skysight-inc/HackerNews huggingface dataset:
If he isn't trying to get "startup rich", and really just wants some extra income, just knock on the door of every mom & pop shop on your local main street and offer help with their web site. You'll find a few takers, and that starts your portfolio and network. You won't make great money on such things, but you'll start to get some folks who need simple projects - a script to copy data from email into an accounting system, for example. So he can start to write software professionally, and add that to his portfolio.

It will take time. The first few projects won't pay much. But that is how you start - with small projects. Then you ask the people who couldn't afford much more than a website with a couple scripts if they know anyone who needs help. And you work your way up to bigger companies. With bigger problems. And bigger budgets. Eventually, you'll see a pain point that multiple companies have asked for. Write software to fix the pain point. And expand that software into a business.

This is exactly how successful "lifestyle" software companies are built. Do small things until you find the bigger things.
I just mentioned this article to my Vietnamese partner, and got a lengthy story about how the modern chicken came from SE Asian pheasants, which are often referred to as "jungle chickens," as taught 30+ years ago in primary school.

So it's pretty clear that there are generations of children who were well aware of the connection, too. There must be something hidden in the details that would raise this study to the lofty level of "landmark."
This is a tangent, and I apologize. Is there any good infrastructure for creating self-signed TLS CA/host certificates these days for people who don't sysadmin full time (grok OpenSSL)?

I would like to create a self-signed CA with a name-constraint for certain internal (sub)domains, and have my browser trust the CA. And have it sign end-host certificates. And have httpd use those certificates (or certificate chains) such that the end result is a trusted HTTPS connection I don't have to click-through Advanced every time.

Is there a collection of PKI software that makes this remotely easy to do? OpenSSL objectively does not.

I have a good understanding of public and secret key cryptography as well as hash functions and other primitives, but I don't understand any of how PKI works — it's just crazy complicated for what it seems to do.
Re-upping this blog post (sadly overlooked when first posted to HN) which asks the reasonable question 'why not just use Godot for general-purpose applications?'

https://medium.com/swlh/what-makes-godot-engine-great-for-ad...
Yeah I think it would. I don’t use them literally all the time, but multiple times a day yes. Also, just having noise cancelling on with no music playing is a nice experience in the supermarket for example.
So if I wanted to make a simple 2d game, should I go with godot, pygame, or a JavaScript game engine?
The course looks very phenomenal
I might buy it since SEO is really important as it gets you to the right audience
If Joe Blogger can setup LAMP, he can setup ACME. If Joe can't setup LAMP, Joe will use a web host that does all of it for him including HTTPS. If Joe picked a host that's incapable of securing sites, Joe needs to switch to any of the dozens (if not hundreds) of competitors that can get this right.
These days, it's harder to set up a website _without_ SSL/TLS. If you're buying a domain name, they'll likely offer free HTTPS. If you're setting up a site via Shopify / Wix / etc, it'll use HTTPS. From what I've seen, sites without a valid certificate are either ancient and no longer maintained, or are built by devs learning the ropes of web development and haven't bothered to set up certbot on their server just yet.

There was already a fetishism of commercial/institutional security, and LetsEncrypt gave it quite the blow. Now companies that you used to have to pay a yearly fee for a certificate are offering their certificates for free.

It does stink that corporations have to be in the middle in the first place, but that's due to the difficult problem of "trust." I'm not sure it's possible to decentralize it, besides some sort of blockchain solution that would be unworkable in the real world.
I mentioned that no greater precision than a day of work is required. The point of the question is not precision, but who and possibly how.
In a world of rapidly increasing inequality FOMO actually is the rational response. Most people are missing out.
That’s a great advice I have been blogging since two years now and I’m afraid if I monetize that people will stop reading it as I know devs hate seeing ads
Agreed monetization is really hard on open source software
The essay makes some astute observations, advances some interesting theses, and then bloviates all over the place, making judgments of questionable provenance.

