skysight-inc/HackerNews huggingface dataset:
You are correct, it isn't explicitly mentioned; I've reread the technical paper just now, and recalled the (internal, with colleagues) discussion I had in the past, from which I had this conclusion - "whole protocol version" is an emergent property of wireguard, not a a designed one - it is possible that a newer version of wireguard will respond to both a newer and an older protocol properly (provided it wants to, and it can tell them apart -- which should be trivial, e.g. by changing a mac parameter, in the unlikely case that the newer version would keep the mac) - or alternatively, just use different UDP ports, one for each version. I apologize for mistakenly remembering that this was a public discussion.

> Just a moment ago you were cheering on WireGuard's simplicity and lack of vulnerability to downgrade attacks, and now we're talking about how an implementation might actually offer more than one, whereupon you're back to worrying about downgrade attacks.

Yes, but I don't think there's a conflict here - technically, you could have two versions running on two machines, and pick the "right one" through sticky UDP load-balancer session after you've seen which one replies (so long as the two versions are sufficiently different that an initiation packet for one does not qualify for the other). What I'm saying is that it can also be implemented within the same kernel, and I believe that one way or another, it will. In that sense, it's about as bad as TLS.

I believe Wireguard's opinionated design is better because it inherently pushes this up the stack; The way it is implemented now, if (and when) it needs to be replaced, it will be of comparable difficulty to switch WG1 to WG2 or WG1 to (something-else-that's-comparable)1; Unlike TLS in which the upgrade is usually "well, get the new version of this lib and you'll be ok" -- which is essentially guaranteed to be the path chosen, and since backward compatibility is often prized, is much more likely to be exploitable.

Technically speaking, the only thing one can say for sure "zero agility is simpler to implement", and "protocol agility requires a lot of care to avoid downgrade attacks, but provides backward compatibility". Everything else is basically dependent on the hard-to-estimate probabilities one assigns to "diligence of upgrades", "importance of security", "seriousness of vulnerabilities", "difficulty of configuration" which vary a lot based on your axioms.

Based on my experience, I prefer the approach WG is taking. YMMV.
> even though by definition people are overvaluing whatever is in the bucket

By that do you mean that etfs which people might buy are overvalued compared to the stocks which compose the etf? Or that overinvesting in the etf results in the stocks getting overvalued?

Because as somebody that works on etf market-making, no liquid etf is trading outside of a reasonable fair-value spread based on the underlying components, unless you count situations where markets for the underlyings are closed so there's no exact fair value.
It's a civil war in a "shithole" country. I'm talking about proper battle with a capable air force enabled enemy.
EURUSD: Bearish, Retains Downside Pressure
Historically, the stock market would return 10% YoY (after averaging out). The problem is that that number has dropped. Decades ago, companies IPOed with $50m to $100m in revenue and citizens could enjoy the growth from there (like MSFT). But now, they tend to have to IPO with $1b+ in revenue (like Facebook). Many unhealthy economic factors drive down the public stock growth rate.

That is the core problem.

10% YoY for index funds = healthy. Far lower for rigged economy reasons = a large scale societal problem.
He did that all throughout the linked article too: "People do not rate the pain of losing $10 to be more intense than the pleasure of gaining $10." Okay. That's not loss aversion though.

"People do not report their favorite sports team losing a game will be more impactful than their favorite sports team winning a game." Same.
Just taxing the 1% will have complicated economic consequences, won't it? That is, it's more of a knee jerk reaction than anything. Taxes go up, GDP goes down, and that effects the poor.

I don't think we really live in what people think of as "America" anymore. We're all still attached to these old ideas but in reality it's a lot different. You know, it's time to recompile and see what's broke.
The article is incorrect.

1. TRR is not turned on by default. To turn it on, you need to go to about:config and set network.trr.mode to something other than 0 or 5.

2. Even if trr.mode is turned on, you need to go in and set the DOH server at network.trr.uri. The default is blank. You can set it to any publicly known DOH server (https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-av...), or even your own.

3. The article doesn't talk about how your ISP can use DNS to censor your result - very common, for example, in a country like India where the court orders certain sites taken down. Mozilla's DOH solves this.
Bezos doesn’t seem to have that problem.
Why should there be life changing returns unless there are proportionally high risks? There might be huge returns to be had, but it's not likely going to be with an established company that already has solid cash flow.
Some evidence to back that up would be good.
On the client, is it possible to setup an “always on” VPN? Such that when the client restarts on reboot, there is no internet connection until the VPN is on. Or when either the client or server glitches, the end point computer/mobile does not connect to the internet in the clear?
Even if it were somehow possible to achieve pseudonymity (i.e. permanent and unchangeable – but anonymous – identifiers), any work in this area towards this goal will first be heavily funded, and later heavily co-opted, by the people wishing for actual identification without pseudonyms, and this will ultimately then be presented as the only possible technical solution. The large companies in the field will then adopt the completed “standard”, thereby forcing every user of their services to use it, and any form of actual anonymity or even pseudonymity will then have been lost.

