skysight-inc/HackerNews huggingface dataset:
It's interesting how bubbles work.

In my world, everyone has a story about how an obscure but interesting to surveil service that they were involved with was DDOS attacked and immediately cloudflare sales was showing up offering to mitigate the attack for free by MITMing their traffic. ... Even showing up on the IRC channels of open source projects. I've personally witnessed it three times.

Even if it weren't for the fact that it would be gross incompetence if the NSA hadn't compromised cloudflare up, down, and sidewise since it's such an attractive target, the surveillance based sales-leads approach used by cloudflare has convinced a lot of people that they're engaging in a protection racket. Not just technies, either-- I've heard from executives who pay for cloudflare service that they think is a protection racket but they pay anyways because it's just a cost of doing business.

[I don't personally think it is, but I think that cloudflare is unethically creating a situation where some customers will believe this and pay as a result.]

It's such a lovely setup for a state attacker. Step 1. Compromise cloudflare (either by getting insiders into it, or by hacking them). Step 2. DDOS attack the thing you really want to monitor. Step 3. Cloudflare sales shows up and helps onboard the victim onto your borrowed surveillance platform.

People think that kind of stuff about AV companies, but at least AV companies aren't showing up within minutes of an attack saying "Gee, isn't it so terrible that you've got a virus. We've got a cure for that!". At least AV companies mostly don't send your data all back to their servers where god knows what happens to it.

Even where the problem is usually just a volumetric DDOS, the cloudflare standard solution is a full encryption unwrapping layer-7 MITM.

DoH without cloudflare would also gather complaint but the fact that the default centralized panoptiresolver is cloudflare contributes a lot to many people's discomfort.

So, I don't think cloudflare has amassed much goodwill at all, and that's even before getting into how their 'protection' made much of the internet unusable behind tor or other anonymization proxies.
It is disabled by default in Firefox ESR and enterprise environments are already using GPO to manage it anyway.
Sure, but killing 2% of the world population instead of closing down a couple stores also seems bad.
Conservatism: not even once.
AFAIK, when one turns on DoH, Firefox's trr.mode defaults to 2. And that's the default behaviour most would want except for the ones using pi-hole et al.
> Having that data to form a feedback loop is priceless

I'm surprised to hear this, although I'm glad it works for you.

I wear an Apple Watch Series 3 night and day, which reports HRV. I've found it to be pretty difficult to draw conclusions from since the measurement stays pretty much the same even when significantly changing lifestyle/habits. Over the past year I have went pure vegan (went down 15% body weight), went from exercising 0 days a week to 6x 1 hour high intensity, went from chronically sleep deprived to 7-8 hours / night, and HRV has been exactly the same.

Perhaps the accuracy of the apple watch isn't so great compared to what you're using. My measurement tends to fluctuate between 25ms - 40ms throughout the month with an average of 30ms over the entire month for the past year, despite the dramatic lifestyle changes mentioned above.

I've noticed Apple Watch's VO2 max measurements are also -very- unreliable. Mine has decreased 25% in the past year despite being at a dramatically higher cardio fitness level.

Curious if anyone else with an Apple Watch has had a similar experience with these measurements. I really like the idea of using them as a feedback loop, which is partly why I wear an apple watch to begin with, but hasn't quite panned out.
Clearly, by buying insurance from AllState.
I have a PopSocket on the back of my iPhone 11 and routinely use the camera with it one handed. To be honest, I couldn’t imagine using a phone of this size without the PopSocket.
Right, but that's just an argument for more applications and lower level networking stacks to support DoH.
In all reality, your Enterprise should own the domain externally. What happens if one day a configuration flag is flipped and you're no longer resolving internally the domain?

If you have a problem with Cloudflare, go setup your own, it's just BIND9 with some SSL certs.
Good thing I didn't say that, then. What I said was that we must look at what's natural and decide which bits require amplification and which require mitigation.

