skysight-inc/HackerNews huggingface dataset:
> You're conflating privacy with trust.

Confidentiality and authentication are two different things, but the things that provide confidentiality here also provide authentication. DNSSEC only provides authentication, so then you need something else to provide confidentiality at every point in the path. At which point you would also have authentication at every point in the path, so what does that leave for DNSSEC to do?

> DoH is only designed for last mile so useless in encrypting the resolver chain between you and the root servers.

This is true. DoH isn't the one to use between recursive and authoritative DNS servers.

> Currently there is no way to get a fully encrypted chain (the root servers would need to support DoT or something similar and they don't nor are there any plans for them to do so afaik).

DoT has a similar drawback as DoH between recursive and authoritative servers. The session establishment is expensive (more round trips, higher latency). That's not so bad for the link between the client and the recursive DNS, because you create a session once and use it for all your queries. It stinks between recursive and authoritative servers because the recursive server would need a new session for each authoritative server -- and a single recursive query can often require contacting three or more authoritative servers.

Fortunately DNSCurve has lower latency and can be used between any pair of recursive and authoritative servers that support it.

The root not supporting DNSCurve is an issue, but it has an obvious long-term solution (have the root start supporting DNSCurve), and in the meantime the recursive resolver could validate only the root with DNSSEC. The lack of privacy is much less impactful for TLD queries -- a query for your-local-oncologist.com tells an observer much more than a query for .com. Then if DNSCurve is used for the rest of the chain after the root, you have one authentication or the other for the full chain and privacy for all but the TLD query. You also then don't need any large DNSSEC records in the authoritative servers that support DNSCurve, which would otherwise be a DDoS vector.

> So the best (form a privacy and trust PoV) you can achieve is as I've outlined: VPN together with a DNSSEC resolver (with verification enabled).

I still don't see what that's even supposed to be adding over the VPN right now. The VPN handles the link between the client and the recursive resolver. You can only get authentication between recursive and authoritative servers for domains whose authoritative servers support some authentication, but hardly any of them support any authentication right now, and if you're going to add one it makes more sense for it to be DNSCurve than DNSSEC because it provides confidentiality in addition to authentication and isn't a DDoS vector.
The white swan harbingers of global economic crisis are here
Bitcoin is not one of the scams with no working software I was talking about.

The information comes from a leveldb database you can download from peers after installing this client: https://github.com/bitcoin/bitcoin
Block-Element-Modifier, a way to structure your CSS. http://getbem.com/
The appealing thing about Electron was that it shipped a particular version of a particular browser brand, combined with a particular version of a Javascript engine.

Knowing exactly what browser version you're developing for gives you a lot of freedom that you'd lack when having to support different ones.
It's the adjacent house (75 Bedford St) that is blurred.
What benefits do this measurement and comparison provide?
I can't speak to the experiences of chapium, but my issue with Firefox is that I always experience a slowdown of some sort after it's been open and in use for a few hours. I have to go into about:profiles and "restart normally" to make it go away for another few hours. I never had this problem with Chrome. I'm on my third or fourth attempt to switch to Firefox in the last year and it's still happening. I'm tempted to switch back to Chrome, but I really, really don't want to.

It's not my computer either - my work PC, at least, is a powerhouse.

Also, I find Chrome's dev tools to be marginally better - but I'm not sure if that's just my familiarity with them over Firefox's.

Quick edit: there are some other problems I have with Firefox, but they're all relatively minor and don't bother me nearly as much as the random slowdowns and short freezes.
It’s really weird that tech is in a state where almost all of the stars even after being 10 or more years old still don’t have the slightest idea how they could make money. Things won’t be pretty once the investor money stops flowing.
As for the personal data aspect, why does that come as a surpise to you? Babylon Health's website is full of Google tracking, which to me raises a huge concern. Now I get you do it in regards to your home page, but when it comes to user account pages, that's really dubious to me.
What’s its uptime? A lot of Electron apps—even ones that use minimal local JS, serving mostly as a webview—accrue base overhead as you use them, then keep it around even when you close their main window (and thus release their main Chromium-side render context), as long as the process stays alive. They’re caching stuff (like, as I said, rendered font glyphs, or network responses.)

