skysight-inc/HackerNews huggingface dataset:
> Just build in what you know.

Yup, I agree.

The apparent difference in our situations is that you know React and everything that comes with it. It seems like that'd be a good choice for you.

I'm not proficient in any of the currently popular frontend architectures. Gaining that proficiency and moving a 10+ year old product to a SPA type architecture would be a massive investment. I enjoy learning new things and pushing things forward but I can't justify that investment when it comes to the frontend. Instead, I invest in other areas to move forward in.
Keto diet helped me a lot with my migraines. As soon as i started to eat more carbs again the frequency of my migraines increased. Also wine is a big trigger for me. Would be nice to try this.
I feel this comment a lot. The art work was just amazing but the urge to go all the way down was higher.
IMHO there's an opportunity for a lot of disruption in the CA industry. Managing a lot of certificates gets out of control pretty quickly and if they build a system with decent hierarchical authentication you can start to see a situation where large companies might opt to use them for most (or all) certificates. Put another way, imagine being able to log into your dashboard, create a sub-user and assign permissions for that sub-user to issue certificates for subdomain.example.com.

You can limit certificate issuance to a single issuer via CAA in DNS, so you could set your domains to use ZeroSSL exclusively and ZeroSSL could validate ownership of a domain to allow you to create that hierarchy.

I can think of a lot of value added services that can be sold alongside SSL certificates. One example would be CTLog monitoring including for lookalike (FACEB00K) issuances.

The other thing with SSL is that a lot of people equate it with domain security, so I think there's a certain level of domain monitoring that could be sold alongside certificates. Things like domain expiration monitoring, registration of lookalike domains, NS changes, DMARC reporting, etc. all start to feel like a single "domain security" service.
Have you messed with the docker compose integration?

Did you like it?
How do you pronounce 'news'? As an american I've only ever heard it as 'nyooz'. Do you say 'nooz'?
The is the very definition of 99% of salaried grades outside of some edge cases - IE no fixed hours of work

I new one company that I worked for where many salaried grades actually worked many hours every week over the "expected time"
It's so weird to see everyone think of everything in terms of money, everything being done in the name of it.

> what if a business need comes across for a desktop, a website, mobile apps, fully responsive, theme-able, animated.

What if someone wants a baby in a month? It doesn't work like that. No matter how hard you try, it takes 9 months. It's the same with quality software. These arbitrary unrealistic deadlines help nothing.
Seems like a good way to perform surveillance, governments and agencies will be the clients. "You are our product" - Microsoft
From my ~1 year of experience with terraform, the simplicity of HCL leads to some pretty complicated config. In particular the absence of a true if, and the inability to define custom functions, or use any kind of condition or iteration on modules.
Has anybody here ever gotten a migraine that started in one of your teeth? That's the most interesting start to one I've gotten, but I looked it up and couldn't find anything about it anywhere. Maybe it was a fluke.
Gotcha, thanks for the info! Do you know if were just doing run of the mill Pod deploys of like wordpress and little MVC apps and stuff with no K8s api calls we should be fine?

I like the autoscaling and the infrastructure as code, and price for DOKS is good.
I don't know. I can't even speculate without knowing what you mean by "access to the enclave".

If you mean access as in being able to arbitrarily read and write keys or data to/from it, then no, you won't be able to access it that way. After all that's the whole point - even physical access to the hardware won't enable you to extract information (keys, etc.) from it.

This means any data or firmware stored on the chip by Microsoft or any OEM (e.g. firmware encryption keys or device signatures) won't be accessible to consumers.

TPMs define interfaces, though that allow programs to access its capabilities, so there are ways to interact with the hardware (and those are documented as well so you can write applications or operating systems that support it).

To get an idea what the interface looks like, you can check out the documentation of the Windows API: https://docs.microsoft.com/en-us/windows/win32/secprov/win32...

