skysight-inc/HackerNews huggingface dataset:
A zero-cost alternative that has worked well for me so far is to use a front-end load balancer to distribute requests to multiple Phoenix instances (in k8s), and then just let those requests' background tasks run on the node that starts them.

The whole app is approximately a websocket-based chat app (with some other stuff), and the beauty of OTP + libcluster is that the websocket processes can communicate with each other, whether or not they're running on the same OTP node.
I think JSON is an improvement over XML for RPC, though they are similar. Generic JSON serialization/deserialization is trivial for any language with arrays and string maps. With XML, are fields serialized as attributes or as tags? Unless you are doing something really weird, JSON tells you just to use a JSON object. And for lists: do you use a special <li /> like take for the items or do you skip the intermediate step and just assume each child item is a list?

JSON is definitely not perfect and has similar problems with things like serializing maps with objects as keys, but it does have more opinionated ways for serializing things than XML does.
Kinda like how they handle false copyright claims by not taking down the content, oh wait ... that seems a similar situation in that acting on false content takedown requests doesn't get them [much/any] revenue and provides a relational hit to users (but pleases some huge customers, no doubt).

Someone has given a credible mechanism for take down, report it as fraudulent. I find it highly likely that if you have a paying B2B relationship - eg you're a high paying advertising client, that you'd be able to report "frauds" and get immediate action.

But if course I've wouldn't know, and presumably Google would have NDAs for businesses in any special access (it would also be detrimental to the business to disclose it and risk losing the special access).

All we've really got is our TrustRank RTM on our part experiences with Google and similar corps.
> It's hard to build a product with smart, talented developers who haven't spent a bunch of years learning the ecosystem.

And, yet, YC funds these kinds of companies all the time. So why isn't YC tapping that pool?

> But that's made one level more complicated when you've got a diversity of cultures in the room

I don't buy that.

Tech happily on a daily basis deals with people who can barely speak the same language.
Sure, totally fair - days of continued operation would be but one metric of thousands we could use to evaluate the efficacy/security/decentralization of a blockchain.

My concern is that no matter which criteria we pick, and no matter how well PoW alternatives perform according to those criteria, miners will never vote to migrate. Bitcoin proof-of-stake would be great, but my concern applies equally to any potential eco-friendly alternatives, whether or not they've yet been invented.

I work in the Ethereum ecosystem but my continued support is entirely dependent on the PoS migration... and the same factors that make me nervous about Bitcoin make me nervous for eth2. But I hope they pull it off.
DARPA's New Controversy
> Safety and correctness are as emphasised in Zig as in Rust

This is so far from true I cannot take you seriously.

Zig doesn't have any kind of lifetime analysis, so it's as vulnerable to use-after-free/dangling pointers as C and C++ are. That alone rules out Zig from ever being considered "memory safe" in any meaningful sense.

[Yes, I'm aware of GeneralPurposeAllocator, but that is not something you want to ship in production. "Never reuse any virtual address space" is a disaster for the OS (VMA fragmentation, TLB shootdown IPIs) and the hardware (TLBs, caches). That's why no-one ships such a thing in production for C/C++. GeneralPurposeAllocator will no doubt be useful for debugging (though less effective than ASAN or Valgrind) but safety in production is the game here; ASAN doesn't make C/C++ "memory safe".]

Zig also allows data races so Zig programs can have undefined behaviour via data races on non-atomic values. Again, this cannot be fixed.

Even smart pointers (e.g. reference counting) are nasty in Zig. Zig doesn't have destructors so cleaning up an owning pointer or a refcounting pointer requires developers to write manual "defer" statements. Worse, these only work at function scope so you also have to write manual cleanup code for every data structure containing a smart pointer. Without idiomatic smart pointers Zig will likely be more prone to UAF bugs (and leaks) than C++.
China is the sole exception for our "no politics, only tech" rule.

