skysight-inc/HackerNews huggingface dataset:
It's time browsers default to HTTPS://
When a user types in example.com browsers generally prepend "http://" and issue the request.

This has a host of problems for https websites:

- The request is susceptible to a man-in-the-middle attack.

- Cookies are sent in the clear unless declared secure when set.

- Have to operate an http endpoint and redirect users to https = more devops and user visible delay.

Yes, the operator should ideally add an HSTS header and get included in the preload list [1], but that adds to the already long list of headaches.

It's time browsers just default to https, and if the connection fails (= name resolves but can't connect on 443) fall back on http.

For sites that cannot or will not switch to https, they can add a to-be-speficied NO-HSTS header to https redirect proxies and get added to an exclusion list (which defaults to localhost).

Yes, this is somewhat aggressive, but with suitable fallback existing sites should still work (with a minor performance penalty) while the vast majority of websites that run with HTTPS but without HSTS all get protected + sped up in one fell swoop.

[1] https://hstspreload.org/
- Private E-Mail account
Citation from the 2003 SL55 AMG owners manual under "what to do if ... the yellow check engine indicator light comes on"

Have the vehicle checked as soon as possible by an
authorized Mercedes-Benz Center. An on-board diagnostic
connector is used by the service station to link the
vehicle to the shop diagnostics system. It allows the
accurate identification of system malfunctions through the
readout of diagnostic trouble codes. It is located in the
front left area of the footwell next to the parking brake.

And this is only after checking the fuel cap and ensuring the fuel tank isn't empty.

They don't recommend towing the vehicle. There are surprisingly few conditions mentioned in the manual where a tow to the service center is recommended: brake system failure indicators, and visibly dangerous tire damage/vibrations.

There is however substantial discussion of towing methods and proper towing procedure, mentioning significant risks of damage when done incorrectly. So we see, towing isn't some kind of panacea the manufacturers are eager to suggest - the process may break things like the transmission or body if done incorrectly, especially over long distances.

It's a noteworthy difference in the failure modes of Teslas (and perhaps EVs in general) vs. conventional ICE vehicles.

ICE vehicle drivetrains often fail more gracefully. The first vehicle I purchased, to rebuild before getting a driver's license, had a broken con-rod, yet it still drove noisily with a hole in the side of the engine block.

ICE vehicle manufacturers do not actively disable a vehicle in a CEL-triggering condition. They want nothing to do with potentially pro-actively stranding someone, which could be a life-or-death situation like a snowstorm, just because some sensor is malfunctioning on an otherwise perfectly operable automobile.

Requiring a tow is a self-evident condition. It's been generally left up to the owner to decide if they want to risk potentially costly repairs driving with an indicator light flashing.
Tried running locally on Linux but ran into issues and gave up. It seems useful and I like how it looks.

"npm build" SHOULD get it running locally but it didn't for me. Did anyone else get it working?
What you describe is how Etcd leases work, just inverted: clients instead check in with the Etcd leader at prescribed intervals or face lease revocation. The leader is doing some add'l clever things like scaling check-in intervals to not DoS itself.

20s is configurable per-client, and gazette lifts this default from etcd. This one number is trying to summarize the tension and trade-off inherent in the (famously hard) problem of distributed failure detection. Network flakes or partitions of a few seconds are all too common and you don't necessarily want to assume failure if one occurs (particularly given the compounding effects of resend timers, etc).

In practice, no, it's not been a problem since clients typically buffer writes anyway, in order to batch many small writes into few larger ones.
You certainly can, and that's what most do, but...that's not what they're getting a Ph.D. for. If you ask the people getting a Ph.D. why they're doing it, far more imagine themselves becoming a researcher and/or professor, than will be able to.

It's kind of like student spending huge numbers of hours playing basketball or football in college, when they have no prospect of making it as a pro. If that's what they want to do, fine, I'm sure the lessons about hard work and teamwork and practice and executing to a plan are all useful.

But, if far more of them think they are going to go pro, than actually will, then it's not ok. The current Ph.D. system is not ok.
My cousin drives Tesla model x, a friend and I drive model S.

We have not had any issues so far. Let’s not freak out at every Tesla is bad story.

Simply drive one and see how much it changes your life as it has mine. Then decide what’s good or bad for you.

Always remember doom and gloom stories sell more than successful ones.
Sounds interesting. I'll read it. Thanks.
The pure mathematician is a relatively recent beast though, and most non-graduate students of math (i.e. almost all of them) study mathematics that almost exclusively was developed to solve a problem in the physical world.
I provided a trivial and concrete example: мат. English is inherently incapable of expressing мат.