And of course saying that hierarchies should be mitigated is far from unreal. It was the central message of the people who started America. They put a great deal of effort into checks and balances on power both at the federal level (between the 3 branches) and in having local, state, and federal governments, none of which have a hierarchical relationship. They put a strong emphasis on individual rights, which are counter-hierarchical as well. And let's not forget the freedoms of press and political speech, first among the Bill of Rights, which is very much a check on hierarchy.
Data is getting to be a bigger component, but that was driven primarily by esports betting (another area I've had some experience in, coincidentally). Data, in general, is under-utilized by almost everyone and the few 'real' data folks I've met have the habit of missing the forest for the trees (there's not exactly a tremendous wealth of coaching experience in esports, so the number of folks who could do the coaching and implement/build new tools for that purpose is near-zero).

It's pretty hard to go straight from DATA -> ACTIONABLE COACHING DECISIONS

It's much easier to go from COACHES INTUITION + SUPPORTING DATA -> COACHING DECISION

I'm not aware of any other coach (but there probably is some) that has the technical skills to build the kind of tools that would be required. Bear in mind, most games don't actually give you all the data you'd want to look at. That said, there were a few folks who made a killing in esports betting for a while.
You should only use a domain you own or something that isn't routable. You can't blame FF for that
To my dear American,
Let's watch South Park episodes 200 and 201.
75½ Bedford Street
The awesomeness of the httptest package in Go
Tech Colonialism Today
Viewed from here, Rust has far less penetration than Python did in (say) 1995. I see more Julia than Rust, for example.

Whatever its benefits, Rust remains quite obscure for now.
> makes many concessions to avoid gratuitously breaking these things.

Or to look at it from another perspective, if you do this then in configuring the browser to accept it (typically, adding a private CA as trusted) you agree that you broke the browser's provided security promises and are happy without them.

In principle this can be safe if the middlebox you use has its finger on the pulse (usually dubious) and you're applying security updates to the middlebox as you would a browser or other outward facing software. So far I've never seen one I'd trust.
> To answer the GP comment, betting the house on Dart for the UI doesn't seem like a strange or risky decision in that light.

Yea. Before using Flutter, I probably wouldn’t have agreed. After using, I can’t disagree at all.
A Mindset for improving the product development workflow
this is simple and clean, nice work
On Monday, 200 million kids in China started the semester online (in at least a minimal form): https://www.washingtonpost.com/world/asia_pacific/in-china-2...

"The Ministry of Education on Monday introduced a 'national Internet cloud classroom' supported by more than 7,000 servers and designed to cater to 50 million elementary and middle school students at the same time. Lessons cover 12 academic subjects, including 'moral education' and 'epidemic education.'"
or The Fox and the Hound
The UK is a bit weird though because of its “unwritten constitution”, which acknowledges that the Queen’s power is in fact very limited (to the point where she doesn’t even publicly express opinions). It mostly works due to the specific history and culture of the UK.

TL;DR Politics is downstream of culture.
I meant the control signal, not the audio signal. The audio stays analog, but the CV once sampled into a digital word can be packed together with other controls, moved around without fear of losing accuracy, and makes trivial for example to record and play it.
Running Online Services at Riot: Part VI
That’s what nextDNS offers (basically pihole in the cloud). And that only works by hitting a specific subdomain or endpoint on nextdns.io.

If you’re hitting cloudflare, it’s just hitting the regular endpoint so no user identifying information.
TransferWise has a robust "no bovine manure" approach. I've used different kinds of services from them over four years, and they have been consistently excellent. I make sure to tell so whenever I talk to them, and politely make a note to not lose sight of the valuable things that customers are happy about (transparency, competent human support).

And I like it that they charge a decent price. I have a general allergy to "gratis services", especially in finance-related things.
It's a Google Pay feature, but it only works up to the "no CVM" limit, which varies by country (but is usually something like $20-$50 or the local currency equivalent).
Looks to require (yet another) custom IDE. Is that the case?
We just got the first confirmed case in Switzerland today: https://www.telegraph.co.uk/global-health/science-and-diseas...
Oh God... In India you can write anything you want. Press has no accountability.
I picked up this one on craigslist, Northern Light Technology Boxelite, Light Therapy Box. The effect is enough that I bought a smaller Verilux touch model for work, but it's a third of the size (but much slimmer so it'll fit on my desk in the office). Haven't remembered to bring the smaller one to work, but I'd imagine I'd need more time in front of it.

