skysight-inc/HackerNews huggingface dataset:
People still use .local in this day and age, I’m so freaking tired of editing my avahi-daemon config to not spend 10 seconds resolving internal resources.
That is actually a better point for recycling UX than saving a user's time, as most people do not throw away trash so many times a day to make UX matter. But the system does not work if it defeats the user's willingness to cooperate, as the escalating documentation shows.

Thanks! I shall add it to the article.
In view of some replies downthread: yes, application-level management is entirely possible with Nix(OS).

Currently, this works best for Haskell, for which there is a sizeable amount (relatively speaking) of Nix tooling available. This is largely because a lot of Nix(OS) users also use Haskell, perhaps because lend themselves to very similar modes of "declarative" thinking.

This is a thorough, excellent guide on how to develop Haskell projects with Nix, including managing non-Haskell dependencies (zlib, SDL, ncurses, and so on):

https://github.com/Gabriel439/haskell-nix/

I only started using NixOS about a month ago, and it's fantastic. The best part is that binary caches are available for almost everything, so the hitherto-painful step where one compiles Haskell dependencies locally has been completely eliminated. The best way I can describe how I work now is "Python virtualenvs, but for everything at once and just so much better".

PS. Gabriel Gonzalez is, in general, someone who makes great documenation. Check out the tutorial for his stream-processing library Pipes: the ASCII art alone is awesome :)

https://hackage.haskell.org/package/pipes-4.3.4/docs/Pipes-T...
That doesn't follow. Sites that did not abide by those requirements simply would not work. The requirements are enforced by the browser.

The intention when registering such a domain name would be to follow said requirements, otherwise you wouldn't be able to use the domain name for hosting websites (though you could of course still use it for other services).
It's certainly not the style I would expect C to be written these days, but I don't think it's terrible code. It was, 40 years ago, genuine shipping real-world code. There's a related quote about this in the foreword that Dennis Ritchie wrote for the reprint of the Lions commentary:
"You will find linear searches, primitive data structures, C code that wouldn't compile in 1979 let alone today, and an orientation towards a machine that's little more than a memory. But you will also see in the code an underlying structure that has lasted for a long time and has managed to accommodate vast changes in the computing environment." We're still calling malloc() and free() and realloc() today with the semantics that the Unix designers assigned them in the 1970s, even if the underlying implementations are significantly different. The bones of the design are strong; the initial implementations may have been naive but they were good enough to ship (and remember there were only a fairly small group of people writing the whole OS and userland).
The issue is that fraud causes more loss than just for the bank. Whomever got impersonated is also fucked. At the moment, they have very little recourse to recoup their costs from the bank that got fooled.
Good riddance. I got so tired of my Spotify account being hacked that this last time recently I just said enough and moved to Apple Music. I liked spotify's interface better but their security sucks and they can't seem to stop user accounts getting hacked. I think their decision to break support with Safari is a bad move for them, but better for the user. Move to another service.
i worked next to a billionaire software co-founder for 4 years, right in the pit with all of us (open office). i found it unbelievably awesome - humanizing, motivating, and egalitarian.
I think *iterable would just pass one argument that's a list, not pass each argument individually
This is awesome. How did you end up working on projects like this one? This kind of interactive one-off experiences are something I've been interested in for a long time.
https://news.ycombinator.com/item?id=15267516
> Other than integration with the rest of the Nix/NixOS ecosystem

Nix/NixOS is the big deal actually. NixOps is just icing on the cake. A NixOS installation is configured by building/copying over a system profile, and then activating it.

With just NixOS, you edit a configuration file on the server, then run a command that will build a system profile from that configuration and activate it.

With NixOps, you have configuration files on your workstation, and run commands to build the system profiles, copy it to the servers, and activate them. Of course you can do all of this without NixOps. It just makes certain things easier.

Puppet and others can do all of this, too. However state transition tend to be the weakest link (e.g. tell Puppet to provision a brand new server vs one that has run some other stuff, how sure are you that the resulting systems are the same?). Nix/NixOS takes care of that (most of the time anyway -- there are still things like data migrations that applications have to take care of).
> What's so bad about service.company-internal.com? (or service.internal.company.com, but some people understandably prefer having them totally separated) You don't have to actually resolve the internal names publicly.

