skysight-inc/HackerNews huggingface dataset:
I suspect it's actually the other way around. On the wire, a v4 address is four bytes. uint_32 is the natural type for this. So when we start looking at cidr scopes, /24 means the first 24 bits of those 32. "The first 24 bits of 4 bytes" sounds wrong to me, "the first 24 bits of 32 bits" sounds logical.

So as I see it - 143267841 (or 0x88A1801) is the address, and quad-dotted decimal is a (slightly more) human-readable representation of it.
You criticize the GP for being generous, but I think they should take it as a compliment. We're drowning in so much cynicism and assuming the worst in each other; we need more generosity, even though by definition it costs us something. To attempt to practice that, I'll grant that maybe you're weary of talking to narcissistic people, so you made a snap judgment of this article based on that. But I think she might be onto something. I'm not sure.
i think the idea is that k8s does away with having to glue all those pieces of infra together, not that you lose understanding of how it all works together. part of the headache with managing infra is that it rots over time... things come and go (sysv to systemd, apt/snap/whatever, config files change, things break). it's easier to keep up to date on k8s than all the disparate parts of the OS and provider-specific APIs and whatnot
can someone please throw a light on the framework used behind the UI of Google docs or sheets? Is it opensource?
If the idea is any good (of course, I'm not certain), it can not be automatic, and can not be based on what part brings the issue to the court.
This is so great.

Assume this fact pattern: an interactive client-server cryptosystem where messages are encrypted under keys derived from passwords, AND (1) the server will reveal whether decryption of a trial message succeeded (super common!) AND (2) the encryption scheme is "non-committing", meaning roughly that the output of the encryption construction doesn't encode the specific key used (this is the norm for mainstream ciphers).

Well, now you have a problem. If you can create a message that decrypts properly under 2 different (password-derived) keys, you can "guess" two passwords per query to the system; that's obvious. But you're not limited to 2. For instance, AES-GCM, the most popular AEAD in the industry, isn't key-committing, and you can with a laptop and SageMath create a ciphertext that encrypts validly under (wait for it) 200k different known keys, by solving a system of linear equations. (It's about 4M long).

In a sort of general attack setting, you can already see how this is going to work: you can iterate over messages that guess 200k passwords at a time. When you get a hit, you do a search, partitioning and re-partitioning the space of possible passwords until you discover the right one.

The paper uses this approach to break the Shadowsocks circumvention proxy, which uses GCM, and where condition (1) is met because successful serverside decryption opens a listening UDP socket for 5 minutes that you can just scan for.
How do PC monitors today compare with TVs? I wonder if higher end monitors combined with sound bars and chromecast/firestick would be a good enough replacement for the living room TV.
In the USA, two movies are always shown during the holidays.
"It's a Wonderful Life" [0] is a Frank Capra classic showing good triumphing over evil. "The Godfather" [1] appeals to America's fascination with crime, revenge, and the mafia. But America's real fascination is with American football. Football games are played and shown nonstop, every day. When they are not playing, there are endless shows that "analyze" them. The "Rose Bowl Parade" [2] is typically shown on New Year's day and features a colorful parade of floats all decorated in flowers. The parade kicks off the "bowl" season.

[0] https://www.imdb.com/title/tt0038650/
[1] https://www.imdb.com/title/tt0068646/
[2] https://tournamentofroses.com/
Or, rather: a small enthusiast minority gets two cars, generates the critical mass required to build charging infrastructure etc., then everybody can switch directly to an electric when it becomes convenient for them.
Food labeling laws and regulations are a solid counter example. Plenty of improvements are possible, but the industry would be in favor of ~zero laws so in effect their all consumer friendly by design.

