skysight-inc/HackerNews huggingface dataset:
Ask HN: Does anyone else find Firefox hard to develop for?
I know that there has been a recent push in many privacy conscious circles to move from Chrome to firefox. I haven't been able to move from Chrome myself due to work and some personal extensions ive created that I don't want to re-write/re-configure.

Also, I think the dev-tools are comparable between chrome and ff.

Anyways, I've been working on some web-apps recently that are going to be firefox supported, but I just find there are so many things on caniuse.com where there is only partial support for firefox. Things from flexbox to range inputs are mostly working 'except for a few bugs' which often impact my work and are annoying/impossible to work around?

I just find way more stuff in firefox that renders differently compared to any other major browser.
Remarkable not only how prescient he was but how smooth as the reporter endlessly tried to poke holes in his answers.
There is no CURL example in the guide I linked (or this guide linked on the same page).

https://stripe.com/docs/billing/subscriptions/fixed-price
True. One of the first things I disable.
> If your standard for "hurting innocent bystanders" is to mildly inconvenience some people

No, the standard is potentially killing people.
very cool! I always have a crazy amount of tabs open and eventually just delete my Chrome window and start over... an app dock makes a lot of sense for the apps that are always open for me.
Winners of 2021 Breakthrough Prizes in Life Sciences, Physics, and Mathematics
People are against most types of surveillance because eventually a bad actor will come along and misuse the technology.

It's not that they can't be used for good things - it's their potential for misuse.
I've been using nix as a desktop for close to 20 years now =)

I went through a phase where I compiled my desktop with Gentoo, OpenBSD, FreeBSD -- I tried a ton of things. They were all fun, but required a __ton__ of time to get set up properly and be successful with. About 8 years ago I started using Ubuntu for most things and for the most part, things just "worked".

The one exception was graphics drivers. For some reason, getting graphics drivers working __properly__ was always hell for me.

About 1.5 years ago I heard about Pop!_Os and gave that a try. It's a distribution built on top of Ubuntu that provides superior driver support for NVidia/AMD and generally solves all the issues I've had. Now I use that and have a completely hassle-free experience, with literally no downsides so far.

If you're a nix desktop user, I strongly recommend checking it out. It's been a godsend for me: https://pop.system76.com/
Joan Feynman Has Died
Well, except for follows, right?

But yeah, it appears (from TikTok's success) that the social graph may not be particularly useful for content-based recommendation (which really, we should probably have realised given the existence of Google).
Profit margin is about the percentage they make after costs have been factored in. Their profit margin is indeed low; 12% of the revenue... compared to Apple who takes 30%. See https://gamerant.com/epic-games-store-revenue-split-explaine....

So my point is absolutely valid and it is shocking that Apple makes almost 3 times more money from Fortnight than Epic makes.

Imagine spending years building an app and then someone else ends up making 3 times more money from it than you do...
This is surely a nice framework. I took my time to go through it. I would like to ask. Are there companies currently using it in their stack for mobile app development??
I'm a huge fan of acme.sh. You can easily automate its use in an infrastructure pipeline, set up some simple alerts for failure cases, and then more or less forget about it.
There are a couple services that allow you to write a letter to your future self and get it delivered in X months/years.
My initial thoughts

1. You can setup similar experiences in a pure terminal mode

2. Am I shipping private code to yet another 3rd party server?

3. Having to copy/paste seems annoying, would want it on top of my VCS code directly
I believe this piece does a good job with forwarding, but would be improved by a discussion of termination.

Routing is only triggered when the packet is L2 terminated: the destination MAC of the packet is one of the router's own MACs.

If the packet's destination MAC does not belong to the router, it doesn't matter what is in its IP header, it will be switched in the LAN it came in on.

This design also generalizes nicely to the case when the destination IP of a routed packet is one of the router's IPs.
> users are giving consent when they signup

Questionable. I guarantee the vast majority of users don't even read the massive legalese text walls companies show them before they sign up. Usability studies have shown that people don't even read small error messages, they just want to get rid of the annoying message as quickly as possible. The few of them that actually do read these things probably won't have the foggiest idea what any of it means or the risks associated with the breach of their privacy. So how could this be real informed consent?