We have seen this phenomenon before in other fields. Large actors provide funding for groups with ostensibly beneficial goals, and the funders then influence the groups’ work towards the actor’s own desires, often subverting the goal of the original group completely, but getting the percieved aura of legitimacy of the original group onto the subverted standard.
Two things:

1: The article is cherry-picking for a headline. In 1980, there were 71 IPOs [1]. In 1990, there were 110. In 1996, the year that this article points to, there were 677, the highest number since 1980. This was the center of the ".COM" bubble when many if not most companies had no business going public. To put a finer point on it, From 1981-1990, there were 2,153 IPOs. From 1991-2000, there were 4,361.

2: It was the backlash of A. 'shit equity' that was produced in the .com bubble, B. two recessions, and C.common sense, that led to fewer and fewer IPOs since 2000. Just consider YC itself. How many $100+ Million companies are in it's portfolio (25?)? How many are public (a: 1)? In the 2001-2010 decade, due to a., b., c., there were 1009 IPOs. Since 2011, 726.

The low number of public companies is due to market dynamics and the sentiments of founders that have ensued since the .COM bubble. Author cherry picked the peak IPO year.

[1] https://site.warrington.ufl.edu/ritter/files/2017/03/IPOs201...
I mean I don't blame you. A system which worked for you in the past because of your privileges will continue to work for you and will be able to offer you even greater services because you are able to pay for it.
Just a damn shame for people who can't afford it. Too bad.

Wait. I do blame you. I also want to remind you that people die in civilised countries of illnesses which can be cured but they can't afford it. And it's because of people which are full of ignorance.
I'm surprised this isn't already a thing.
I've run afoul of this a couple of times in my Swift delegate protocols. A really nice hack to implement Objective-C's optional protocol methods in Swift is to use a protocol extension to create a default method that can come back to bite you when you subclass objects that conform to that protocol.
> You can change both the DNS resolver as well as install custom CAs - however, this has to be done again for each client.

That's exactly what Active Directory and FreeIPA do. They have their own CA and once you join the respective domain, you will get the CA cert installed. Hence, using the internal resources is not a problem.

There is and never will be a good reason to publish to the world, what your _kdc._tcp.yourcorp.com is.
That's funny because we recently started doing standups and our communication has fallen off a cliff. I feel like we had that tight knit group you describe, knowing when to get in touch and when to leave things alone.

Now we don't speak to each other except during standups, and even then it feels more like speaking at each other as it is expected that each member put in their voice, even when they have nothing to useful to add, leading to the team quickly tuning out and then not paying attention when something important is mentioned. Not to mention that now there is up to a 24 hour window before anything is addressed, when the previously used ad-hoc meetings would have got everyone on the right track in a much shorter timeframe. And as a result of all that I feel like there is a lot more animosity between members.

It may be possible to do standups well, but we've failed at it horrifically.
One big issue is debt payments are counted as an expense. So on the margin it’s economically better for companies to have more debt. This leads to more debt than equity for public investors and more debt fueled LBOs. This is all fine and good until the companies get in trouble.

On the bigger picture - is investing in high growth startups a right everyone should have? Value stocks outperform growth over the long haul.
That requires education. What's investing, how to invest, how to look for investment opportunities, fundamental analysis, risk management, counterparty risk ("invest in housing, because it'll always go up!"), etc.

People don't want that, they want to get rich quick. See the recent (bit)coin hype train(s).

And to top that off most of the people are absolutely without disposable money. They don't even have rainy day savings, and talking about investment portfolios is laughable. Again, millions are without basic health care and we want to make empower the individual.

Yeah, let's do that, but before turning everybody into an junior investment banker on coke let's educate folks. (That'd help with having a middle class again too.)
Cheers. I'd realised it was quicker to heat the pan on the stove than in the oven but it hadn't occurred to me to apply more oil while it was hot. I'll give the sanding a go.
Nice idea - I don't like going too far above the git cli, but I usually find myself building a set of terminals watching different git commands such as status, log, diff etc for a more parallel overview...

This tool looks like it does that a bit better with interactivity maintained, and for some reason i'm more comfortable accepting a CLI git UI into my workflow than a GUI.
Show HN: 30 seconds of interviews
So how does your air force help you against a hundred C4 packed drones swarming your soldiers? A drone costs almost nothing compared to anything an air craft can shoot at it.
Under what reasoning do you think it's ok to reuse passwords across multiple sites but not to use a cloud-based password manager?
The media dramatically misinforms us about Venezuela:

https://youtu.be/_fV-C1Ag5sI

And calls for war with "humour".