The difference between calling something peanut butter and peanut spread might not seem that important, but it’s those exact invisible laws and regulations that end up being critical.
Lots of C/C++ programs do stuff that won’t work on ARM. Be it highly optimized assembly or intrinsics or reliance on memory access being atomic and having total store order.
This market seems to be saturated with other new virtual conference/meetup platforms like gather.town, what do you plan on doing to make your product stand out?
Do you still need the LG remote to make it work or can you throw it away and still be able to operate or even re-configure the TV later?
Best sites for your news in 2021? (despite HN)
What sites/blogs do you recommend to follow for news in 2021?
The issue I found with WITH RECURSIVE queries is that they're incredibly inefficient for anything but trees. I've looked around and there doesn't seem to be any way to store a global list of visited nodes. This means that when performing a traversal of the graph the recursive query will follow all paths between two nodes.
As Go’s net package IP parsing was mentioned, here’s a fun fact: under their API it is impossible to distinguish between an IPv4-mapped IPV6 address and the equivalent normal IPv4 address.
Yea that is what I was thinking. And the next thing was what is the price difference. A bit of me thinks this is just some people doing some really cool tech work for the sake of it, which I can't fault them for.
The NYT seems to have become overtly anti-American.
There is a massive difference in fraud potential between a cancelled flight/refund for a service not delivered, and an insurance payout.
The static files should definitely be on some kind of object storage like S3, that's what it's built for. Much faster, more reliable, more scalable, and likely much cheaper too.

As for persistent volumes, might be better to just offload Postgres to a managed DB service and downsize the K8S instances, or use something like CockroachDB which is natively distributed and can make use of local volumes instead.
> where authors and publishers only trust signed e-mails.

Signing emails isn't the problem. Establishing identity is the problem.

Where I worked, there were a lot of phishing scams going out. Initially, they spoofed our email address, and DMARC helped stop that; but people would still respond to scams coming from webmaster@johnshouseofcontracting.example.org or whatever (lots of random website email forms turned into open relays). If you're getting emails from publishing@randonnhouse or wi1ey or whatever lookalike domains, it's going to be hard to tell, and verifying it came from the someone authorized by the domain owner doesn't help.
It's a hybrid model. You don't need to have a subscription, you just need to own the game.

Some games are also available for free:

https://stadia.google.com/games/super-bomberman-r-online

https://stadia.google.com/games/destiny-2

The subscription gives you 4k streaming and games that you can claim and keep (as long as you have a subscription, even if you interrupt it and resume). Very similar to Xbox Games with Gold:

https://www.microsoft.com/en-us/store/collections/gameswithg...

I was skeptical at the beginning, but I prefer it to a Netflix style subscription (like Xbox Game Pass Cloud or Playstation Now)... since if the movie that you're interested in leaves the streaming service, it's not a big deal (or even if it's a whole season of a series), but if a videogame is leaving, that might be quite a bit more frustrating, since it might take you more than 1 month to actually complete your game. At least with Stadia I know that (as long as my Stadia account is active) I'll always be able to come back to the games that I'm playing now.

Just like on Windows and Luna, you can also make use of your Ubisoft Plus subscription, though (only available in the US, for now)

One nice thing is that a lot of modern games (like some available with Ubisoft Plus) have "cloud synced saves" or cross-progression. So you could stop playing on Stadia, and continue your savegame on another platform.
It's not that class action has a "bad" reputation, just that in the US, it has a 'meaningless' reputation. The punishment is generally so absurdly minor, and the time frame so long, that it feels like it's not even a slap on the wrist for the offender.

The popular perception of class action in the US, is something like, "yes, Kitchenpal knowingly sold thousands of Blenders that sparked out and caught fire, and burned like 50 people's houses down. But luckily your class-action lawsuit came through 10 years later with a check worth $3.22 as compensation"
We have teams at Roku releasing new firmware images for all of the smart TVs that have shipped on our platform, going back to the original "Liberty" models from 2014. It's a pain, especially with streaming services getting more and more bloated, but we've managed to keep them all going.

In our case, we've got a financial incentive that some TV manufacturers don't have, as people keeping the older TVs going and connected to the Roku service means more people using channels where we participate in the advertising or subscription revenue.
It is fairly common for the prevailing party to be awarded their filing fees.
You mean cost-reduced/subsidized :)
The main counter argument I usually hear when this is brought up is that many of these animals have been bred for hundreds or thousands of years to be dependent on humans.

