skysight-inc/HackerNews huggingface dataset:
yes, weight matters much more than thinness, when it comes to portability and usability. my 15” 2008 macbook pro weighed 5 1/2 lbs and hurt my back and shoulders carrying it all day. the 2012/2015 was 4 1/2 lbs; better but not great. somewhere between 3-4 lbs seems to be where the threshold is for portability/usability.

with that said, these discussions on mbp keyboards and thinness always miss the reason apple strives for thinness in the first place: to drive the market in a direction where apple is always perceived to have the lead/the best products. thinner products are harder to design, harder to manufacture, and really lean on the supply chain and operational focus/excellence of apple. that gives them their enviable market position, and most of the industry’s profits, so that’s why they do it. it’s really that simple.
How can I get in touch to help with the main site? The VueJS front-end is something I'd be interested in helping with too. React background wrt web apps but happy to dive in.
I don't think this is accurate, the 2015 MBP I am using now has a physical click (pad has vertical travel).
THIS would have been nice to have at the beginning of the summer.

The tests I wrote tested the boundary between my code and the HTTP library but the API I was writing against wasn't particularly well behaved and so that wasn't quite enough.
I'm consistently amazed at how many people [on HN...] over-estimate the size/scale of Cloudflare.

Comcast is a huge, multi-billion $ operation with global contracts and broadcasting capabilities, and > 184,000 employees globally (that's more than Google, and even MSFT).

That's not to say that we shouldn't be wary of Cloudflare for many other reasons; but that they have more influence over the Internet than one of the world's largest consumer & corporate ISPs is definitely "a take".
Social media free from political posts? Sign me up! Sounds fun
Step 3: Discover that what you did was wrong (bad implementation or not what they wanted)

Step 4: Go to step 1
> Tons of run of the mill accidents leave people unconscious...

Indeed. My friend's grandma slipped while getting in the bathtub. They found her barely alive 3 days later when she missed her hair appointment and the stylist called her son. Previously, she was the life of the party and went to the gym almost every day. She didn't last a few days after that fall broke her hip. The outcome may have been different if she got help right away and if nothing else, she wouldn't have suffered for a few days. She was in such good physical health that nobody expected something like this to happen.
and if the recent diseases are caused by an additive, like vitamin e, then the overall panic is disingenuous.

>They say black market operators are using more thickening agents to dilute THC oil because of a crackdown by state authorities that has made the oil scarcer on the black market.

Maybe regulators should be blamed for causing a scummy black market, instead of pointing the finger at "vaping."

https://www.washingtonpost.com/health/potential-culprits-in-...
Same in postgres[1], and I'm willing to guess every relational database has a way to do it.

[1] https://www.postgresql.org/docs/current/sql-createsequence.h...
I missed the * on the end.
Except it fails at step 1. If you have to breakdown a “Ajax photo editor” into 16 hour max chunks, as stated, you need a detailed design. And that takes times in itself. The problem is, often times, the manager want the estimate before you've taken the design time because, to them, it should be included in the estimate.
There are a bunch of physicians of different specialties in this community. It’s not uncommon.
> but how does one deal with extrinsic deadlines then?

Deliver working software one chunk at a time, however you have to break it down to make it so.
Children are not equipped to make these sorts of choices about their health, regardless of what libertarians may tell you.
It's standard practice to define acronyms prior to first use, such as DNS over HTTPS (DoH), rather than assuming people have a priori knowledge or that they'll click on the right links in the content to figure it out.
> I'm utterly bewildered that there's no official documentation of this stuff though.

I don't know if there is or isn't official documentation everything you might typically want to know for Apple products. Clearly, they don't document the answer to every question that anyone might ever ask, but they do document many things that you might not think they do.

I know this because often when I Google for how to do something on a Mac, I often end up on some Apple page that tells me how to accomplish what I want. E.g., a page that documents a bunch of MacOS keyboard shortcuts, or what have you.