No, but you do actually have to reserve the public domain, which can be inconvenient or undesirable for all sorts of reasons.
https://github.com/knedlsepp/nix-cheatsheet
I provided the answer in my previous comment that you quoted: "use subdomains of globally resolving domains", or alternatively, just use global domain names, e.g. company.com for external services and companyprod.com for internal services. Google uses a combination of all of the above.

Domain names that only resolve internally are a security anti-pattern. You should have full authentication on all services, and not rely on simply being able to reach a service in order to grant access. See e.g. DNS rebinding as one attack vector that can really ruin your day if you don't do this.
>>> print([1,2,3])
[1,2,3]
>>> print(*[1,2,3])
1 2 3
It seems that it's not entirely the same semantics: https://www.spinellis.gr/blog/20170914/ ( https://news.ycombinator.com/item?id=15246690 )
The asterisk at the call site (where it turns an iterable into multiple passed arguments) not the function definition site (where it collects otherwise unconsumed arguments into a single list.)
What is a good Spotify alternative if I don't want to deal with DRM at all?

I don't care if it has a gazillion bands and trillions of songs. Or if the big stars with million dollar marketing budget are on it.
At least one company is "trying" keep my photos private. The other day Google Photo told my wife it had prepared an album for our trip to SFO. We were surprised because she already disabled Geo-tagging but whataya know... Google still figured it out!
There may be some optimization at the interpreter level, but it appears to Python that each element of 'iterable' is passed as an individual argument
I switched to Google Play a long time ago and never looked back.

* 50,000 of your own tracks can be uploaded to their cloud and listened to on all your devices.

* Casting

* Essentially all the same artists as on Spotify.

* Use with your all powerful google account.
Sorry for top-leveling a grand-child comment, but reading between
the lines, this is the attack vector:

> And for the last question: Again, there are no .dev domain
> names. There never have been. It's never been available for
> registration. The recommendation for a long time has been to
> only use either (a) domain names that you actually own, or (b)
> domain names that are reserved for testing and are guaranteed
> never to exist a la RFC 2606. Using domain names for testing
> that don't yet exist but could in the future is a huge security
> hole that you must fix now. Do it now while the domain names
> still fail to resolve. Once they resolve, and you don't own
> them, then your security situation gets a lot worse.

Google is concerned with nation-state attacks. This means they
have to assume ninja-assassin-scuba-divers have tapped all their
cables underground. They're also concerned about
ninja-assassin-usb-stick-droppers, and all kinds of other use
cases.

What they're doing is:

1) Requiring *.dev to match PRE-LOADED HSTS certs. This allows
google to "safely" boot up a computer from scratch. Just so long
as "clone-a-computer-from-scratch.dev" matches the
public/private handshake for HSTS/HTTPS then google knows that no
MITM, no nation state DNS takeover, etc. is possible.

So long as the VERY FIRST CONTACT WITH THE INTERNET is a *.dev
domain, then that computer can be "as secure as possibly known".

2) Forcing people to bounce "off" of invalid TLD's as a network
administration method.

Remember, google is concerned about nation states. Remember
wanna-cry? How it was disabled by some random researcher
registering xyz-abc-123.com?

That attack costs $15. Now imagine a nation-state, intentionally
registering a gTLD of "\*.haha-now-your-company-infra-is-pwnd"
which they somehow glean is the gTLD your developers use for
local development / testing / intranet portal.

If you could spoof IBM's intranet by doing something like:
"http://www.welcome.ibm" or "https://www.welcome.ibm" (b/c the
*.ibm wasn't cert-pinned.....) then you could trivially cause
*.ibm to resolve to some sort of spoofed site to collect
passwords. Or what if they're catching `mysql -uroot -pxyz
staging.product.ibm`? Whoops.

Or... perhaps another gTLD we'll see google register is "*.go" or
maybe their internal builds of chrome already do cert-pinning on
that. (Reason is I've seen/heard they allow
'http://go/my-internal-shortlink' ... I know that other tech
companies have had similar setups).