To your point about kill shelters, I think the humane society has largely helped fixed this. There was an article on HN this week that claimed shelter killings was reduced from 20% down to 2% based on the efforts of the humane society since the 1970s.

I may be biased as a dog lover, but most of your arguments seem to be based on bad owners. If we can stop bad ownership we should do so but let’s not throw the baby out with the bath water. I don’t think bad parenting existing should be an excuse for abstaining from having children either, unless we regress to a misanthropic world view.
Regarding the Pi-Hole issues... a few days ago, I decided to set up firewall rules to block all outgoing DNS and DNS-over-HTTPS traffic, except one coming from my Raspberry Pi. I discovered two things:

My nVidia Shield TV was desperately trying to connect to Google's DNS. So yeah, I wasn't being paranoid!

My phone's Google Play Store refused to work without using Google's DoH. That's the troublesome side effect if DoH.
Getting rid of NPM scripts
LED Developed That Can Be Integrated Directly into Computer Chips
They really don’t care if people make money through web apps. They aren’t interested in capturing a percentage of that.

What they do care about is that they maintain control of their store.
How will that work when ambient is 465C?

Without active cooling your box will equalise to that temp. And building a heat pump that can cool the inside of a box to <100C when ambient is >450C is... an interesting project.

You may as well just build a mechanical computer using gears and such. Modern manufacturing would make it practical to build a wind-powered tiny geared mechanical CPU and memory.

Thermal expansion would be a challenge, but not an impossible one.

Peripherals would still be a problem. Receiving commands would likely be impossible, so it would have to be autonomous. But you might be able to use a chemical/optical system for signalling. Or maybe vary radar reflectivity. Or...?
I mean, Google Wave was also very slow and unusable in practice as it was invite only in a way that meant even in my pretty tight knit circles of "people who all went to Google I/O almost every year" there was always at less than one person who didn't have access to it... I don't see how it possibly could have succeeded; it is as if they fundamentally didn't understand that the reason that worked for Gmail was because Gmail was just one option in a federated ecosystem, and so everyone already had email, but would never work for a real communication tool building an audience from scratch.
That's on the team's near-term roadmap :) In order to build full apps/projects, having an editor-integrated browser preview will be amazing!

CodeSwing is really meant to enable component/snippet/sample development (like a "visual REPL"), so you can quickly try out, learn & share ideas, without needing to set up any build ceremony in order to get there. I'm hoping that it will be complimentary to a built-in browser preview in VS Code. But I'm keen to hear folks thoughts about it :D
These different representations also lead to frequent server side request forgery (SSRF) bypasses - someone might be blocking local IPv4 but you can still access their AWS metadata endpoint at ::ffff:169.254.169.254, etc.

For anyone using Ruby, I'm the author of a gem [1] that comprehensively protects against SSRF bugs. For anyone using Golang I recommend this [2] blog post.

[1]: https://github.com/arkadiyt/ssrf_filter

[2]: https://www.agwa.name/blog/post/preventing_server_side_reque...
Try the pan pizza next time
Microsoft did it when they suspended their ebooks service:

https://www.theverge.com/2019/4/2/18292177/microsoft-ebooks-...

So, there's a precedent, and this leaves me a bit hopeful. OTOH, normally you can only ask for a refund if you played a game for < 2 hours
Aren't they dual analog + optical out?
to an extent I kinda agree. I definitely don't think people should deliberately breed animals as pets. but we already have an unnaturally large population of cats and dogs and we have not been entirely successful at preventing them from reproducing on their own. just leaving them be is not an option, as that would devastate the prey population. if the alternative is euthanizing the majority of cats and dogs that currently exist, I don't think we have to feel bad as individuals about keeping a few in our homes.
> "A microkernel would be a good fit for such constrainted environments."

