skysight-inc/HackerNews huggingface dataset:
OCSP is deliberately done with plaintext HTTP, because otherwise it's potentially infinitely recursive. To be clear: Cryptographically this is fine, the OCSP answer itself is signed, so an imposter can't show you a bogus answer (though they could potentially show you an older but not yet expired answer pretending it's the latest they have). But in privacy terms it has negative consequences.

You could in principle fix this (with technologies that were invented later, like OCSP mandatory stapling) or you could use CRLs for everything. But we don't.

When used as Apple apparently did, the effect of OCSP is that any certificates being examined are reported (by serial number, but you can look up the certificate itself of course) to their issuer by your machine each time it checks. This is why browsers like Chrome or Firefox do not do OCSP checks.

Suppose (in a browser) you visit Porn Hub. Well it makes sense that Porn Hub know you visited, but it would probably surprise most visitors if DigiCert (the Certificate Authority which issued their certificates) were told you visited Porn Hub too. Likewise then if you're running some hypothetical porn app, the CA would be told each time on Mac OS apparently.
I think we have a metaphysics for software development already, but it is under-applied and underrepresented. We hear a lot of talk about software being either an art, or a science, but really it's a systems discipline. Using the tools of systems science on software makes a lot of sense in my eyes, but as far as I'm aware nobody has put together a decent description of what this looks like - I just do it off intuition I've built over time, as I suspect most programmers do.
I wonder what the non-gaming desktop market is like now. I developed for 15 years on a desktop and my latest machine for the first time is a laptop. They used to be twice as expensive and half as fast but now it’s a smaller difference so being able to move it is worth it, even though I almost never do.
According to this article all of the Project Managers where fired: http://www.slate.com/blogs/business_insider/2014/04/25/googl...
It's not really fair to put the N1 in the category of successful giant rockets that have flown. Yes it flew, it exploded every time. No third stage of an N1 ever made it to low earth orbit.
I have an Ecotec Pro 24. It's rated to 30kW. That's so I can have a decent shower. You could maybe run 2 showers off it, if you both don't mind low pressure and the heating is off.

I'm a brit in a small 3 bed 2 bath terrace house (I think you call them row houses in the US? Assuming you're American, apologies if that's wrong!).

30kW at 120V is 250A (it's actually more because of ACs power function). That's way above what a standard house or a domestic supply is designed to sustain.

Now add to that that this huge peak power is very synchronised. You, your neighbours and everyone else in your neighbourhood shower around the same times. And those aren't times renweables are most available. This is no problem for gas because you can store gas and pump it out as needed. But for electricity? You'll need to revamp your grid, forget non-constant renewables like wind or solar (I'm a fan of both but they're not suitable). And you need to build a tonne of capacity that won't be used 90% of the time.

This is the killer app for gas.
HN crowd would of course immediately notice it. Of my non-developer friends, not one person even notice any outage or issues.
Essentially yes. You are terminating one TCP connection. Shuffling the data stream over your tunnel however you want and establishing another TCP connection at the other end. The only real difference is that the source and destination address isn't changed.
Poetry is great, it vividly expresses how one feels, often about nature.

This is ideology - it has a distinct stink to it, an agenda, a point of view that wants other people to be other than they are.

Most people think this way - they just happen to have a happier disposition. Most people 'feel' a certain way and get taught a certain ideology (in school, media, friends, parents) which then shapes their worldview. Instead of questioning the world view they already have, they simply live in it and project wrongdoing and rightdoing (morality) onto others and the world.

It's like being taught to walk barefoot, pricking your foot and deciding small prickly objects need to be gotten rid of. It never occurs to them to wear shoes.
"Apple, Ge, Microsoft, and Twitter argue that ‘race-conscious admissions policy’ produces the graduates they need"

This is a perverse and unfair circular argument. Corporate America has decided that racial diversity in itself is the pre-eminent goal, taking precedence over treating every human fairly and equitably as an individual rather than as the member of some group.