More interesting is to see what aspects of it can fit the HN milieu. How does the bureaucrat and the corporate genre fit the startup scene and the tech industry?
Contact info?

Put an email in your profile?
Work at Zuckerbergs philanthropy isnt easy since it means working for Zuckerberg
I like Deno (v8 is written in C++, not Rust, for what it's worth); the question is just: is it doing the same work that the encoding/json benchmark is doing? What are we comparing?
My laptops run Windows but I do all my development in Linux VMs via Powershell's built-in SSH client.

My biggest ask on Windows is for a native mosh client. There aren't currently any.
Makes sense if it's constructed on demand or even periodically fast enough to catch that.
I have seen people doing that but I’m afraid people below 18 might start using that
Paul is one of the lesser known players in the Cambridge tech story, and deserves greater recognition.
It's worse,plus it does shady crap like sniff browsing history on other browsers.
Godot.

The sprite, tilemap and animation blending functionality alone are worth it, just grit your teeth and put up with gdscript (edit - or use C#). And it exports to the web anyway.
I’m confused. Don’t we use crispr all the time on other organisms? Mice, drosophila, etc. wouldn’t we already have seen this?
Is there a reason that site needs to be HTTPS? It doesn't have any user login feature, and it's read-only. So what are the arguments for making it HTTPS?
Mostly just the same place, though. Even the terrain around it is probably very different.
Everything That They Didn't Tell About Potential of Decentralized Finance (DeFi)
One thing many of the big players do that Godot doesn’t is require telling the user they used that engine. If you use Unity, you need to show the Unity splash screen unless you pay the big bucks; Godot requires none of that.
The Aeron is the tried and true classic. The Cosm is an 'updated' version with different back heights, and The Mira is an easier to clean plastic back version. I swear by my Aeron that I picked up at a used office supply store for $400 along with a new desk.
Does DARPA work(anymore)? The first example of how it works was it's "badass program managers", but all of the program managers I've met have been, to put it lightly, idiots. One of the worst was the PM in charge of the entire subject research division. It turned out, they had a graduate thesis that was entirely observing an instrument artifact (showing bad jugement). Not too long after I interacted with them, there was a minor scandal in the community because postdoc who struggled with reproducing the effect and complained about the results was abused and railroaded by the PI in charge of the project. Shortly thereafter the PM didn't seem to be a PM anymore.
The mechanism SSH uses is called Trust on First Use ("TOFU") and is closer to what used to be HTTPS certificate pinning. In this scheme, certificates never expire, and if they do, clients warn about the unexpected change in certificate.

It is different from the CA PKI system, where the client trusts any certificate signed by a trusted CA without prompting the user at all, and doesn't prompt the user if the certificate for a site changes.
Man i really waited for long to have another 'OS' based on Linux :(
That’s phenomenal with that kind of money you can easily travel and live in countries like Bali Thailand and etc . Even afford good lifestyle there
I think we can take for granted that Trumpism exists somewhere in the political sphere of authoritarianism. This is Hacker News; the hacker ethic is fundamentally anti-authoritarian. So, yes, I believe Trumpist political articles—this one ends by drawing a clear analogy between Trump and the more appealing class of roguish small business owners (which Trump never was, having inherited his money)—particularly insidious ones that use a lot of words to put an intellectual veneer on Trumpism, do not at all belong on Hacker News.
There are different kinds of estimates used for different purposes. When making an estimate, know what it's for and if it has any value at all or can be omitted.

Very high-level estimates can be used to decide whether to do one project or another. Here we're both guessing time/cost as well as expected value. If unclear do some work to make better guesses of time/cost or expected value.

Estimates can also be used go co-ordinate with other teams if there are scheduling dependencies. Communicate early and often. Do some work to validate estimates. Complete tasks in a way that makes other estimates more accurate. e.g. deploy the smallest feature to prod with all steps completed rather than 100% of scope 10% done. If it's an external team, make your best guess, leave some room and aim to be early because you won't be.

