skysight-inc/HackerNews huggingface dataset:
I've been using network-level ad blocking with software like Pi Hole for a while now.

According to the stats, about a year ago, I used to block around ~40% of traffic via DNS. Recently, it's only about ~10% of traffic that gets blocked.

Despite disabling application-level DoH in favor of network-level DoH on every device and app I could, I suspect streaming devices and various Android apps are using DoH at the application-level and are bypassing my DNS entirely.
Study reveals restoration of retinal and visual function following gene therapy
> Selling an OS doesn't require any particular scale at all

It does require scale to build an OS, have appealing devices that ship with the OS and have apps that developers write because they can make money. How the OS is monetized makes no difference.

Look at Kindle as an example. Kindle has an ad subsidized model along with no ads one. Would Amazon even make the model work if they weren't big and didn't have other stuff to sell through it?

Look at game consoles, the cost of device and OS is subsidized by the cut Sony and MS receive from games. Would this model even work if they had no money or games to sell?

I will again circle back to Siri to make my point again. Apple is rumoured to be working on a search engine, this along with alrwsdy default Siri as a voice search engine. How do you think Apple is paying for all the cost of building and running this? Revenue they earn by selling devices. Can someone even compete to them using the same model if they don't have an OS or hardware to sell? Definitely no.

If we accept these analogies then a lot of tech companies are susceptible to analogous accusations.
> A function that counts the number of characters/codepoints

Have you ever met a use case for the number of codepoints in a unicode string?

(One that didn't involve the moral equivalent of "because codepoints are what Twitter counts"?)
Probation period?
Wow, nice example. Made possible also because arithmetic operators in Julia are functions, and you can extend them to work on any data types. (Operators like "+" have hundreds of methods.)
Are there legitimate risks to doing this?

I was nervous about this part of the solution, but I can't think of any plausible scenario of unauthorized access given that I use a long, random bucket name, like mediagoblin-39dpduhfz1wstbprmyk5ak29.
Guest traffic was visible when the VM was in NAT mode, but when switched to Bridged mode traffic went straight through with LS unaware. I suppose LS was only sniffing the standard adapters, though this could have been improved since.
Ask HN: Anybody using the dynamic-split model?
Hello everyone,

I was reading the other day about the dynamic-split model and I was wondering if anyone has used it before.
Those who say that didn't work with IE6...

Chrome is a good browser. When it works better than Firefox, that's because it really works better, not because it has a weird nonstandard quirk that everyone designed for because it is the dominant browser. Chrome/Blink has some quirks but it is nothing compared to IE6.

The problem with Chrome/Blink is different: is is essentially a way for Google to push whatever standard they want. Emphasis on "standard". Microsoft wanted to control the web on the client side. They made IE, and therefore Windows a near-requirement to access the web, the whole embrace, extend and extinguish thing. What Google want is the opposite, they want every machine to use Google services, and the meaning of Chrome is "here is how a web browser should be, please copy me".

Unlike Microsoft with IE, Google wants Firefox to implement every feature Chrome supports, and for that reason, these new features are much less quirky. The problem is: what Google wants Firefox to implement may not be in the user best interest.
I think Retool continues in the trend of startups creating a formidable SaaS from something that is "obviously useful" to developers working with open source, and has become a "tool of the trade" for those developers, which reveals a wider market outside of that language/platform-specific open source niche. Examples here are:

- Real-Time Sys/App Dashboards (e.g. Graphite) => Datadog

- Collaborative Source Control (e.g. trac, hgweb) => GitHub

- Team Chat & Bots (e.g. IRC, ZNC, Hubot) => Slack

- App Error Tracking (e.g. Raven/Sentry project) => Sentry

In this case, the category is:

- Internal Admin Interface (e.g. Django Admin) => Retool

Like all of the above categories, this category is obvious in retrospect.

Every SaaS product/company I have ever worked on or advised has leveraged a Django admin interface. Or, the team wished it had one once they went into production with real users, if the technology choice _wasn't_ Python/Django.

