source of truth outside the markdown files, but also lets the markdown file carry the identifier across renames without adding a YAML block.

And it lets you find the note in the "open note" dialog box by typing the code, so no other kind of search interface is needed. Or even to find the note with any other filesystem utility if you have your reference code.

Were you inspired by the Zettelkasten Method for your plugin?
by grayhatter | 2025-09-22 16:01:58+00:00
> I’ve yet to find a junior dev that had more skills than a junior dev. I’ve seen them try… [...] If you aren’t a junior dev, then you aren’t.

Funny, I've met plenty of jr devs that were way more competent than some of their peers who've been at the exact same company/division for 4+ years. Which was my point. The world is bigger than you can imagine. There are people with experiences that you couldn't describe, but you write in a way that feels like you want to dismiss them outright as impossible, which does a disservice to everyone involved.

> And while you can go read a manual on how to put a Ferrari together, wouldn’t you want to work with a mechanic who has already made dozens of them?

> Why do we reject help?

I feel like you and I are arguing past each other. To reuse your example: There are plenty of people who have never spent time with a mechanic, but have been spent so much time pouring over every technical manual for the car, that they can out perform guys with years working for Ferrari, while that guy working for Farrari has mentors, he still has to ask for help with most things, and needs to look up a number of the specs. But the person who exclusively taught himself, can do many of the same tasks blindfolded.

No one has said they don't want mentorship, but many were never in a position to have that advantage. But you said that if they think aquired their skills on their own, they need to seek therapy. WTF?

I'm sure you've met plenty of narcissists who have had mentors, but claim they haven't. But it's wrong, insulting and pretty toxic to lump everyone into that same group.
by lanyard-textile | 2025-09-22 16:02:02+00:00
If it’s not optimal, it’s useless, isn’t it? You can’t run as fast as the others, so why bother running at all? You just can’t do it. None of the advice about running will ever apply to you unless you can afford a prosthetic that works with your ailment that you can wear all the time.

That’s not true, of course. You are not relegated to a category of defunct by simply existing without a leg. You can learn to get by without it — many do — and you can learn to excel without it.

When you exclude yourself based on blankets of labels, you miss good advice. Much advice about “running” has little to do with having 2 legs: Breathing, clothing, hydration, nutrition, time of day. Pacing advice can even apply when you run with an implement.

For some people this is their entire reality, having to fight against categorizations that split them into complete ability and disability.

For some others, they don’t even know there’s a fight to be had. They give up before knowing they had any chance at all.

It’s troubling for something like ADHD, where a constellation of symptoms are possible and some do not apply to you personally.

You can’t read because you have ADHD? It may be true. It may also be true that you have been forced to read things you’re not interested in, something rendered practically impossible by this disorder, and someone has labeled you as a non-reader due to your differences. It may also be true that you haven’t discovered Terry Pratchett, and you’re actually quite the reader with the right material.

For some even more others, they feel able with their medication and useless without. Luckily for them, their medication lasts all day, medication shortages do not exist, and their psychiatrist will always prescribe their medications forever.
by duxup | 2025-09-22 16:02:18+00:00
I really don't want to be the one who has to go to the other places for the sake of discourse and be told that because I enjoyed some some song that I'm a nazi or a libtard ...

I don't disagree with you entirely, but I also am not sure I'm doing any good being called names and I want to spend time places online where folks don't hate at me.
by miladyincontrol | 2025-09-22 16:02:39+00:00
While I hesitate to agree with that definition of local-first, I agree with your notion thats what the author by large is talking about and unfortunately many such an web-app have the worst of both worlds.

Most uses of the term local-first I see regularly mean to say, "an app that doesnt require 3rd party servers outside of your control to function", within some level of reason. Sometimes agnostic to how it's data is synced, sometimes meaning its an exercise left to the user entirely, sometimes meaning fully self-hosted and hardly local to the device being used to access the app.
by exabrial | 2025-09-22 16:02:42+00:00
All I know is a triple fisherman's is nearly impossible to untie in 5.6mm UHWMPE after taking a whip on a sling made out of it. It's sort of comforting have the rock hard knot; it'll break the cordelette before untying. Interestingly, an unweighted one is pretty simple to untie!
by mcculley | 2025-09-22 16:02:44+00:00
I do not understand the official position of Tesla on FSD (Supervised).

The owner's manual Tesla has posted on www.tesla.com says, "Full Self-Driving (Supervised) is a hands-on feature that requires you to pay attention to the road at all times. Keep your hands on the steering wheel at all times..." [0]

The owners of Tesla vehicles are saying that they can just relax and not keep hands on the wheel.

Is Tesla maintaining a more conservative stance while encouraging drivers to do dumb things? Or is the owner's manual just out of date?