I must be old, but it looks similar to me as the "humour"
that Germany had before invading Poland.
The digital age allows for actual ubiquitous information. A new start at a stock market could require public companies to operate completely in the open - zero asymmetric information. It’s a radical idea I just had, so it’s not a fully formed idea. But information does concentrate power and thus wealth.
> Serious combatants will not be using wifi/cellular 4G LTE drones

if you precalculated its path, you could probably navigate by inertial methods using gyros/accelerometers allowing you to be completely dark in the RF spectrum.
I don’t understand how someone could overlook that the stock markets are all gambling.
Why Money Flows Uphill (2015)
On Ubuntu, for each wifi/wired connection settings, there's a checkbox and dropdown to automatically connect to one of your VPNs.
This is what I heard from a friend who is in Venezuela. Your comment is only the 2nd time where I’ve seen mention of the firefighters.

Here in the US all the major newspapers (nyt, wsj, wapo) are going with drone attack because it’s the official statement from the Venezuelan government, but they’re not even mentioning the firefighters, from what I’ve seen.

What’s the real story here?
Please give up using Google reCAPTCHA verification
Please give up using google reCAPTCHA verification, it is being used to do the right thing
There is a cruise missile capable of delivering an EMP-like effect under development.

https://en.wikipedia.org/wiki/Counter-electronics_High_Power...
I'm a little undecided on Swift extensions as a whole, and particularly protocol extensions. Maybe I'm just paranoid but it feels like it leads to a more complicated code layout.
> especially among people who really want to get out of car ownership

I have brought this up before and I still do not understand how or why this idea is so tightly coupled to fully autonomous vehicles. I don't see how removing a human driver from a car service is going to change the dynamics enough to drive legions of people who own cars to get rid of them if they haven't done so already. The only friction a human driver adds right now is cost, but I don't see the cost savings of removing the driver being high enough to move the needle.
My home router will. My browser will also open the site. My browser might not necessarily be Firefox, though.

For internal sites, you don't need public TLS cert. If your device is joined to a domain, you already have a private CA cert installed, so whoever controls that domain, can make certs for its resources. If you do that at home, it is no problem to make your own CA and use it for your home resources. It is just few commands with openssl, which you have already installed anyway.

> If you want to make an intranet-only web page that "just works" with off-the-shelf clients, you'll have to stick to public domain names.

That's not true at all, see the previous paragraph.
Have you given much thought to how this link shortener might be abused? Your https://pygy.co/ example site doesn't provide an abuse contact, for example. That doesn't help when someone sets it up deliberately to host spammy links, but providing a default abuse contact page might be a good general step to raise awareness that link shorteners are often abused, and that anyone using the project responsibly should be prepared to handle abuse complaints.
> Taxes go up, GDP goes down

[citation needed]

> and that effects the poor.

Even if it did happen, and did effect the poor, there's nothing to say the net effect is negative. GDP and the condition of the poor have no necessary relationship; you have to consider distribution as well as aggregate level.

> I don't think we really live in what people think of as "America" anymore

What does that even mean?

> We're all still attached to these old ideas but in reality it's a lot different.

What old ideas? What's different?

> You know, it's time to recompile and see what's broke.

That metaphor doesn't make any sense in this context.
/r/parahumans

/r/starcraft
Deep Learning Retreat | Senior Resident mentor | Fremont, CA | Full-time | https://deeplearningretreat.com/

Deep learning Retreat (DLR) is the first deep learning school in the world. We train people who want to either:

- Have a job in a tech company

- Have tons of impact by going alone on their own startup or doing ‘good’

We make sure we fulfill those two customer needs by giving them the best environment to produce an impressive portfolio project.

The more we talk to companies interviewing today, the more apparent it is: A portfolio project is decisive when making hiring judgments. Jeremy Howard recommends it. Andrew Ng recommends it. Why? It’s far better at discriminating talent than any other proxy (CVs don’t work; pedigree doesn’t work; puzzles don’t work). DLR focus is to help you write the best portfolio project you could; in that sense, it’s like a writer’s retreat, where one goes to finish your masterpiece novel. We use online videos to cover the theory, but focus on project-based, peer-learning methods that are completely hands on. When you come out of the door, you should be holding a project that proves you can write damn good code and makes you unstoppable in interviews… or an extremely desirable partner for social impact projects or startups.

https://deeplearningretreat.com/work-at-dlr/
Let me guess: you're overweight and have an extra layer of insulating blubber under your skin keeping you warm.
Everything goes in a Context Bucket
Also Seattlites.
Finally read through what you have up so far (reading w/o coding for now as I have other commitments today) and I wanted to say I love what you have so far. Though an oddity the date of the post is July 20th for some reason (in case that matters to you)
The whole Noise construction is "versioned" by the primitives it's instantiated with, through domain separation constants. That's what the weird English strings in the protocol do. Whole-protocol versioning is part of Noise, and thus of WireGuard.
That’s the most shocking part of the other commenters for me. Just having the ability to own stock moves someone well beyond the median - When I say “empower individuals” I mean everyone from the homeless to the families with kids and a mortgage. We need an approach that can’t be robbed or is directly given to the few.
That's a good suggestion. I am gonna add it. Thanks!
> It appears the correct action would have been to use <code>override func greet() { print("sup") }</code>.