Of course, we also have sites where this document is not shown at any time and can only be reached through a link buried in the page's footer. Sites that just write whatever terms they want into this hidden page and then say everyone is agreeing with it by virtue of using the site.
It was revealed by wide spread video camera availability.

This is distinct in that the people present control access to the footage and whether or not the footage is taken instead of some surveillance body controlling access and footage always being taken.

Some professor coined this sousveillance https://en.wikipedia.org/wiki/Sousveillance
List of All Current TLDs
Like, this probably isn't how I would implement such a system. But it's an important explanation for how TikTok does such good recommendations.

It's a HN comment, not an in-depth blog post :)
One functional advantage of a microcontroller over a single-board computer is lower latency due to not having the overhead of an operating system.
Also, the Pi's built-in audio output is basically unusable, but easily replaced.

However if you dont have floating point arithmetic like many microcontrollers, fixed-point DSP for FFT or autocorrelation presents its own set of challenges, which can be either a good thing or a bad thing.
Nobody I talked to today noticed.
Nikola: How to Parlay an Ocean of Lies into a Partnership with GM
> We had a fully working siren network (at least across Western Germany)

East Germany had a fully working siren network as well. And it was tested every Wednesday at 1pm.
how much did you get?
Used to be on the FAQ page (web archive link linked below) they were pretty firm on the idea that remote could not work because they "tried it once" and what they do they "have to do in person"[0]. Interesting to see the change in tone regarding remote. A good reminder that making big decisions off of a single data point is not a good idea, and this also suggests that the reason for said company's lack of success may have also been influenced by YC not trying hard enough to support the company (as clearly significant investments were required to make remote work). So while the medsage for years was that remote can't work, we tried it and it failed, the actual situation was more along the lines of remote could work, but it's too much work for us and not worth it to invest so its not going to work right now.

[0]https://web.archive.org/web/20170209075330/http://www.ycombi...
Too much attachment, the Dali Llama's answer to everything
I've lived in several apartment buildings that had a mail chute, from the top floor to the first floor, next to the elevator. I don't know how often it was checked for blockage; I think the USPS just picked up the mail form the box at the bottom of the chute.
That was the overall trend in YouTube since 2013 that makes sense for YouTube as a business but makes me a bit sad as a user. When they started to split up YouTube picked out the top, corporate friendly creators to let advertisers pick and choose how to target their (eventually content self-censoring) advertising money rather than offering YouTube as a whole bundle and letting the keyword auction do its work opaquely. This creates to inevitable incentive problem down the road we're all witnessing now such as asymmetrical content id powers, no monetization for grassroot creators, content censorship etc.
So their larva is an almost-vertebrate (chordata) but then it changes back to an invertebrate. Neato
Timing-Safe Bcrypt Authentication in PostgreSQL
This refers to Layer 2 in the OSI model of the network stack. See https://en.wikipedia.org/wiki/OSI_model

1. physical layer, 2. data link, 3.vnetwork, 4. transport, 5. session, 6. presentation, 7. application layer.

So, many switches are layer 2, but layer 3 switches are often referred to as switching routers. This can cause two different switches to act differently from each other in certain network environments. It isn't that one switch "doesn't work" but that it isn't a router.

A router is nominally a L3 device, though most actually are L1-7. To work, you need L1 & L2, but in today's world, there are applications and interfaces that move the router across L1-7, though not to the same depth as purpose built application devices for example. Topping this off, some routers will switch and some will not. It's the same wide-world of words that we see across the whole computer industry.

The OSI model differs from the TCP model of networking, even though both use numbered layers.
Something like this needs to be included in tcpdump or Wirshark.
(tcpdump would be fitting; since it was the genesis for cBPF)

I remember patching Netty https://github.com/netty/netty/pull/8653 just to get the master key in order to decrypt sessions.