Given the false premise that maximizing diversity optimizes fair treatment and productivity, yes, it follows that race-conscious policies produce the graduates that corporate America wants.
Yes this article has a very sane conclusion.

Yet, I'm happy to see that there are new studies (or a least this one) to find out in a randomized way if there is more than a weak correlation between the two.

I tend to believe, after all the discussion (here notably), that in the case of COVID-19 it is more a marker of a healthy lifestyle/diet than anything else. I would love to be proven wrong though!
FYI, your comments seem to be shadowdead. They are dead when signed in, but not dead when not signed in.
well I can speak from experience. Since i'm at home more. Not going to bars and restaurants. I make cocktails at home and then order food because I am not able to drive to pick up the food.

This is the main reason why food delivery makes sense to my situation.
> Like I just said, the folks who use it. At 10 cents per person, that would about cover it. What's the question?

You repeatedly said 'Charging for storage is becoming silly. Its [sic] essentially free.'

Now you're saying you agree actually it requires hundreds of millions of dollars in investment and so people should be charged for it.

> Read my comments again if you want to understand.

But see how your comments contradict yourself? It should be free but people should pay for it. Which is it?
1. The people who are most "shut out" by the complexity of the web do not, by definition, speak Javascript. These are the folks who need Anvil most! Most people who speak JS already know web-dev (why else would you learn JS?)

2. Python is the most popular language that isn't JS. It's used for teaching almost everywhere, it's used for data science, it's used on the back-end, even embedded code...

3. We wanted to start with an "island of sanity". If you google "how to do X in JS", you'll find StackOverflow and end up tweaking a DOM node, or making an HTTP request, or grabbing something else that breaks the abstraction and brings back the traditional Web hairball.

We want to make it easy to escape, of course (I wrote an whole essay about that[0]), but not so easy that you wander out of it without realising, and then find that the autocompleter no longer understands all of your project.

[0] https://anvil.works/blog/escape-hatches-and-ejector-seats

4. People who speak JS have already invested in the web - they've paid the price, got the scars, and probably have more than a little of their professional capital invested in "being a web developer". We want to win them over in the end, of course, but they would have been a very hard target market for an MVP!
Delivery drivers do multiple restaurants at once and some use multiple delivery apps, so it's somewhat more efficient than taking the roundtrip yourself.
A nice reminder that it's pretty easy to setup your own Gitea and Drone. Happy to share details of folks are interested.
Fun with the Synetix SuperSprite Board – An Apple II TMS9918A Card
I know in the Netherlands they have these little 'cars', that are essentially mopeds with a roof slapped onto them. They are speed-limited to 30mph and crash safety is on par with what you'd expect from a moped. You can drive these with a moped license (easy and early to get). You can only drive on roads limited to 50mph (most state roads and inner city roads).

I'm not sure why this is allowed as these things are noisy, unsafe, and hold up all other traffic. And they are not limited to disabled people either, anyone can drive these.

They used to look terrible and nobody wanted to drive them, but since they don't require a full driver's license and are not taxed annually, they have become more popular, and now look mostly like regular cars.

Search for 'brommobiel' or 'mini car' to get some examples.

What the law intended: https://alleverzekeringenopeenrij.nl/wp-content/uploads/brom...

What you can actually buy: https://media2.autokopen.nl/auto/brommobiel-aixam-crossline-...

That last 'car' has a whopping 8 hp.
I get emails for all comments and PRs. It would be annoying to lose the GH interface but not repo ending. Allowing issues or pulls to exist only on GH is equivalent to having only a single copy of a something important on an old laptop. Basic backups of any kind solves this issue.
It goes without saying, but if you're gonna use those apps, please please please tip your drivers. These apps make it so hard to discern how much they make, especially when "free money" for customers is involved.