Estimates to fill plan/fill work weeks are mostly a waste of time. Instead identify what's important, break them down into small parts with the immediately sequenced parts in higher resolution and do as many as you can in a natural order.

You can still schedule tasks expected to be completed in a cycle but it's a direct assessment as in "I can do items 1 & 4 in the next two weeks" not an abstract each item got a team-agreed T-shirt size and you've been selected to do these ones that add up to 10 days.
> If you want people to take it seriously, you need to provide evidence.

That really depends on what "people" you are talking about. There is a considerable market for fantastical misinformation about history, especially when the fantasy reinforces things we want to believe about ourselves today.

I have personally been led down a few story paths purporting to be historical but turning out to be nothing more recently constructed and idealized fantasies of the distant past.
This is useful to see, thanks for sharing. It mirrors my own experience. I came into this profession with a lot of energy, enthusiasm, and an open heart. Then I had a couple of experiences that triggered "The Great Noticing" in me. I haven't really been the same since, though I've tried to keep an open heart/mind and lean against the wariness that's come with experience. But mostly I try to stay away from SF, the PNW, and their geographically dispersed cultural outposts.
I have this on the 2600 and while the 2600 version doesn't use vectors, it's still one of the best games on that platform.
His database also is.

I think it's highly unprofessional to use a setup like this in production. Looking at his product, it seems like a product whose downtime has a big impact on their clients.
> Will this ever be part of the TLS spec?

I'm pretty sure TLS itself doesn't specify anything about certificate lifetimes. I could be wrong; I have actually read it, but as sibling comment notes, TLS is used in a lot more places than browsers, including mutual TLS between random services that don't use an external CA at all.
Cashless Casinos
Or... It's easy to altruistic when shareholders are happy with stock performance. When the stock be a tankin', altruism gets a spankin' (best rhyme I could come up with).
I worked for a fintech company until 2018 and learned a lot about the payment ecosystem. At an industry event in 2017 (or maybe early 2018) I discussed with an industry veteran about a bunch of things and he mentioned wirecard, saying that nobody believed they had a profitable business and advised to stay away from them. I didn’t pay too much attention.. until last week!
I regret that does not elucidate. Does linear mean additions only? Or non-exponentiation, or something else?
This all makes sense. But I would have imagined my machine can perform several hundred copies in the time it used to take to do one. Haven't memory speeds progressed a fair bit?

Such that I agree it would be better to do dirty tracking and sending just a small update to the screen. But the tricks to do that should be a lot easier than they used to be.

The gpu thing in my Mac is amusing just because if I run intellij, it will cause my machine to crash. If I run emacs? Not so much. Even if I am stressing the machine with several compiles or some silly pandas data frames. If I enable gpu accelerations in my browser? Expect instability. My video chat program just boasted that they use gpu for video. And for the past two weeks, it is common for the entire video system of my machine to hang during a video chat... Literally get a crash screen.
That's not how I judge likelihood at all. If you were to say that there is more mathematical wiggle room for other explanations, I would be more likely to agree, but simply having to change models has no impact on likelihood. That thinking would make Quantum Mechanics, Special Relativity, Natural Selection, or Genetics unlikely. Your argument could even be used to explain why it's more likely that the earth is flat because that's the intuitive model.
Basic math packed in one neat page
Honestly i love that
Since as a one man operation you are owning the entire process compared to working for a company where things are done by other people too both have its pros and cons
There are two options:

* Manually install a root certificate, which is a confusing process for most end users and a non-starter for anyone who cares about security. (Imagine walking your parents through the process.)

* Trust a self-signed certificate, which is an increasingly difficult and counterintuitive process since Chrome and Firefox started competing to see who could destroy their usefulness faster. I'm not even sure if it's possible anymore.

Neither of these are acceptable.
Charitably, it could be seen as inflammatory.
I like the idea of changing the order of newspaper headlines and how this link could be #1 recursively.
Ask HN: Git alternatives that aren't so complicated?
For the last three years, I've been developing my project strictly on master.

