skysight-inc/HackerNews huggingface dataset:
> It's why Tor Browser restricts access to localhost by default. This problem was already predicted and considered by Tor developers back in 2014, see ticket #10419

Sorry to invoke the meme, but Opera did it first[0], in Opera 9.50 (2008). I don't have a good reference to hand, but [1] is a developer complaining about this. [Edit: [2] covers the feature in some detail.]

Opera also blocked access to private IP addresses (so there were three tiers: public IPs, private IPs, localhost; higher tiers could communicate with lower ones, so the block was only unidirectional).

IE10+/EdgeHTML-based-Edge (and I know there was some talk about blocking this in Chromium-based Edge) also blocks it, so that too is prior art to the Tor change.

[0]: https://w3cmemes.tumblr.com/post/62942106027/if-you-can-thin...

[1]: https://stackoverflow.com/questions/1836215/access-to-127-0-...

[2]: https://web.archive.org/web/20140302021701/http://my.opera.c...
Npx neo-app now supports the new main thread addons
How many generations must pass before such a site passes into being able to be scavenged for items of interest? There have never been remains found. In some waters you could find bodies but not where the Titanic sits.

Has it aged enough to fall into the same category we assign Egyptian artifacts? We have dug up remains of many societies and some are within a few hundred years of age. So it really comes down to, what is the rule?

To me it should be allowed to retrieve items from the site and if no national government wants to sponsor it then why not a private organization? if placed under proper restrictions but not outright confiscation they should be able to operate as a museum type organization taking their historical artifacts on tour so others may enjoy them
Why? Who do you think negotiates things like prisoner exchanges?
There was a recent discussion on HN about using a Tesla as a store of energy that could be tapped to help with emergency power scenarios: https://news.ycombinator.com/item?id=23178733

Apparently the capability is already there!
It is a problem right now. Look at the map [0]. Aside from some minor exceptions, the whole world is at or below replacement rates, except sub-Saharan Africa. Look at the other map [1]. Those are the places with the lowest IQ in the world. Some exceptional individuals aside, Africa isn't going to replace China or India as a source of mass high-quality immigrants. So as soon as China and India develop a bit, and as their low birth rates set in, their people will stop leaving and that'll be it. There will still be poaching of the best but there won't be mass pools of capable people willing to move in to fill the bottom of your social pyramid. What can't go on forever won't.

[0] https://en.wikipedia.org/wiki/List_of_sovereign_states_and_d...

[1] https://en.wikipedia.org/wiki/Nations_and_intelligence
Before websockets, webapp chat features—as implemented by your average web-backend programmer—couldn’t pass the C10K challenge.

Yes, fundamentally, on a technical level, there’s not much difference between holding open an HTTP connection in long-polling, vs. holding open a websocket connection.

But the abstractions presented by webserver gateway interfaces (e.g. CGI, prefork process-per-connection language-module embeds), languages/web frameworks (e.g. Ruby on Rails), and platforms (e.g. Heroku) back then, just didn’t support long polling efficiently.

HTTP backends, back then, were all built on an assumption of serialized queuing of HTTP requests—with each web server/web stack/worker thread serving requests one-at-a-time, getting each request out of the way as quickly as possible. There was no concept of IO asynchrony. Web servers were request loops, not event reactors. Libuv didn’t exist yet; nginx didn’t exist yet. The standard web server was Apache, and Apache couldn’t “yield” from a request that was idle.

And, as such, providers like Heroku would queue at the load-balancer, and only proxy a single open request to your web backend at a time, under the presumption that it wouldn’t be able to handle concurrent load. So you had to pay for 2x the CPUs (e.g. Heroku “dynos”) if you wanted to be able to hold 2x the connections open!

Entire third-party businesses (e.g. https://pusher.com/) were built around the hosting of custom web servers that were written in an event-driven architecture, and so were able to host these pools of long-polling connections. But they were freakin’ expensive, because even they didn’t scale very well.

