skysight-inc/HackerNews huggingface dataset:
This is a problem with the IKE implementation. A secure IPSec configuration on OpenBSD is a single line, and you can copy+paste it from the excellent man page.

Part of what makes WireGuard "simple" is that it doesn't support any kind of key management--i.e. PKI. Instead you're expected to copy keys around manually. IKE is the most complex part of the IPSec software stack but in many ways the most important part.

Ironically but entirely predictably, people are using homegrown scripts and proprietary third-party services to replace the missing key management aspect of WireGuard. When these turn out to be insecure, or at least the weakest link in the chain, nobody will ever blame WireGuard, even though it will be a predictable consequence of using WireGuard.
The place that invented it not using it would be huge
"Who?"

About a billion Tolkien fans.
what questions you ask during the interview?
Minor correction, you make it sound like 2% of 20% which is a .4% fatality rate. The total fatality rate is 2%
It is a better time than two months ago.

My take is this: at the beginning of the Trump administration, P/E ratios were at the high range of "normal". There is another factor of four you could get in the "bubble" range but that is a special phenomenon that happens once a generation or so.

Today you always have people asking "is this a bubble?" because we remember the 1990s, but maybe by 2040 or so it something people might be ready to believe.

Under the Trump admin I think the stock market has gone up without visible means of support, but it has not gotten into the extreme bubble territory that we saw in the 1920s, 1960s and 1990s.

Thus now is certainly a chance to get in, but I can't be too excited about the market now.

I suggest you get a good ETF like QQQ.
Is this what Enlightenment used to achieve that?
Abandon ballast. Usually entertainment can go first. No more TV shows. Minimize to the weekly movie and listen to audio books on the commute.
I used to buy things like that in bulk, back when I lived near a co-op that offered them. I haven't seen something like that in a long time, though, and I wonder if it's even still a thing.

I suspect that the real problem with packaging reduction is that it favors a consolidated product stream. One of those bulk "fill your own containers" of shampoo probably took up the same amount of space as 6 or 8 different products in individual packaging. Which in turn means that you can't offer your customers a dizzying variety of scents and textures and customizations for your hair type and brands and varying levels of organic or biodynamic or being insert_ingredient_here-free or whatever.

And everyone buying the same shampoo - making it effectively a commodity - probably does a number on your ability to boost profits through price discrimination, too.
> which the company maps via crowdsourcing and Street View cars

So, if I hide my SSID then they wouldn't be able to find it?
Is there any precedent for a company to pay damages in a combination of money and goods. For example paying N dollars in legal fees, and issuing new phones to those affected within some filter criteria?

I ask because the only people who tend to benefit from from issues like this are the lawyers involved. Besides the damages being potentially punitive to the company responsible and maybe preventing recurrence of the same issue, nothing really improves for the people personally affected by the problem being sued over.
It was probably behind finicky and heavily restrictive symmetric NAT (very p2p-hostile) but with IPSec ALG in the NAT, making it work fine with IPSec but horribly with anything else. This is common in "enterprise" settings and hard to diagnose without direct remote access to run NAT characterization tests.

Symmetric NAT basically breaks everything that doesn't use a simple client/server hub-and-spoke networking model.
I learned about DDG bangs from HN comments, for example.
Has anyone else noticed how deceptive the Paltrow family has been?

1. Bob Paltrow - Pleaded guilty to felony tax evasion over his liberal use of the junk mail company to finance his lifestyle. (was sentenced to six months in prison). In March 2019, roughly 700 employees of a company factory in Ciudad Juárez were told to take a three-day weekend, only to return to an empty warehouse

2. Gwyneth Paltrow - GOOP.

3. Rebekah - WeWork.
FTA: "giving her titles like “strategic thought partner” and a staff she charged with such inane tasks as disassembling her phone, painting all the pieces white, and reassembling it again."

Boy, if that isn't a red flag, I don't know what is.
Builder is not actually open source

Blocks is alpha

Grapes is ok, but the repo maintainer is not the greatest
You can send data to N hosts by only sending it once, rather than N times.
I persist and wrestle with it. You eventually get better at it and figure out how bags actually work.