Same attack vector. You control the DNS, you control ALL
responses. And when somebody types www.microsoft.com, it may be
_impossible_ to know if that "Down for Maintenance" banner is
real or fake if their DNS is controlled by somebody who really is
your enemy.
Closer to 30%, but still significantly less than the US [1].

If you filter out a lot of Eastern Europe and focus on the wealthier Western countries that are more akin to the US you're back in the near 50% range.

1: http://gs.statcounter.com/os-market-share/mobile/europe
https://outline.com/http://spartascience.com/blog-post/stren...
I just got a 409 on Safari 10.1.2 (12603.3.8)
Apple has FairPlay available for Safari. I've implemented it in the past, it wasn't that difficult, so I'm not sure why Spotify hasn't gone that route. Maybe it's a licensing issue...
And they would also have access to your fingerprint then. What difference would it make??
1) Got lucky: http://leemart.in/origin
2) Worked really hard and stayed as curious as possible
3) Add 15 years
I don't know that there is a DRM-free part of the library. I know I didn't get an option to add or opt out of DRM when uploading through DistroKid. All I have for comparison is Draft2Digital for eBook distribution, and it does have a DRM toggle.

Though for Spotify and other streaming sites, I would want a DRM option because I provide a way for people to buy the music DRM-free in any format they want with a reasonable license.
if you install a company internal CA, a rogue syadmin can create perfectly valid certificates for any domain,.including your bank's
I wasn't saying that is wrong that this should be discussed here or that it should be flagged or whatever, I was only sincerely questioning the people who upvoted it and why they did it.
Yeah... that's why I said it was cheeky. Whoosh.
Government and the internet (2013)
"Recently" being relative of course. The big gTLD expansion was first announced in 2008 when the application process for new gTLDs started being worked on.

There's been plenty of time to fix things, but as usual, people will delay and only fix things when they break. Hence ICANN's Controlled Interruption process.
Apple does so many things well, actually. I would return to them for some things and even recommend them (versus exclusively GNU/Linux and LineageOS) if they'd only change the stupid iOS terms that prohibit GPL software.
That would be interesting indeed!
As far back as I can remember the domain creation wizard has yelled at you for using a non-delegated zone, .local was a stupid default they put into SBS and unfortunately it led them into a mess of saying “yes, this is OK” and “no, don’t do this” at the same time...
you leaked the videos url in your medium post :(
Now everyone can check the location of MM fans.
https://s3.amazonaws.com/wkwyfl/WYWYFL_1.mp4
https://s3.amazonaws.com/wkwyfl/WYWYFL_22357.mp4
Not just Spotify--Facebook (Business) too.

My primary browser is Chrome, but I decided I wanted to no longer be logged in on Facebook in Chrome and having my usage tracked. So I used Facebook only in Safari.

Unfortunately if you visit business.facebook.com in Safari, it tells you it's an unsupported browser. You can't set up Facebook ad campaigns or even check your business messages in Safari at all. :(

If anyone from Facebook is reading this, the iOS Facebook Pages app is also broken. Notifications of new messages to your page don't work after you put a page in Business Manager in Facebook. It's hugely frustrating.
Evolving snakes with neural networks [video]
Maybe. But are you saying you can't pull a method invocation you know will return the same value every time outside of a loop without profiling? I doubt Rob Pike believes that. Which leaves us with saying this is a rule of thumb, or what a speed hack is requires more commentary.

I'm ok with a rule of thumb. I just want to point out that they leave a lot of room for disagreement and that the most important part may end up being how you apply the rule in particular cases.
You don't need to sideload VPN apps on Android. They're right in the store, and there's an API for them to run without root, from what I understand.

Here's OpenVPN.

https://play.google.com/store/apps/details?id=net.openvpn.op...

There's also Tor with Orbot and Orfox.

https://play.google.com/store/apps/details?id=org.torproject...

https://play.google.com/store/apps/details?id=info.guardianp...

But only explicitly configured apps will use this proxy. Proxying all traffic does require a rooted phone.