I have a copy of Slack running that’s using 2GB right now, with no window open.
I thought the anti-css crowd who use React etc generally preferred some form of Styled Components where the style is written in JS? It's a mixed up world of factions :)

Whether building a regular website or a web-app I generally just use component names (like .card) the same way. I'm more of a fan of defined components with limited variations though than people being able to change anything with a lot of utility classes. Sort of like having a succinct API with a constrained depth. I see css as an api to the original designs and Tailwind introduces too much freedom for my comfort! I will endeavour to give it an honest trial though and maybe I will meet you somewhere in the middle.
Do I Need a VPC?
Works fine for me on FF 73 (Linux)
I'm late to the party, but this article inspired me to write this script to slow down connections to reddit

#!/usr/bin/env bash
DEV=enxe04f439470d2
DOMAIN=reddit.com
LATENCY=5200ms

sudo tc qdisc del dev $DEV root # Ensure you start from a clean slate
sudo tc qdisc add dev $DEV root handle 1: prio
sudo tc qdisc add dev $DEV parent 1:3 handle 30: netem delay $LATENCY
for IPADDR in $(dig @8.8.8.8 +nocmd $DOMAIN any +multiline +noall +answer | grep -E -o "([0-9]{1,3}[\.]){3}[0-9]{1,3}")
do
echo "Slowing down connections to $IPADDR on $DEV"
sudo tc filter add dev $DEV protocol ip parent 1:0 prio 3 u32 match ip dst $IPADDR flowid 1:3
done
Indifference is not stupidity. "My feature is done. I don't care if or how it hurts the user."
“The Ones Who Walk Away From Omelas” is a great short story. It won a Hugo in 1974.
I’m currently running three Electron apps: Spotify, Skype, and VS Code.

Spotify: 1083.7 MB. VS Code: 890.9 MB. Skype: 406 MB.

In the past, I’ve had projects open in VS Code which have caused that number to shoot up into the multi-gigabyte range.

Of course this is all anecdotal but I am pretty sure these numbers come from actual experiences that people are having with Electron apps.
Yep, I consciously switched away from Chrome to Firefox. In benchmarks, Chrome destroys (or at least destroyed when I tried it) Firefox, but I personally have never noticed any slowness from Firefox. I still have like 20+ tabs open every day, and I can do the same things I did on Chrome.

So, Firefox it is for me.
Installing Apple's OS on non Apple hardware is at most a Breach of Contract which is very different from being illegal.
I can see it now:

> Most C libraries do too much.

> They come with all sorts of predesigned components like functions and structs that might help you move quickly at first, but cause more pain than they cure when it comes time to make your program stand out with custom behavior.

> Tailwind C is different.

> Instead of opinionated predesigned components, Tailwind provides low-level utility macros that let you build completely custom functionality:

void main() {
BEGIN_TAILWINDC
MOV(RAX, 4);
MOV(RDI, 1);
MOV(RSI, "Hello world!\n");
MOV(RDX, 13);
INTERRUPT(128);
END_TAILWINDC
}

And then every Hacker News discussion of Tailwind C would inevitably include a link to their "Why using Tailwind C is definitely not just as bad as writing inline assembler" documentation page.

Ooh, and then the creator of Tailwind C would start selling the Tailwind C Library, with like an implementation of memcpy that you just cut-and-paste into your program every time you need to copy memory.
Google Stadia was one example:

https://www.trustedreviews.com/news/why-stadia-access-blocke...
Working in technology offers the opportunity to learn that just because something can be done doesn't mean that it should. Also, watch Altered Carbon if you're interested in how this could play out.
See Silhouette's post that is parallel to the parent. These operators don't make sense until you know the underlying concepts. Teaching the whole thing to children seems ambitious enough to probably be unrealistic.
Synaptic Health Alliance

https://www.synaptichealthalliance.com/
> Heuristics use random number generators and produce random (non-deterministic) results, is that not following instructions written by programmers?