Of course, one problem is churn. I.e., the features in the software are changing frequently, and consequently, documentation can get quickly out of date. Also, Apple is likely to be cooperating with book authors. There is the "Missing Manual" series, which often seems to contain a lot of useful information (though, as I mentioned sometimes out-of-date), and I'm sure that David Pogue and friends don't figure all of this out via just trial and error. It seems like they must get some sort of assistance from Apple in the form of release notes or rough documentation, or something.
Does the agreement have teeth? Is it even enforceable in the face of NSLs?

> We also commit to documenting any government request to block access in our semi-annual transparency report, unless legally prohibited from doing so.

I guess it is not.
Nah, vast majority aren't locked up here, from experience. Pubs in the UK tend to have them, as do larger shops, community halls, libraries, I've seen old red phone booths repurposed as AED storage, in Birmingham city centre I saw a really modern one like one of those light-up ad screen / phone booth / touchscreen signs, which could simultaneously call emergency services, deliver CPR advice on the screen and dispatch the AED stored underneath - was awesome. Honestly I'm surprised (and pleased) that they don't get stolen/vandalised more considering the amount that are just out there - though I don't know what you'd do with a black market AED lol.

I have yet to see one that's properly locked up [that didn't have easy to break emergency glass, anyway]. My workplace has a few in special AED boxes, but those have the emergency glass and the hammer.
unbound supports DoH.
snowden = ehrenmann
It is well known that OS vendors move slowly. How long will it take for all major OSes to standardize on an encrypted DNS protocol? I'm pretty sure it won't happen before 2030.

Should application vendors simply do nothing until then, even when they can do something now? Should programmers always wait for the perfect solution to come along and only then ship the definitive version? What happened to building what we can now and incrementally improving over time?

There isn't even a consensus on how best to implement encrypted DNS. How do we decide which proposal to standardize on if we're so reluctant to test them in the wild? Without successes and failures to learn from, there is even less chance that OS vendors will deviate from the status quo.
HTTP Toolkit can definitely intercept Android & iOS or other network devices, it just can't do it for you automatically (yet. Watch this space: https://github.com/httptoolkit/feedback/issues/10).

If you want to do intercept something manually, there's general instructions under the 'Anything' interception option. In short:

- Set the proxy on the device to point at your machine's local IP, usually on port 8000 (active port is shown under the 'Anything' option)

- Trust the generated MITM certificate on your device, so you can intercept HTTPS too (path to the certificate also shown under 'Anything').

Fundamentally, HTTP Toolkit, Charles & Fiddler are all HTTP & HTTPS proxies, so they all allow intercepting the same things, it's just a matter of how easy the setup process is.
Keep in mind that Cloudflare is US company. US government is infamous for secret subpoena and gag orders toward the US companies. Also US government is infamous for serious and illegal spying. They also holding known vulnerabilities information from public for greater good(for them).

Practically, no trust.
The key word here is addiction.
My tech hangover started in 1989. Reading Psychology of Everyday Things and Technolopy helped me articulate my dissatisfaction, transmuted me from a technophile into a humanist.

I started some study groups (for geeks), started volunteering (tree hugger stuff, cancer survivor groups), got very activist / political. (Now experiencing a citizenship hangover. Oof.)

Hanging out with different cohorts is invigorating. Highly recommended.
BigQuery DeDuplicate – Window Function vs. Group by for Stitch
The Cloudflare DNS servers you connect to are in the EU and are subject to EU regulation just like your ISP. You don't have 11 ms (or anything sub-~90 ms) latency to the US.

One thing to consider also is that unencrypted DNS means that virtually anyone can read (and modify) those requests, not just your ISP. That can be before the data enters your ISPs network, or at any point that isn't physically or technically well protected. Or, in the case of state actors, at any point really.
Is an Online MBA worth it if you want to switch from Developer to PM?
I'm trying to switch to a PM soon. Currently, trying to orchestrate this in my company.