If you have never personally experienced a the Django admin interface, you can read about it and see screenshots in this tutorial: https://developer.mozilla.org/en-US/docs/Learn/Server-side/D...

Essentially, it gives you a web-based interface, hooking into your existing user/group authentication model, for inspecting (and even altering!) live production data by introspecting your "Django Models". That is, your Python classes which represent your production SQL tables lead to (controlled!) admin interfaces that can edit those tables.

You can extend that admin interface using simple declarative configuration, such that you can build functional, SQL-aware tables and forms without writing a lick of UI code.

Based on the demo video, Retool is even more featureful than the Django Admin (although perhaps a little less extensible, since it isn't based on an open source framework). But, for anyone thinking to themselves, "Why didn't I think of this?" -- perhaps give some thought to the root problems beneath some of the open source tools you're using today, that could perhaps be turned into a widely-applicable SaaS tomorrow.
The safety guarantees of Rust are much stronger than Zig's. For example Rust statically prevents use-after-free and data races, and Zig doesn't (and I don't think anyone expects it ever to). To me this matters more than which one is more like C or C++ (partly because I don't think Rust is very much like either).
"If I had more time, I would have written a shorter letter." - Marky Mark Twain
Well we never will be able to tax our way out of it, there isn't enough wealth and you could confiscate all the wealth of every billionaire and fall ridiculously short.

the only out is to restrict spending. We don't actually have to cut anything even though we should. Hope budget increases below inflation as much as possible. Other countries have done it, why can't we? This means that programs that automatic increases built in don't get them if it pushes the budge past the limit.

This is not austerity, this is returning to proper budgeting where we don't use baseline budgeting which is how Congress lies to the American people with claims a program has been reduced.
LXD is the perfect Linux technology
I don't agree (based on the fact that the host can run multiple images/VMs). In my opinion first of all the host should be secured (Firewall & Fail2ban etc...).

To distribute security to the single images/VMs increases complexity and the likeliness that some image/VM will miss some security filter, and leaves the host itself unprotected (e.g. network time sync & ssh & other stuff will probably be running, any update to the host's SW might result in unexpected services running, etc...).

An additional (dedicated) layer of security in the images/VMs would of course still be ok.
That's wonderful to hear!

I'm looking into it: and it looks like "Stupid Fibonacci" proves that its working in Julia (https://julialang.org/blog/2019/07/multithreading/).

Task-based parallelism is fraught with more overhead than other patterns. But it really is a powerful construct: converting recursive ideas into multithreaded concepts rather easily.
> Block TOR

sadface

At least have a good reason for doing this instead of outright doing it for 'Security'.

As far as I'm concerned you've made the site less privacy friendly. At least redirect them to an onion of indded are shaving serious problem at some point in the Future.

Identity is the bread and butter or mass Surveillance. The two can exist with spam protection.

This problem might need a good solution to be thought of that aren't bans and extemely hard capthaa in every single page (cloudfares half baked 'solution')
This is turning out to be a bit more involved. Mostly because I have no experience in generating rss...

Newsboat filters operate on the whole feed. So the script needs to read the input rss (cf feedparse) then retrieve the HTML (cf rdrview) and then generate rss errrr.... Feedparse doesn't do that last bit.
And then add a layer of on disk caching because otherwise it would keep re-downloading all entries over and over again.

I'll get back to that tomorrow I guess. Now for shut-eye
> Easy, just declare that the entire IPv4 address space is ::x.x.x.x in IPv6 and Bob’s your uncle. No idea why they didn’t do this other than sheer solipsism.

They did [0,1]:

The "IPv4-Compatible IPv6 address" was defined to assist in the IPv6
transition. The format of the "IPv4-Compatible IPv6 address" is as
follows:

| 80 bits | 16 | 32 bits |
+--------------------------------------+--------------------------+
|0000..............................0000|0000| IPv4 address |
+--------------------------------------+----+---------------------+

Note: The IPv4 address used in the "IPv4-Compatible IPv6 address"
must be a globally-unique IPv4 unicast address.