As the GP said, micro kernels have a performance overhead swapping data between rings. That overhead would bite hard on something running a NEC VR4300 clocked at 93.75 MHz.

A monolithic kernel is the way to go. Just not Linux specifically.

> My argument is that the linux kernel (even if you strip everything out and create the most tiny linux kernel) is still too big for many constrained environments

That was the OP's point. Yours was that a micro kernel would be a better fit. It would not.

> a old router with 512 KiB memory (there are many devices that cannot run linux)

Those devices wouldn't be running code written to programmable chipsets. They wouldn't be running an operating system in the conventional sense. Much like laumars point about how games are written for the N64.

Also nobody is suggesting Linux runs everywhere. We are just pointing out that you massively misunderstand how micro kernels work (and embedded programming too by the sounds of your last post).

By the way, you wouldn't find any routers running a meger 512KB of RAM. That wouldn't be enough for multiple devices connected via IPv4, never mind IPv6 and a wireless AP too. Then you have firewall UI (typically served via HTTP), a DHCP & DNS resolver (both of which are usually served by dnsmasq on consumer devices) and likely other stuff I've forgotten about off hand -- I have some experience building and hacking routers :)

> However, it is possible to run a small microkernel on such a router, that's my point, nothing more nothing less, that's why I consider using microkernel a good fit.

Most consumer routers actually run either Linux or some flavour of BSD. All of which are also monolithic kernel designs. Some enterprise gear will have their own firmware and from what I've seen from some vendors like old Cisco hardware, those have been monoliths too.

I know micro kernel has the word "micro" in it and the design requires loading the bare minimum into the kernel address space of the OS, but you're missing the bigger picture of what a micro kernel actually is and why it is used:

The point of a micro kernel isn't that it consumers less memory. It's that it separates out as much functionality from the kernel as it can and pushes that to user space. The advantages that brings is greater security with things like drivers (not an issue with the N64) and greater crash protection (again, not really an issue with the N64). However that comes with a performance cost, code complexity and any corners you do cut to try to bring those costs down ultimately end up eroding any real world benefits you get from a micro kernel design.
I especially love it when address parsers on the same OS don't agree:

http://openbsd-archive.7691.n7.nabble.com/inet-net-pton-seem...
Why would you think that? Apple specially recommended this approach.
It's Google's proprietary code. Google Docs is too unique, complex and valuable to use any typical opensource UI framework.
They get on to moving images about 2 min in here https://youtu.be/A9qrURPAtnY?t=110
Having been someone who has been screwed over by both landlords and tenants the legal system is very unfriendly to non-professionals. And most people who are terrible tend to be involved in the legal system far more often and thus have a better idea about how to navigate the proceedings.
FDR would dig out our way out of the depression with CME infrastructure investment.
How the Pandemic Turned an Introvert into a Voice for Gig Workers
The alternative is worse; continued stagnation of CPU performance. At least Apple is pushing the boundary higher. Now AMD/Intel/Microsoft will have to up their game. Competitive pressure is almost always a good thing in an industry, at least for customers.
> I’m on the fence about that last one, the “IPv6 with an embedded dotted decimal” form. My reference parser (Go’s net.ParseIP) understands it, but it’s not really that useful any more in the real world. At the dawn of IPv6, the idea was that you could upgrade an address to IPv6 by prepending a pair of colons, as in ::1.2.3.4, but modern transition mechanisms no longer offer anything as clear-cut as this, so the notation doesn’t really show up in the wild.

