skysight-inc/HackerNews huggingface dataset:
People need to be really close to hear what you are hearing. Open back headphones are not for the metro or bus.

But you can certainly wear them in your cubicle or home office without any issues for other people around you.

Especially if you work from home and have an office that is a room on its own (i.e. garage or basement) open-back are a no brainer for me.
The bit about Nate taking the flack for it being delayed was pretty good IMO. No insider acknowledge, but regardless of why it may have taken so long it's nice to see the buck stop at the top, at least publicly, even if done in a comical way.
How are you using Map data stricture in your JavaScript applications?
Screw Zuck.
I've had my share of connectivity issues with corded headphones, like pulling the cord out of the jack accidentally, breaking the wire inside the cord, not being able to walk away from the device I'm connected to without taking off the headphones, etc.
The architecture of dumping events into Kafka and creating materialized views is a perfect choice for many use cases - e.g. collecting clickstream data and building analytical reports.

If ACID is a prerequisite, then lot of things won't classify as databases - None of Mongo, Cassandra, ElasticSearch etc. Not even many data-warehouses.
https://en.wikipedia.org/wiki/Perfect_is_the_enemy_of_good
Because in the past most Bluetooth headphones were terrible and pretty much everyone got in pairing hell at some point. Airpods were much better than the status quo when launched.
This is spot on. Every now and then only one of my AirPods will connect and then it’s just putting them back in the case over and over until they start working again.
> Whereas letting two microservices access the same database tables would probably be frowned upon.

> Nevertheless, sharing the same Kafka topics between microservices seems to be a common thing to do.

I think if it is part of one whole isn’t this fine? You have one service that generates customer facing output, you may have another service that powers analytics/dashboards you may have yet another service that ETLs data into some data mart. Why wouldn’t they touch the same table/subscribe to the same topic (since they just need read-only access to the data)? Genuinely curious what the problem is except for bottleneck/performance; and if it just bottleneck then wouldn’t scaling horizontally solve it?
What I'm wondering is how open the CentOS build tooling is at this point, and to a lesser degree how open it was in the past and when it changed if it did.
We used SLES like that on our HPC. SLES and RH will run just fine without subscriptions if you don't plan to update them.

The license for RH precludes you from running unlicensed RH, if you have any licensed RH. I don't believe SuSE does the same.
This requires the same clicks as long press (or force touch) on bluetooth icon in control center.
I have mild afterimage illusion when viewing text or high contrast images.
Interestingly, the symptom is worse when background is dark than the other way around.
So dark mode themes are mostly no go for me mostly unless some transparency is enabled.
Of course, I can not use this github dark mode sadly at this state.
I understand where you're coming from, but that ends up being an inclusion issue in the project. I'm comfortable having my name and bio "out there" on the Internet, but I recognize that's a privilege. Not everyone who contributes to the project will be comfortable doing that.
What I like about Apple fanboy subculture is that it's generally positive. Apple fans can get smirky when discussing Apple but would't chase down and brigate, turning every discussion about competitors into "We are smart Apple elites but good for you for trying". Competitor hateboys are not common among Apple fanboys.

On the other hand they would be always targeted by people who are not in the Apple ecosystem, usually called sheep and explained how they are supposed to not be happy with the product they bought.

For me, Apple is the company that cares about experience design as primary concern and that's why I care about what they are doing. It's intellectually stimulating, much more than chasing the random metric that somehow everyone decided that it's the number to look for.
For example, lately everyone would talk about bezel to screen ratio. Previously it was Ghz, Megapxels, core numbers and what not.
I often end up at GitHub while not logged in so I am hoping they change the default setting to “use system mode”. That way, at least it will probably match what I currently have set on my computer even if I’m not logging in.
Plenty of anti-social individuals are masters of subtle manipulation and can min/max along social axis to reach their goals. It's dangerous to assume that individuals with narcissistic psychopathic features will always be "ruthless or destructive" because many (most?) will not.
I feel like I'm missing something here. It seems like ECH is still vulnerable to a MITM attack, allowing the attacker to see what SNI destination the user is attempting to connect to. I'm imagining something like this:

Client sends ClientHelloOuter, with encrypted ClientHelloInner.