In general, Android gives you more options but iOS seems to offer a more privacy-minded configuration OOTB.
The Midlife Low in Human Beings
Faqbot
Any references on the lymph mobilisation claim?
> The only downside you mention is that you have to run a webserver. But you have to run a server anyway.

Not necessarily. Plenty of desktop app 'brochure' sites use a hosted solution, so zero web server maintenance required.

> And if you pick the right tech stack, those things don't tend to go down all that often.

What's "the right stack"? I'm sure Amazon and Google would love to know your secrets to maintenance free SaaS.

> You don't need "Five Nines" of availability for most types of business software, anyway. Three Nines is fine. Even Two won't generally lose you any customers.

Two nines is >7 hours a month downtime. That's basically one business day per month, the app is unavailable. Given that this is in addition to any scheduled downtime for things like upgrades, server maintenance, I'm not sure I'd be aiming for that as your baseline.

I get that the OP wants passive income from this endeavour. The way to achieve that is not to half-ass the infrastructure on a SaaS product.
>"Apple can't give you that much security; you'll just have to deal with it."

I said no such thing. And yet you put it in quotes. This kind of behavior is for reddit, not here.

Apple does give you security; it just has to happen in a different way.
You're free to do whatever you want on your local network. If you have collisions with resources on the global Internet, however, and you local network is connected to the Internet, them you're setting yourself up for problems. Hence why it's a best practice to not do that.
Sharing this here as it has relevance to

- career planning and reflection

- team dynamics

- product management
Have you considered connecting to a VM with your laptop? Now that you have the huge thing in your home the latency would be minimal and you can stash it in you garage.
Check out http://magnatune.com.
Chromium is open source. You could always compile a version with your desired HSTS preload list, if you wished.

Probably better to just use real globally delegated domain names though.
Not really, unless you're in a panic brake situation(where I want friction brakes anyway) Tesla only brakes to 60kW which is more than plenty for normal driving.

You also want friction braking for cases where you've got 100% charge or the battery is cold and you can't dump energy into the pack.
On a PaaS like Heroku where dynos are statefree and short-lived, don't need to allocate CPU/RAM/HDD for a contiously-running VM. And scaling running dynos can be done automatically. We did this based on work to-be-done (message queue length), with scaling decisions taken every 20 seconds. Many parts of system had no dynos running as the default, only when needed.

With a function-as-a-service type computational model like Lambda, it becomes even more fine grained.
That blog post is talking about the kernel's internal allocator, not the libc one.
First thing that pops to mind is ORM for extremely column-wide tables, which are not unusual in some domains.
Trash sorting is the absolute worst UX. A newspaper goes in paper recycling, fine. Does a glossy magazine also go in paper recycling? Cardboard goes in paper recycling. Does paper cardboard with a plastic overcoat go in paper recycling? Can TetraPaks or whatever the heck Zico/juice boxes/etc. uses be recycled as "paper"? What about steel cans (which most coconut water in southern California is packed in), do they go in "cans" recycling, since there is no "Aluminum"-specific stream in my workplace?

Trash UX is really awful. In my office it's even worse - the custodial staff just dump the at-desks blue recycling bins into the same large trash can as the black waste bins. Why the heck do we even have recycling bins if it's just going to be commingled anyway?
https://s3.amazonaws.com/wkwyfl/WYWYFL_X.mp4

where X is 1-22357
No. Vultr supports custom ISO's. And I uploaded the nixos image to my account
Hi, thanks again for your comments. I am trying to better understand the mindset behind the medical status quo, and you've given some good insights.

> I am not a cardiologist so I don't know the full details on the statins, but I would be careful not to skip them. Cardiovascular mortality has decreased hugely the last decades and this one of the major treatments - they must be doing something right.

Statins cause massive numbers of side effects: http://www.skepticalob.com/2009/06/doctor-listen-to-your-pat... - this doctor figured out that an elderly patient's "progressive muscle weakness" was caused by the statin that he'd been on for years.

> Also be careful of flat-earth arguments, there are plenty of people who want to disprove medicine - some of us are researchers but others are just writing blog posts after finding a single article contradicting a treatment.