There's also a list of some TPM commands available on the same site: https://docs.microsoft.com/en-us/windows/win32/secprov/addbl...
Edit: Cell voltage in a tesla is only 4.1V max. But there are systems with up to 375 total so I guess it's a valid question, especially as company's (not tesla AFAIK?) start putting cells into the body to squeeze as many as possible in...

Original question:

Isn't it all low voltage?
There are definitely differences between dealers. The one in Austin was superb. San Antonio and Raleigh were very good. The one here in Charlotte, while still good and better than any domestic brand, is not "Lexus good"

Lexus of Austin would have owners lined up out to the street every morning to get routine services done. The one here, not so much - and I don't think they understand what they're doing wrong and the business they're missing out on. I mean, when your customers prefer going to "Monkey-Lube" over you for their oil changes, that's a problem.

My experiences with Lexus Corporate have all been amazing. They replaced the dashboard about 4 years ago as part of a recall, on what was then a 12 year old SUV. I have never heard of a carmaker ever doing anything like that. Over the years I've owned nearly every brand [0], but when it comes time to replace it I want another Lexus.

[0] The Mercedes dealer was great, always getting me a service loaner. They would greet me and knew me by sight - because something went wrong on average every 8.5 weeks with my 1999 ML-320
I'm using https://github.com/showmewebcam/showmewebcam, which is a prebuilt image with a (more) finely tuned uvc-gadget implementation and lower CPU usage when idle (I've added a few tweaks to it myself). It also boots _very_ fast.

Works great, although you do have to fine-tune the settings for your environment (which you can do by editing a camera.txt file on the SD card or using a serial TTY via USB)

(edit: typos)
Those distortions are generally called "auras"[1] (though my experience of them is more like a combination of TV static and tunnel vision). I find them to be potentially more unpleasant than the pain that follows, at least if I am not indoors and sitting down (trying to bike home during that is life-threatening; ditto for driving).

1: https://migraine.com/migraine-symptoms/aura/
Imagine it can only run MS Linux or Windows.
I stopped reading and started puking when I read “chip-to-cloud security”
”Might be” — that’s the point. Whoever feels comfortable pushing this code should be comfortable with explaining their rationale.
Another factor is that Mac software was never able to rely on the availablility of AVX instructions anyway. macOS Catalina was officially supported on some systems with processors as old as Ivy Bridge, which lacked AVX support.
You can just select a different mic input? Or desolder it if it's a security concern?

It's not that difficult, speaking as someone with three left hands when it comes to soldering (or drawing for that matter) and next to zero experience with hardware/electronics. Recently took out the camera board from a webcam and added an LED: that consisted of removing a few screws, wiggling some plastic clips until it came apart, and finally a bit of yolo soldering an LED from an old keychain light onto the + and - pins of the USB connector. It's almost certainly the wrong voltage but it works. I also removed a speaker from an annoying toy: undo a screw, wiggle, identify speaker (activate the toy a few times), and just hold the soldering iron's tip to the pins until it comes off. With a 5 minute internet video on how melting solder works, I'd be fairly confident that my mom can desolder a microphone without damaging the webcam. (She'd just need more confidence in herself..!)
> Our department has trained on hybrids (don't cut the big orange cable!)

Keep training up to date. Hybrid HV wiring has a conductive sheath around the actual wiring, separated by non conductive layers. The purpose of this is that when your tool cuts such wiring, it shorts the sheath first and trips a breaker, so that you should be able to cut.

There's a group near here (WA state) that does demos including "throwing" (dropping) battery packs into wading pools while still supplying power, and cutting HV cables on running hybrids to demonstrate this.

But then again, there's near zero reason to do so. Stabilize the vehicle, kill the 12V. Our general go-to? Put the hazard lights on. If you stop the hazards, the vehicle is "generally electrically safe".

