skysight-inc/HackerNews huggingface dataset:
We've been using Seafile for two years at my workplace. So far it's been very reliable and much faster than Nextcloud for file transfers. The current drive clients work well, but aren't as polished as Google File Drive Stream, for example. On macOS, I hope they will transition from macfuse.fs to the new FileProvider framework soon.

Seafile's file storage format has the advantage that it's easy to revert a file or folder to some earlier revision, for example after accidentally deleting files.
Is there a way to safely visit that location in Mexico though? I had heard that it’s not setup for tourism in a way that’s non-disruptive to the butterflies.
In the UK they have VAT, a sales tax on every transaction.
So if you buy a thing for $1000 with 10% VAT, you actually pay the seller $1100. You then sell it for $1200 + 10% Vat = $1320 you collect. You remit the $120 VAT you collected to the government, but you first deduct the $100 VAT you paid as an input tax credit = $20 paid to government.
Works out like sales taxes, where intermediate buyers have sales tax exemptions, but it is harder to cheat as there are no VAT exemptions = if you are exempt = Foreign Embassy, you file a VAT refund claim to the government, same if you export to someone outside your VAT area.
> but what happens when your revenue doesn't closely correlate with the number of users?

Then you're fucked, because you overextended past your available resources, and you crash and burn.
brief excerpts are content, my friend. If they weren't, readers wouldn't care about them and Google would have no reason to go through the trouble of scraping them and inserting them into search results.
How do you justify the risk model of the chinese developer?
I doubt they have the AOT compiler working. So it is probably interp-only. Combine that with the low clock speeds a d less-than-stellar IPC, I'd imagine this is a cool demo and little more.
I find it sad that Threema whose apps are free (as in freedom, which is the important part), is explicitly disqualified for not being free (as in free beer).
If the Australian government wants to try and force Google to make payments that exceed the revenue they get in Australia and is effectively preventing simply de-listing news sites (this is in the code).
This seems like a reasonable approach to me.

I don't agree generally with a lot of Googles business practices but I feel like this is just a desperate attempt to increase profits by the Murdoch media in Australia.

As has been said elsewhere, if news sites don't want their content to be indexed/smart-carded by Google they can set that in their page headers and robots.txt

The problem is they want to have their cake and eat it too, they want all the traffic passed through Google but they also want to effectively be paid for the users that never visit their site (Whether or not they ever would have).

Disclaimer: Am Australian
Worse than that, me and the techies among my Telegram contacts don't even bother with Telegram secret chats because there's too much friction compared to Telegram default mode.

edit: Moreover only Telegram on mobile has access to those chats (and no search). Which likely is one of the reasons why secret message hasn't become the default for us.
One thing that irks me a bit about Google X as a “moonshot factory” is that they seem to be claiming that they’re good at moonshots but I’m not sure that’s true. (I’m not saying they’re bad at it, just questioning that they have a special edge.)

I get the basic idea, that you try lots of big ambitious projects, and most of them will fail but some will hopefully stick; but how do you distinguish between a 5% success rate and a 1% rate, say?

Deep pockets and the willingness to place big long-term and medium-term bets is crucial, but it’s not everything you need. Does Google X have processes, people, notable successes they can point to to show that they really are good at moonshots?
CPU caches with examples for ARM Cortex-M
Yes, that’s my point, that not just mixing physical paint acts subtractively!
Show HN: Free live code class. Learn the basics of Git
Amazon is in compliance with the terms of the AGPL already for their managed ES. Switching ES to from Apache to AGPL would only affect other users of ES, not Amazon.
DRM is encryption where you give the end user all information needed to decrypt the data but still want to restrict how that decrypted data is used.
The guy/girl above talks about it being routine, why are you citing AUP? You'd have to show they have done this before, frequently.
It's called FXP: https://en.wikipedia.org/wiki/File_eXchange_Protocol

FlashFXP was a popular client that supported this: https://en.wikipedia.org/wiki/FlashFXP
You inspired me to customize it myself:
https://applieddivinitystudies.com/slatestarsubstack/

If you download a chrome extension and paste in the provided styles, you can get a pretty good approximation of the original page!
It's called fxp and you can still find information on it. In the top site scene it was widely used.
Tip: don’t go to the Rijksmuseum to see Girl with a pearl earring.

Reason: you won’t find it (it’s in the Mauritshuis in The Hague. https://www.mauritshuis.nl/nl-nl/)
Yeah my first reaction reading the title was job interviews, but then the site made it clearer. Maybe worth updating it to say “podcast interviews” or “webcast” (not sure if it’s a thing)? EDIT: videocast!
It happens occasionally. An example would be that there are a couple of libraries that do "generic collections" in C using the preprocessor (instead of using templates). So, you could imagine something like this:

#define VEC_TYPE double
#include <c-vector.h>
#undef VEC_TYPE

and that would provide you a type like "vec_double", a vector specialized for the double type. You'd want to import that once for each vector type you wanted.