0: https://www.tesla.com/ownersmanual/modely/en_us/GUID-2CB6080...
by zebomon | 2025-09-22 16:02:59+00:00
I think providers of so-called "answer engines" will read the writing on the wall and find new ways to support content creators in order to keep their databases fresh, relevant, and centered on human perspectives. I also think that to see how the economics will play out, you only need to look at similarly centralized systems like Apple's App Store and Google's AdSense.

Because the providers will act as a single tunnel that all content passes through before reaching the end user, the tolls they collect will be large. So, I don't doubt that there will still be opportunities for content creators to earn money as answer engines siphon off more and more of the web's traffic, but expect those opportunities to be broadly low-paying, falling decidedly in the "side hustle" category.

AI providers will want to incentivize content creation. There will still be a glut of ready providers, and little reason for providers to make anything but small, nominal payments.
by wqaatwt | 2025-09-22 16:03:13+00:00
> They're still in control of a significant minority of Gaza territory

If so its only because Israel decided to allow them to maintain that control.

> but it's a pretty short term solution.

Exactly, that seems to be Israel’s strategy. If they actually destroyed Hamas the rightwing government in Israel would lose the bogeyman keeping them in power (that’s why they were propping up Hamas for years).
by sbarre | 2025-09-22 16:03:14+00:00
> What is most likely to happen is the so called Answer Engines will embed advertising into their results -- except in a more insidious, subtle, hard to detect and filter out manner.

This is the part of the new AI paradigm that concerns me the most, and I think you are correct.

If "pay for placement" (or worse "legislate for placement") in LLM training becomes a thing, then we lose all transparency as these biases get baked into the knowledge set, and users have no way of knowing where and when they get applied.
by cryptonector | 2025-09-22 16:03:21+00:00
The West has long been doing "industrial policy". At least since the end of WWII, and to some degree since before as well, but especially during the Cold War and even since then. You can say that the UK, France, Japan, South Korea, Taiwan, etc. were all autocratic all that time if you like, but most wouldn't. Maybe today more people would feel that having an industrial policy makes a country autocratic, but keep in mind that industrial policy is not usually practiced by putting a gun to a business' executives' heads -- no, industrial policy is often practiced via incentives and disincentives, with force being very tenuously indirect.
by jbn | 2025-09-22 16:03:26+00:00
This uses the Most Significant Bits to pack some bits into pointers..

Another technique is to use the Least Significant Bits: indeed since pointers are 64 bit aligned, the lowest 3 bits are always zero, therefore it is possible to pack 3 bits of information there.

And there's a third technique in C++, which is to use placement new to morph an object in-place. This can be use to toggle between 2 classes with a boolean method, where one has this method return true and the other class has this method return false. This creates per-object state that really uses bits in the vptr to store this boolean state. Obviously this can be used with a whole set of classes to stores more bits. I have used this successfully to store values of refcount (each AddRef/Release using placement new to morph from RefCounted1/RefCounted2/../RefCountedN classes) to implement reference counting without a counter.
by krosaen | 2025-09-22 16:03:29+00:00
This looks pretty awesome, and excited it's not only a cloudflare product (Cap'n Web exists alongside cloudflare Workers). Reading this section [1], can you say more about:

> as of this writing, the feature set is not exactly the same between the two. We aim to fix this over time, by adding missing features to both sides until they match.

do you think once the two reach parity, that that parity will remain, or more likely that Cap'n Web will trail cloudflare workers, and if so, by what length of time?

[1] https://github.com/cloudflare/capnweb/tree/main?tab=readme-o...
by kennywinker | 2025-09-22 16:04:04+00:00
Ah, true. I was looking at a map of the ottoman empire and its eastern border looked to me like it bisected where i remembered present day iran to be. But i see that they only overlapped a little around the edges and less and less as time went on.

But it doesn’t really change my point, because as far as i know persia and then iran was pretty religiously tolerant up until ‘79.

> I agree that the Ottomans had more religious freedom- and certainly diversity. At least until the Enlightenment, which the Ottomans missed to their undoing.

The “enlightenment” ended 60-ish years before england did a genocide in ireland. So it seems like being “enlightened” wasn’t enough to actually create a society tolerant of religious diversity.

I’m also not sure that “missing” the enlightenment was actually the undoing of the ottoman empire. That doesn’t track with what I know of the fall of the ottomans, but i won’t argue this point since i don’t have a full understanding of all the factors that lead to undoing of the ottoman empire.
by nickysielicki | 2025-09-22 16:04:11+00:00
Killing the open internet is generally a good thing. Large companies and hostile nation states benefit from the open internet massively, while providing none of it back. The Chinese intranet is not accessible to EU/NA scrapers, but they can read all of our scientific journals. Facebook posts aren’t freely available for you to scrape, but llama is trained on obscure usenet posts and the entire comment history of reddit and hackernews. North Korea has their own linux distribution. Etc.