Malicious MITM replaces ClientHelloInner with malformed data so that decryption will fail.

Server sees that decryption fails and proceeds with the ClientHelloOuter handshake, sending back the correct public key.

Since this message is (from what I can tell) in the clear, the MITM can replace the public key with its own public key.

Client then retries with a new ClientHello, containing a ClientHelloInner encrypted with the attacker's public key.

Attacker decrypts ClientHelloInner, re-encrypts with the server's real public key, and forwards. The attacker is now able to listen in on SNI, ALPN, etc, although the HTTPS traffic itself is still protected as the attacker can't forge the certificate.

This seems like a fairly trivial attack, which is why I think I must be missing something. How does ECH prevent an attacker from swapping out the server's public key with their own, in the event that the first ClientHelloInner fails?
Any "how to" recommendations for setting up something similar? I have a pi-hole but after reading this thread I feel like im severely under-utilizing it.
It looks like they integrate with it, but don't require it directly.
Do you really want big tech and alphabet soup agencies to have the social media history (secrets, likes/dislikes, usage profile) of our future leaders?
Amazon Linux 2 could be a viable alternative. In addition to being available to run on AWS, it's also available as a container image and in various machine image formats:

https://aws.amazon.com/amazon-linux-2/#Resources

AL has had enough work put into it over the years that, while it may have been inspired by CentOS/RHEL originally, calling it a rebadged CentOS is not accurate these days. A full and competent team maintains it. While it's clearly made similar architectural choices, those are also for compatibility reasons.

However I doubt that support is available for anyone not running it on AWS, at least not from AWS -- but then again folks running CentOS weren't paying for support from RHEL either.

I also wonder if the announcement is as bad as people make it sound. I'm not an expert in Linux distros, but my understanding is that AL2 also uses a streams-like model, in that it provides long term support (patches for existing software) while also making new software available. My understanding was that, while it is inevitably versioned by making artifacts like VMs and containers available over CDNs ( https://cdn.amazonlinux.com/os-images/2.0.20201111.0/ ), the expectation is that most users will always launch the latest version, relying on its backward compatibility. Perhaps someone who knows more about the specifics of its release model could comment.
OT: Just a second ago, I was setting up unattended-upgrades for security updates
for a new Ubuntu box and I am once again puzzled why the largest Linux distribution has such an underwhelming UX for an crucial feature. Long story short, I welcome any new contender in the OS space.
There's a big difference between licensing code to the world under the terms of Apache 2.0, and licensing code to Google under whatever terms they feel like now or at any time in the future.
The end of the era of the most stable Linux distributive for servers. Why it happened. I love Centos so much, but for now I have to decide which distributive I'll use in my production and I don't want to use neither Oracle or Debian like. IBM made my life harder.
It's interesting to see how they did it and pros/cons of their approach. In general the page look like it's built server-side. Some parts use lit-html but they are just a few and I believe they are not using webcomponents or shadowRoot.

Custom css properties are used to personalize colors, which would also work with shadowDom.

background-color: var(--color-menu-bg-active);

These custom properties are declared in light.scss and applied to the body, using the selector [data-color-mode="light"].

This method is fairly standard and widely used in modern websites. The only downside is that IE11 doesn't support custom properties and, in my expierience, there is no polyfill or postcss plugin that is 100% reliable.
Amazon had GPLv3 blacklisted when I worked there. Nothing new by way of legal concerns about GPLv3. No lawyer is going to advise a company to take actions that will likely see the company go to court to explore just how much of a license is legally enforceable, and just what it actually means.
> killing peacefully protesting students,

That said, there's a sharp cultural contrast between the responses to the Kent State massacre in the US and the Tienenman Square massacre in China. In the US, you can't say Kent State wasn't popularly condemned, didn't prompt change, or isn't burned into the nation's psyche to this day. In China, you can't say much about Tienenman Square, period.
It's somewhat economics of scale, but also that small/cheap FPGAs are sized rather closer to what you'd expect in a microcontroller (and that is quite sufficient for many designs).