And English being my strongest language, I'd say no, I don't think it's because I know it least well of the three.

Perhaps this is just something that doesn't make sense to people who only know one language, but it self-evident to multilinguals.

If you want a source, click TFA - a list of German expressions that don't exist in English. The discussion here on whether or not it's a great list, but no one disagrees there are phrases that don't exist in English.
172.58.172.67
> https://upvotes.club/buy/hacker-news-upvote/

I checked out that page, and at least with this one, it imo doesn't devalue HN credibility for me. The max number of upvotes you can buy for HN on this website is 10 per post, which hardly makes or breaks an HN post.

Those 10 upvotes would only be useful for an initial kick off for a post, but if the post itself is trash and legitimate users don't upvote it enough, it will all go in vain. So it would be kinda impossible to use this service to boost absolutely trash articles that people don't care about it.
Open-source YouTube alternative that also supports audio and images, (NodeJS)
I am open-sourcing my very robust YouTube alternative that supports image and audio uploads and has livestreaming built in, monetization through Stripe, lots of amazing features.

You can check it out 'in the wild' here: https://nodetube-1.herokuapp.com

Source code is available here: https://github.com/mayeaux/nodetube

Also for people with Heroku I just created a Deploy To Heroku Button, the link to follow is here: https://heroku.com/deploy?template=https://github.com/mayeaux/nodetube

That's still with ephemeral file-storage, I am going to writeup how you use add Backblaze to add cloud storage using just your phone number, but your first created account will be an admin account so you can check out the admin features and test uploading different files yourself. FFmpeg is rolled into the app automatically so many different video file formats are supported out of the box.

Also check out the Wiki which includes Linux, OS X and Docker installations: https://github.com/mayeaux/nodetube/wiki
I like a lot about Swift: strong typing, good support for closures, reasonable abstractions. But there's a lot that I dislike too. A lot. In general, I find the language to be far too trendy and fussy. I get the impression the design was guided by the goal of streamlining snippets of code meant to highlight cool features, gaining undesirable complexity as a result. One example: Do we really need $n function parameters? In just about every other language, a function has parameters, period. Those names are used inside the function. Depending on the language they may be used outside the function too. Swift separates those inside and outside views, permitting different names for both. And then allows for no names at all! I don't care. $n parameters seem to come from primitive languages like sh, and should have stayed there.

get/set/didSet introduces ridiculous complications just so we can pretend that a large number of function invocations look like assignment statements. This was a cool idea in C++, briefly, and then we discovered that having arbitrary code hide behind what looks like an ordinary assignment statement was a bad idea.

Extensions also remind me of C++ excesses. It is difficult to look at a piece of code involving a variable some type and be sure that I understand how that type works. The problem is that the code implementing the type is not in one place. There is the type definition, but then there are extensions. Possibly many of them. Defined all over the place.

I really dislike the irregularity surrounding let. In one context in unwraps an Optional. In another context it does not. Why?

I got off the Swift train at the release in which associated types were introduced. I'm sure it solves some actual problem, but it sure wasn't clear at the time. (The project ended -- it's not that I decided to go back to Objective C.)

Reference counting is far too intrusive, and it is easy to get it wrong in subtle ways. I find Java's (!) memory model relatively simple, and that's saying something. I understand why reference counting was chosen over GC. I don't have a good answer, but reference counting is just ugly. I actually think I prefer the C/C++ model of explicitly freeing memory.
I don’t want a kvm switch. I don’t want to rely on some remote server to do actual work
>In this day and age, feeding into the narrative that science is just another competitive team sport where people compete with whatever means necessary is downright dangerous.

>Reality is much more nuanced, and the article actually does a good job of detailing that.

It's bad to sow too much mistrust in science, sure, but it certainly feels like society right now is way too far in the opposite direction right now, with people blindly believing any headline following the phrase "a new study says..." or "scientists say...". A lot of scientific fields are very competitive for funding right now, there is immense pressure to twist every result into a "win" while equally important null results ("we tried X and surprisingly it did not worked") are basically treated as worthless.

People shouldn't blindly mistrust science, but blind trust is just as dangerous, the system right now is far from perfect. I believe most researchers still ultimately want to solve mysteries in nature and improve life, but they're also human beings who ultimately want to be able to keep working and provide for themselves and their families, these two motivations are not always perfectly aligned.
A lot of it comes down to appearances it seems like. For awhile a year or two ago there were articles coming out about how some American scientists would do difficult to get approved work done in South America. If rules aren't universal then the global system just incentives skirting regulations to keep up with less inhibited peers.
> better stick to js/python/java/C#/C++ like everyone else

I would change Java to Kotlin here, since Kotlin has a 1:1 interop with Java while having goodies like null safety, type inference and functional programming without the academicism of Scala (and its slow compilation time).