If the open internet is already dead (and it is already dead), it’s better to accept that reality and silo off the good parts behind paywalls so that people can get paid, rather than to let bad people benefit massively from it while they build their walled gardens. This has been a long time coming.
by IanCal | 2025-09-22 16:04:20+00:00
Exactly. There is a limit to what a private company can do on private land, set by "the government" (here it'd be parliament). You don't seem to be an absolutist about this, so we both agree that the government can and should tell private businesses what they can do on private land. Then the issue is only where the line should be not whether there should be a line at all.
by OutOfHere | 2025-09-22 16:04:20+00:00
Does this use an external binary or CGO or Wazero (Wasm) or is it rewritten in Go?

With SQLite, although all approaches are available, my fav is to use https://github.com/ncruces/go-sqlite3 which uses Wazero.

I try to avoid CGO if I can because it adds compile-time complexity, making it unfriendly for a user to compile.
by lowkey_ | 2025-09-22 16:04:50+00:00
Three notes after reading, the first one being glaringly disingenuous and weird:

> The Tax Justice Network’s review – co-published with Patriotic Millionaires UK and Tax Justice UK – of the Henley report finds that the number of millionaires claimed by Henley & Partners to be leaving countries in “exodus” in 2024 represented near-0% of those countries’ millionaire populations. For example, the 9500 millionaires widely reported to be leaving the UK in 2024 represented 0.3% of the UK’s 3.06 million millionaires.

#1: The data is completely arbitrary, incorrectly compared, and adds no new insights.

The tax changes, AFAIK, are specifically aimed at generating more tax revenue from the foreign millionaires who have been using the UK's non-dom tax advantages, by getting rid of that status.

The counter rhetoric was "if even a fraction of those millionaires leave, the UK will actually lose tax revenue instead."

This article does not report on any actual adjusted numbers to the 9500 millionaires reported leaving, it just says "guys we have a lot more millionaires" — vast majority of whom are not foreign / dom-status, and therefore will not be affected anyways. No new tax revenue from them by eliminating non-dom status. It's apples-to-oranges.

Basically, they're not even using the correct denominator (foreign millionaires).

#2: This was written by an organization seeking to end tax havens, which doesn't really acknowledge that, while calling out the bias of the original report by the organization that helps secure golden visas.

#3: "credited for the UK Labour government’s decision to weaken tax reforms" — it sounds like the original government decision wasn't even passed, though I'm not sure about this, it would mean that you can't say "X didn't cause Y as was predicted" when X didn't actually occur in full.
by horsawlarway | 2025-09-22 16:05:06+00:00
So you got downvoted already, but to clearly address this:

If I spill something on my own hardware, the max out-of-pocket amount I lose is the amount I spent on that hardware.

If I run up an AWS/GCP/Azure bill accidentally... the max out-of-pocket amount I lose is often literally unbounded. Are there some guardrails you can put around this? Sure. But they're often confusing, misleading, delayed, or riddled with "holes" which they don't catch.

Ex - the literal best AWS offers you is delayed "billing alarms" which need to be manually enabled and configured, and even then don't cover all the services you might incur billing charges for.

It's not that "Oopsies" can't happen locally - it's that even if they do, I have a clear understanding of the potential costs by default, and they're much less intangible than "I left a thing running overnight and I now I owe AWS a new car worth of cash".

The worst case for a misconfigured bit of software locally is that my machine stalls and my services go down (ex - overloaded). The worst case for a misconfigured bit of software in AWS is literal bankruptcy.

Think about that for a minute.
by velcrovan | 2025-09-22 16:05:07+00:00
> So you use a public resource and presumably like the upside that comes with sharing on it, but you want to limit uses now that someone has found one that you don't like, so you're fine with degrading that public resource?

Can you say more? what is the "public resource" I'm using as a content publisher? In that role I see myself more as the provider of a public resource (my content), not a user.
by vdupras | 2025-09-22 16:05:12+00:00
The mapping to assembly of:

42 = if ."hey!" then

is much more straightforward than

if (n == 42) printf("hey!");

I understand that to the newcomer, it might not appear that way, but implementing a Forth is really eye-opening in that regard.

If I might allow myself a bit of promotion, I wrote https://tumbleforth.hardcoded.net/ as such an eye-opening process. It's less "gentle" than Easy Forth here, but it digs deeper.
by keehun | 2025-09-22 16:05:14+00:00
This is one of the core usecases of cloudflared (https://github.com/cloudflare/cloudflared)! Without having a static IP address or dynamic DNS, you can establish a connection between your machine in a private network with Cloudflare. And once a resource is on the Cloudflare network, you can pretty much do anything with it, including routing your visitors to that server and using the full Cloudflare stack including its CDN, firewalls, and Anti-Bot protections.