Biggest risk that isn't often talked about? HID headlights. Picture being up against the frame of the car. Regular headlights, bulb broken, possibly? Pretty low risk. Broken headlight, and behind it is a high voltage arc? That's a very real electrocution hazard.
Nice "hack" with incognito! I also notice that Youtube will catch on to a random video I watch and recommend me similar things, even if I am not interested in those topics. I'll think about incognito in the future! "Right Click -> Open Link in Incognito Window"
Presumably they mean 5% of their customers use at least that much – some of them much more.
Probably ran out of memory.
I run three different SaaS products by myself, spend a couple of days per week consulting and lead a pretty full life with young kids, volunteer firefighting, hobbies, etc. Each of my products probably equates to around a 1/4-Man SaaS.

They're all server-rendered HTML with a little ajax sprinkled around the place where required for interactivity. I use Materialize CSS to give me a leg-up on the design side but the next thing I release will be on Tailwind UI.

They're all written in Go using a simple MVC-ish pattern. I write a lot of integration tests and a few unit tests.

I use Google's hosted PostgreSQL database. It's not cheap but it's not expensive either and it's been rock solid. The frontends are all on Cloud Run as of a few months ago which has been wonderful. Super reliable and fuss-free. Takes care of all the application logging, etc.

Task queue stuff is handled by a library on top of Postgres. It won't scale to a billion jobs per second or anything but it handles load just fine. If I ever start pushing it's boundaries it's all pluggable so I can switch it back to SQS or PubSub or whatever else.

The task workers run on a single-node k8s cluster hosted on GKE. A lot of people grump about Kubernetes being "overkill" but it doesn't have to be complicated. A single YAML manifest defines your service and your environment variables, you tell GKE to make it happen, you go play in the sunshine. It takes care of restarts, logging, full disks, etc etc etc all for you.

I use Amazon SES for emails. I had some real problems with deliverability until I ponied up for a dedicated IP address and now it's fine.

I use Freshdesk for ticketing. I don't love it at all but I don't yet hate it enough to replace it with something else.
By jailbreaking the iphone, could we use Chrome or Firefox with their own web engines and features (such as web push notifications and install to desktop)?
Utah monolith goes viral after its found in remote area
There is no free lunch but you can make strategic choices that fit your needs. We ran an 85ish John Deere grader for years because it worked great for the kinds of jobs we did. It would break down but we usually had downtime between road jobs where we would do other work and fix the grader on the side. Turned out to be our best value piece of equipment in terms of dollars+labor in vs. dollars out.

We had a 70s Kenworth truck tractor that had been converted to a dump with a 12 yard box. It was practically invulnerable and while it lacked many modern bells/whistles it met all our needs. Paying for new equipment would've been paying for features we did not need.

Our main backhoe however was always new. This was for various reasons. At the time there was a lot of innovation happening with small backhoes and that included features we used. Often we were using our backhoe for residential work wherein new equipment makes a big impression. Also, a backhoe failure can be much harder to fix onsite it made sense to have low hour equipment.

IMO, this is how equipment purchasers should make buying decisions. Match the purchase to your need.
True but they won’t have lateral access to your local network nor would you be entering credentials to online services.
>>I tend to go with US-based companies because they would legally be liable for damages

I am not sure under what legal basis you draw this conclusion given the EULA's and other laws explicitly shield them from said liability

you would have to prove intentional malicious intent not simply negligence

One of the big problems I have with more US Companies is they are a network of vendor Lock-in proprietary ecosystems that often do not work well together at all.

I prefer Open protocols, which sadly seem to be only adopted by non-US Companies.
Hey Anthony,

I really like your product. It's crazy fast, might solve one of my issue, is super simple to use, and the UI is gorgeous.

I've a few questions though:

- how do you compare to other privacy focused analytics tools, such as https://usefathom.com/ or https://simpleanalytics.com/?

- it seems like you just launched your SaaS a couple of weeks ago. Why didn't you launch it earlier by removing some not strictly necessary/MVP features, such as the security login emails, the ability to manage multiple websites, a less scalable but simpler architecture ... ?

- how much time have you spent developing the product? I've been working on my personal SaaS for more than one year, planning to launch it in the next few weeks. I'm still working at my 4/5 full time job, and I really wonder how you managed to deliver this beautiful product while still working fulltime. That would be a wonderful opportunity for blog article BTW.