Eventually, it was realized that the just-introduced Node.js could do IO asynchrony pretty well, and people started building explicit “websocket servers” in Node, culminating in the https://socket.io/ library. Back then, you couldn’t just put your regular HTTP load-balancer in front of your websocket backend, because your regular HTTP load-balancer almost certainly didn’t support held-open connections. You needed to host socket.io on a separate host/port, directly open to the internet. (This was one of the driving forces of Node’s adoption: as long as you were putting a Node app directly on the Internet, you may as well just put the rest of your HTTP app in there as well, and make the “websocket backend” into your whole backend.)

Sure, these days, every backend, load-balancer, and NAT middlebox can handle long-polling just fine. But we got there with a decade of struggle, and “legacy”-but-not-really code that used WebSockets because they guaranteed the semantics that long-polling couldn’t.

(I should mention, though, that WebSockets still have some advantages in the modern environment; namely, idle WebSockets are known to be idle at the runtime level, and so, unlike with a long-polling HTTP request, a mobile device can relax its wakeup-timer intervals when the only network connections it’s holding open are idle WebSockets.)
The HEROES Act will be a second round.
Polywater
Increasingly taxing work to subsidize non work has limits.
For the future, you may want to cite this link: https://www.theatlantic.com/ideas/archive/2019/08/thirty-two...

It's not about Jeffrey Epstein, but 32 interesting deaths in US prisons. The one about guards burning a man to death with hot water was... unique.
Nobody:
Microsoft: Now you can use DirectX in the Windows Subsystem for Linux!
This looks nice, I think you could increase payed users by offering an API. I wouldn't pay for this outside of work because I wouldn't need it often. I wouldn't pay for this at work because I need integration. Where I work we always need PDF to something conversions, but we also need to have that functionality integrated to our apps. We have been user pdftk, and it's been great.
> I have a weird situation with one foot in affluent California, and one foot in blue collar Iowa (Cedar Rapids). It's all over in my experience.

I wonder how weird that is. My situation is broadly similar, excepting that I'm from Missouri. For what it's worth, I wasn't aiming to call you out as being well-off and out of touch. I was responding more to the bits I thought the intermediate poster was perceiving as selfish and what not.

> Also, I have definitely thought about all of those things you've listed in regards to life planning, and would say that they definitely influence me strongly on this.

Boy, you and me both.
Mainly it's what I'm familiar with. But I did try and use other CRM's (including SuiteCRM, Airtable and a few others) and didn't find the important combination of:

1) Modern UI's I didn't need to write myself

2) Automation with and transactional atomic write guarantees

3) An extensible and scalable sharing model

Although I didn't try dynamics. I'm guessing it's a suitable alternative.
This probably connected to this post.

'DirectX is coming to the Windows Subsystem for Linux'
https://news.ycombinator.com/item?id=23241040

People think that EEE is what Microsoft might be doing in this case.
>So I don't have the time to investigate every new fad when it comes out

I'm finding this to be my main problem. I have a fairly solid computer repair/troubleshooting background but can't keep up with the layers of crap that are pasted on top of modern software.

An ongoing list of "features" being added to web browsers and how to get rid of them would be hugely helpful, but I've never found a centralized site for this topic, it's all just scattered around various tech sites.
When I went to look at houses, I ended buying a netgear nighthawk and got a sim card from that same ebay seller to test signal at potential homes.

I'll be in the North Bennington/Shaftsbury area. I ended up getting a high gain mimo antenna to increase speeds based on experience with the same setup on an island on the St. Lawrence river. Looks like from my house I should have a line of site 3.5 miles to one of VTel's points. I might have to go local once I finish the move.
If they do both they can repeat Cable! Win win!
Staring at anything too close to your eyes for a long period of time isn't good for them. If you are taking appropriate breaks, my understanding is that screen time is harmless.
> there needs to be a concern on the part of today's young people for the perpetuation of the system from which they benefited so greatly

It also seems like the system that will throw me overboard and tell me to "pull myself up by the bootstraps" the moment I hit turbulent times.
Hello, we thought about other providers as well, can you send me an email to discuss (should be in my profile)? Thanks!
> building capabilities in space, on the military side

That's a total failure. Absolute, complete, across-the-board failure of the human race.