Having the ability to decrypt TLS sessions like this is way simpler.

tl;dr; would love to see something like this for tshark / tcpdump
Society has functioned for thousands of years without banning exposed faces/mouths. Perhaps we can focus on balancing risk-reward vs some utilitarian-authoritarian ideal that completely neglects people's individual freedoms in exchange for an unrealistic and unreasonable pursuit of a statistically aesthetic(zero deaths) outcome? These kind of well intentioned platitudes like "if we can prevent one death, one single death then any and all measures are worth it without consideration of cost+freedom" wouldnt make sense if you were talking about, for example, banning all driving to prevent millions of deaths every year.
"Better one handful with tranquillity
than two handfuls with toil
and chasing after the wind."

(Ecclesiastes 4:6)

This is the NIV version. The Dutch version I'm more familiar with would translate more like:

"Better one handful of rest, than both fists full of labour and chasing after the wind."
What was the contribution process like for the big repos like react-native? Did they make it hard to be accepted?
Heroku and (so far as I can tell) Cloudfront independently re-invented this stupidity. But if it was "just" say Heroku and Cloudfront you can imagine plausibly notifying those two providers to fix their broken infrastructure and then you're good.

Apache makes it unsalvageable by sheer numbers the same way it had already for HTTPS in http-01, so that's why I focused on Apache.

It's entirely possible for some fool to ship an exciting new cloud service that lets people bind to arbitrary ALPN values on a shared service and thereby re-introduce this problem for tls-alpn-01 - but unlike with tls-sni-01 that's not a bug common to hundreds of small bulk hosts using out of box Apache so I assume we'd tell the exciting upstart to knock it off and warn their customers what they're doing is inherently unsafe, rather than requiring Let's Encrypt to stop offering tls-alpn-01.

In fact we're already on the other side of this for the ordinary version of http-01 for a different reason. Apache really does potentially let an attacker who controls aaa-aardvark.example at some bulk host perform http-01 challenges for www.some-custom-site.example that has created A records pointing to the bulk host but hasn't currently actually got them serving www.some-custom-site.example maybe due to a typo or unpaid bill.

But most bulk hosts have specifically configured Apache to show a default "Did you pay? / Have you configured your hosting properly?" type site which is harmless in this case, and for the few that haven't users can understand that um, if they visit www.some-custom-site.example in their browser they get to the attacker's site, so like yeah, that's where the problem is, nothing new with http-01
Actually the same in the Netherlands, except that for a few years we had "silent" alarm tests. This was of course a bad idea (actually letting everyone hear it is quite reassuring, and it's good to know what it sounds like), so this was reverted, although that took longer than it should have.
One reason the Steam controller didn't sell is that users had to figure out configuration schemes on their own instead of Valve being proactive with developers and publishing houses.

I agree that the Index, especially the knuckles blows everything away, but I'm already seeing the same issue that the Steam controller suffered from pop up with the knuckles.

You're right about Oculus too, and I hope that you'll be right about Valve staying in the game. I definitely want to keep using base stations instead of unreliable and heavy headset cameras. I want full body tracking to gain traction and that won't happen if external base stations die off.
Years ago for my sister's 30th birthday, I did a fun project involving the USPS.

I wanted to send her the message "Happy Belated Thirtieth Birthday!", which is 30 characters, via postcards, one character per postcard.

I found 30 post offices in unique places throughout the U.S. (For example, I found a town that had the same name as her given name in Illinois. I found another with my name, etc.)

I used Zazzle to print a custom post card for each location with a picture of the location on one side, and a large block letter on the other. I just did a Google image search at the time to find photos of the location. Here's the image I used for "Truth or Consequences, NM":

https://upload.wikimedia.org/wikipedia/commons/6/68/Truth_or...

I then hand wrote a message on each postcard that started with the block letter. This was because she'd be receiving the postcards one-by-one and I didn't want her to realize right away that a message was being spelled out. It would seem like a postcard I might send her from that location if I'd actually been there.