They actually have tabs built in designed to help you open them. If a bag is particularly stubborn, move on to a new bag.

Some cashiers have damp sponges or similar to help them open bags without licking their fingers because they aren't heathens. They are the rare exception.
As an adult, I'd definitely say that at some point we passed from "plenty of options" to "so many options it's actually worse than having fewer", at least when it comes to entertainment and information consumption and such. Probably passed the tipping point some time between the 70s and very early 2000s at the latest. But I'm getting old enough that that might just be a preview of the "back in my day!" stories that are surely in my future.
Product Management

Location: San Francisco Bay Area
Remote: Sure
Willing to relocate: No
Résumé/CV:https://www.linkedin.com/in/vemurikiran/
Email: kkvemuri [at] uh [dot] edu
But it's more complex than this. Would it increase as much without paying 1/3? Were short-term gains optimized at the expense of sustainable business?
This essay, my favorite of those I read last year, has a lot of explanatory power for cases like this:
https://meltingasphalt.com/crony-beliefs/

TLDR: People (including you and me) will believe false things if it increases or maintains our social status.
Pretty sure you'll get downvoted whether it's BTC, BCH, BSV, ETH, etc. HN isn't cryptocurrency-friendly.

None of these are viable outside of crypto-advocates.
Gusto | San Francisco, CA + Denver, CO + New York, NY | Software Engineers & More! | http://www.gusto.com/careers

Gusto is a modern, online people platform that helps small businesses take care of their teams. On top of full-service payroll, Gusto offers health insurance, 401(k)s, expert HR, and team management tools. Today, Gusto offices in Denver, San Francisco, and New York serve more than 100,000 businesses nationwide.

Besides the brand-speak, we’re also a really focused, hardworking, and empathetic team that’s growing both our business and our headcount in tandem. We’ve got openings in San Francisco, Denver, and New York for Software Engineers, Product Managers, and Designers, as well as the occasional remote opening. We’re really focused on senior folks right now (think 7+ years of experience, the more the better) who can help us continue moving our product and codebase forward and deliver value to customers. You can see a bit more about us at our Careers page (linked above) as well as KeyValues (https://www.keyvalues.com/gusto).

We’re not much for talking about valuations, but our last one was $3.8B, and we continue to grow that number at a really fast pace (two years ago it was ~$1B). All that means for new folks to Gusto is that we exist in a fun middle-ground with a large, established customer base as well as a strong track record of growth and plenty of upside ahead. We’d love to tell you more.

Some roles that we have open right now:

SWE, Product (San Francisco): https://boards.greenhouse.io/gusto/jobs/1337386

SWE, Product (Denver): https://boards.greenhouse.io/gusto/jobs/1337391

SWE, Product (New York): https://boards.greenhouse.io/gusto/jobs/1712558
I second this. I had to zoom way in so I could scroll between the animations for undisturbed reading.
All in on Tesla, elon's gonna invent a cure any day now surely!

Seriously, the market is now back to where it was six months ago. Consider what that says about people trying you to tell you to "buy the dip now that things are cheap". You've got two choices... Buy index funds slowly and consistently regardless of the news, or learn to pick decently priced individual stocks based on your own fundamental analysis.

Ignore anyone who tells you to use technical analysis, they're an idiot, and if you venture into reddit/wallstreetbets, you are screwed.

Good luck.
A new Go API for Protocol Buffers
Little intro please ?

The best way to tell about Webcodesk is to let you try it in action.

So instead of an introduction, I would recommend you to complete the tutorial in the online version of Webcodesk. Click on the link below.
Was that 31percent purchased or seized?
Resistance increases due to microcracking (fatigue) of the copper leads from thermal cycling.
Those things literally put up some text and an occasional gif and a scrollbar.

