skysight-inc/HackerNews huggingface dataset:
You're right, today. But as everything, stuff that starts as very advanced tools only at the disposal of big agencies, with time ends up being reachable for more mundane users, or in this case, criminals.

So, in a way, it's probably just a matter of time that the kind of silent hack depicted in the Amnesty article is used for attacks targeted towards more general victims. I don't look forward to the day that just by reading an unprotected HTTP site is enough to get my phone compromised as part of a widespread scamming effort from someone trying to get credit card details or banking stuff... but it will propbably end up coming if we don't move all together for a more secure WWW.
Sabine Hossenfelder has a great series of videos about both dark matter and modified gravity theories (https://www.youtube.com/watch?v=FN2d2cmi_Gk, https://www.youtube.com/watch?v=2VNcDoLNJk8, and https://www.youtube.com/watch?v=468cyBZ_cq4). I think she does a very thorough (and relatively easy to understand) job of explaining what both of the types of theories are, the motivations for developing them, and their strengths and weaknesses. The first video is about dark matter, the second is about modified gravity (mostly focusing on MOND), and in the third she talks about how she thinks it makes sense to accept both. Even if you don't agree with her position, her videos are still very informative for anybody who wants to know more.
The web had "view source" at the very beginning, and with simple HTML many people could pick it up and publish.

Netscape displaced Mosaic, Microsoft saw an existential threat and invested heavily in IE. Microsoft knew Netscape 3 was the product of an overgrown FORTRAN programmer and couldn't be retrofitted to support Cascading Style Sheets; Netscape 4 anticipated today's web but expected to deliver it in seven months instead of the 14 years it really took.

Internet Explorer gained market share as Netscape stalled; I was terrified that I wouldn't be able to browse the web on Linux or Solaris (the later turned out to be true!)

Netscape tried to give away the code, but it was so bad the community said no, write it from scratch and that what became Firefox. Google made Chrome and the three-way race was on.

Marketing to software developers is like leading an animal by the nose. I am a Firefox enthusiast because I fear Google dominance. If it is easy for me to run our product with Firefox I will do it all the time and leave it to my tester to find problems in Chrome. In other places it is not easy and you don't get help because they don't accept tickets if you don't use Chrome. Because Firefox has sold to me, you have a great Firefox experience on the site I work for.

Although the dev tools allow users to tamper with web sites, they also are a defense against web malware. A Javascript app can track you, annoy you, mine cryptocoins, steal info, but the dev tools let you catch it in the act.
That's factorial, not emphatic notation.

Care to write the proposal?
It's not a matter of overriding everything or nothing. Any crisis is going to involve some level of standard operating procedures not working, even with the best planning (though the US through out planning beforehand). Effective action requires a chain of events all happening and some central institution has to look at the process as a whole because 9 out of 10 things happening well can easily not be enough.
Not if you need any CPU performance to speak of. Given the misleading "vCPUs" that we are sold, I took some time to benchmark several major cloud providers and the results were… worrying: https://jan.rychter.com/enblog/cloud-server-cpu-performance-...

BTW, I run my SaaS on real servers from Hetzner. I figured I won't need instant auto-scaling anyway, and if you provision with ansible it doesn't really matter if it's an EC2 instance or a real server. What does matter is the price and the performance: I get servers which are significantly faster than anything you can get on AWS, and for a much better price.

To be honest, I do not understand the drive towards AWS. It makes sense in micro-deployments (lightsail and/or lambda, when your usage is sporadic) and in large deployments that need dynamic scaling. But it does not make much sense anywhere in the middle.
Disagree. I learned Git after working with SVN for years. Knowing SVN put me at no advantage whatsoever. If anything, I had to actively get SVN habits out of my brain to make the most out of Git (e.g. SVN trains you to avoid branches because their merging is a hot mess, but in Git, branches are everywhere).
If it's really simple and you want a community of like-minded individuals, PICO-8 and similar are super fun: https://www.lexaloffle.com/pico-8.php

Definitely more for hobbyist projects, it shares lots of the features that got me into programming in general.