Yes, on one level. However, the programmers are not determining what those numbers are, so on another level, no.
There's a lot of Star Trek episodes about this, the main thing that they say is it basically automatically makes a class of expendable humans who will eventually becomes subservient.
Google fixed Hangouts to work now in Firefox.
Non-Chromium derivatives are blocked as well, yes, but neo-Edge is a Chromium derivative.
Ways to monitor for cert expiry in no particular order:

1) Prometheus + blackbox_exporter https://www.robustperception.io/get-alerted-before-your-ssl-...

2) Sensu/Nagios https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...

3) Openssl in a crontab:

echo | openssl s_client -connect ${DOMAIN}:443 -servername ${DOMAIN} -verify_hostname ${DOMAIN} 2>/dev/null | openssl x590 -noout -startdate -enddate
it was never decentralised, they openly admitted this. They had 'plans' to decentralise it. The hype around this project was supported by nothing other than shills and bots, hoping to sucker in a few clueless noobs.
I think the problem that most people have is that they have no way to orchestrate multiple components, so they really want everything built into one binary.

Once you can run multiple processes and have service discovery, the need for this stuff goes away. For example, I use cert-manager to get certificates for my Envoy edge proxy. cert-manager runs continuously and updates the TLS certificates in a Kubernetes secret. Kubernetes injects the secret into the Envoy container as files, and then Envoy reads them without any knowledge of where they come from or how they can be renewed. (It could also be configured to get them at runtime with xDS / Universal Data Plane API). This is all very easy and provides infinite interchangeability; there would be no change in cert provisioning necessary if I switched to Nginx or HAProxy.

But, most people don't have a setup that supports something like this, so they really need the all-in-one thing or they're just going to say "we don't really need TLS". They get by because nothing in their infrastructure ever changes; certs are new because they require operator intervention every 90 days and that is a new experience. It is unfortunate, but that's where most of the world is at right now.
To be honest, I have never seen sports as "culture". Neither the Oscars. They are just PR events in this day and age.

By the way, hosting the Olympics does not boost the local economy. Quite the opposite, in fact, at least in many cases. They are a heavy loss and increase in debt for almost every city that did it, as well as detrimental for the environment overall. Governments do it as a long term investment in publicity.
> Hal Finney (the creator of Bitcoin)

Uhh, source??
Having a clone does not give you an identical copy of an adult person. All you get is an identical twin that is years younger and likely has additional medical problems. Why would you invest a lot of time and effort into that?

Btw: The article does discuss why you still might want to do it. It's worth a read, but it turned out none of the reasons was good enough.
If you are into tattoos this looks like it has some great ideas.
Sadly, some of those shot my GPU (not exactly the newest one), requiring a full restart.

(The dilemma of WebGL & Co: either we need better bound checking, which somewhat neglects the point of having fast graphics, or we're living dangerously.)
Yeh I guess the logic itself is being executed in the browser to alter state, but the state change is being applied by netlify
They shouldn't be blocking Firefox either, but let's be clear-- Chromium Edge makes even less sense given it's a "cousin" of Google Chrome.
Small correction. Although many people think that Hal Finney could have been the creator of Bitcoin, the matter is far from settled. He even denied it himself before he passed.
In a discussion on the usefulness/overuse of operators, I'm surprised nobody has mentioned J. Here's quicksort in J:

(($:@(<#[), (=#[), $:@(>#[)) ({~ ?@#)) ^: (1<#)

Good luck understanding that!
There are many bootstrap themes that offer re-usable components. They are cheap and some are expertly maintained. Look into Color Admin by Sean Ngu.
Very helpful links, thanks.
What a timely essay. It's hard to compare the current US to pre-Weimar Germany, but the same crises of economic value, secularism-vs-higher-purpose and excessive politicization of ordinary things discussed in this essay are major issues of discussion today.
>In fact, this is an illustration of a comparatively messy virus particle. Other viruses look a lot more regular and “artificial”.