It's not the most common use-case (and you can argue if it's a good idea at all), but it is at least a reasonable reason why you'd want a header file without #pragma once.
To Understand Bitcoin, Just Think of It as a Faith-Based Asset
Another Accolade for AndolaSoft Inc. As a Leading Mobile App Development Company
Curious, since much hardware (including CPUs) is fab'd in China, how do you model this risk?
The question was: "What companies are you excited about?"

I won't argue these organisatoins are perfect. Is that your criterion? I'm excited because I feel they are going in the right direction. That's why I'm using their services. I use Brave, but don't have the time to dive into things they are doing well or doing wrong. That's what we have investigative journalism for. I'm very happy to pay for that. By the way, I also use Signal. I also have a Fairphone. etc etc.

The next step after excitement is of course to convert excitement into action, and to actually support these organisations, through buying their stuff or making donations. Not because they are doing everything well, but because I personally believe they are helping to improve society.
Reminds me of Spain - they did this, and the newspapers lost so many views they whined/squealed/begged the government to repeal the law.
The government saw an easy target = google, instead they shot their newspapers.
congrats for the launch! how did you manage to increase the quality of the recording?
It's definitely normal, and massively hypocritical on the news sites' part. If they didn't want their content to be indexed by search results, they could ask Google to remove it, but obviously they want to have their cake and eat it too.

This is just "Europe trying to somehow regulate big tech chapter #N-plus-one", and while I do actually sympathize with the broader goal, news companies of all people complaining about Google don't deserve any compassion whatsoever.
what if more developers start thinking like elastic , big tech will benefit from their code but not leave any business for them to survive on.

AWS would be a multi-trillion company by then, will buy these companies and make that code proprietary. they have no incentive to let their competitors win.
Show HN: 128-bit, roughly-ordered, URL-safe UUIDs
Netscape for example: https://www.joelonsoftware.com/2000/04/06/things-you-should-...
In the UK museums are publicly funded and free (people also donate and there are special time-limited exhibits that they can charge for).

This works really well and doesn't involve selling the family silver.
Speaking as someone who was actually there, this is a delusional view of what might have been based more on fantasy than reality.

The web _was_ P2P at the start, but it became centralized because that was more efficient and increased both value and communication. The original social networks (BBS and chat channels, Usenet, etc) _were_ distributed, but it turns out that this made them easy prey for parasitic and toxic actors and all of the available tools to prevent this imposed asymmetric costs on the recipients and did not scale at all.

Distributed systems are easy, but making distributed communication systems not suck is incredibly hard. The Internet is a distributed system that was a lot better before all of you showed up and cast us into the hell of eternal September.
Clicked for the sound, was not disappointed.
There are many examples where complete rewrites have caused problems and killed or hampered companies, Netscape and Firefox come to mind.

Regarding microservices I don't know any OS projects that have failed because of that (because there aren't many OS products that use a microservices architecture), but personally I witnessed many corporate software projects burn and fail when trying to rewrite an "ugly" but functional monolith as a collection of microservices.

The thing is that the energy which you invest into rewriting your entire software in a new stack could also be invested into improving your existing stack. LAMP is not dead and actually evolving quite well, so there are definitely ways to improve the stability and speed of a LAMP application without rewriting it in Golang (even Facebook still uses PHP, albeit with some modifications). Having written extensive applications in both scripting languages and Golang I can say that the latter has its advantages but is also slower to develop in and in many respects not as agile as a scripting language like PHP or Python.

Doing a rewrite of a popular project with thousands of deploys in the wild will also force you to split your attention between keeping the old system running and building the new one. Since most of your users will want to migrate from one system to the other without losing their existing data and configuration you'll have to ensure that there is a clear migration path that works, which can be quite hard. Also, all external systems that are interacting with existing installations (e.g. via APIs) will also need to be supported by the new system.

In the end it might be possible to make it, but in my humble experience I think a complete rewrite is almost never a good idea and the energy you put into it is often better invested in making gradual improvements to your existing codebase. But that's just my 2c of course.
There is a Military Specification MIL-STD-1472H
http://everyspec.com/MIL-STD/MIL-STD-1400-1499/MIL-STD-1472H...
yes, but you need a lot of energy to move some matter in a single jump, so more jumps mean exponentially more initial energy because of something akin to a "time-rocket-equation" (you need to bring more mass to get energy but that means more mass or spending more time in a place to re-accumulate it).