It's unreal, our industry has lost its mind.
If you want max number of LEDs you have to use HUB based LED panels. They are way cheaper. But harder to control.
The critique against VPNs is exactly right, they're such garbage compared to the standard we otherwise hold SSH, TLS etc to, and the access granularity is too wide, and there's no transparency on how wide the access is configured from VPNs. And they're very often on the wrong side of the it dept vs devops responsibility split so often misconfigured.
Again, playing devil's advocate a bit...

At first, the prices in the local market here were normal and people were buying hundreds of respirators and masks.

As prices have been driven up (almost exclusively this profiteering and parasitic markup, big retailers have not increased prices), people've been buying closer to what they feel they need rather than trying to stockpile -- when the mask is $2, it's easy to grab 50 or 100. When they're $25 people are only buying 1 or 2.

Gross as it is, this is serving some good -- it's helping to distribute the available inventory over a wider population, instead of concentrating it with the few people that are stockpiling them or exporting them.
Shouldn't we want this to actually end up in a landfill? That would be at least some kind of a carbon sink.
Hello Dmerenda.

What can I say mate, other than thank you. Hmm, no I can actually say more, haha. You've been there and done it so many times, worked with so many, that I am genuinely getting what I believe to be, is an emotion, haha.

Seriously now, thank for your kind words, and sharing your time with me and the feedback at the drop of a hat. Much respect mate. Ace.
Why? Those are people who couldn't get a better job anyway.
As I said in the article, I rejected binary search and similar approaches on purpose.

In general, I rejected all approaches that operates on a sorted file. That's simply because keeping the file sorted is slow, when you need to insert more data in the future. With B-tree approach, you have fast searching, as well as, inserting. That's the reason.
They definitely wouldn't be able to achieve these kinds of results with React Native. It obviously adds a lot of unnecessary overehad.
Half-Life: Alyx (first VR gameplay)
Why? You can use it to develop apps without any restrictions.
SEEKING WORK | Remote Only (located in Atlantic Timezone, ET+1)

Feeling a bit overwhelmed with all the features to build? Want to feel more confident with your customer interviews, feature prioritization, and ship more software faster? I can help.

I help technical founders improve their product management processes to deliver more customer-focused software, faster.

Key PM tasks I help with:

• Getting your team aligned on Product strategy (What should you build and why is it the first-best choice for your customers?)

• Running effective customer interviews

• Feature prioritization

• Wireframing and writing lightweight requirements documents so what you're building isn't a moving target

• Implementing and analyzing product usage data

• Increasing trial to paid revenue by improving onboarding UX and soup-to-nuts onboarding email campaigns

Experience:

• worked with over a dozen CxOs over the past decade, including the CEOs of Predictable Revenue, Headphones.com, and DocSpring, and brands like ESPN.

• I've been building and shipping software professionally for 19y and consulting remotely for 11y

Recently I helped a highly technical founder improve his PM tooling, provided a system to gather and use customer feedback, and shared a few different models for how to think about prioritization. He found me on HN and here's what he had to say:

"Kareem provided tons of really helpful advice and helped me get set up on the right tools, so now I feel like I now have much more clarity and direction."

Clients like my approach because it's pragmatic, thoughtful, and focused on business growth. I've run three B2B SaaS businesses (and sold two of them). I see technology as a leveraged tool for growing a business, not an end in itself.

Email: hn@reemer.com
On another note, infinite scrolling pages start using more and more memory as you scroll, which eventually requires closing the browser tab.
Why Nvidia’s GeForce Now has become so controversial with game developers
Freedom Robotics | San Francisco, CA | Onsite

Freedom Robotics (https://freedomrobotics.ai) is hiring a Senior Front End React Developer to join our SF team!

We’re building a software platform for modern robotics and are looking for developers who are passionate about building scalable applications and also care deeply about user interaction, product, and design.

Apply here: https://jobs.lever.co/freedomrobotics/3ea606ad-0f58-41de-8b5...