That actually doesn't work because the greet function is implemented on an extension. You can only override class functions.
The vast majority of such systems in the US are limited to people with disabilities.
Yeah this is the one I was thinking about! Thanks for finding/linking.
Massive rogue planet with unexplained aurora glow discovered beyond solar system
Well, you have to trust some third party. Personally, I think Cloudflare's DNS is pretty trustworthy based on what we know. It's WAY better than sending unencrypted DNS requests to arbitrary network-dependent third parties, in my opinion.

If you gravely fear Cloudflare for some reason, Google also provides a DNS over HTTPS server, along with a couple others. You can probably set Firefox to use that.

But if we we're OK treating this as insensitive data not needing encryption before, worrying about trusting third parties is not even the beginning of the problem.
Keeping up in the JavaScript world
Another way drones are weaponized is for information warfare, e.g. ISIS propaganda showing their SVBIED attacks.
Many already run their own resolvers, so providing DNS-over-HTTPS proxy is not a problem.

What is THE problem, is configuring the browser. No one is going to reconfigure their browser after each connection to a different network. There's a reason why we moved from static configuration towards DHCP, which can configure network-specific settings. DNS is a network-specific setting, and Mozilla is breaking it.
Microsoft Releases Remote “Push to Install” Feature in Windows 10 Store App
I think what has changed is the shocking amount of money that recent start ups are burning. Snap burns more in a year (~$1 billion) than Facebook did in it's entire life. Uber has burned ~$10 billion during its existence. It's hard for me to picture a company raising that amount of money on the stock market.
You mean the reporters I memtioned? No, they are/were all in China.
When I worked at Twitter, they had an internal URL shortener that made it easier for employees to visit internal sites. Using an easy-to-remember customized short URL is easier than navigating the internal wiki or looking up the link in your e-mail.
Sarbox screwed up perhaps more than it helped.
If I saw this in a code review, I would flag it for re-design. Mixing composition and inheritance especially in this way is definitely going to confuse anyone who doesn't read every line to figure out what's going on.
Not only that, mechanisms exist for you to leverage the hell out of yourself and you'll be able to see your life changing 1000x return.
It is much easier now to invest and have access to the stock market. A few decades ago, not only did you have to have a human broker you would call on the phone to make a trade, the costs were vastly higher, so small trades were much cheaper.

The problem is small companies aren’t going public because of the much larger regulatory burden or cost, or they are being acquired before they go public, or they are staying private longer because of access to private capital.

https://www.businessinsider.com/historical-trading-commissio...
Doesn't look like the same project. One is the project used for doing testing in Python. The other is a messaging program.
This seems like a problem with using class inheritance more than anything else.
I think you could argue that Bezos is an outlier and not representative of the majority.
WSL is not a good solution from what i've seen, most of it's proponents have never used Linux on real hardware and are comparing it to gitbash for windows or whatever, or have never used linux before. Some things run fine, others are insanely slow due to either slow translation layer or simply because the behaviour of the underlying windows kernel actually is really many times slower than linux, e.g forking - I didn't know this, just found out first hand. The file-system integration is a bag of shit - the common issue being trying to use git in linux while editing files from a GUI in windows will cause frequent explosions, failed fs updates to to arbitrary windows locking are not fed back to linux which really fucks with git. (i'm talking about using the linux fs from windows which is the way with the least issues - doing the reverse has even more severe consequences). Also the terminal app is the worst i've ever seen. FYI I'm talking from experience helping my colleagues who use windows. </rant>

IMO, if you must use windows and need linux/gnu stuff, just stick linux in a VM with a full GUI, it may seem more resource intensive running a whole other kernel and GUI, but it will work reliably without horrible surprises.
> A lot of marketing companies like to share short and branded custom links on social media and later check the click and other stats to see the conversion rate.

True, but as an user it does not serve me (quite the contrary actually, as it invades my privacy), so my point (and habit) of never clicking into shortened links still stands. I’m actually surprised brands would prefer shady-looking links over linking to their own domain directly.

Not to mention, you can do analytics server-side on the page you’re linking to without having to have an intermediary system & extra redirect.

> Anyhow, I created this as a personal project for learning purpose but I can see it's use cases.

Quite impressive actually, seems very feature-complete and well built. Keep up the good work!
This is not the impression I have.

The one here is open to anyone and even sometimes runs a loop for a local taproom.

I guess you could sample 10 or 100 of them and see how many impose restrictions on rider eligibility.