Features:

- the .png image aka "cartridge" also contains all the code to run the game.

- built-in tools for editing code, music, sound, sprites, maps

- community of shared games where all the assets of the game are immediately editable by the players. A game hacker's platform.

That last point can't be overstated. Hear some music you like in a game? You can modify the score and add it to your game. Playing a game but somethings not quite right? You might be able to do the necessary edits with your game controller. Want to "cheat" your way past that last boss? Edit the boss.

It's the sweet spot between playing games and making.

The more serious answer is that it heavily depends on your skills, the goals of your game, and your constraints. Knowing nothing about any of those, Godot seems like the clear winner.
P.S. reflog is your best friend
I'll second that, TortoiseGit has been a lifesaver, especially its git log display, which is very details and lots of actions can be done directly using it by right clicking on commits.

I'm a visual person, with a horrible short term memory, and I never got along with the git command line, or with any other command line tool. When I need something slightly more complicated I google it.
I'm not saying that's what the Inca did. But it's how you arrive at a microscopically flat surface plate.
Context R-CNN: Long Term Temporal Context for Per-Camera Object Detection
This is really cool, definitely see some of the polish come out since the last version published here.

If you wanted to host this indefinitely for $12 / year, you could buy a domain like hackernewspaper.com or something similar, and host the frontend using a static HTML/CSS/JS bundle on S3 + CloudFront + Route 53. For reference, here's a CloudFormation (infrastructure-as-code) template I made for that stack here: https://github.com/tinydevcrm/tinydevcrm-api-docs/blob/a4d29...
Progressive enhancement! CSS isn’t quite up to the task of arranging things the way I wanted so I’m using Masonry.js for layout. (This is also why there’s a progress bar while the page loads—it needs to wait for all the images so Masonry knows how much space everything takes. I’d like to cache the images and pre-specify their sizes but haven’t gotten to it yet.)
Thanks for speaking up. I don't know how to fix any of this, but I do know that we need to value each other's experiences, and that can't happen without us sharing them for what they are.

Hard as it is for you, and easy as it is to say for me, I do believe your uncomfortable experiences are changing things for the better. Every VC that hurries out of a room may not have invested in your company, but you just pushed a commit to their mental blockchain that will stick with them forever. Another promising young black entrepreneur is going to get his (or her) shot _because_ you didn't get yours.
> COBOL was like so many 4GLs:

COBOL was one of the original 3GLs, and appeared in 1959. The concept of 4GL wasn't even formalised until 20 years later in 1981 [0]

[0] https://en.wikipedia.org/wiki/Fourth-generation_programming_...
Software enters postmodernism
Over the years, I've seen a lot of people claiming that they understand what Fielding meant and trying to explain his ideas. Then I've seen him dismiss those explanations and examples. What I would have loved more than anything about REST is to see an implementation of those ideas by Fielding himself in some practical project.
To clarify, the $12 / year would be the cost of the domain name, running the stack should be close to free.
> I see it being called an overload, but I see no alternatives..

Some APIs make rather poor use of HTTP, using it as a glorified RPC mechanism. Done poorly, this can make caching hard or impossible.

A fair number of self-proclaimed "REST" APIs seem to do okay on the HTTP verb part of things, using GET/PUT as HTTP intended, but they insist on naming resources by "IDs" or something, and to then fetch the named resource, require the user of the API to manually construct the URL themselves. This is antithetical to what Fielding's REST proposed, which is that the URL serves as a universal mechanism for naming resources, and that end clients don't need to know anything about how to construct URLs, because they can just follow the one they are given. (And the server can do whatever it wants with URL layout.) Fielding himself notes this on his blog[1],

> A REST API must not define fixed resource names or hierarchies (an obvious coupling of client and server).

For practical examples of this, the Azure API is significantly hit or miss here. Some references to other resources are in URI-references (this is a good application of REST) but sometimes it is just a string name and you have to know, out of band, how to construct a URL to that resource.