The "IPv4-Compatible IPv6 address" is now deprecated because the
current IPv6 transition mechanisms no longer use these addresses.
New or updated implementations are not required to support this
address type.

--

[0]: https://tools.ietf.org/html/rfc4291#section-2.5.5.1

[1]: https://en.wikipedia.org/wiki/IPv6#IPv4-mapped_IPv6_addresse...
Theyre monopolies
Two popups while scrolling through the article for 30 seconds...
OP here/founder of interviewing.io. What is habr?
Ask HN: Math Equations to Code Quiz
Do you know of any online resources that teach you converting latex equations to code.

Preferably start you out small and build up. (Also if it’s in Python even better)

I know there’s quite a few of these for learning things like regex. I don’t have a math heavy background but suddenly need to be able to research papers and convert formulas to Python.
the statement is such a blatant indefensible lie I had to wonder if I stumbled on some kind of 'point deer make horse' [0] scenario.

[0] https://epochtimes.today/chinese-idiom-point-to-a-deer-and-c...
Can you tell us more about your Caddy+SSO setup?
If you're truly paranoid, you can certainly encrypt data in RDS with keys that you have and Amazon doesn't.

But yes, the rest they expect us to take on faith. Or trust some boilerplate in their ToS (written by their lawyers, to absolve them of liability).
That’s too bad, I’ve wanted to switch back to Firefox for years but tap-zoom is a deal breaker. My vision isn’t great and tap-zoom is muscle memory across macOS. It’s just not a macOS application.
I wonder if DuckDuckGo would be more successful if it was easier to find out how to advertise with them. Like, a link on the page that says "Advertise on Duck Duck Go." I've tried to advertise with them in the past a few times and gave up. I posted here before also, as I think Gabriel used to read the pages.

I use them for search as my default, and I would have used them for ads. I still might if they put a link there.
It's also a reminder that your mobile's current privacy settings don't matter.

If Instagram/Facebook/Whatsapp have ever had access to your contacts - even inadvertently - you essentially can't undo this.
I didn't include those things because they're either unsolvable (defense spending is an arms race), or the solution is obvious and inevitable. For example, we can save Social Security by phasing out old people.
or merely lazy. why spend time/$$$ supporting IPv6 when you have plenty of IPv4 addresses?
Yes. Not just looks like stderr, but by definition is stderr. (Except that it wasn't intended to be any such thing...)
> That's rather the point, the lockdown advocates will not give me that choice.

That's because it's not a choice you can make just for yourself in isolation without affecting others.

Unlike, say, not wearing a seatbelt in a single passenger vehicle, where its only your own life at stake, if you choose to take risks with an infectious disease, you're also making a choice to endanger others--the emergency services and healthcare workers who have to care for you, the people you come into contact with while you're asymptomatic, etc.

So, by your making that choice, you are also choosing to increase the risks of those around you.

There's a famous quote: Your right to swing your fist ends where my nose begins.

Alas, it seems like some people care more about their personal freedom to swing their fists than they do about the welfare of their fellow citizens...
When can we send Jeff Bezos, Bill Gates, Richard Branson and Elon Musk there so that they can chat with each other?
What is programming language lock-in?

When any code is written in some language?
As with most things, I would say that it depends on the use-case.

For example, this image might be good for someone who wants to host an internet facing service but only for a few friends, for example a some sort of git forge.
Congrats! Quick endorsement (no connection to company):

I discovered Retool fairly recently during a bout of frustration-with-our-designers-and-engineers-spending-too-much-time-on-internal tools.

We were fighting very very elementary bugs mostly because the people implementing our internal tools were just not thrilled about that work (vs. the customer-facing stuff) and there's just a natural progression of common bugs when you're building things from the ground up.

We are just about to launch our first full conversion from an internal tool to a Retool-powered one, and I'm super excited. We were able to get the project to 0 backend engineers, 1 frontend engineer (who gets some help w/ SQL queries), and 1 designer who works directly in Retool (which, to be fair, isn't as powerful as Figma, but that's actually a good thing!).