Personally, I think companies like DoorDash set a really dark precedent for the future of work in the US. Their primary value as a company is their ability to manipulate how thousands of people get paid, not to ensure top quality service.
Good operation for the founders. They have 42M stocks + 35M options which should yield $3-4B. 3 newly minted billionaires.
This will remain opinion until we can get longitudinal studies that account for this. Current pediatric recommendations are basically no screen time for small children even though there are apps specifically for educational enrichment. It may be that all screen time is bad. Until the educational and informational parts are accounted for, all we can do is speculate.
Google says API’s can be copyrighted now. I thought the oracle case was ongoing:

> Additionally, the Git repo contains several files that violate Google’s copyrights:
Google license_protcol.proto (see Google copyright at the top of the file): /widevine-l3-
To add: Tip cash! Never tip in app!

EDIT: To those who ask why, you cannot trust the app to disburse the "tip" to the worker.
My Parachute Failed
I don't know if I agree.

I think in a lot of ways, UI ebbs and flows; a lot of modern UI feels pretty terrible and non-intuitive, and re-designed for the sake of being re-designed.

And at the same time, writing software is tremendously easier than 20, or even 10 years ago. But maybe that's an ebb-and-flow issue as well. I tried adding React to an existing project last week, and was completely unable to. Everything broke. I'm debating which is the less-bad option - create a new repo, starting with React and gluing everything else around it, or moving just-the-react parts into a repo of their own. I'm tired of trying to figure out how to glue disparate, opinionated things together. I'm missing the Unix philosophy the author is talking about.
Lol, so if earning millions as a politician is so reprehensible in your eyes, how do you feel about the fact that Trump has spent taxpayer money on his own resorts? Last I checked, his golf tab has run into the hundreds of millions, over a million just in hotel rooms for secret service agents. Trump is easily the worst political grifter since Al Gore.
It seems to me like a poor joke - He likely meant that by being a white male, he is not helping out on the diversity ratio.. not that he has undesirable identity. He could have better phrased it as 'yeah.. I just joined and that did not help the diversity ratio' which would still be funny and will make the same point. I also think you are overly sensitive to race issues and that makes it worse.
Re: the Pro and Air difference... expect the performance for anything long-running to be rather significantly different, I'd guess...
Apparently not a whole lot since given the data they show, desktop computing was hit hard. I admit this came as a surprise to me.

I had assumed, from a combination of the title and my intuition about 2020, that desktop computing would be enjoying a resurgence. My thinking: many of us are stuck at home and desktop computing is the premium computing experience—especially for enthusiasts, gamers, content creators, engineers, programmers, etc. We're no longer carrying a computer to and from an office each day, so the value of a laptop is diminished. In fact, when my laptop died in April, I didn't replace it for several months because my home workstation is what I'm using every day and I wasn't traveling anywhere.

I suppose enthusiasts don't really count for a big enough market to lift the numbers. Still I would have expected 2020 to be flat on desktop computers, not dramatically down.
From how it reads from here, he's not apologizing for being white, he's apologizing for on the one hand being part of a company committed to diversity, yet on the other hand it may appear like the company's perpetuating the "all higher-ups and board members just so happen to all be white males" level of "diversity"
It's funny because I'm the opposite. Started doing development on a desktop computer (family computer), as soon as I became a paid developer, started using laptops, first Macbooks and later others. Bought my first desktop computer for work about a year ago and couldn't be happier.

Doing any sort of creative work is just unbeatable on desktop computers. And development work is also much nicer. Even if the specifications are the same / below the ones of laptops, the computer runs faster as the cooling is much better.
Thanks, that is a good link. Reading on it seems they weren't fired after all.
CF indeed becomes the actual host of the content, so I imagine (if it gets routed correctly) trust&safety will suspend the worker and/or the worker KV namespace until you contact support to counter.
"last major gasp [...] that has completely taken" Uh, does anyone else see a contradiction there?
That article (and others) say it's because "Google hired only the most talented engineers, he thought that extra layer of supervision was not just unnecessary but also an impediment. He also suspected that Google’s project managers were steering engineers away from working on projects that were personally important to him. For example, Page had outlined a plan to scan all the world’s books and make them searchable online, but somehow no one was working on it. Page blamed the project managers."
Real hackers don't need secure boot and code signing either. :) Real hackers have backups, plan for failure, and are not afraid of consequences.
I understand the sentiment, but how many people were ever going to understand their systems at that level? I'm sure Gen Z will have their own tech equivalent of Roy Underhill telling them to put down the Ikea bookshelf and grab an axe and a log, and that the number of people who respond then will be about the same as now.
decency and pragmatism are also emotional appeals
...
We’re more likely to get those things by being angry