Just a few decades ago the militarization of space was universally acknowledged as inappropriate and this was codified in international law.
" It's made a complete mockery of what has always been a silent service and honorable job"

Killing people and enabling the mass murder machine that is the military is not and has never been honorable.
The vast majority of Fortune 500 CEOs agree that business travel will fall
Dude relax. Did you read their next sentence? They are not saying that's bad or good in and of-itself, they are concerned with the consequences of that: inflation. Sometimes a point takes more than one sentence to make.

They might be right or wrong, but at least respond to what they're actually saying. Picking and choosing sentences to quote out of context is a big problem in todays discourse.
What? Half of Ubuntu's internal stuff is written in Python. They've switched to Python 3 but I've never heard of Ubuntu without Python.
> A pet peeve of mine there is my "groups" appear in a bar on the left, but a second or two after the page loads, my "favourites" appear there too pushing the original groups down. The number of times I've clicked on the wrong one because it changed under my moues cursor ...

I've had colleagues report (and seen it happen) similar behavior in Google search results.

Less seriously I'd expect this to be just lack of care in SharePoints case (anyone actually is ready to click the link as it shows up, haha...) and the result of a random mutation that created significantly higher ad click rate short term and was therefore selected in Googles case ;-)
It could be that they don't want to make it _too_ difficult for the people that are trying to do the right thing. Like companies that put simple copy protection on their games, but nothing complicated that hurts the end user (like always online junk). Doing just enough to keep the honest people honest is generally considered to be a reasonable compromise.
While sleeping and cuddling with my cats, they whispered into my dreams: Stoopid hooman, alwayz so slooow! If yooo'd got Billionz to burn, yoo'd push forward minimal.fab of Yokogwawa
and BiZEN from Searchforthenext/Wafertrain! Rrrr Rrrr Rrrr!

Courtesy of Lilly, Mieze, and Mimi.
I think the bissgest issue the Trump administration has with space is they don't have any idea how the Kennedy and Johnson administrations dealt with it. They think that Kennedy just decided one day that we would send men to the moon by the end of the 60's, but in reality it was years of discussions with NASA, largely championed by Johnson, before Johnson recommended to Kennedy that they establish this policy to put the US ahead of the Soviet Union.

Instead of this, we have the usual situation modern space exploration has settled into, some president boasts that we will do some thing and then after they left office some other president quietly kills it because its way to expensive.

What we should be doing is building coalitions with other countries to do join missions to the moon and all that, thats why the ISS has been so successful, its not just the US or Russia contributing, but dozens of countries. Not to say it could happen without the US or Russia, but the large number of countries working on it helps quite a bit.
If they broadcast them over radio, is it still a podcast? Emailed out the audio files to a mailing list? Distributed them on cassette tape? It seems to me the format is part of it. RSS or something equivalent (Atom), feeding audio files to whatever client you bring, is a podcast. Youtube videos aren't podcasts just because I listen to them in the background (though one might also have a youtube video of one's podcasts) or because I could youtube-dl the audio and listen to it. The format is what gave it the name—if you can't consume it in a podcast client, it's not a podcast. My physical mailbox and my email box both contain pretty similar things, but my email reader can't read my physical mail, because it's not email. If you send me a letter, I don't receive an email, because you didn't send one. If you publish your audio interviews in a closed platform, I can't receive a podcast, because you're not publishing one.
Hacking Salt Stack
background info: https://medium.com/@tobiasuhlig/using-js-libraries-inside-a-...
Masten Moon Rocket Has Landing Pad, Will Travel
My outsiders perception seems to be that he is single handedly creating the competition for both teams.

Is he truly that good?
F# 5 and F# tools update
Let me tell you how much productivity I got back when they took Frasier off last year.
Well actually yes, you very clearly could.

Perhaps the restaurant is in a religiously conservative community and people won't eat there with their children if the restaurant has openly gay couples in attendance. So the gay couples being in the restaurant could negatively impact business.