However, wondering how difficult this would be to make a switch at a different company if I do not have an MBA?
I downvoted you because this conspiracy is ridiculous with zero supporting evidence.

Want to know about his motivation and background? Read his new book and watch Citizenfour. He explains what lead him to be a whistleblower.

> all have been heavily dismissed by the US government, Yahoo, Google, Verizon and others

Completely untrue. Much of it has been confirmed. If it was fake the government wouldn't be charging him with espionage.
> Practice > theory. Every time.

No it's not, that kind of attitude is how you end up with people trying to replace the DOM API with sed or awk. In practice there's quite a lot of DOM queries that can be replaced with awk until you need certain things that become very hard. Theory would have warned you about that from the beginning.
> "Now everyone knows it’s true, but still nobody seems to care… "

In general, the mainstream media didn't make much of it. At the time they hadn't yet tied outrage to revenue/profits. If Snowden were to happen today the coverage and reaction would be much different.

But alas, it's too late. The public has it in their minds it was a non-issue. That seems unlikely to change any time soon.
Interesting and informative.

However your previous remark about Richard Dawkins opening up a Bible is a bit worrying.

It is obvious that the missing historical information is not in the Bible, and that remark can be interpreted a bit like the point of view of Jehovah witnesses, that all you need to read is the Bible.
Compared to the environmental impact of transportation those environmental costs are absolutely negligible.
You forgot your ISP, some collect and resell your activity online
If they are the ones bringing in the money, funneling funds into an IPO, or straight backing the IPO, it's on them.
> last time we in Europe experimented with unadulterated free speech, and got Hitler and WW2 as a result

We also needed Americans to save us Europeans from those other Europeans.
Web Scraping with JavaScript. Building an App Using NextJS and Puppeteer
Chrome ignores it.

https://stackoverflow.com/questions/42636711/google-chrome-i...
OK, we are wondering way off topic here, by my pizza & phone number story....

Back in the days of pheasant-under-glass mainframes, I had a part time student job as an operator in the computation center. We had a phone at the operator console, and 90% of the legitimate calls came from the operator console at the computation center at the other state university on the other side of the state. Our phone number happenned to be the same, but for the middle two digits reversed, of the most popular pizza place in a college town. The vast majority of the calls were to place a pizza order, not someone looking for the on-duty mainframe operator.

Our standard practice was to answer the phone “wrong number” — because it usually was. Anyone with a legit reason to call us knew the drill. Pizza orderers, especially the half-drunk ones, were our amusment on an lonely night shift of hanging tapes.
The entire point of the original comment was limiting underage consumption.
Not sure what this proves.
In EU the ISP are forced to use lying DNS to block websites.
- Don't default to "Agile" (or be fully "Agile" for that matter)

- Don't default to Typescript (or any technology for that matter)

- Don't default to TDD (or any dev methodology for that matter)

- Don't default to linters and bundlers (or any intricate tooling for that matter)

- Don't default to complicated infrastructure

A friendly PSA that you can still, in the year of our lordt 2019, create a static site with an HTML file deployed to shared hosting over FTP. You could also create a dynamic site with some PHP thrown in there.

Reach for the minimal process, tech, methodology, tools and infrastructure you need to get the next X pieces of work done, and complicate things only if the pros outweigh the cons.

I'm not picking on you specifically blobs, I'm sure you walked into an organization that employed all these things with seemingly no good reason. The thing is, there's always a reason, it just might not be a great one!

That said, if your goal is to estimate things more accurately, you might need to spend a little more time with your coworkers to define as many unknowns as possible.
Weird... the tab discard stuff no longer helps with Firefox for me. It seems to handle background tabs on its own.
I've heard the Juul pods are the equivalent to a pack in terms of nicotine content, but i don't think that means people go through one pod in the same time as they would go through one pack.
No, he's correct here, it's an extra indirection and so overall it can only hurt performance, not improve it. For example, ISPs often have caching servers from Google installed and Google is the biggest traffic generator. If you route traffic through somewhere else you are going to reach different Google's caching servers that are farther away and over more congested links.
But Google is just indexing published works. It would be like forcing the library to hide all results for George Orwell. Google isn't collecting data about you, the publishers are. Google just lets other people easily find it.
This is a very common problem for elderly people and many products exist to fill the gap already.
It doesn't apply to public figures.