If you also account for the smooth learning, Kotlin is probably the safest bet from these 9 mentioned.

A lot of businesses with Java codebases are already messing with it (and not only for Android).
Generally you'll heel over the closer you are into wind while your sails aren't luffing. Taking off the wind will make the boat heel less.
SKAA (https://skaa.com) may be a partial solution for simultaneous playback and instant pairing (master/slave modes)
Thank god for the name change! I saw this project this morning and it looked super interesting. I tried googling around for it to install it, but nothing worked haha "bandwith monitor what", "github rust what", etc. And this is coming from a hypocrite who's most popular project is named 'c'.

Bandwhich is a clever and easy to find name!
"work in" as in "be paid to peddle"
The Internet-scale 'TLS-scan' now supports TLS-1.3 & a dozen STARTTLS protocols
Swift is already a top 10 language according to TIOBE.
True that, but a system that relies on a steady stream of people with unrealistic ideas about what they're doing and going to do, is not a healthy system. Either it will continue to receive misplaced hopes and turn them into cheap labor, or it will not. Either way is bad.
So just wrap your horrific acts in faux satanic ritual and get away with it. Thanks for the tip!
TurboTax but for Essays
The iPhone cpu/gpu is crazy fast.
Vint ain't never been the Freedom Rider, he's the cop (so to speak).
By "corruption" do you mean "whoopsie, I wrote bad data"?

Same way as always - there's some kind of delimiter in the message serialization, and you can "re-sync" by finding that delimiter and hoping to continue reading valid messages. For example, a bad CSV stream can be recovered by finding the next newline and hoping you read correct CSV again.

The problem is just moved to the client library which is layering a notion of messages atop journals, and is not a direct broker concern.
Used to be we had TV shows, magazines and the evening news that talked about The Future, and mostly stuck to tech that was at or near the pre-production phase.

Those all kinda dried up and what most of us have available in its stead is these 'breaking news' things where every bench-top experiment that got a research grant approved gets written up.

This is not even remotely the same thing. Articles like this aren't talking about the near future. It's not even science fiction. It's fiction fiction. Maybe even fantasy. And I have much better authors to chose from if that's what I'm after.
If you love Sun keyboards AND want a compact keyboard, try and find a Sun Voyager keyboard. It's a Sun keyboard, but without the (pointless) numeric keypad on the right. When I worked at Sun I managed to source a couple and still have one in my "I might need that again" bin of parts.

I didn't find any on ebay, but I did find a whole Sun Voyager system https://www.ebay.com/itm/WORKING-Rare-SUN-Voyager-SPARCstati... $700 just to get a keyboard is kinda pricy.

Like the author of the article, I like the Happy Hacker keyboard. It's compact, well built, the control key is in the correct place, has well placed arrow keys, and isn't overly expensive. I have (I hope) a lifetime supply of them. So long as I can get ps2 adaptors for whatever comes after USB.
In the case of click farms driving virtual browsers with selenium or puppeteer, there aren't even any actual mice involved in those clicks!
I'm not unsympathetic to this idea, but after learning my 87th domain-specific language that couldn't be bothered with reasonable control structures, or even solid error checking, it's really starting to wear.

Statisticians aren't that interested in writing a really good programming language. And why should they be? They have better things to do. The trick is to not take on responsibility for something you don't care about, if you can help it.
I don't really think that anecdote applies cleanly to this circumstance. Had Boeing stuck by their guns and given the customer a new plane despite them wanting a faster horse, what's to say airlines wouldn't choose to buy new airplanes from Airbus instead? If the only option to an airline is to switch planes and retrain pilots, then the relative cost of switching away from Boeing goes down.

Ford was selling a car in a class of it's own, at a price range and volume that was unmatched in the rest of the automotive industry at the time. Boeing is not.

https://en.wikipedia.org/wiki/Airbus_A320neo_family
Please can we not have the daily mail as a source.
It is not trustworthy or authoritative
As if the CIA wouldn’t have ways to workaround it? How can we believe Dailymail?
I’m imagining that’s too much resources, yeah. It’s the same issue with anything that’s created by people; I’m sure that it’ll be fine over time. If and when we do LTS releases that’ll make it easier too...
Chrome never disabled uBlock Origin. They are making changes to an API and have been open to feedback to ensure adblockers continue to work. The whole propaganda campaign that Chrome was disabling ad-blockers was practically ran by Mozilla itself. I recall however, shortly after Mozilla forgot to renew their certificate and all my extensions in Firefox got disabled, and it took well over a day for a fix. Meanwhile, uBlock continued to work fine in Chromium.
> I don't think there's any world where Swift is popular outside Apple's ecosystem.