And the reason for this is that every time I try branching, within hours or days, something is screwed up, and I don't know how to fix it, and I end up having to reset and redo a bunch of code, if I didn't back it up.

This just happened again, even though someone else was holding my hand through the process.

At this point, I think I have tried at least 3 times, my minimum for trying something new, and I'm ready to give up on git and try something new, even if it costs me days of learning a new system.

Is there anything you would suggest to someone like me?
I have been thinking about it do you know how can i get started I’m just scared what if i make the wrong investment
Amazing! Please let me know in GitHub issues or Twitter DMs how you get along. This is a very early alpha release, keen to hear feedback at all levels!
The problem is few of those bindings are mature, nor can they be expected to remain up to date. I don't know of any games in Godot using anything but GDScript or C#.

This will probably change in the future (I hope it does, and I really wish Godot just used WASM internally so any language that already compiled to it would work) but as of now it seems there's no point to using anything but GDScript or C#.
"Spooky action at a distance" doesn't imply that it's not governed by physical rules - and I think it's certainly a valid descriptor for biological systems as a whole.

Yes, we can break down aspects of biology into nice subsystems that we can define rules for - e.g. we have a pretty good idea of how DNA polymerase, or the ribosome carry out their duties (in isolation). It's when we start looking at the emergent properties of having all of these things in one larger system that our understanding starts to break down.
Show HN: Gone.News – News from Days Gone
How about `ee`? https://github.com/herrbischoff/ee
Yes people should read the links before commenting, lest they end up sounding like capricious idiots. But this was in the title.
If I make it to #1 I’m definitely updating the screenshot :)

Edit: as I made it above the fold I updated the screenshot to show the site at #4. The Droste effect is quite pleasing, I think.
Sure, but I think if I ask “Why did you do that?” I’m specifically asking for an explanation related to your consciousness rather than a physical explanation. That’s a different sort of question than “Why are you six feet tall?”

I asked if chickens are conscious because, if the chicken is conscious (or at least if the question asker believes they are) than we’re asking the first sort of question and it may or may not be fair to call that question invalid based on a chicken’s conscious understanding and sysrpl’s reasoning.

If it’s not, then we can only reasonably ask the second kind of question and I agree it wouldn’t be “invalid” to do so.
I didn't say it didn't make sense. The recursion just made me smile.
The Fibonacci series grows so fast that for "large" values of N you'll need a arbitrary size integer implementation anyway, so at that point you might as well go for a (non-IEEE) arbitrary size float type and get all the significant digits you need.
You are right. If browsers would expose APIs which would allow to access request and response bodies in a streaming fashion then HTTP/2 (and actually even HTTP/1.1 with chunked encoding!) can be alternatives to websockets.

The remaining difference would be websockets having builtin frame delimiters and a meaning of text and binary frames - whereas with HTTP streams you would need to do that on the appliction level.

Getting Streaming APIs for HTTP was planned to be part of the ReadableStream and WritableStream extensions for fetch - but I have no idea how that effort went since I last looked at it (5 years ago).
From the link:

> Unlike IoT, Windows 10 ARM is ARM-targeted spin of the OS, which comes with a traditional desktop and Win32 apps support via emulation.
Somewhat true. While it doesn’t matter to the end user what engine is used if it looks and runs the same, it does if one engine can’t compete in polish. And I don’t know about you, but I hate splash screens that just say (for example) “built with Unity”. (Yes, splash screens hide loading, but as a user, I don’t care what engine you used)
More like one every three days in 2019.
https://github.com/redredgroovy/easy-ca

Pretty easy to use.

Letsencrypt with DNS validator also works great for servers that aren’t accessible externally.
The OS design was barely there, which made it easy to understand and hack. But the GUI had a lot to recommend it.

e.g. both Windows and Mac OS came to the same "icon bar" design that RISC OS had in 1990. It had "magic" application directories for self-contained installation from floppies & downloads. It had a pretty nice vector drawing engine built in, sprite plotters etc. The OS was documented really comprehensively in a £80 set of programmers reference manuals. They wrote a really clear style guide, and (eventually) a well-understood higher-level GUI toolkit which produced great results with little code.