What law prevents this? I'm not sure there is one in most of the U.S. Twitter and Reddit's opinion aren't so far law.

So the bottom line is yes, you could make the same argument.

But I think we both recognize this is morally unfair. When you provide a public venue, or offer something for sale to the public you have certain responsibilities towards non discrimination.

The fact the people being discriminated against are people you don't like or disagree with is irrelevant to this.
I'm being pedantic, but technically wrapping from 0 to MAX_INT is still considered overflow. Underflow refers to decimal truncation e.g. by integer division.
Welcome to C# 9.0
A Hackers Guide to Job Hunting
No. There have been literal decades of effort to deploy DNSSEC, which (1) is a server-to-server protocol that doesn't protect last-mile browser lookups at all, and (2) doesn't encrypt messages or provide any privacy. There have been desultory efforts to tack some kind of last-mile security onto the DNSSEC stack, like TSIG, but even that doesn't encrypt messages or provide privacy.

Despite getting DNSSEC deployed at most of the DNS roots almost a decade ago, and to a point where companies can actually turn it on if they want, DNSSEC adoption hasn't cracked 2% of .COM, and, if you measure popular domains outside the US government, its adoption gets even worse: virtually no major platforms or tech companies use it. Those companies have security teams with people who specialize in evaluating technology and getting it deployed, and they have all come to the conclusion that what the IETF worked on to "improve DNS" wasn't worth it.

Meanwhile, virtually every major ISP in America monetizes DNS lookups for their customers. Not only that, but most real DNS spoofing attacks are either last-mile interceptions or phishing attacks on registrars. Which is to say, while the IETF was futzing around with a 1990s-cryptography signature scheme nobody is going to use, the real problem was right there waiting to be solved. Thankfully, Mozilla solved it, and in just a couple years DoH has protected more people on the Internet than DNSSEC is likely ever to.
Is opening car doors illegal if you never enter the car/steal anything?
An army of volunteer ‘elves’ fights disinfo in the Czech Republic
I've lived in Japan and a country that has Japan-like criminal justice system. The US criminal justice system way better than Japan's one. In Japan, both the judges' and prosecutions' powers are too strong.

Not like in the US where you actually have to convince a grand jury to prosecute and petite jury to convict, in Japan a single prosecutor can determine whether to prosecute or not and a single judge can decide whether your guilty or not. No judicial democracy, pretty much like the witch hunt in medieval times. Because lawyers are filled with elitism and vainglory, prosecution's arguments are almost always considered true. This becomes a problem if the case is a political one, just like in this case.

Yes, you can whine about US justice system being shitty but at least it is democratic and fair if done by law. Japan's one isn't.
For all we know, she might be a "specialist in this area".
A Brief History of toilet paper
You could buy a pad mounted generator with a transfer switch and setup monitoring and maintenance contracts. You could even get a natural gas powered one if you have natural gas hookups, which means no messing around with diesel or gas.

All of this will cost you significantly more than a portable gas generator, but with yearly maintenance and monitoring, most generators perform just fine.

I work for an electrical contractor that is a General dealer, we do lots and lots of these.
This is still using the skylake microarchitecture from 2015. I'm sure if Intel were shipping the design they wanted to be shpping it would have AVX512.
This is a little "no true Scotsman," no?

Self-identification is probably the best indicator we've got for whether a label applies to a person. If enough new people label themselves a thing, and use the word to mean something different, I'd argue the word itself has begun to change, or at least has aquired multiple definitions.

Coopting a label in the political sense sucks (see: "liberal"), but from a linguistic perspective it's silly to pretend language doesn't evolve.
Their front page doesn't look that bad to me, but as I poke through other pages, there's definitely a lot of text at "usually reserved for legal disclaimers" font size, isn't there?

I don't use Sendgrid, so I don't know what their admin panel is like. I recall that some of the worst remaining offenders in the "gray text on gray background" category are SaaS dashboards...
They can do it this way and only use a single PCIe lane; 2.5g works over existing cat5e cable plants and 10g doesn't; their 10g and 40g controllers cost $40 and this one costs $2?
Well in that case, Microsoft is really targeting developers.