Notwithstanding the main point you are making, why do you expect an engineered virus to look LESS messy? I would expect it to be a kludged-together frankenstein of different parts.
It seems somewhat likely to me that a human has been cloned, perhaps by many governments, and just kept secret.
Also, yes, it's the one that had this issue (presumably this is what plopz had in mind https://github.com/caddyserver/caddy/issues/1680, https://news.ycombinator.com/item?id=14375022)
It's as if one person was arguing for hard-line separation of style and content, and another person was arguing that in-line is the way to go, and then Tailwind came along and said, "Why not both?"

So now it's the worst of both worlds: an abstraction layer and dirty code.
Please stop spreading speculation, there is absolutely no evidence of a more deadly mutated version of virus.
> Canada is very socialist, their quality of life will be maintained by the government when things go south.

Canada has universal healthcare, but the "socialism" you think it has ends there. If you lose your job, you'll qualify for a few months of unemployment insurance and then you're on your own. There are no food stamps and welfare is about $800/month in Ontario and is incredibly difficult to qualify for.
I agree. To assign a priority, the PM has to know exactly what happens in context. "Severity" doesn't help with that or with any other stage of reporting, tracking, fixing, and testing.

I could see where a severity dimension could be useful retrospectively if paired with classification. For example, you could look back and say, why did we have a big spike in severity 1 security bugs in Q4? However, I think I'd rather not have the dimension available than be forced to set it on every single bug on the off chance it will help with analysis later. "I bet we can do cool stuff with this someday" is never a good reason to add process overhead. If somebody retrospectively categorizes and summarizes tickets by some dimension and proves that it yields useful information, that could be grounds for asking engineers to track it in the future.
> in for example fiction

So, say "clones" instead of "twins".
I have no experience driving a Tesla on autopilot, but as a flight instructor I totally relate to your comment about monitoring.

Same goes for when I’m in the passenger seat of a car - I still monitor. I still look left/right when turning.

I don’t know if there is any additional education involved when buying a car with autopilot, but maybe that would be a good thing to learn about the risks and limitations using the equipment.
> Bitcoin is not one of the scams with no working software I was talking about.

OK, why'd you use this example as your entire response to "how do people know who has how many coins, for a coin which has reportedly never shipped a working binary"?

Can you answer the original question instead of linking an unrelated bitcoin topic?
Really speculating people are some anonymous person that doesn't want to be identified is at best, rude, otherwise dangerous. Don't make assertions you can't prove, despite the man being dead.
This is where I ended up with this framework. It requires so much css knowledge that it is for the advanced but not expert who would be bothered by a number of things.
Because a crash is different than a button rendering with the wrong color, and although priority assessment might change with time, a crash is still a crash.

It seems that a recurrent theme in this thread is that some developers have a hard time understanding that PMs might have solid reasons to prioritize low-severity issues over high-severity issues. It's like these developers are stuck with a mindset where the forest doesn't exist and only the trees they personally have direct contact with should.be worth any consideration.
100€ on cloud service is not "a lot of computation".
Chaos theory, the prisoner's dilemma, and why math isn't boring
To have a source for replacement organs?
Psycho-neuro programming method to manifest abundance, love, money,and success
It's SV's fault for modelling terrible practices. It's also the other companies fault for adopting them.
Technology is driven by starting companies. VCs don't care about what a company does, they care about the price of the company's stock. Stock pricing is based on confidence in the value of the stock. Even if people want clones or cloned organs, nothing can be done until the slow-thinking world of finance finds a way to make money off of the ethereal premise that a company may one day do something of value.