It's a fun idea though, thanks :)
I’m not convinced it would be a great loss, and the natural experiment would be very interesting!
And everyone can also listen to music at home, yet many go to concerts instead, and many say that hearing a band performed unplugged adds an extra layer of authenticity and intimacy to the sound.
It is actually worrying that there will be a push to run a Google-dependent platform on RISC-V's. After all, we know that a lot of functionality is closed into Google Play Services, so that AOSP is to a great extent a bait for being fully tied to Google. Even without relying on closed-source components, you're still relying on Google's interest and good will in maintaining that project.

Instead, it's much more important to promote the "porting", or rather the adaptation, of Linux and *BSD distributions to work on RISC-V. Like with the Raspberry PI I suppose.
I used to ask the same question a few months ago, and you know what I realized? there is no way to do it. Well, not in my case. I'm a very responsible and hard-working person. So, I usually work as hard as I can during the day. In the evening I'm too tired even to play with my children and spend time with my family. So I threw out any ideas about side projects...
Until I thought: if I can't work for myself in the evenings, I should do it in the mornings. So, I tried to set up my alarm at 6 am and get up 2 hours before my usually day starts.
And it changed everything to me. With these 2 extra hours I can do such a lot of things. I'm super-motivated and productive in the mornings. So, I'm working for my projects or hobby every morning (even weekends) and it really works for me.
The only thing you need to do this, is discipline to go to bed early in the evening. And it is way easier than to look for extra energy for a night work.
I don't know, if it will work for you. But in my case, it was the best decision I could make. Good luck, wish you to achieve all your goals.
If your primary use case is setting up a web server then there is no reason to choose Rust over Go.
> while apparently using an open-source app you didn't build yourself does.

Assuming that the app can be reproducibly built, then yes, using an open-source app does give you more confidence that it's secure.

For a closed-source app, you can try to decompile it, which is far harder, or monitor its behaviour, which is far less reliable.
Does this make much of a difference? My impression was that we already
lost against fingerprinting and browser vendors keep adding more and
more feature crap which makes it only worse.
It's assholes selling crap to idiots.
Being in the AUP does not make it routine FFS. There is a mountain of shit in every ToS that rarely gets exercised.

It’s like you’re pointing out that pilots can kick passengers off of a flight at their discretion. Completely irrelevant when the question is about how frequently they do it for what sounds like a rare reason.

That’s why I was interested in actual stats of how frequently they take down comment that is ‘otherwise objectionable’.
Rebuilding the spellchecker, pt.4: Introduction to suggest algorithm
I don't see how AWS is being a jerk.

They're a hosting company, they're hosting open source software and they're doing it well.
> The engineer working on CAD, layout, specs, RFQs, Suppliers, Equipment, etc are hardly going to revolutionize anything. Their work is valuable but they’re entirely replaceable.

I think this is a very elitist mindset that unfortunately many people have.

To me engineering is primarily a learning process on how to build better tools. And you can probably always build a more suitable tool on top of existing tool.

So saying, this is "boring work", that requires "just minions" is akin to saying that the existing tools cannot be improved, or people who use these tools cannot figure out a way to improve them themselves, they need to be told by somebody.
No more than i worry about my operating system or office suite being closed source.

But then again, i don't put my sensitive information like passwords, ssh/pgp keys, tax returns and stuff like that in Resilio. I very rarely need those documents "on the go". Instead i have working documents, books, notes and more that i need access to, and while i'd rather not share them with the rest of the world, it would probably not make much difference if it was.

Furthermore, i can completely "wall off" Resilio Sync. It runs in a container on my public server, and files i need access to are mounted as NFSv4 shares "outside" the container. Access to the shares is managed through Kerberos.

So even if you make it inside the container, you can (probably) wreak havoc with the files on the NFS shares, but those are backed up, and unless you can find a way out of the container, or a bug in NFS, that's pretty much it.

The container has only the absolute minimum of binaries to allow Resilio to work, so you toolkit is kinda limited, at least when compared to Nextcloud which requies a lot of binaries/libraries to work, along with a PHP interpreter.
Show HN: I built Multy – Generate a short URL to share a list of websites
Hello HN :)

For the record, I learned how to code less than 2 years ago, next to my full time job.

I rarely have the time to complete a side project, so I challenged myself to make a functional website in a weekend.

The idea was simple, to be able to create a short URL to share a list of websites.
It's not revolutionary, but I was surprised not to find more sites to do that. Bit.ly had such a system a few years ago called "Bundles", which they shut down.

I often see interesting lists on Twitter or in articles, but keeping track of all this is sometimes complicated. That's where I got the idea.

So I created Multy over a weekend and was thrilled to see that I could make a functional site, no matter how small, in such a short period of time.

I still have a lot of ideas to improve it, such as adding private links, or a very simple statistics system.
I would like as much as possible not to create an authentication system and keep the concept as simple as possible.
I haven't necessarily thought about monetization, but there may be some ideas! I didn't create it to make a fortune anyway.

I would like to have your opinion on its current version, and on the evolutions I could bring to it.