The big one I have is the 4th one on this page.
https://nymag.com/strategist/article/best-sad-lamps.html
Interesting that in PHP days, mixing logic and markup was taboo, and now it's all the rage.
Very interesting product, thanks for the links!
I agree that left-wing authoritarianism is as bad as right-wing authoritarianism. But thinking that the only alternative to hierarchical power is chaos is going to be one sort of authoritarianism or another.

As I explain elsewhere in this thread, one alternative of hierarchical authority is carefully limited, distributed power. There are historical examples of it working pretty well for hundreds of years: https://news.ycombinator.com/item?id=22415807
I don't know much about JSX internals but to me it feels a lot closer to HTML than Vue templates do. It feels a lot more natural to create multiple elements by mapping a list than it is to use v-for
Norilsk Nickel’s Tokenization Platform May Catalyze Russian Crypto Legislation
That was an issue with .dev and then google acquired the TLD.
DoH is an open standard. DoH is also better for the 99% of users who don’t care about DNS resolvers and use their standard, shoddy and privacy invasive ISP provided one.
Hindu nationalists are hateful violent supremacists who remove citizenship from Indian Muslims

The above statement is NOT true. This is mis-information.
This might get lost in the flood of comments, but I'm still very much a night owl. However, I don't find it difficult getting to work at 9AM and making it through the day anymore. Really the largest change for me was just not doing as much after work.

I used to work on projects where I'd be up anywhere from 1AM - 4AM. I really hated to do it, but I started a new job with new responsibilities so I had to be on top of my game during the day. It REALLY makes me yearn for a 32 hour work week because now I'm missing out on the side stuff I used to do.
And Vue's weird, non-standard quasi-template attributes don't?
A Custom-built G4-based workstation, running Mac OS 7.6.1
I have a Sony Xperia (something ZXZXZXXZ232...) Compact.

The CPU etc is in league with the large phones, but it's small. A double press of the power button opens the camera, and there's a physical shutter button on the side of the phone.
Really interesting stuff. I didn't realize that breeding could show meaningful results as quickly as 2 or 3 years through modern techniques. I think I'll have to read up on some of the older techniques along with looking more into the limits of at-home CRISPR (and probably waiting years until it is feasible).
I was trying to refresh my memory of the BWT algorithm for compression the other day and stumbled on a guy doing a tutorial on how they use it for gene analysis/searches. One of his assertions was that suffix trees and BWT aren't that far apart, and it has me wondering.

Compressing text and searching text are both about identifying patterns. How much R&D have we done on trying to do both at the same time? Is searching for text in a compressed file in log(n) to sqrt(n) time a solved problem?
Editorialized title, please use the title from the article
Neat! I rarely mess with my prompt but actually now that I've seen this seeing things like CPU especially in a development context could be quite useful.

Also, it would be great to see more examples.
I also have an older model of that. What I found however is that if my back is turned to it when it starts brightening up its effect is greatly diminished. It simply doesn't have enough power to brighten the whole room.

Does the newer model mitigate this issue?
> or procedures are sufficiently lax.

...or effective procedures would toss human rights into the bin. Client-Attorney communication secrecy and visitation rights are one point, body cavity searches and visitation rights for close relatives of inmates another.
"moving forward" doesn't help anyone. Standards and more importantly, implementations count.

In every DoH/DoT discussion there is someone who mentions ESNI, but without major level support this is a vague promise. Of course DNS encryption is still useful even without ESNI.
The fundamentals are about positional elements and strategic principles.