I have to disagree with this conclusion. I see it very frequently on Linux. It turns out that programs can bind their listen address to just ::, and the kernel will still allow connections from IPv4, with the address mapped to ::ffff:0.0.0.0/32 -- outbound connections use the same notation.
This quote from Adam on our episode about the setup explains some of our motivations here:

> It’s worth noting that we don’t really need what we have around Kubernetes. This is for fun, to some degree. One, we love Linode, they’re a great partner… Two, we love you, Gerhard, and all the work you’ve done here… We don’t really need this setup. One, it’s about learning ourselves, but then also sharing that. Obviously, Changelog.com is open source, so if you’re curious how this is implemented, you can look in our codebase. But beyond that, I think it’s important to remind our audience that we don’t really need this; it’s fun to have, and actually a worthwhile investment for us, because this does cost us money (Gerhard does not work for free), and it’s part of this desire to learn for ourselves, and then also to share it with everyone else… So that’s fun. It’s fun to do.
Omegle seems to try to mitigate issues with nudity be creating two different sections for users to choose: one for adult content and one for normal conversations. Seems somewhat effective.
Can we set the title accordingly? "Fun with IP address parsing"
I'm long hydrogen vehicles due to the convenience factor. Convenience trumps efficiency.

EVs are great if you own a house with a driveway and get to charge overnight. Outside of USA, how common is that really? Most people live in apartments in cities, where a parking spot is hard to find.
It sort of has to do this. How can you see others' keystrokes if they aren't being sent anywhere?
If your primary measure of success is "how many AAA game titles do you have," Apple has always been and probably always will be lacking. Fortunately for Apple (and for that matter, every company or organization that relies on Linux), this is not the only measure of success.
While cats are little murder machines, the focus on keeping them indoors seems not to ring true to me (in North America). We have systematically killed/displaced all of the natural predators (bobcat, lynx, coyote, foxes, wolves, etc...) how is introducing a predictor to help re-balance things a net loose?

Yes I know what they did in new Zealand but remember there were no indigenous predatory land mammals to replace there
It is absolutely a subset. I've had many cats who go outdoors and only one really paid any attention to birds at all. They seem to be much more interested in rodents like shrews and voles. This is only my personal experience though, but I really would love to see further study on this, since I have bird feeders and a ton of birds in my yard. I'm also curious how it might be different in urban vs suburban and rural situations.
> Fill in the blank. I don't know about you, but I don't fill it in with “music theory”.

That's because you aren't a jazz musician. Jazz features lots of complex harmonies, and theory is a big part of writing and playing it. Certain subgenres are virtually impossible to perform without a solid theory foundation. You think you can just solo over Giant Steps by feel?
Apple doesn't give a damn about gaming. They may show off some game as a way of demonstrating Rosetta 2's performance, but what was the last AAA game that was released for macOS even close to it's Wintel release?
Indeed! I very much agree with the model vs sequence opposition.

Another useful side of the model / math approach is that it allows you to formalize your problem and derive hard bounds, ie know in advance what's achievable and what's not (the 'let' s derive a bound' approach being another standard method in maths).
on the other hand, hold down 'v' at boot time on a mac and see all the error messages that have been there for YEARS and ignored the whole time.
Very much appreciated.

People need to understand THEY are responsible for what they are doing, not the companies for not preventing them doing stupid things.

"A car is not your mother"

I am definitely going to use it:)
It's funny seeing AppGyver as the thing to watch when I was using their stuff in 2013. I guess it's probably progressed though.
What happens if they tell you to make the change on the website, and the website tells you to make the change with the gate agent, and there isn’t a gate agent? I fly maybe half a dozen times a year and I’ve had this happen more than once.
There is no fundamental physics reason to use lithium, it's just the current best technological node. There are many technologies that are very promising in the lab, like carbon nanotubes, iron and sodium ion, aluminum-air etc. There is massive research in this area and if none of these technologies turn out to be economically superior to Li-ion in the near future, then they will certainly be available if, for environmental reasons, lithium becomes expensive.

https://www.pocket-lint.com/gadgets/news/130380-future-batte...
Opera Mini did (and apparently still does) that.

IIRC the proxy server does way more than just compress assets, it re-encodes the page to an internal binary markup format, and handles restricted JS execution with a simplified interaction model (the client had all of 4 events: unload, submit, click, and change, these events would trigger a server call which executes the corresponding handler and sends the updates back).

Not everything worked on that thing (most obviously the complex web applications which were starting to crop up around that time), but it was absolutely magic on unreliable GPRS connections 15 years ago.