I also found a set of 50-state stamps the USPS had previously issued on eBay, and used the correct state's stamp for its postcard.

Finally, I round-tripped each postcard through its respective post office by mailing it inside an envelope addressed to the postmaster at that post office along with a note to the post master:

Dear Postmaster:

I am mailing my sister 30 postcards from 30 towns for her 30th birthday. I have enclosed a postcard, which I ask be hand-cancelled with a postmark from your town. To protect the postcard from machine cancels in its journey through the mail system, I have enclosed a stamped envelope addressed to my sister in which to seal and mail the postcard. Thank you very much for your time!

I wasn't sure if this would work, but damn if she didn't get all 30 postcards each properly postmarked.

I dropped them all in the mail in NC. Some went as far as Alaska and Hawaii.

She received them in Miami. I think she got the first one within a few days and the rest dribbled in over the next two weeks.

Edit: here they are after she received them all:

https://ibb.co/YQfx4jZ
Agree. Alpha Centauri is still the peak of the genre for me, two decades later. It's just a shame there's no active open source effort, because the technical implementation has aged poorly.
I'm not sure who you're replying to, but it's a "self-regulatory organisation". In practice it has very similar powers to the SEC and brokers take it equally seriously: it can fine you or wind down your business. It's not the Better Business Bureau.

You might think, oh, FINRA is just a private company, I'll just ignore them and laugh off their attempt to sanction me. This doesn't go any better than if you do the same with the SEC. If you decide to fight a FINRA enforcement action, it gets appealed first to the SEC and then if you keep appealing it, to the courts. Exactly the same process as if you were to fight one from the SEC.

FINRA is owned and run by its members so you might think it would be favourable to the brokerage industry. Which it probably is, a bit, but it doesn't seem to get accused of regulatory capture any more frequently or any more fairly than the SEC.
(3) is only because Observable isn't a tool designed for this workflow. I can imagine something that works on regular text files locally on your machine. This would also solve (2).

As for (1) - this sounds great! Can you tell me how?
I loved Sparrow. I’m a Spark addict now, haven’t been this pleased with an email app. I normally jump around when stuff gets crappy and slow but Spark just keeps on giving. Highly rate it, both for Mac and android.
The one with contempt for users is reality itself. Computer security is hard, and whatever you have installed today will force you to update it later, directly or indirectly, due to security.

Don't blame the messenger.
is there anything for caddy, like nginx nchan ?
because the youth is the future. Investing in young users is investing long-term. Young users is potential future money, old users is immediate but short lived money stream. I didn't mean to say that it didn't matter but FB is obviously looking at the future
Rightholders' letter on consultation on Article 17 guidance [pdf]
So this is a tool for people without a Mac?
Julia Reda (former Pirate Party MEP) wrote a criticism of the letter: https://twitter.com/Senficon/status/1304084452767928326
I think what makes redbpf stands out is that the other libraries allow you to write the user-space code in Python or Lua etc, but then the kernel code must still be written in C and gets compiled with clang.

In redbpf we let you write the kernel code in Rust as well, and then we have our own LLVM based toolchain to compile that to BPF bytecode.

bpftrace is similar to redbpf in approach, in that it lets you use a DSL instead of C.
This thread basically enumerates why I started my company. Manual control of workflow and keeping up to speed is at best a waste of time. I want my _Computer_ to do the boring repetitive crap.
Running your own server connected to the Internet is not a hobby and nobody should get the impression that it will be. Otherwise you're just making a donation to a DDOS swarm.
Tackling the Game of Candy Crush Friends Saga with Reinforcement Learning
You are right of course. Point taken. Thanks :)
There are always tradeoffs.
It depends on the languages and tools you use. In the JS world, there are many options to watch for code changes and refresh browser, recompile node, run tests. Webpack is usually where this happens. Tutorials are probably just a Google away
I did not know, thanks for sharing!
The ride-hailing super app playbook – based on Gojek and Grab
Thanks for that link, wasn't aware.