They are a unique evil that must be destroyed.
Oban uses Postgres for persistence
https://hexdocs.pm/oban/Oban.html
Strange but true: everyone bar Microsoft is blamed for Exchange Server attacks
There must be a whole civilization of ad-loving people, maybe they live on Mars, maybe on the dark side of the Moon. The only people aware of their existence are Google, FB and co. They inundate these companies requesting better and more targeted ads. "I'm paying for your services, i want creepier ads!" they complain. (Yes, FB has figured out they can charge them money)
newsgroups = big community spaces filled with activity

rss = a person or entity's personal space. which can also be fed into a planet / aggregator to make a shared space.

they each have great uses, but rss maintaining the sense of identity & ownership & knowability over the space is a huge boon (to reader & writers both) imo, & where-as newsgroups have always felt (reading or writing) like i was venturing off into wild-lands.
A challenge response check will help ensure that the webhook consumer is actually using the webhook signature, and improve the likelihood that you are sending data to the right target. I saw a number of times that systems weren't verifying the data we were sending them came from us even though we had gone to all of this effort to help them :facepalm:.

Basically you periodically send a GET request to the target API with a token, and have them respond with the token encrypted with the same secret they'd use to decrpyt your webhook signature.

You could also consider sending dummy ping messages that may or may not have a valid signature (of course make sure this behavior is documented) that you would expect the target API to return a 4xx error if the signature is incorrect.

These extra steps are definitely not table stakes for a webhooks system, but could be enough to make sure the webhook event providers are being the best possible stewards of their user's data that they can =D. A lot of this complexity can also be wrapped by a client library you provide, which is a big win for everyone on its own.

Twitter's webhook API has an example of CRC btw! https://developer.twitter.com/en/docs/twitter-api/enterprise....
Keep track of this, this is amazing data for a nice class action lawsuit.
> it just reminded me how far we have gotten away from buying beautiful handmade things that will last forever, and going with junk make in the cheapest country.

selection bias. all the cheap junk your grandparents bought was disposed of before you were born. you never even saw it.
Another thing I've noticed is that girls are generally much better at taking exams than boys. I don't have any numbers, just from observation - from my own school days, from observing my niece/nephew. It is super painful to get my nephew to do the homework vs my niece, for example.
Because it starts with a $2 hat, but quickly escalates into $2 hats 3x a day or even more expensive perks. Once you give into a kid about making purchases, it's a much harder fight to say no the next time.

These games are designed on emotional responses in kid's brains just as much as FB's algo for its feed is.
If You Transplant a Human Head, Does Its Consciousness Follow?
So you want ninja?
So to turn this off log into your account in a browser.

Account on the main bar > Profile and Settings > Privacy and Notifications > Advertising & Analytics > then click on each line and turn it off.
reply
Putting surveillance video on the cloud is... kinda dumb. It's rarely viewed outside your network, and local drives cost drastically less than the bandwidth needs. Also it's incredibly sensitive data that shouldn't leave your network without really good reason anyways.

The solution to this hack is simple: Shut this company down, because it's a bad idea.
Yikes I'd dump T-mobile if I had it... I wonder if I'm too late for puts.
It's not about "getting paid for labour" It's the attitude and environment a whole generation of devs is brought up in.

In the olden days, if you encountered a problem and had an idea how to solve it, you sat down and hacked a solution. No matter at work or in the evening at home. You had fun doing it, it improved your life, you open sourced it to share it with the community with the goal of having other people help you improve it or even helping your peers. That's how most of the small tools in the GNU toolchain were created as well as even Linux etc. And many of them live on today even as the original maintainers left or didn't keep improving by way of forks.

Today, if somebody has such an idea, they sit down make a MVP, find a cofounder, apply for YC, move to the valley, wonder about seed funding and product/market fit of their SaaS. And hope for getting acquired for big money. And most don't, they just fail and die. It's about money first and making it big.
A complete guide to innovation models and theories
Webmentions are a great way of getting back to a decentralized web. Being able to comment on someone else's site _from your own site_ feels like magic. It brings back memories of the web before social media took hold.