For example: Relative value of the pieces, Control of the center, Pawn structure, Tactics, Initiative, Tempo, Opposition, Keep the position balanced, Develop multiple ideas/areas (strategy), Control open lines (files/ranks/diagonals) and crossings
I am having the opposite experience. I am running into quite a few developer websites and blogs running on what appear to be one-off homegrown platforms that lack RSS.
Wasm is already supported natively by clang.

Binaryen is an optional optimizer that you can run on the emitted wasm, to make it smaller (either manually, or a toolchain may integrate it for you, like emscripten or wasm-pack).
The JavaScript Thread of Execution, Visually Explained
Pretty much. The cool kids have their heads in the clouds, but still can't be bothered with correctness, reliability, debuggability, etc.

Nothing new under the sun.
This matches my experience completely. I've never even been offered a session on legalities. Almost universally, my only prep for interviews has been someone leaving the resume on my desk, usually the day-of.
Looks like people are also working on block lists that work with pfBlockerNG and pfSense, ex:

https://old.reddit.com/r/pfBlockerNG/comments/d3p1gf/doh_ser...
I share your disappointment in what seems like a downward slope in audio latency and jitter on modern hardware. My old AMD Athlon 64x2 with a Sound Blaster Live 5.1 was more consistent than my modern Core i7 workstation with a pro/prosumer audio interface.
With a real bank, you can walk into a branch and speak with the person at the counter. The IRL dynamics alone make it much more likely that your issue will be addressed. That said, I use "traditional" banks and fortunately have not had issues that couldn't be resolved on the phone.
Current prediction is that by 2040 EV will be about 20% of the global market share while total number of cars will go from about 1 billion now to 2 billion then. So there's plenty of room to grow for conventional engines.

Mind you the large car manufacturers don't make the lion share of their income in Norway or Sweden where environmentally conscious wealthy people buy Teslas. The lions share of the future car market is the developing world.
Might this action invoke the Streisand Effect? [1]

[1] - https://en.wikipedia.org/wiki/Streisand_effect
One of the wildest statistics I have seen from all of the fallout of this scandal is the fact that Clayton Kershaw had thrown 51 breaking balls and got zero missed swings. [0]

I can't believe this didn't stand out sooner to analysts or if it just got glossed over. I still think hitting a round ball with a round bat is one of the hardest if not the hardest things to do in sports. And to not get a single swing and miss on a pitch that is around 70 - 80 MPH and breaking around half a foot is insane.

[0]: https://www.reddit.com/r/baseball/comments/f7w3yq/kershaw_th...
> How?

Running a public DNS service allows Cloudflare and NextDNS to provide faster and smoother DNS updates to their B2B customers by avoiding third-party DNS resolvers and caches.
Meta is weird.

Say you have a game with various weapons. Each weapon has attack power, attack speed, and weight. If everything is balanced right, there could be no singular optimal weapon.

And let's say that the best considered weapons are all of a certain weight. They do the most damage in the least amount of time available.

Playing the metagame would be recognizing the game everyone is playing is using those weapons as best as possible. And then choosing the knife because it lets you run faster than everyone else. And your strategy becomes knifing people in the back and running away before they can fire back.

Then more people catch on to the knife strategy, because the best players are using it. Now most people are using knives and the game is all about maximizing run speed.

So you start using the pistol. It's a very slight hit to your run speed, but you can still fire back on anyone who knifes you in the back. You start just capping knifers left and right.

More people catch on. Pistols beat knives. As more people become pistol wielders, knifers get worse. The game is all about pistols now.

Until someone realizes that shotguns and rifles are only slightly slower than pistols, but do way more damage. Basically, everything of a certain weight is just good when facing a lot of pistols. So the game comes right back around to the start.

This is different from in-game strategy. In-game strategy would be planning routes and knowing how and when to cover. Meta is out-of-game strategy.

Like, investing in infrastructure, technology, etc is all war meta. It lets you approach the situation in ways your opponent isn't thinking about. You can make their strategies during the war irrelevant.
So the Atlantic/Hellen Lewis consider it a negative that non-violent and mentally healthy people aren't housed together with violent and mentally ill ones ? Isn't this basically what the US prison reform advocates want to see their system make its way up to ?
That C code has a bug where the inner write loop writes the same portion of the buffer after a short write.