I think it's clear whether Obama's supporters or detractors are relying on emotional appeals.
I appreciate the analogy but this the difference between climate and weather can not be scientifically explained by analogy.
Compared to older .net runtimes. I'll take any application, the linked F# compiler benchmark was already interesting.
The EncodePointer function for obfuscating pointers
> Tablets are becoming another version of PCs, especially with all the Apple news lately.

> Form factor isn't a differentiator here anymore. Tablets are becoming general purpose computing devices.

You've referenced Apple specifically in relation to all this.

Note that Apple's official position disagrees with you, as seen in their lawsuit against Epic, and their claim that iOS devices are more like app consoles than general purpose computing devices.

The most worrying part here is that we're already sliding into a world where we're accepting these walled gardens as general purpose computing devices, when the manufacturer is stating definitively that they do not see it this way. The limitations we're imposing on ourselves is a shame.

(EDIT: to add, I'm on my third iPad now and continue to be very happy with them. I'm part of the problem.)
The Stroad, a street-road hybrid that frustrates everyone – Strong Towns
The proliferation of DRM technology may look like the result of bad consumer choices, but the reality is more nuanced. What percentage of consumers know that their content is DRM encumbered, or what DRM is even? This is a result of subtle consumer behaviour manipulation.

Let's take the case of widevine itself. It wouldn't have proliferated if Encrypted Media Encryptions (EME) standard wasn't shoehorned into web standards by Google. EME allowed companies like Netlify and Spotify to demand proprietary plugins like Widevine in an otherwise completely open standard. Independent browser implementations became impossible at that point. EFF and Mozilla protested. EFF withdrew from W3C and Mozilla was arm twisted into agreeing. Now look at this from consumer perspective. Vast majority of users simply wouldn't have noticed these moves that would ruin the web in some way for them later. Most of them wouldn't have noticed DRM being rolled out. Everything seems to be normal - for a while. With this and a few other moves, it's clear that DRM based content will be unviable on independent browsers and open operating systems. At that point, most consumers will negligently decide that these browsers and OSs can't play DRM content because of software quality issues, and will switch over to locked down systems. That wouldn't have happened if DRM was presented as is to consumers from the beginning itself.

A few people who hate DRM holding out is not a solution for this. At this point, consumers have funded DRM based streaming companies to grow into megacorps and they have killed their competition. For consumers, it will be a choice between freedom of platform choice and availability of media. This is why EME should never have been allowed in the first place.

Another example of the futility of 'Don't use what you don't like' argument is Chrome. Chrome gained market share over Firefox using similar tactics. Now we don't have a viable alternative for blink web engine. This is an ambush on consumer rights - sneaking in silently and then killing it.
Is that what happened here? I doubt thousands had worked on this repo.

They exist, they're just not as popular as github.
I wasn't aware of this - thank you for the heads up! I'm new-ish to HN - is it considered good form to delete the post?
It made sense as an institutional flywheel.

The Constellation Program [1] that preceded SLS had two vehicles - Ares I for ISS crew and supplies after Shuttle was retired, and Ares V for occupying the moon. The missions gave some justification for needing vehicles. Their design was primarily a means to preserve existing contracts and jobs. Additional wheel greasing made it happen.

That stuff about re-using parts to reduce risk is just what people say because it sounds good, but isn't inherently true. Kind of like how "drug delivery" and "machine learning application" are go-to pseudo-justifications for many research proposals.