VSCode, Typescript, Github, WSL, the inevitable tie into Azure...

I wonder how this all ends.

We can short circuit some of the inevitability I guess, still holding out for this:
https://panic.com/nova/

Looks like Deno already adopted Typescript, but the world doesn’t have to revolve around Github.

AWS and Azure will keep each other honest.

Edit: I’ll add that I really really don’t think Microsoft wants to proselytize developers into it’s ecosystem just to make apps for Windows. I really think they are going to try mobile again.
I discovered the answer to this question a while ago when working in an uber eats competitor. Drivers continue to drive for uber long term because they literally cannot do much else.

Take toronto, ontario for instance. I've spoken to hundreds, and recruited hundreds of drivers, and ~85% of them speak very little english, have extremely few skills, and are in a position where they have to pay bills NOW, and can't afford to invest in themselves. Its sad, but they're trapped in a vicious cycle.
You'll be delighted to know that there's an increasing number of people leaving the US behind as well, or at least making substantial plans on what to do if they need to leave in a hurry.

Official numbers from 2019: https://news.gallup.com/poll/245789/record-numbers-americans...

Anecdata suggest this has significantly increased in the last year, and especially in 2020.

We live in what amounts to a failed state. There's still some hope it's repairable, but it's rapidly dwindling, and Jared's crown prince role is a large contributor to that dwindling.
In a round, the delay is under your control. If you start singing the first line when you hear me sing the second one, you're actually starting to sing at (second line ts + $latency). And then I hear it another $latency later. A round could work if your call software compensates for this and delays your singing for me until the next round "entry point".

That is, you hear my "Gently" and join in with "Row," but it's not played back for me until I start singing "Merrily." This could work, but as you can see, it would need some clever delay management.
I suspect he turned it down due to being having connections, being hardworking and talented enough for $$ to likely never be a serious issue for him.

4chan's founder and countless others have a similar mentality.
It wouldn't be an issue if OSes forbade non-UTF-8 paths...

It's the unfortunate case that we have OS environments that are usually, but not always, UTF-8, and there's no clear, reliable indication of whether or not UTF-8 is to be expected.
> This looks very interesting, thanks.

I'm glad you like it.

> Side note, any particular reason for having `user-select: none` set on your blog? That seems somewhat counterproductive for a blog with code examples...

Ah -- that's not intentional. Thanks for letting me know, I've pushed a fix!

I developed the hugo theme for something else where it made sense (a portal) then converted it for use with my blog and missed that.
Check the bank EULA. You might have agreed to the scans without knowing.
The browser is basically the reinvention of the operating system. Its huge advantage is that it's built on the assumption that the user is trusted and the code isn't. In contrast most operating systems are designed on the assumption that code is absolutely trusted, but the user isn't. That's why rights management in Windows is concerned with who's allowed to access which file, while rights management in Firefox is concerned which which website is allowed to access the Webcam.

The big disadvantage of the browser is of course that there's huge competitive pressure, and most users prefer usability over security. Keeping things secure without asking the user about their intentions every step is a huge challenge (see also Windows UAC, which struggles with the same problem).
Every browser DoH implementation checks certificates.
And yet people never learn.

Ed Colligan CEO of Palm on rumors of Apple releasing a phone.

“We’ve learned and struggled for a few years here figuring out how to make a decent phone, PC guys are not going to just figure this out. They’re not going to just walk in.”

The main things Taco complained about:

No wireless - the iPod was already popular before the iPod Touch

Less space than the Nomad - even though later iPods had up to 160GB of storage, the most popular ones were the Shuffle and the Nano that had little storage.
He was under house arrest and his residence was being actively surveilled so it was quite a feat just to get him to the airport. As I recall, one of the factors that made the whole thing possible was that the authorities had allowed him to retain one of his three passports. That mistake proved very costly.
If you're interested in "other things" that can be done with KVM, take a look at the Solo5 "hvt" tender: https://github.com/Solo5/solo5/tree/master/tenders/hvt.