Additional roles: https://www.freedomrobotics.ai/careers

If you have questions, please contact sophie@freedomrobotics.ai.
> There are also numerous devices that support Display-P3 color space but currently have no browsers that support Display-P3 in CSS

I wonder if someone could build WebKit for them.
I don't know try to read parent's comment again and see it's about GUI?
That's less of a carbon sink and more of a kick-the-can approach (no pun intended).
Not to mention energy conscious for when you're not attached to the grid.
I wonder if the advent of VR/AR will eventually result in some form of chorded keyboard input gaining widespread popularity. AR/VR devices are often used in situations where you don't have access to a physical keyboard, and some standalone VR headsets already feature early forms of hand tracking which could trivially allow for simple chorded input once they are a bit more refined.

Its possible people will just get used to typing on simulated virtual keyboards, like they did for on-screen keyboards on mobile. However, simulated QWERTY input in VR is significantly worse than it is on mobile, since unlike on mobile there's no tactile feedback at all; not even the rudimentary feedback of your fingers touching a flat surface. Whether that added inconvenience is enough to overcome the friction of users needing to learn a whole new input method to type with though is uncertain. In the short term I don't think it is, but long term? Hard to say.
> The mistakes Apple made were:

> - Designing the phone hardware with barely enough battery capacity, such that some moderately old phones might not be able to keep working properly when the batteries decayed.

Indeed! This was (and still is) very much a design flaw. People like to say, all phones have this issue, but where are the examples? Also, look at the iPads which are just scaled up iPhones. They don't have this issue because they don't suffer the same design flaw.

Apple put a bandage on the issue and people throw praise at them.
This is the P Zombie (Philosophical Zombie) problem. You're going to have to do much better than just state as a fact that you're right to convince everybody else. After decades of debate about this topic from top philosophers I think it's very unlikely that anything novel, much less decisive will come from a Hacker News sub-thread.
SEEKING WORK | USA | REMOTE

Hey there. Are you interested in a coder who is comfortable writing VanillaJS and browser native Web API based applications?

I've been coding for the love of it since first laying eyes on a programmable device decades ago, I've been banging out code in the web industry just about as long.

FAV TECH: Linux, Modern JavaScript, HTML5, CSS3, Node.js, Docker.

Reach out, I'm excited to hear about your project. I'm open to unconventional arrangements.

resume384@rbx.email
I was setting up a Raspberry Pi (3B+) at the office and wanted to connect to it from home.

Researching various approaches lead me to a hn thread recommending Tailscale, signed up, worked for me & now I’m a happy user and planning to get 2 additional new Pis tomorrow (still deciding between the 2G and the 4G model).

edit: I regularly recommend things I find useful to others (especially those that took me some effort to discover) independent of whether they are bits of insight (try x instead of y), open source software or for profit software.

Just thought others might find this useful as well, that’s all.
My issue with all the small scale stuff such as bags and straws is that we have limited time to try to correct the issue, and bags and straws and recycling aren’t going to make a lick of difference.

It’s the 30 mile commutes, single person occupied SUVs, flying for vacations, and living driving distance to everything in suburbs and exurbs causing exponentially greater than necessary usage of fuel to move mass that is the vast majority of our problem.

The only solution to the issue is to increase the cost of fuel. If we don’t accomplish that, all the other efforts are a waste of time and energy. If we do accomplish raising the cost of fuel, then everything else will fall in line, including costs of disposable plastic goods which will go up and cause people to consume less.

Except, of course, this is politically untenable because of all the investment assumptions requiring 10% ROI to meet debt obligations.
surprising that such a long writeup about the wework debacle doesn't mention Masayoshi Son holding founders at ransom to take his Softbank money.

Why would anyone refuse such money? Not sure what's Rebekah got to do with the WeWork debacle.

(good to know all the star kids connections. IMO, most rich white people in US can do any financial crime and get away with it)
Ask HN: Should HN have a /politics page to discuss on political items?
I don't mean for this to sound patronizing but that's because your compatriots (Americans) expect and want this kind of support. I know this from working in support for a long time and handling customers from all over the globe. Nowhere is the entitlement and expectation for "beyond friendly" service as problematic as it is for US customers.