And for the product guy (me), I can go in and tweak things without filing a ticket and waiting for a test-review-deploy cycle. So the whole thing is just quicker and better for this use case. Now our team can focus 100% effort (or, at least 99%) on the customer-facing stuff, which is where we're adding the most value anyway.

Suffice to say I'm very pleased so far.
> Who cares? Is there a word for this sort of writing in which current sensibilities are applied to older works in an attempt to "educate" people about a book that everyone read?

The post is basically saying "book that was massively popular at the time and is still popular actually holds up quite well when examined with current sensibilities in mind".

It's also saying "don't jettison one of the things that make it great even when examined with contemporary sensibilities".

It's the opposite of a takedown, and given that this sort of judgement is the exception rather than the rule[0], it's nice to have confirmation that I can continue to recommend Dune to new readers.

So, I care.

[0] I still love the LotR for example, but it is rather racist, quite overtly in places.
Look ma, no mouse: Tips and tricks
Violating monotonic time expectations on Catalina
For that matter, it seems that the analogy is to Evangelicals, who aren't generally considered to be a cult. They're too numerous, and while they do have many charismatic leaders, a cult usually has one particular top leader.

They do, however, practice the zeal of the converted, which is I think what they really were aiming it. And that by itself would qualify as "cultlike" by some definitions.
> These two are contradictory statements.

They are not remotely contradictory. Something being beautiful because the architect or a stylist added beautiful decorations is entirely different from something being beautiful because the lines, forms, and overall composition of the functional form, by itself, is beautiful. Much of the material on a brick victorian is purely for decoration. A small cinder block box, unless it was purpose-built to store boxes, was not built carefully to consider how it interacts with its occupants.

I'm not sure if you just skimmed most of my comment, but it was pretty clearly discussing architecture.
Memoirs of the real, original, Green Ranger
URL: mt6Ii9O

Now enter it into Google.

https://www.google.com/search?q=mt6Ii9O
(IMAGE SEARCH)

twitter.com/poisoncarnage
tenrings.webnode.com
He sounds like a grifter.

Why not release this super-dooper Python interpreter under a proprietary license? Just have people pay $1000 for it. If it works, then it’s a steal for people who use Python for business. “Well, you have to take me at my word and pay me first” is highly suspect.

I’ll use PyPy, thanks.
Brexit Britain adopts the Microsoft model
That's really gross. But it is sadly not at all unusual. In fact, Google's obscurely named "Keystone Agent" isn't much better.

Apple should expose services in Control Center instead of making you use the terminal.
I'm curious what caused the drop in infections and then the subsequent second wave.

Summer, I'm guessing.
As soon as a behaviour endangers others, the choice is no longer solely that of one person.
Apparently there is one less memory copy when using mmap, since read() copies from the intermediate buffer that mmap provides access to. Neat!

https://medium.com/@sasha_f/why-mmap-is-faster-than-system-c...
> There is no meaningful data that any hiring process--good or bad--improves the outcome of a hire. If there were, everyone would be using it.

But every company in FAANGMO does use the same (or at least pretty similar) hiring process.
or if they pay the network usage.
What other ways of blocking users do you know? Imagine you have a website with your local town adverts and spammers manually keep registering to your side, confirm email and then keep account appearing to be used by a true user and suddenly start spamming. You block one account, find a couple similar then block them too. Then you get a complain from a user claiming to own one of those accounts. Let's say you ignore that. Few days later a new spam account "wakes up". You block couple similar accounts. Tell spam detector to block certain sentences and domains. Another complaint. Then another account "wake up", this time spam filter catches it, then spammer tries manually changing their spam until it goes through. You block those too and delete accounts. More complaints. Now other legitimate user complain that they cannot share a link or write certain sentences. Turns out spam filter is too trigger happy. You spend time to tune it. More accounts "wake up". This goes on and on. You find yourself no longer working on the site, but firefighting spam. You report the IP addresses used for spam. Nothing changes. Then you find out the IPs are from a couple of countries, that are not your town. You block the IPs. You get complain legitimate user on holiday can't access it. More accounts "wake up" - from new IP addresses. It is TOR. You block TOR. More complaints that some users cannot access, but other than that no more complaints about spam. Finally you can go back to developing your product.
It is simply not worth. I advice to block everything from various lists as the minimum. Countries don't allow people from dodgy places, websites should be able to do too.
People should be going to jail for spam. They damage economy. Big companies have resources to deal with it so they don't lobby to make law changes as it takes potential competition at bay.
Shoutouts to whoever named themselves "<b>corn</b>", that's a much kinder way than usual to probe at whether I have HTML injection vulnerabilities.