Supporting PCIe and other high-speed interfaces (10Gb ethernet and beyond, etc) requires physical transceivers which look a whole lot more like "wireless communications over a PCB trace" and less like the traditional "drive a digital signal over a GPIO pin". These interfaces also typically drive requirements for data buffering as well as higher clock rates: all of these things increase size and cost.

That said, you can get basic chips that will do this for much less than "thousands of dollars" - Xilinx's Artix line is optimized for low cost + relatively high numbers of transceivers compared to the number of logic cells. You'd probably be interested in a development board something like the PicoEVB, which is in the USD $200 range and provides a M.2 form factor / PCIe interface to a FPGA. The actual FPGA itself to do this can be had for less than this... but the cost of the PCB, connectors, adding DDR memory, etc., etc., do start to add up.
https://www.academia.edu/41743064/Systemic_Risk_of_Pandemic_...
VAC and whatever Blizzard uses is enough for me, but thanks for the tip. I'll keep this In mind if Im ever to encounter either of these ACs
People have different views on what belongs here, but I think it's easy to see why users flagged this article. It's generic nationalistic flamebait, reporting on a statement by a political official, with no significant new information (SNI).

https://hn.algolia.com/?query=%22significant%20new%20informa...

Flagging is a critical part of the immune system. Without it HN would die a quick and horrible death, so I'm afraid there won't be any nerfing.
When you load an SVG file as an image, JavaScript is not executed, but SMIL animations and CSS (which includes animations) are.

If you open the SVG file directly, then JavaScript will be executed. But any hosting platforms that hosts your content on their domain should filter out any JavaScript on SVG as it would on HTML.
I bought a $100 pair of bluetooth Sennheisers that have a battery life that seems to be measured not in hours, but in days. I use them all day every day while working in the office, at home, or coffee shop. Music sounds great and so do movies. Never have to worry about the bluetooth connnection, pairs to my Mac or to my work laptop just fine. And they got to me with Amazon Prime.

You do not need to spend $500 if all you need is headphones that do their job.
Steve Reichs work is brilliant. I also enjoy the Reich Remixed album (c 1999) which was (as I think of it) a modern take on modern music - interestingly, I’d say the “modern take” part has aged the worst, but it’s still all good fun.

https://www.youtube.com/playlist?list=OLAK5uy_lYC12ZK5DudCAd...
EDIT: I was looking at the wrong branch, but still it hasn't been updated since 2018: https://github.com/dancres/Pages/commits/gh-pages

Looks like it was last updated in 2013: https://github.com/dancres/Pages/commits/master (there's a commit from 2018, but it doesn't touch the actual page)
They aren’t changing the licence of the existing code.
I think he means headphone tech is already complex and they needed to raise complexity a lot, lets say 10x to get something that maybe has 1.2x better sound. At least that's what I understood. In other words, you get diminishing returns.
Maybe it's just me, but distro repo usually has only esoteric and metro themes, so if I want something usable, it ends up in .local.
I mean look at the MDN page on cache control itself:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ca...

Now click away and click back. There will be a request and a 304. That's what I'm used to, not an instantaneous non-request.
Kubuntu, KDE Neon
No fix for it that I've seen; just abstention and hoping it fades. I think they're doing some research on it, but messing with the body's immune system can be really bad mojo.
Congrats on the promo! It didn't quite retain me either, but I was a lowly staff software engineer. I am returning to Google though (back to the Google Fonts team), and it's entirely possible we'll get a chance to work together again.
Dynamic head tracking spacial audio is available today with the Airpods Pro and it is amazing. Watching surround-sound TV with spacial audio enabled is basically indistinguishable from watching TV with a surround sound system and no headphones, to the point where I have to check to make sure the audio is playing through my headphones and not external speakers.