For this I used the simplest approach I could think of - using sox [1] with its builtin power spectrum analyzer. It works pretty well as the resulting tuning is fantastic. It would be nice to a faster pitch detector - could speed up tuning from ~15 seconds to maybe just a few seconds.

[1] https://linux.die.net/man/1/sox
Please do not so blithely invoke disability just because someone removed the feature you cared about. It sucks, but I promise you navigating the world in a wheelchair sucks a lot more.

I don't want to speak for anyone in particular but X11 was definitely not a friend to people who cared about a11y or l10n. It wore its origins in "80s MIT students" on its sleeve, for good and bad - and for non-English-speaking or disabled people, mostly bad.
The Open Source Community Is Not Defenseless Against Patent Trolls
You can have network segments which do not use ethernet and therefor have no MAC addresses, but still use IP addressing and need to be routable. It doesn't make sense to tie the next-hop in a table to MAC addresses which are an implementation detail on a lower layer. A good, popular, example of this you can test yourself without obscure hardware is wireguard.
NASA says it will pay private companies to gather Moon rocks
Proxomitron had that capability years ago - MITM proxy to filter pages and block ads, among other things. I still use it, it's very useful and continues to run fine on the newest Windows.
I used this once to configure a small GSM network using a LimeSDR.
I'm from the US, and after visiting Australia, I've noticed that Australians really hate Australia(n government).... why?

It's great! You have "decades of prosperity", a social welfare system where "homelessness is a choice", a healthcare system where you can have both private AND public option, and looks like you're on track to beat COVID.

Also there's no tipping, payment systems are contactless, the urban waterfronts (and urban development in general) are just so much better than anything the US has. Hey, the cost of living is "high," but I currently live in California, so that's also a relative thing.
I do not have any data, but could easily imagine some post offices in small towns (say: Brandon, Iowa) have gone largely unchanged for a very long time.
You are correct. There's no magic at work here. We don't break the laws of physics, we just flex them with clever engineering... like most innovators that came before us.
The exact same thing happens for me on YouTube, although I guess YouTube doesn't start with an auto-playing random sequence of videos to quick-start the search for videos you find interesting. Still though, I end up in very odd niches that I never specifically searched for.
I can't believe you mention civ III as an example of a game that got combat right. I loved both civ II and civ 4, but civ 3 city combat was such a grind with city walls that it was nearly unplayable for me. You had to have huge armies of artillery or else your invasion force is just going to die bashing themselves against the wall of the city. Infuriating. I liked civ II much better.
That might be the case now but it certainly was not back when I worked in the industry 2005-2009

PS if you are Anand, I love my Kurt leather whites :)
react-native (Facebook) and some of the other big projects (Alibaba, Google, Palantir etc) have Contributor License Agreements (CLIs) that you need to sign in order for them to accept your contribution.

It's a painless process, but you do need to provide them with some info ranging from just your name to your address and phone number.
You are fixated on this because of my imprecise use of the legal term "standing", but it's not really relevant. Standing to bring a suit that will probably get thrown out on summary judgement is not useful. What's relevant is that there is harm to consumers here and Epic needed to specifically demonstrate it to have a real chance of prevailing in an antitrust case. An allegedly illegal contract should not restrain them from doing so.
Ad augusta per angusta.

Ars longa, vita brevis.

We had a dictionary, Petit Larousse 1989, and I used to read it a lot, learning new words and their origins. It was the equivalent of a Wikipedia rabbit hole. There was a pink section in the middle that contained many latin phrases. I loved reading those as a child and they stayed with me.
Civilization was apparently inspired by Empire.

http://classicempire.com/

(Yes, I wrote Empire.)
Mirantis releases its first take on the Lens Kubernetes IDE
See also Crichton's Eaters of the Dead

https://www.goodreads.com/book/show/7673.Eaters_of_the_Dead
Reading between the lines, they got 51-50'd or similar.
“If you’re not willing to go too far, you’ll never go far enough.”
Fiddling with ARO comes up more often that you’d think, especially as a quick easy way to handle HA.