And it's not just B2C, this type of behavior is creeping into B2B interactions as well, to the degree that technical consultants and specially trained staff are expected to act in a vapid and thoroughly "insincere" manner as well, anything else is seen as unprofessional.

In most parts of Europe, it's another story entirely. If you know what you're doing and you're doing it well, most people understand you're just doing your job, and they will not expect faked enthusiasm or insincere empathy. In fact, in many markets a dash of cynicism will actually get you closer to the customer.

Of course, this is generalizing and there are Americans who "act European" and vice versa, but the minefield of attempting to be sincere to a US customer is like nothing I've experienced anywhere else. It's almost like an angebergesellschaft where some people are just waiting to pounce on you for your unprofessional behavior, knowing that they will be backed up by management because noone wants people to be unprofessional, right.
False positives mean you're throwing away genuinely unique items that hash the same. If you use a 256 bit Bloom filter to process a billion items, you'll get exactly 256 results that are indeed unique.

The rate of false positives you require out of the data structure is key. If your program is correct with a 20% false positive rate, you're golden. If the goal is more or less 0, look elsewhere.

The author addresses precision, but not in a way that questions whether a Bloom filter is indeed the right tool for the job.
> Personally I never had problems with Firefox breaking pages

My experience has unfortunately been different, but the issues are mostly limited to "modern" over-engineered web apps. 90% I encounter one though, checking the console reveals that it's using non-standard Chromium-specific features (whether a FF counterpart exists or not) or just has a lazy browser == "Chrome" check instead of proper feature detection.
I wouldn't be surprised if shipping plastic containers and then incinerating them consumes less petroleum and releases less carbon than shipping glass containers twice.

Perhaps with standardized containers and regional distribution centers? Sort of like the old-school beverage bottling plants, but for all variety of consumer products, and not tied to just one brand or class of product. I've no idea how you'd get such a thing bootstrapped, though.
This does seem promising. I am doing a school project with react & nodejs - I will try using this and see how it goes.
The reasons might come in handy later when you're trying to mentor younger colleagues and you're trying to explain why things are the way they are.
Well I have messenger lite on Android and they, as the parent says, "ask permission to listen to your microphone". Presumably they do voice chat, which needs that permission, surely.
I was just going to mention numpy, or.. libc.

Sure, if AMD hardware is much better than Intels, an unoptimized libc might run better there. That’s not the point.

The point is that a libc optimized for AMD could run much better than what it does today.

Improving the performance of low level libraries for Intel hardware is trivial because there are a lot of great tools that help you with that.

If I had to improve the performance of some library on AMD hardware, I would get some Intel hardware and tools, improve the performance for Intel, and then “hope” that this improves the performance for AMD as well.
How the Swedes are tackling loneliness [video]
It's because you're posting in the flamewar style, which is what we're trying to avoid on this site. Also, it's super off topic—two generic hops away from the OP.

Programming language flamewars are a special case and not in a good way. Many of us lived through seeing those take over online communities in the past and reduce them to scorched earth. That's one of our motivations for wanting to keep HN from that fate, or at least stave it off a bit longer: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

Actually your comment could be a good contribution with a little editing. The first link seems good. The second is too flamey.
> If D&D is sufficiently complicated rules wise that it is actually more fun to have software take care of that so you can just focus on the tactical combat and scripted story choices, then the video game is probably your best bet!

No kidding. I've been writing a WinForms program that is basically a combination character progression tracking, inventory management and basic battle system for Star Wars Fantasy Flight Games.

Why? Do we not want the person-to-person experience? Hardly! We need more wetware space for strategy and thinking of creative ideas, so we need to free up the parts for calculating what number of ability vs proficiency dice and what talents may mess with the roll etc.
> One of my biggest pet peeves about VPNs is that they hijack all your network traffic. They can be configured not to, but our customers and security controls like NIST 800-53 SC-7(7) typically require that they do.

VPN is dead because some customers want you to route the internet interfaces of all machines through the VPN server.

How does this even make any sense?