I'd recommend the ACME API as the best application of REST that I am aware of.

[1]: https://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypert...
This has always been the premise/promise of DevonThink, but I never found it quite hit the spot for me – I end up imposing organisation on it, and then we're back at your original complaint. Some users do absolutely swear by it, though.
It is super pretentious to list REST as a requirement on job postings when it always means writing web APIs is required.
Author here. I actually wrote a discussion of the Endless Frontier Act: https://benjaminreinhardt.com/the-endless-frontier-act/

I agree that the ARPA model is not suitable for all (or even the majority of research) and the act doesn't inspire confidence that shifting the NSF towards a DARPA-like model would do well.
Back in the early days of the Internet, I met some of the Bell Labs people working in that area. What they didn't like about an IP-based network was the jitter. That was totally unacceptable for voice. They wanted something with reliable clocking, and had come up with Datakit. That sends all packets for a given call over the same path, in order. You don't open a virtual circuit unless all the nodes have enough bandwidth for it. Telcos still use Datakit, and Asynchronous Transfer Mode is a successor to it.

I never dreamed that people would accept the degradation of telephony to 1 second of delay jitter with random dropouts and echoes.
Seeing this post in print newspaper style is a trip.
didn't know that - thanks
You raise an interesting point that the author shies away from addressing.

Can you elaborate on the phrase "becoming more trust-based" ? Do you mean that decision makers in this landscape rely more on the strength of their connections than their individual understanding?
Quick read on how target=_blank is unsafe and the secure way to do it
In New Hampshire fields with poor soil are sometimes colonized by the invasive Autumn Olive (Japanese silverberry). I knew they fixed nitrogen, so I figured I would cut them down later, and I created a chicken coop next to one to shade it until I replaced it with something else.

It turns out not only does it fix nitrogen, it improves the yields of nearby plants (in this case blueberries) and its fruit is edible to both me and the chickens. So it gets to stay after all. I'm glad I looked it up.
I haven't, as I said I haven't worked with node except for that project a few years ago. I know webpack is not a requirement but the alternatives I could find at the time were even more complex (that may have been due to my lack of experience). I think directly importing dependencies from their URLs looks simpler from a new user point of view than using a package.json or similar and having to decide between several very similar project managers (npm, yarn, pnpm, etc).

I read the ts-node GitHub readme and I think it has the same friction as node for me. My main issue has been having to either clutter my global (root required) space or doing a local install and having to mess with either PATH or one of the alternatives to executing locally like npx. From what I have seen Deno is just a download and you are ready to go single executable, from an usability point of view nothing beats that.

I am mostly speaking from my little experience and ignorance so correct me or suggest better alternatives if you think I'm wrong.
Obsidian - https://obsidian.md
2. Stroll - Open source - https://giffmex.org/experiments/strol...]https://giffmex.org...
3. RemNote - https://www.remnote.io/homepage
4. Amplenote - https://www.amplenote.com/
I had the impression nobody ever really read his work.

I wrote a few API articles last year and people love them. I didn't know crap about API development when I wrote them, I just read Fielding's work and summarized it.
Why are you so motivated by high pay, that you fear harming yourself? Just go for companies with a simpler interview process and attempt FANG after a couple of years of practice
But they have coexisted at the same time haven't they?
That sounds to me like a Push setup would be preferable here. There are a number of Jira add-ons that can run code in response to system events like a new comment. That way you should be able to avoid the concurrency problems completely.
A lot of this is penny wise pound foolish. Managed services cost more, but they provide more. RDS is just such a simple slam dunk for what you get for the cost. How much does it cost to spend 8-20 hours a week handling maintenance and upgrades and scaling for these services? I guess I'm bitter working on a project that was built with all sorts of crazy custom deployment stuff too conserve costs that's a total OPs nightmare. Moving from Redis on EC2s to elasticache was such an upgrade. We constantly had little issues here and there.