And you need a lot of medical confidentiality or you make people afraid to go to psychologists at all, and everyone is worse off.
Yet they did it anyway, so it sounds like they sure did make the determination on what's good or bad, just accompanied with some hand-wringing in a blog post.

Real humility would have been not making the decision and instead lobbying for someone with the 'political legitimacy' to do so.

Cloudflare pretending like they're neutral in one corner while gleefully cutting off service to anyone who offends cancel culture in the other is gross, and they certainly shouldn't be praised for it.
Mysterious Mac Pro Shutdowns Likely Caused by Chrome Update
I agree and should have clarified -- technical competence is _a_ requirement for good management, but you still also need to be(come) a good manager in the traditional sense. Its a different job than writing code and not everyone will be good at it (and arguably by definition, of the relatively small number of good engineers, even fewer will be good managers on top. I would expect quality technical managers to be relatively expensive).
etc/hosts doesn't scale, it came first and was replaced with DNS when we had scaling problems.
> I would love to see benchmarks to know exactly how much performance I am giving up though

https://www.youtube.com/watch?v=xrMbzHdPLKM

It ends up being a pitch for Aurora at the end (as with any presentation from AWS folks), but it has tons of useful information for standard Postgres.
Congratulations on launching another great feature! I've been patiently on the waitlist for a very long time now, and it's great to see it out now!
Recognizing that I don't have much knowledge about this case—I only know what I read in the linked article—it certainly doesn't seem as though that man should have been convicted. All the evidence is circumstantial, and there really isn't all that much of it.

And, using the sound of a tape recorder to identify the guy? Really? That doesn't even pass the smell test for me.

I'm not 100% convinced he's not the culprit, but the case described in the article doesn't come close to "beyond a reasonable doubt", for me.
Matthew Prince: CloudFlare Was Inspired by Project Honeypot and the DHS
I am not a US citizen, your practice isnt mine. That also goes for many here and many more of the people who use the internet. I cant trust a US company with my DNS requests because lacking US citizenship or residency I lack any rights or protection whatsoever when it comes to my data. For my local ISP on the other hand, there are clear rules and regulations in place on how they are allowed to use and share my data.

I would say i have more trust in my ISP but trust is not the issue here, its jurisdiction. Routing my DNS requests through another jurisdiction where i lack any rights or protection is just a horrible "screw you" to anyone not living in the US.

It might be the tinfoil, but looking at this move by Mozilla after disabling addons silently via an out of date cert a few month ago (screwing over every last Tor user in the process) I am hard pressed not to assume malice on their part.
"Freedom of speech is not freedom from consequences."

It sounds like a quote from "Animal Farm", doesn't it? I am free to say anything I like, but if I say the wrong thing, I get punished for it. Also, "some are more equal than others".
Amazon Influencers: Introducing Verified Profile
Mozilla is only rolling out DoH to users in the US whose ISPs would already be subject to NSLs. Presumably they will wait until non-US DoH providers are available before rolling it out elsewhere.
I've heard the same advice about crouching, but have never been in a position where I've tried it. When canoeing, the advice I've heard is get to shore and crouch on your PFD for additional insulation.

For sake of comparison, The article says a lightning strike releases about 500 MJ of energy. Wikipedia says a "standard" stick of dynamite contains about 1 MJ of energy[0]. In my estimation standing 30m from the (very rough) equivalent 500 sticks of dynamite going off counts as damn close.