edit: Un-shoutouts to whoever named themselves a racial slur. If you experienced a network outage and the maze re-randomizing, that's because I had to reboot the server to add an admin panel.
I've got plenty I'm not using, I'll give you one.

Here, this one's an easy one to remember, you can have it:

127.1.

Enjoy!
The Justice Department has filed its antitrust lawsuit against Google
To Serve the Public, Seek Profits
Yikes!
Edit: IG's claim was that the indicator light was a bug (erroneously indicating that the camera was in use), but the app wasn't actually accessing the camera.
Well, I hate to start a political digression, but here goes:

The borderline unliveable nature of many parts of SF (and increasing now) are a direct and foreseeable product of the city's overly tolerant approach to crime, the homeless population, and all the enablers of that over the last decade. The city had chances to set itself up better to survive this situation, but it squandered the time.

All of the policies that contribute to high housing cost, "neighborhood preservation", unwillingness to rezone and push out the festering drug dens of the city. All in the name of nebulously defined "equity".

Better to have a crime-ridden neighborhood that preserves some grandma's barely-scraping-by corner store than to have a safe neighborhood with, god forbid, some new young people who have jobs. All of the money and tax revenue spent on useless services for the incurably drug-addicted, instead of preparing the city and its infrastructure and economy against a downturn. All of the policies that excuse people from following some of the rules and tradeoffs of a civilized society. As if you can provide enough counseling sessions for someone to not break into your car.

What the city is experiencing now is the payback for its years of inaction and unwillingness to put in place harsher and more orderly policies. You see now that everyone is fleeing SF because you don't live there longer than you have to, unless you're really rich or own your own condo. The empty apartments for rent are 10-deep on Zillow.

It costs too much to staff the police properly, and they get criticized if they arrest someone, so you basically only get a cop to show up if you've been stabbed. Unreasonable people protest every time you try to clean up a homeless encampment, so the garbage just shifts from 7th street to Cesar Chavez, to your next favorite corridor the following week.

It costs too much to staff Bart and Muni at a reasonable rate (or even check that people pay the fare), so you have people getting stabbed and shot on trains that are absolutely foul, and they wonder why ridership is so low. Supervisors are incentivized more to appear on camera saying they support BLM than actually doing things that make those lives matter in the neighborhoods. Let's promote looting and protest, and then regret later what it caused.

You build up points to cash in as a city when you really need it, and to make life better in regular times. SF wasted it all.
2020 Is the Year the World as We Know It Began to End
Having worked in politics, where Hanlon's Razor is often used to excuse malice, I'd suggest it is not valid.

People have reasons for acting incompetently - often those reasons are because the system is set up to enable that, in one way or another.

And it's most often the case that system has been set up intentionally in that way (or has been manipulated to get that outcome) - there's malice in the organisational big picture.

The effect is the same and the cause is the same as well.
Overlong encoding is not just non-canonical UTF-8. It is actually forbidden; it is not UTF-8. A decoder without checks can as well not return the codepoints you expect at all (that would be curious but if you try to heavily optimize one, maybe you can end-up with a result that does that).

So at the point where you do UTF-8 -> codepoint decoding, it is perfectly reasonable to... validate UTF-8 -> codepoint decoding? (or do a safe decoding that copes with invalid things)

Yes you might need to do other kind of validations after that, maybe (or not) some related to Unicode, maybe even some completely unrelated to Unicode and unique to your application, but so what? That does not make UTF-8 encoding validation useless.