Edit - Alsocontainerize your app from the start so that if it does take off you can slam it in ecs or k8s.
> Mozilla email + calendaring

So Thunderbird with Lightning?
Fascinating! Just to keep the conversation going, I'll argue that HN's current format works much better for me.

I appreciate newspaper formats when dozens of stories have roughly equal appeal to me, and I get value out of lingering on each one for 5-30 seconds before moving on.

HN, for me, is intensely bimodal. The bare-bones listing of headlines lets me skim very fast past the 93% that don't quite work for me -- and dive into the 7% that are today's gems. Those then deserve a close read and many minutes in the comments.

So I'd be very frustrated if HN switched to newspaper mode. But everyone's tastes are different, and having both formats available would be cool.
Ask HN: What is Hacker News's business model?
I know HN is owned by Y-Combinator. But, as a popular and homogeneous platform there must be many possible ways to earn from it. So what is HN's business model and how its value is measured?
"Classes are only a fraction of the in-person university experience in the USA today."

It's ironic isn't it. What would the cost of purely attending classes and exams be? $2,000 or $3,000 a year?

But no, if citizens wish to educate and certify themselves (from a reputable institution I might add), they must purchase the full package including all the bells and whistles that come with societies, events, parties, support, guidance councillors on the side.

It's really time to introduce a "I just want to learn and sit for exams" package for those unable or unwilling to pay for the extras.
how is it free?
I used to work for a company doing SBIR work. We finished a contract underbudget returned the surplus money and got audited because of it.

I don't know all of the accounting details, but SBIR has some leeway (because its supposed to be research) but it's not perfect. However, you are allowed to use surplus money to fund development of things which are related to what you actually put in the proposal/contract. So if you have a $100k contract, and meeting the requirements only required on the $75k, you should and do spend the rest of the $25k on extra features. But you have to spend all the money.

I think the real thing about SBIR money, is that three people get phase 1 money and only one or two will get phase 2 money so you really have to deliver in order to get selected. Then if you get the phase 2, there basically isn't phase 3 money, so you better get to a product that is ready to be sold. Finally if can't show on paper a return on investment (e.g. nonSBIR funding or revenue from sales/acquisition) they cut you off from the SBIR spigot. So the incentives align with getting work done.
> And yet America managed two world wars just fine.

Sure, defense is one of those things that is definitely the purview of the federal government.

But for many things that the feds haven't managed to figure out how to control yet, the tenth amendment is very much in play. For pandemic response this is definitely true. It was true in 1918, remains true today. The states are in charge.

Given recent history (in particular, as it relates to your 40%), I expect that the states may actually start asserting more authority, instead of continuing to cede it bit-by-bit to the federal government. Which perhaps does lead to your final comment ;-).
I said it was like 4GLs. And perhaps the creator was ahead of her time? :)
Three Health Benefits of Tomatoes That May Make You Live Longer
I'm also wondering about this, hopefully someone can give us an answer.
That's a good point. University labs are more nimble than a military contractor. The PI at a university directly does the work with their students (in some big labs, it's arguable that the PI manages the students that directly do the work). Whereas the contact at a military contractor is an accounts person, with lawyers and managers between them and the people doing the work.

Cost-wise, universities usually charge an indirect cost rate of 50-65% (which many people improperly think it means is the percent of the grant money taken by the university), whereas the military contractor charges an indirect cost rate of 120-200%.