The Rust code, by contrast, slurps up the entire file contents into a buffer before writing it out. If someone is going to write code that way why even bother with a low-level language? (This "memory is infinite" mentality is something I've noticed in other Rust projects, even major ones like mio.)
Fighting existing power structures is exhausting and stressful. Most people just want entertainment to relax, not fight existing power structures.
I wonder what the implications of DoH will be for TCP-over-DNS ...
Yeah and hacking is impossible unless software developers turn a blind eye or procedures are sufficiently lax.
Well Google Docs editing is fully custom, including the selection and caret. So it must be possible.
I stand behind that claim.

There is law proposals that will effectively accomplish this.
Dev Social Badge – Going Open-Source
I've never had aws hand over anything under a tenuous legal argument. Github bent over and found the first reason they could. I'll pay my money to AWS first, because it doesn't compromise my business.
In a first, judge rules Instacart has misclassified its California workers
I think high deductibles are an excellent choice for those of us who do well financially. I do that myself. But I should note that 40% of Americans can't handle sudden a $400 expense, so it doesn't work well for everybody: https://www.cbsnews.com/news/nearly-40-of-americans-cant-cov...
If you configure a personal NextDNS URL as the DoH provider then unsurprisingly NextDNS will know that URL was used, and personalise things accordingly.

If you use Firefox's defaults but pick NextDNS from the list, you don't get personalisation as NextDNS has no idea who you are.

A nice thing about DoH here: For DNS over TLS NextDNS has to hide the configuration ID in the hostname, which as a result is revealed in SNI, but for DoH they can put it in the path and so it is encrypted like everything else.
Internally I have one camera watching the main paths in my house, with the idea of catching video evidence in case there actually is a break-in. That is the only internal camera I will ever have, though - and I'm completely open to removing it and turning it into an external camera.
I think the question is wrong so no answer is going to make sense. Parts of life are indeed a competition, like work, but in those limited domains it’s easy to tell who’s winning - it’s who’s making the most money. Happiness doesn’t even factor in there. If you include your whole life, happiness matters big time, but then it’s not a game or a competition anymore.
So, the US government should pass a law that would, I don't know, fine or sanction some company because they _didn't_ release some tv show or movie? In a jurisdiction the US doesn't have any control over? That in itself would have some weird first amendment issues.
I think, it's a means of fighting the eventual complexity of Haskell types. When you cannot write your boilerplate code yourself any longer. But then the solution is also a cause of your problem.
The recurring problem of Linux on Thinkpads is Nvidia graphics drivers. If you avoid the Nvidia option you should be ok.
I still look forward to it, lets see.
No, the article didn't say that at all.
I believe Google Docs implements it's own text layout entirely from scratch. Sure, you can do that, but that's a lot of work, and it doesn't perform particularly well.
I wonder what the implications will be for TCP-over-DNS, which besides bypassing firewalls, can also provide anonymity in a different way.
Mozilla has previously noted that Cloudfare is contractually obligated to keep the traffic private and not monetize or share it. That's not perfect, but without a law requiring it that's about the best you can get in the U.S. (assuming the contract has teeth in the penalties it imposes).
In my opinion the byproduct of first principles thinking is precisely the opposite of meta : you wouldn't get a meta, but several metas for the same game, since you built your conceptualization from the fundamentals which are established truths.

Metas seem to be built around constrains, limitations, exploits, or other forms of disruption that are introduced in the game in a cyclical fashion (new rules, new laws, new markets, new medium, new tools, etc).
Thanks for posting these. I'm putting some time into preparing my family for any potential quarantine situations here in the US. These guides are aimed at policymakers and government officials. Have you, by chance, found any practical guides for what individuals can do to increase the resiliency of their households? I assume this is all very similar to having a well-stocked earthquake kit (which we do have), but I'm curious about any disease-specific preparations.