No company will even scratch the surface of human cloning until there is at least an inkling of an immediate profit from the stock of such a company.
Fuel-cell producers jump on new hydrogen ‘hype cycle’
Spot on; you get a design system from day 1!
You know you could monitor your certs to verify that your client is functioning correctly. There's also notification emails if you provide your email address at issuance time.
10 years, with 1000 trees a month (it's a lot of trees!) make 42834 tons of CO2 (with very average calculation and constant CO2 removal rate instead of linear growth)

By comparison, climeworks would have removed 120 tons of CO2.
Decentralized timestamping is literally what Bitcoin is, there's no other way of describing it. Ordering transactions canonically is timestamping.
looks nice. I wonder if you plan to have some integration with other tools like Slack or Hubspot ?
They're saying that severity informs the decision of how to set priority. I'm not sure why that's necessary since severity is implicit in the description of the bug.
There isn't. If there are, none of them would be viable for-profit business entities like they're claiming. I can see a nameserver (like DNS) using a blockchain. Or maybe a distributed identity service can use a blockchain. These would have to function as public goods owned by no one;
otherwise why not use existing DNS or existing government IDs. This pretty much rules out any mention of "blockchain" in a for-profit company's pitch deck as ever being useful to the world.
Yes, but there are proper ways to whistle-blow.
I guess that explains why it's such a terrible game. People put up with it because it was all they had. Now we have other options, fortunately.

(I guess this comment could apply to either the boardgame, or to capitalism.)
It’s one-time and you get lifetime updates for the kits you buy.
That's clearly not always the case otherwise we wouldn't be having this conversation to begin with.

Also I'm not suggesting you make it front and centre but as it is currently there's only one mention on your landing page and it's buried so far deep it might as well not be mentioned at all. I did also look through some of the other docs and still missed it. If I missed it you can bet others have too. All I'm suggesting is that it's worth being a little more explicit about that because that will be a key detail for some people.

You mention about it being written in Go. That seems less relevant (in my personal opinion) but that's a great place to add a line saying something like

"Caddy uses the ACME protocol to automatically manage secure certificates issued by Let's Encrypt."
This is great.

I keep a list of 'High Quality Collections of Digitized Art and Archival Finds' and will add this one.

https://simonsarris.com/art-collections
StorePreviewer – See what your app will look like on the App Store
Top Animation and Motion Design Trends 2020
If you drive an expensive car you're probably a jerk, scientists say
You are not even allowed to take the organs of a recently dead body if the person did not agree to that before death. Why would you be allowed to do it to a live person?!
Surprise, you don't need hacker one to get reports. sendbugshere@company.com solves the same issue without introducing a new trusted party.
How is that better than writing your CSS manually?

My take is that it's not. It's just a convenient shortcut for those who aren't well versed in CSS.

I see what kind of problem they're trying to solve, but I think it collapses under its own weight the same as complete, closed components do - just later into the project.
I've not come across one, but 'Apokalyptenlust' is grammatically correct and describes the sentiment I think you're referring to.
MRIs depend on liquid helium, a scarce material by definition, but that's besides the point.

There is a high bar to becoming a physician because the consequences for error can be so incredibly high. I want there to be more physicians/access to medical care than ever but I don't think compromising on quality is the way to get there.
I just keep my car unlocked 24 seven and don’t leave anything in it that I would resent having to replace.
The Effect of Religious Priming on Sexism (2019)
Infix notation is preferred because the binary operator is visually close to both of its operands. The same equations as GP, but == is also postfix:

> Commutative: a b + b a + ==
> Associative: a b c + + a b + c + ==
> ...

As expressions getting larger and larger the operands are getting farther away from their operators. RPN is great for computers to read and maybe humans to write (RPN calculators). Not so much for humans to read.
Caddy is not the only one, though. Traefik had the same problem: https://github.com/containous/traefik/issues/791 So to say Caddy is "the one" that had that issue is a mis-characterization.

See also: https://github.com/containous/traefik/issues/1631, https://github.com/containous/traefik/issues/1641, https://github.com/containous/traefik/issues/1637, https://github.com/containous/traefik/issues/1636, and https://github.com/containous/traefik/issues/1632
A new study has found that drivers of flashy vehicles are less likely to stop and allow pedestrians to cross the road -- with the likelihood they'll slow down decreasing by 3% for every extra $1,000 that their vehicle is worth.

Science!