So basically, about 70 cents of every dollar spent at a university directly goes towards the work (and trains students as a side effect; and as a triple bonus the cost paid towards student's tuition has no indirects on it at all), while only 30 cents of the dollar spent at a military contractor goes towards the work (and probably much less towards the people actually doing the work).
HTTP traffic would be unencrypted, so everyone (esp. on Wifi) could record passwords etc. flying around. With HTTPS, you at least need to MITM the connection to do that. If you establish trust in some other way (cert ID printed on the device?), the connection is secure.
I’m not sure why you’re conflating entrepreneurship with Silicon Valley-style VC.
I did this in my university teaching with (in my estimation) some success, even with large cohorts (1000+). But it takes a lot of design effort and friction with university administration. One extra element was to incorporate reflection into the project specification, teach students how to write reflectively and to assess it.
You seem to be hitting the nail on the head with regard to seamless UX. I’d gladly pay to support something like this, but the lock-in / “what happens if you go away” problem is real and holds me back from investing all my knowledge and time. Short of an actual federated system, a self hosted option OR just markdown export / backup of an entire database would completely alleviate that for me.
I created a comparison myself, because I couldn't find one. It was for my specific workload, which is CPU-intensive, but could be useful for others, too. An important find was that what we are being sold are not "cores", but "vCPUs", which usually correspond to hyperthreads, on slow Xeons. Which means no performance to speak of if the machine is loaded, which it usually is.

My conclusion was to rent physical servers (I use Hetzner) and get great performance at a fraction of the price.

https://jan.rychter.com/enblog/cloud-server-cpu-performance-...
Giving an Internet-connected program autonomous write-access to system-critical filesystems is not considered good practice in production environments.

Much better to have a separate central cert management system that handles renewals and pushes the certs outwards to the DMZ systems.
Principal Investigator, basically the lead researcher
When it is useful to even just one person, it is useful.

Open Source doesn't need 'masses' in order to 'be successful. A lot of people make the mistake of applying generic economics to Open Source and related communities.

A federated mastodon or Lemmy instance is successful the moment one or more people use and enjoy it, nothing more. It does not need to have huge audiences to advertise to. It does not need to have Big Data to mine and sell. It doesn't need to pay employees, offices and bonuses. All it needs is one person enjoying it. Or two people having a meaningful interaction, to be successful .
> It doesn't really matter what the dissertation says. Because we don't follow dogma. REST has evolved.

No, "REST" has devolved. REST from the original dissertation is more flexible than any "REST level-X" APIs you'll see in the wild.
who bought the domain (hackernewspaper.com) name? i hope it's the author of the script.
> Was anyone at Acorn paying attention to BSD?

Acorn sold BSD derived RISC iX workstations (the hardware was just rebadged Archimedes) from 1988.

https://en.wikipedia.org/wiki/RISC_iX
Little bit off topic, but I generated a zettelkasten from C2 Wiki. There is a zip file that you can download that has all the wiki entries from 2015[0] in html format. Used pandoc to convert to markdown and then did some sed scripting to fix the links and remove some boilerplate. I can open it on Obsidian and see that OnceAndOnlyOnce wiki entry has 1,470 backlinks. It's little bit slow and I can't open the Graph view, but otherwise it usable. Tried to open the folder with VSCode and then expanded backlinks sidebar. It resulted in "EMFILE: Too many open files". Is Foam using some custom logic for linking files together. I saw in inbox.md some auto-generated text for dealing with markdown links.

What I learned is that one folder with 36000 files is not a good idea.

0 - https://archive.org/details/c2.com-wiki_201501
I can tell you one thing about SBIR. "We have occasionly accepted new researchers"

Really? SBIR is about blue sky research and funding blue sky ideas, potentially to risky for VC. It should be about NEW ideas and not about funding for contract research of buddies. And for SME and not for "independwnt" spin offs of large corporations.

In China, I can get you funded.
It is the same in Germany currently, although the spread is well under control, most education institutions are still highly skeptical of reopening for the semester after Summer.
The way plex does it works great at scale.

It requires people to care more about "self hosted" than "PM says this will centralize user access and allow us to collect data and better monetize"

I'm not knocking either model. They both work (technically) but you need to understand your market and what works better for them.
Had to look it up. It's another social media play like Gab that uses "free speech" to mean "pro alt right." Every one of their product screenshots is of a pro-Trump story. EDIT: https://parler.com/auth/access
You are not missing anything. I wondered about this myself, then started using physical servers from Hetzner for my SaaS. Quite happy with the results over the last 4 years.