My girlfriend was grievously harmed with the injection of Depot-Provera ~10 years before she met me. This drug is known to be defective - usually it just makes women fat, but sometimes it makes them suicidal - but doctors inject it anyways. One theory is that depot provera was approved by the U.S. FDA because that agency's job is to approve drugs, and was long ago captured by the industry it supposedly regulates.

Medical apologists could say that Provera is very effective at preventing babies, so "they must be doing something right". But you have to ignore the carnage: https://www.youtube.com/results?search_query=depot+provera - "Depo Provera has destroyed me" has a compelling title.

Assuming there is good basis for common medical practices is a great impediment to medical progress.
They aren't used for their cost, rather it's the fact that they are synchronous that is advantageous. It's possible to use an induction motor but it's much more complex and because of that less accurate. A reluctance motor and PM motor with the same pole count can be driven at the same speed, whereas the speed of an induction motor depends heavily on the voltage driving it, the current speed, and the torque on it. You can only solve the drive equations accurately at zero load.

Commutated DC motors could also be used but they are low efficiency.
Haha. That's like saying Google Maps can leak the locations of people. There's nothing to tie the users to the videos but I've gone ahead and turned off that S3 because you gave me a small heart attack.
Drag and drop. Visualization. Scheduling conferences is as much an optimization problem as it is a political problem.
Show HN: Alloy – Boilerplate for building web applications with Go
Most of SEO Is a Waste of Time
I've had success with blowing on them before I whack them - I remember hearing they also use changes in the air pressure as a cue to move.
Right up until they can't. Better to use things that are guaranteed to work, not just things that work now by happenstance but are not guaranteed to continue working in the future.
Apple's approach to privacy also includes being a partner in PRISM, a fact which they chose to vigorously deny as false allegations until it was proven to be true.

Every story about Apple and privacy chooses to omit thus huge piece of info.

Why should anybody trust them now? What has changed to make anybody believe they aren't still lying about privacy?
> “Once you have somebody's name, social, birth date, and address, you can go and open new accounts.”

>The SSN shouldn't be the critical key in that list.

Nothing in that list is secret.
Funny how they jump to using nukes and meteors but draw the line at DDT.
Personally it would take a lot to get me to stop using Spotify. I really like their desktop app and they're pretty open to modifications like Statusfy [1], Shpotify [2], and RES embedded playing. Their UI is so much easier on the eyes and mind than Google Play Music or Apple Music, and I'm very thankful that they do Linux builds when others like Google Drive can't be bothered.

[1] https://github.com/paulyoung/Statusfy
[2] https://github.com/hnarayanan/shpotify
Nope, that works just fine.

>>> def f(*x): print(x[-1])
>>> f(range(300))
299

And surprisingly, in python 2.7, I was able to define a function that takes more than 255 arguments. But perhaps this only worked because I cheated and used exec.

>>> exec("def f(" + ",".join("f" + str(x) for x in range(300)) + "): print(f299)"
>>> f(*range(300))
299
This is perfect and great. I'd love to see gradually (yes, GRADUALLY, without breaking anything!) all TLDs do this.

".localhost" has existed and been popular for local development for MANY years. I've no idea why somebody would use `.dev, but now that it's a registered TLD, using it locally is just asking for trouble.

Also, you can just use 127.0.0.1, 127.0.0.2, 127.0.0.3, etc.
I don’t know if your data model (or general hypothesis) is working. There are some truly garish color combinations (too many to be a fluke) on the site, so I’m thinking some colors work better as part of a work rather than as a stand-alone palette
Due to the addition and subtraction, errors introduced in the x step are effectively canceled out in the y step, and vice-versa. This is also the reason why the path is slightly elliptical --- at some points there is slightly too much y and not enough x, at other points not enough y and too much x, and the other two combinations (for the other two quadrants) too. However, all the errors cancel out so the path goes back to where it started.
If you have location enabled on your phone, Google appears to cross reference your location with your photo timestamps to work out where you were. I know this because when I import my DSLR images to Google Photos it estimates the location, usually very accurately.
Using .local is just asking for trouble -- avahi/bonjour/mdns have used that pseudo-TLD for ages. Using that locally is a great recipe for things breaking.