Great work!
https://archive.is/DDHQT
This, having read "into the silence" about the mountaineer George Mallory it explained that in the 19th/20th century english prep schools were rampant with sexual abuse(student on student).
Sure you can. Just takes $$$.

Take however much those tickets cost then and then just adjust for inflation. I'm sure they weren't cheap.
A strategy I've seen in similar scenarios is to apply a kind of inverse-ordered read to the last chunk. Instead of reading bytes x through x+n (your actual data) and x+n+1 through x+15 (outside the edge of the buffer) you instead read bytes x+n-15 through x+n and then apply whatever logic you're doing to mask or exclude the unimportant bytes to the beginning of that chunk rather than the end.

Note: you still have to be careful if your entire input is less than 16 bytes, there can be other alignment issues, etc..., but it _might_ be better in your situation than a similar fix that other comments have mentioned which applies the fast read to all but the last partial chunk and then finishes the tail with some slow cleanup code.
You can just keep a smart tv off the internet, no?

By a stand-alone Roku for apps?
I worked at a place (public company, retail) in college where the general managers task on Wednesday night was to “trim” the payroll by editing out fractional hours or reducing spiffs. The managers got a bonus if their labor spend was between 98.5% and 99.25% of budget.
Comma.ai self-driving tech beats all others in consumer reports [pdf]
Yup. Rhymes with "booze", "snooze", "ooze", and "screws".

... and "lose" to bring this full circle.
I remember those trees with the faces. I think I read about Zoomquilt in the mid 2000's in one of the magazines I used to buy. And I think they included a copy of the swf on the cover disc, which was nice because I probably didn’t have Internet on my computer back then.

The magazine where I read about it and got the swf from was I think either Digital Creative Arts magazine, or Digital Arts magazine, or Computer Arts magazine. All of those were different magazines I used to buy from time to time. Could also have been ImagineFX magazine or in one of the web design magazines.
> one bump or connector dangling over the edge of your desk that gets hit by a hip and you have a device reenumeration

It’s fun to think about the horrors which might result with similar mistreatment of old school external SCSI hardware. USB is fine; use quality cables and don’t run your computer in a disco if you can help it.
This is probably due to my own ignorance but I haaate helm. I'd be interested to read more about how you use Flux.
> but her personal history just isn’t conducive to anything remotely hallucinogenic without a very highly experienced guide in the best of circumstances

Perhaps, given her suffering, it's time to find that guide.
VC raises $800M for Resililence, which aims to tranform biotech manufacturing
there are plenty of people who, e.g.

- don't want to show their face on the internet

- people whose appearance is ambiguously gendered

- people who are not the gender that people assume from pictures of them

- people who used to be addressed as a different gender

and, when addressed, want to be referred to correctly.

for instance, i'll never show my face on the internet, but i like it better when someone says "_he_ wrote that program" rather than "_she_ wrote that program."

for all those people, it makes sense to put their pronouns in their bio.

but that leaves the problem: if only the people in the above categories put pronouns in their bio, and you have pronouns in your bio, that might imply you are, for instance, ambiguously gendered.

so people who are conventionally masculine like Rich put pronouns in their bio to normalize it, and to make sure that "having pronouns in one's bio" is not a "thing only OTHER people do".

i think it's a good thing to do. i'll do it too.
If I may chime in here, I would humbly suggest that it is best done by whoever enjoys it.

Sometimes that might be your employee, and sometimes that might be you.

I guess it depends on where your passion lies, and what your objectives are?

I imagine that achieving one's financial ambitions in a relaxed and enjoyable work environment is great - irrespective of which part of the stack one enjoys tinkering with the most.
If the hardware is made in china, the companies can get it for probably cheaper than anywhere in the world. Also the labor in china is dramatically cheaper. Is there a union of telecom workers in China?
Of course China internet is going to be cheaper. That doesn't mean there should be such a difference between USA and China prices, but not surprised there is some, nor would I expect it to be the same or cheaper in the US. US has higher impute costs. As a pct of income of avg person what is internet access in China vs US?