The most heinous part os the OS was the lack of shared libraries in userspace. If you wanted to share code between apps, you wrote it as a kernel extension module and made up new system calls! So this very common facility became a risky, advanced topic for programmers. (also because BASIC + assembler were free, and the C compiler was not, loads of popular libraries were hand-written in assembler).
(2017) (And the format dates to much, much earlier — but still interesting material if you like this kind of thing.)

> The problem with it is that DT_GNU_HASH is not documented anywhere other than in GNU binutils and glibc source code.

Not really documentation either, but it is of course also implemented in LLVM and e.g., FreeBSD rtld.
Deadlift. just learn to do it properly first
That's odd given that I've used nothing but AOSP-derived Android distributions since I got my first Android device. There is no Google-proprietary software on any of my devices, most software comes from F-Droid, some of it I build myself, two apps come from Aurora Store (an alternative front-end to the play store repository): Firefox Preview and Bank-ID (Swedish electronic ID app).

...and now you tell me I'm not running Android? Oh well, a rose by any other name...
Concurrency.""There are three hard things in computer science: cache invalidation, naming things, off-by-one errors, and
41% of businesses closed on Yelp have shut down for good
Most dentists don’t know what they don’t know. You need to see a physiologic dentist: lviglobal.com

If you have an hour, join their fb group and watch their video. It will be quite illuminating.
macOS, in some sense a BSD (at least nominally), would like you to not make system calls yourself as well. Actually, not linking against libc has a number of hilarious consequences, one of which is that you bypass the platform sandbox because apparently the engineers thought it couldn't be possible to write a program without it :P
Some of FAR’s best features only work inside ConEmu though. (I think that hasn’t changed in a while.)
...so your best anecdote about why DARPA doesn't work is that they fire incompetent PMs?
Foam author here!

Fiddly, yes. This is very early stage project and in need of polish.

Lacking backlinks, however? We actually got those, thanks to the VS Code Markdown Notes extension:

https://foambubble.github.io/foam/backlinking
The irony is palpable:

> I would rather this be read by a few people motivated to take action than by a broad audience who will find it merely interesting. In that vein, if you find yourself wanting to share this on Twitter or Hacker News, consider instead sharing it with one or two friends who will take action on it. Thank you for indulging me!

I'm glad of course it was shared here. As a distillation - I think the author's theme lies with enabling more _researchers_ rather than business people to take moonshots and do foundational knowledge building and discovery that redefines a field and then focus on commercialization from a birds eye view by technically capable visionaries.

This is the SBIR [1] model (also a US Gov requirement to fund small business research for any federal agency with >$100M in funding), the Bell Labs model (which yeilded amazing foundational work like UNIX and the transistor and was a direct result of AT&T's monopoly and excess resources), and perhaps even the YC model (though that one is obviously focused on a shorter horizon and more on commercializing existing tech and more rarely on foundational research).

I've personally thought about this problem a lot and done this at a small scale and would love to expand upon it. https://augmentedlabs.org Would love to hear others experiences and thoughts.

[1] https://en.m.wikipedia.org/wiki/Small_Business_Innovation_Re...
Oh to make things even funnier, last I checked, said ex-DARPA pm was working on a biotech startup around diagnostics frommicro-blood draws. You can't make this shit up.
Not privacy related but on Windows 10 I find Edge to be performing a little better compared to Chrome under the same tabs / workload / extensions. Its anecdotal though so I can't be certain, anyone else has similar experience?
Have you tried using Fluent Terminal? It is available on github and the Windows Store. To use mosh you need to connect via the quick connect menu in the top left corner of the program.
Python Arbitrary File Write Prevention: The Tarbomb