I realize this is a very rough comparison, but I'd guess that it's surely within an order of magnitude or two for comparison purposes. Joules are joules, but how they're released might be wildly different, we're way outside the realm of my expertise. I wouldn't want to be 30m from 50 sticks of dynamite going off, or even 5.

I don't know how the sound would compare between dynamite, but I agree with your observation that a lightning strike at 30m is a hell of a noise.

[0] https://en.wikipedia.org/wiki/Dynamite#Form
I wonder if there's any chance they'll add an ad blocking feature.

I'd probably give WARP a shot but I'm not willing to give up DNS66 to switch over
> And for actual privacy on untrusted networks, nothing beats a VPN, except possibly not using hostile networks.

Except that using a VPN then funnels _all_ of your traffic through a single server which is ideally placed to monitor your browsing activity. And, VPN providers tend to be quite hard to evaluate for their trustworthiness.
The emergency services operators in the UK make it very clear -- should the situation warrant immediate attention -- that someone _is_ on the way before they go on to ask more questions or suggest action to take as appropriate. I'm quite glad to have only had to experience that once, even thinking about it has raised my heart rate.

Non-emergency calls to the police will usually involve working out who you are at some point in the conversation; non-emergency calls to NHS24/NHS Direct will start off by taking contact details and triaging that you really are not an emergency case. If you drop off the line and they can't get back in touch with you, they've got enough information to make sure you're OK.
I can confirm that hair stands up on end when conditions are ripe for a strike. I have had it happen. Particularly for those with thin, wispy air, it was really sticking up. We got out of there fast. So I would say the folk wisdom is not utterly false in that there are times when it does happen and in some of those there is enough warning to get away, but I certainly would not count on it.
In another incident, I was within 100m of a lightning strike (with no warning). Similar to what others below said, the thing I remember most was just how loud it was. One person was killed, 10 hospitalized. A number of the victims were blinded temporarily (measured in hours not minutes).
As incomplete as it is, fining google france for google canada's use of illegally exported data seems great then. You want the EU market, you abide by EU export laws.
I think crying is a bit of a red herring here.

Chilli and wasabi doesn't make you cry in the emotional sense. They stimulate the sinus and lacrimal glands to dilute and flush the irritant. There are other non-emotional triggers such as cutting onions. In that case we 'cry' to dilute and flush the sulphuric acid formed on the eye.
Argo is really cool... and also really unaffordable and solving a problem we wouldn't have in the first place if "net neutrality" was something tier 3 ISPs took seriously and stopped routing me across the world to save a few cents because one of their upstream provider provides cheaper bandwidth on a less congested route.
it's also a business. As soon as they find it advantageous to start selling that information, they will, and will ride on their reputation for privacy to make as much as possible from that information
Selling it at $49 seems it would be untenable. I assume they have other business, to not worry that this isn't the main income.
When your program is single threaded, a simple boolean flag variable can act as a mutex, you don't need a mutex for this.

Mutexes are for situations where flag variables can change state between your instructions to check and set a flag. This can only happen in multithreaded or interrupt driven code.
Yeah I've only been coding professionally for a year now and I do SO MUCH MORE reading/researching, planning, annotating, and pseudo coding than I ever did when I started.

The outcomes are so much more predictable / better quality.
Excellent work Tyler!! I know you put a lot of effort into this. Will be cool to see feedback on it.
Because I don't trust any random VPN service provider not to spy on my friends and family, the way I trust Cloudflare.
Can you elaborate on how performing DNS lookups over HTTPS is putting lives at risk and what significant breakage will occur with this approach?

Also, I would argue that the most effective way for an organization that maintains a popular browser to impact DNS requests is at the browser level.
Each of those minor freedoms pales in comparison to the freedom to speak your mind or resist tyranny.

What I have seen of European society, Europeans are content to have a boot on their throat and make some token effort to appear free.
Run an iterative resolver somewhere, then connect to it either via DoT or some VPN (wireguard, openvpn...) from your router or the OS stub resolver.

Depending on your threat model you could also run the iterative resolver locally.