Constellation was eventually canceled when ISS resupply went to the Commercial Crew Program [2]. Ares V was stripped down and reimagined as the mission-less SLS. SLS is not really intended to do much more than exist for the time being.

There are a lot of factors that will go into canceling SLS - infighting between NASA centers, preserving jobs and contracts with Old Space companies, even more wheel greasing. I'm interested to see how it plays out.

[1] https://en.wikipedia.org/wiki/Constellation_program

[2] https://en.wikipedia.org/wiki/Commercial_Crew_Program
Aveiro: The Portuguese city that's a living technology laboratory – Euronews
Ask HN: Why isn't contact tracing data public?
Governments have touted contact tracing as one of the requirements to solving COVID. Yet we see limited usage of this data publicly. Contact tracing has not been used to link outbreaks to specific events/places/businesses; instead we get broad restrictions that seem to be just talking points. For example: NY allows in-person dining only to 10PM; apparently you can only get COVID at late hours; if restaurants are the source of outbreaks shouldn't they be closed when they are busiest (say, 6-8PM)?

That brings up the questions:
- Is the contact tracing data even being used?
- Wouldn't publicly available contact tracing data allow more people to analyze the data and build models of where outbreaks are occurring?
For more context: this kind of work could fit nicely into the malware auditing system that was designed and implemented as part of the RFI that the blog author originally linked to[1].

Most of the infrastructure on the PyPI side is in place[2], but the current checks are mostly proofs of concept/exercises of the new APIs to ensure that they don't atrophy.

[1]: https://discuss.python.org/t/what-methods-should-we-implemen...

[2]: https://github.com/pypa/warehouse/tree/master/warehouse/malw...
Big Sur-prise is nothing works on it apparently.
Probably because iMessage craps out about once a week already so users are just getting more patient with unreliability.
A federated code hosting platform would solve this problem. Having an account on one and being able to create issues or merge requests on others, would make getting away from Github much easier.

Right now, any other self-hosted code-host needs you to sign-up or use OAuth2, which frankly is quite annoying. Whoever suggests mailing lists should really get with the times. It is not a fun experience in the slightest.
Right, I totally get the leaf blower and thank you for writing that. But the scientific boundary between climate and weather cannot be a analogy. It has to be more rigorous than that.
When I studied Calculus 1 Khan Academy didn't exist yet and I had no one to turn to for tutoring. I fell into a depression and wasted at least a year of my life.
As long as everyone in the city isn't charging at peak time, the capacity issue can be handled. The grid is sized for peak loads - that moment between 5 and 7 when everyone in the city gets home, turns the heating on and starts cooking.

That means rolling out demand response charging - not technically hard, but absolutely necessary before electric cars are too ubiquitous. We'll probably also find that in normal use most cars don't drive much on a given day, so they're not needing to draw full power all night to charge.

The charging infrastructure for those without a driveway is still a big question (one to which the answer isn't lampposts - there's at least a 7:1 ratio of cars to lampposts where I live).
I'm assuming Spotify ate their lunch, just like IMO why Apple Music sucks too. Better selection, discovery, ui etc so the userbase just isn't there for Google or Apple and is either dying or flat and humming along and possibly costing as much to operator or more than it is taking in. Ripe for getting the axe.
Fair enough. My snide question was uncalled for. Sorry. Thanks for the additional info.
The VC world and the economy of online startups are almost like a planned economy. The extremely wealthy allocate money for these expensive yet unprofitable online services, like uber, doordash, and UpWork, almost like socialist central planners. So many of these modern businesses would not exist without the safety net of the extremely wealthy.

Also, how is DoorDash still unprofitable, despite taking 30% commissions from restaurants, and 25% commissions from delivery costs, during a pandemic which has many people locked inside??? It's like the Quibi excuse but somehow worse.
https://www.theverge.com/2020/11/12/21563092/apple-mac-apps-...