Downside is that it only works with iPhone, iPad and AppleTV 4k. It's such an amazing upgrade over my current setup, though, that I'm planning on upgrading to an AppleTV 4K so that I'm not limited to using spatial audio on just my iPad.
Charter cities in Africa (and Arizona, China and beyond)
I think Metcalfe's Law [0] for networked services is a bigger driver for winner-take-all, than needing deep pockets to compete in a mature product category. For consumer products, a small number of large players can own entire market segments between them, but still compete with one another, as we see in other capital-intensive industries like cars or smartphones. (And it's fair to see that as its own problem; but it generally devolves to the question "if markets are universally the most efficient form of exchange, why are firms a thing?" [1].)

[0] https://en.wikipedia.org/wiki/Metcalfe%27s_law

[1] https://en.wikipedia.org/wiki/Theory_of_the_firm
FortressOne – Zero Setup Firewall
For what it's worth I generally don't work laying down, am also around 6ft, weigh a lot less and would categorize your 10k pace as a brisk walk.
Set some goals and you'll be below 100kg and 60min in no time.
That post explains that there are scenarios where it makes sense to store data permanently in Kafka. "Kafka is Not a Database" makes a different point, which is that Kafka doesn't solve any of the hard transaction-processing problems that database systems do, so it's not an alternative to a traditional DBMS. This is not a straw man---Confluent advocates for "turning the database inside out" all over their marketing materials and conference talks.
>As an aside: the plane was never 'aerodynamically unstable' as so many people purport. MCAS was designed to make the stick pressures identical to the old models.

In most of these discussions, "Aerodynamically unstable" is just a layperson's term used when the speaker doesn't realize that stability has a specific quantitative definition in aerodynamics, and is used to generally mean "an airplane that isn't safe". 99% of HN users have exactly zero idea what they're talking about when it comes to aircraft.
Anyone have any recommendations for material which teaches debugging in a systematic and formal way?
I setup a macro with BetterTouchTool on my Mac to turn on bluetooth and connect to my Airpods. And that has essentially solved any of the edgecase weirdness about connectivity. Now it's truly magical 100% of the time. I can be listening to a podcast on my phone, hit the macro and jump into a zoom call with no menu or case futzing.

Before this I was dealing with these bizarro issues occasionally that was really frustrating.
Something to keep in mind is: World Class talent has world class opportunities.

And a lot of them simply won't be visible on the market at any given time.
> today was the day when a CentOS 8 kernel update broke ZFS

This issue? https://github.com/openzfs/zfs/issues/11307
Bitcoin Cash is one of the most misunderstood cryptocurrencies
Opening Keynote – GitHub Universe 2020
If there was some big central fund to pay for CI for many open source projects, it would probably be for-profit companies donating much of the money to support that. Is that much different to for-profit companies making in-kind donations of free build time?

You might hope you'd get a broader pool of companies paying in to the fund, so you're less dependent on any one company. But unless the donors throw almost infinite money at you, you would soon need to make some kind of restrictions on which projects can benefit and how much they can use per month.

The best I can think of to do is to make your CI config a relatively simple wrapper around generic tools, so it's easy to move when you need to. This is often a trade-off with things like parallelism and caching, but at least if you know it's a trade-off you can make sensible decisions.
I don't think I agree with that. I want to be able to run GPL programs on Windows, for example.
I'd say extremely unlikely — it wouldn't make sense both technically (stable, mature, small, razor-focused libraries that are already open source) and business-wise.