This of course leave aside the what constitutes the internet you get in China vs USA
Man the clutch pedal felt so stiff when I was thirteen.

I had to stand on the friggin thing.
Show HN: Track Government Activity on GitHub
This page lists the most recent activity of 100 different U.S. Government organizations on Github.
> In a similar note "DevToolsSecurity -enable" allows any admin or member of the _developer group to use the debugger or performance tools without authing first.

Oh nice! That was a big annoyance on older systems; glad to see they've fixed it.
I agree that a lot of people are willing to regurgitate corporate marketing without being paid.

I'm still prepared to call that "shilling".

So-called influencers exist on this basis. Influencers' work is initially unpaid, until they show they have a following and can be comfortably loyal to brands. If you follow growing social media accounts, especially on TikTok and streaming platforms, they'll quite often make it clear they hope to be rewarded later (correctly or incorrectly).
Anecdotally some elite athletes who have experimented with vegan diets reported that they had more trouble recovering from injuries. (No I don't have a good citation for that; the nature of the issue makes it difficult to conduct a properly controlled study.)
I remember having used jailbreaks years before I even knew how to use the terminal. Adding one untrusted source here and another untrusted source there, download some package from some shady forum, on public wifi with root:alpine...

Oh boy, what security risk we took only to change the default font of the system...
I have plently of home automation, none of it is controlled with my cell phone. IMO That defeats the purpose of AUTOMATION

it should be automated, you have controls in the house that trigger actions, ie a door opens, or a light switch is triggers.

If I have to use my phone to control it, I have failed at automation
Hrm, maybe over USB it's different because of the performance limitations, but my understanding was that SATA was lower power draw.

Though maybe I'm wrong and/or potentially this differs on a per-drive/per-controller basis.
Be more worried about the carbon fiber. In many ways it is like dealing with flamable aspestos.
People who can't read or write aren't less smart than other humans.

No, there are no animals at all, anywhere even close to the smartness of humans. It's not a small difference, it's a HUGE gap.

When we talk about how smart apes, or dolphins are, we are talking relative to other animals. Relative to humans, it's almost nothing.
And forgo any security updates in the process.

An Android device with AOSP firmware will likely suit these needs better.
Here’s a good example of 1:1 denormalization: Say I’m running a music streaming service. I can store my music tracks as a giant database of MP3s, ID3 tags included, and parse out each ID3 tag on each read. I could, alternatively, store the music tracks as a giant database of music tracks, which has “Artist”, “Album”, etc. fields, and one field for “MP3” that contains no id3 tags. Both are “normalized” data structures. Storing the id3 tags with the MP3 would be denormalization. It might be much saner to do that than to reconstruct them every time someone goes to download them.

For performance, though - You want to store the MP3s in their own table, or not even in a “table” but as a blobstore. Storing the MP3 files for your tracks inline is entirely feasible. 3-10MB inline blobs will work in your modern database engine of choice, and simplify a lot - But you’ll often want to write your presentation layer with “SELECT * FROM tracks” - And you can do that if you just store the data blob separately; i.e. denormalize.

If you have hundreds of fields on a record, selecting from the subset that are actually relevant is far, far saner. Particularly when a large group can be nullable, and will likely be nullable together. If 10% of your business is washers - Washers of every shape, thickness, hole-size, material, etc. - You will have all of those attributes in your parts database. It’s best to treat those as first-class citizens, but they belong in a nullable 1:1 relationship.
> (On the other other hand, salt water is metal killer...)

I think this is the key. The modern world is an electrified world. But the other things you point out are in some cases advantages are also disadvantages. But I think the biggest thing is metal and electricity.
Right. Referring to exact versions of dependencies is a feature of the functional package management model. How else can you guarantee that the program will behave exactly the same every time you run it?

Guix (unlike Nix) supports "grafts", so you can change something deep in the graph without having to compile every dependent package again. But grafts also produce different store items of course, so no big difference for "guix pack".
Starting a Startup Starting Now