I wouldn't go quite that far. I agree that Swift's cross-platform story is lacking, but as someone who follows the language closely, the story is improving all the time.

I see it as largely a chicken-and-egg problem: i.e. there's not enough activity outside the Apple ecosystem to improve the situation quickly, but I don't think it's impossible for it to get there.

For instance, it's already possible to use Swift in AWS Lambda, and some support for Azure's alternative offering, as well as Google's work on Swift for Tensorflow. All of these cases involve running Swift code in a very controlled environment, like a container, and this is very tenable even in Swift's current state. So even if it might be a bit of a pain to get Swift up and running on whatever exotic linux distro you run on your workstation, there are already starting to be some "easy" use-cases for Swift outside of Apple platforms. As the scope of these one-off use-cases grows, I think it's likely there will be increased demand to improve the cross-platform story in general.

Personally this is appealing to me, because while I agree that Rust is miles ahead in terms of cross-platform support, I find Swift so much more productive and pleasant to work with that I welcome more opportunities to use it.
Good to know, thanks :) I've only ever used Python for my own tinkering purposes so I haven't been too aware of any new developments.

But I assume the old ways are still valid code, so if you're working with Python code you may encounter any of now 3 different systems of just navigating paths for file i/o, what the parent claims should be dirt simple.
Disclaimer: I don't work for facebook. I don't speak for my company's policies either.

- You overestimate the zeal with which the grass-roots folk will engage in that behavior, especially if they know it is undercutting fb model. Ad tech is also evolving everyday meaning a reCAPTCHA like functionality around whether you are a real engagement vs these clicks aren't very far away. You should also look up the articles about # of twitter/reddit contributors (including likes) compared to the US population for example (VERY minimal).

- In theory you can politicize anything: Do you think it is possible to talk environmental/social/civic controls etc. today without having a political bent? Meaning the political ad blocking is probably not as comprehensive as the twitter block portrays.

- For all the negativity politics gets, this is something that impacts us very much in our day to day life. Shutting it out completely is probably more of a problem than working with the system. I don't think we can comprehend the macro impact in this subject: As it stands today, some companies saying no just means more money for other corporations.

As you can see I do have a very practical (read cynical) view towards how much mental bandwidth people have towards the small slights in life (which may have a giant impact later) compared to their day to day requirements. As lacking I am in solutions, I don't believe it is sledge hammer (stop ads) OR crowd sourced (let's all click on all ads).
Wow, just started watching it. I had no idea the Marshall Islands were settled thousands of years ago. Horrifying that they just detonated atomic bombs there and let people deal with the fallout...
I like the way you think. How about real-time detection of dissembling? Or maybe monitoring bathroom time?
Depends on the weight you assign to "just". At the current level of knowledge it would mean that genetics is not an important contributor to the differences in "intelligence" between individuals in the general population.

What the important factors are is obviously an interesting question.
Portland does something like this. Small streets that run parallel to large thoroughfares are designated as "neighborhood greenways", and have various traffic calming measures put in place.

SE Clinton is a pretty good example: https://goo.gl/maps/bnra2rsMCekcB3YA6
OS Dev Tutorials in Rust on the Raspberry Pi: Unit and Integration Tests
I came to say the very same thing!
What makes you think such a contractually agreed upon tweet wouldn't be "vetted and checked"?
SQL Server adds support for UTF-8
If it's so problematic, they shouldn't have released the feature(s) in the first place. They unleashed a firehose (a hose that shoots fire) without any controls to turn it down, or off, or even to aim it away from the hospital full of babies. Controls that were well-known as common and standard for decades before Zuckerberg was first rejected by a girl.

Facebook is entirely out of control as a social force, and PR agencies are the only thing holding back public perception.
Work and Success
Is it better for the community to ban the fake clickers with disposable accounts, or to ban the actual people who pay fake clickers to promote their spammy posts, instead? Once you know who the fake clicker accounts are, leave them alone and let them continue to help you identify and ban dishonest self promoters who are trying to game the system to their advantage.

Hell, maybe dang runs upvotes.club himself, so he can take their customer's money then ban them immediately: that would be most efficient and least error prone. As far as I know, buboard might be one of his sock puppets, posting the URL as a honey pot to catch dishonest HN users. ;)
Ask HN: Why are startups so counter-intuitive?
By removing it I mean moving it into the appropriate bug/issue tracker.
https://news.ycombinator.com/item?id=21838232