As far as I know as someone who worked here for 7+ years (take this as personal opinion), Mapbox wants to keep investing heavily in open source and open data sustainably and indefinitely, and this GL JS change is an unevitable prerequisite for that. This may not be easily apparent at this moment but it will be soon.
deck.gl is completely independent from Mapbox and Mapbox GL JS. You can use it with Google Maps, for example; most people used it with Mapbox because it was the most advanced open source basemap available.

We'll probably end up removing Mapbox from the deck.gl examples, but I can't say for sure.
(Disclaimer: I am capable of fixing upgrade issues myself.) I've not done a wipe-root reinstall of Fedora since 2013. I've in place upgraded every two versions or so - basically as soon as the version I'm using goes EOL.
> I get pushback even suggesting a tech sprint once every 6 weeks.

Either get a dedicated team for this or a better manager.
Sounds like Tor/Onion Routing?
I do this too...unfortunately I've developed tendonitis in my forearms as a result and try not to spend too much time this way. also I had a few months of neck issues.

being on your belly with your spine arced up slightly really does help the back through.
> You do not need to spend $500 if all you need is headphones that do their job.

Its amazing to me the number of Apple fanboys in this thread that seem to think that every other pair of headphones out there is completely broken, and nothing will "just work". This has been a solved problem for like a decade.
Personal attacks will get you banned here. Perhaps you don't owe this person better, but you certainly owe this community better if you're posting to it. No more of this please.

https://news.ycombinator.com/newsguidelines.html
> The difference isn't relevant 99% of the time, but it comes up if the maintainership of a work tries to re-license the work. Works without assigned ownership cannot practically be re-licensed, as you'd have to get individual consent from all owning parties.

Yeah I understand this. Hence there _is_ a difference and maybe one I don't prefer. I understand why Google would want this, but maybe I view Google's inability to relicense my code as a feature and not a bug.

In any case, I think the people involved in this back and forth essentially understand the state of things. I only seems some of us disagree on whether we should care. If people want to sign CLA's with Google that's their prerogative. If they understand what they're doing, more power to them. I don't like that Google has special preference over other actors, but that's just me.

edit:

> This came up a lot when GPLv3 was introduced — many projects wanted to migrate from GPLv2 to GPLv3, but couldn't, because they never acquired legal ownership of contributed code, and so didn't have the right to re-license the contributors' code.

Sure there are a lot of people who didn't like that, but maybe those who contributed their code under the GPLv2 never would have done so if they knew it would change to GPLv3 (not that he's more important than others, but Torvalds seems to fall in this camp)? Their wishes should be respected. Besides in those specific cases the projects could have avoided it by only accepting code licensed as "GPLv2 or later" so a CLA wasn't really required in that case anyway (though obviously that only applies to this specific GPLv2 -> GPLv3 case and not more generally).
> I guarantee that everyone, including you, will have forgotten this completely in 5 years.

You have a point, but Everyone is a lot of people.
Does GitHub support IE11? Would be interesting to see their browser demographics.
Q5: Does this mean that CentOS Stream is the RHEL BETA test platform now?
A: No. CentOS Stream will be getting fixes and features ahead of RHEL. Generally speaking, we expect CentOS Stream to have fewer bugs and more runtime features than RHEL until those packages make it into the RHEL release.

Q: is the sky blue?
A: no. it's blue.
just found out individuals can also
Because the surveillance by the CCP is far more extreme than that of FB or Google. FB and Google as powerful as they are at least are lead by proponents of democracy, social justice, etc, meanwhile the CCP is responsible for many human rights violations.
As much as I understand the frustration here, the reason why programmers aren't trusted to make decisions is because they've consistently failed to earn that trust.

Big tasks with lots of room for error is what gave us the platforms of the 80's: barely-usable "power" platforms like Linux, over-promise-under-deliver demo OS's like Windows 95, the pile of hacks called The Web, and the pile of less-famous code that gives rise to organizations with names like Destroy All Software.

The micromanagement might not be much better, but acting like coders should be given more trust and responsibility is laughable.