Thank you for reading me and taking the time to test Multy!
Does that force everyone to use VS Code only? Can non VS Code developers also work efficiently?
They work adequately for checking to see if a person claiming to be John Q. has roughly the right facial features and skin tone- because you are just making a single comparison. It doesn’t work well in the other direction- finding which DL photo might belong to an unknown John Doe.

Given the age of many DL photos (mine is from 8 years ago) and the fact that they are from a single aspect angle, they are not suited for the reverse task of finding which DL image is a good enough match for a person’s face from surveillance footage. If you tried to search every state database for a white guy with brown hair, and account for the fact that he may have a different beard or hair style from the DL photo that may be years old, you’re not going to narrow the pool enough to help the FBI. If you made your match threshold low enough to be reasonably reasonably confident that you didn’t miss the guy, you’d end up with millions of matches.

The only decent facial recognition techniques use more reference images and use other methods to narrow the search space. The reason that Facebook was able to get their automated photo tagging working years ago was because they had exquisite knowledge of your social graph and only matched people 1-2 connections away from you. But a nationwide search for an unknown criminal doesn’t have the ability to drastically narrow the search space like this.
Job security comes in many forms. Working in a field where engineers can create huge returns for their company and where resulting demand far outstrips supply is a far better form of security than any union could ever provide. Unions can’t realistically protect against changing work forces. Software engineering is globalizing. Unstoppably.

I’m not opposed to people organizing for whatever purpose they think is best. I am opposed to people being forced to pay a tithe to unions in order to work in their field.

I don’t see unions as making my life in software engineering better at all and, given that, I’m naturally opposed to paying 1% of my earnings to a group that I don’t think will help. If others see it differently, they’re welcome to form one; I’m not “so opposed” that I’ll picket outside their workplace to interfere with them.

Most engineers seeking security for their future would be much better off increasing their 401(k) deferral (or other savings) rate by 1% rather than sending that money to a union.
Securing Custom Protocols with Noise
In my experience I've not found software developed by engineers based in China to be developed with any particular care. It is very common to see trivial backdoors, massive amounts of data collection, and plaintext protocols. For situations where the developer is being security conscious, the language barrier often means that reports of concerns are either ignored or misinterpreted.

It is often the case that software developed outside of China, for devices produced in China is alright, but on the other hand many companies like Honeywell simply contract all of their software development there as well, and it painfully shows. I shouldn't be able to buy a product in 2020 that has a linux kernel from 2012 and multiple remote code execution vulnerabilities just from public CVEs, but the Honeywell Tuxido security system managed it with ease.
Google should just remove all news sites from their search results completely.
That's wrong:

"With the latest version of Windows 10 (or 10 Server) and the beta of Docker for Windows, there's native Linux Container support on Windows. That means there's no Virtual Machine or Hyper-V involved (unless you want), so Linux Containers run on Windows itself using Windows 10's built in container support".

In any case, as Linux and macOS prove, there's no need for docker to have to run on a VM. And it seems there's no need on Windows either since 10.
> Note that the observations done in Newton's time were never proved wrong - we just discovered that with better measurement precision and in different regimes of speed, they turn out to have additional small terms.

This is not quite the right way to look at it. The general theory of relativity isn't just some unmeasurable difference in the margins of the calculations. There are _real_ situations (e.g. near a black hole) where the predicted properties of relativity totally overwhelm the predicted movements under newtonian physics.

It's not insane to think that there equally are not-yet-predicted situations in which FTL speed is possible, under conditions that have never been possible in the natural universe but are possible with human intervention.

If you don't believe that humans are capable of achieving such situations, look simply at our creation of anti-matter despite ~essentially being unable to find~ rarely finding any in the natural universe.
The problem is not refactor vs rewrite. What most people oversees is the domain knowledge.

If the domain knowledge is on the code, you can only refactor.
If the domain knowledge is on the team, then rewrite tends to be faster.

Most rewrites fails because the team rewriting is not the team that did the initial development.
Kind of fits the fictional upgrades doc Brown did in Back to the Future. If you have a flux capacitor, having a petrol engine makes no sense whatsoever.

And to paraphrase him, if you are going to drive, you might as well do it in style. That kind of is the point of a DeLorean. Its engine never was the selling point; rather the opposite.
Exactly, with the current system Google is incentivised to prioritise the best content for users. If they now negotiate individual licensing agreements with each publisher this adds another factor (cost) to the ranking incentive.

Also, where do you draw the line on what content Google should have to pay to index? What about independent bloggers for example? This policy could potentially open a whole new can of worms.
I've written down all account credentials and passwords into a text file that sits inside a Veracrypted volume on an external hard drive with multiple copies including off-site. My wife knows the encrypted volume password (as her personal files are also within), and the location of the text file.

Still need to write a licence permitting her to release all my IP into the public domain.