Implementation is pretty simple, too. I documented how I handled processing and display of webmentions on http://tanzawa.blog (a system I'm developing designed to make using the IndieWeb easier/less fiddly).
Note that I didn't say Google let businesses pay for reviews; all I said was that "I wouldn't be surprised" if Google let businesses do the spam filtering and flag reviews.

What I really meant is that I don't trust Google in this situation. That lack of trust still exists and is not a conspiracy.

And I _would_ be surprised if Google actually did the right thing here.
Howdy Sam!

About.me is a similar tool, but they're not open-source. This means you can't self-host your page for free if you wish, fork & make changes to the codebase if you want to add a new feature, or verify that the code handles your information how you would expect.

To us, this means about.me is a tool you can build with, whereas Singlelink is a platform you can build on top of.

Let me know if I can clarify any more, I hope this helps! :)
81.. > 8200 ;)
Much better article. It does have this point:

> That said, I haven’t found any evidence to suggest that brewsters were more likely to be accused of or killed for witchcraft than other women. Bennett certainly doesn’t make that claim.
Text inherently makes it difficult if not impossible to distinguish sarcasm that would be apparent with verbal/visual context clues.
Yeah. One can go read the protocol. But the Activity Vocabulary probably gives a good idea for the versatility, the use of (core) ActivityPub[1]. ActivityPub is streams of actions, most of which we know & are familiar with already from existing social media.

[1] https://www.w3.org/TR/activitystreams-vocabulary/#activity-t...
What does it imply?
> GNU software might force you to.

No, they might not. Just like Microsoft, they might demand that you don’t release your plugins. Addidionaly, GNU software gives you the alternative of releasing your plugins. But you don’t have to, and they can’t make you do it.
Disney+ Now Has More Than 100M Subscribers
> That's wildly different from issuing new shares when you have inside information which prices them at zero.

Hertz executives were in possession of no such information. The information was very public.
It is strange I haven't noticed earlier. Maybe it is just so unnatural to name files the same with different cases that I haven't tried.
Difficult problems in programming:

(1) cache invalidation

(2) off-by-one errors
I just skimmed through the post (it's late here, haha). It looks like Centrifuge is cool and is a part of what a webhook systems needs, but not all of it. Check out the landing page for some of the other things we provide.

Thanks for sharing this though, a cool read for tomorrow!
I thought „pump and dump“ refers to coordinated penny stock fraud whereas this was less of a coordinated scam and more the internet being the internet?
It's hard, though, to measure stablecoins' value independently of the core cryptos. A big thing that drives their adoption is that crypto exchanges such as Binance don't let you have fiat holdings, which means that stablecoins might be the closest thing a crypto trader can have to a cash reserve.

In other words, if not for the fact that there are structures in place that make it difficult to exchange Bitcoin for fiat currency, I would guess that, for most people's purposes, USDT would just be a chintzy knock-off of USD.
At no point has "web and mobile app data" been listed as something accessed in any breach.
Facebook associates users based on webcam faulty pixels
Homeworking Sounds Good Until Your Job Takes over Your Life
> Literacy in China is at 96%, well above the United States, and 99.8% for the 16-24 age group...

You forgot to add that they just "eliminated poverty."

> Do you really believe it is a government full of Derek Chauvins?

You've twisted my wording. I didn't say it was a government full of Derek Chauvins, but a government of Derek Chauvins. And in any case, it was a cartoonish riff on your previous comment, so it shouldn't be taken too literally.

> Have you ever lived there? You'll be surprised.

I think you'd be surprised.

> It's rather a few Derek Chauvins in a vast system of mostly good people

That "rather a few" are the ones setting and enforcing policy. That's the important fact. You don't rise up in the Communist Party by being a good person.
We had a professor who held office hours in second life.
I just confirmed the same thing: all of my lines had silently been reset to sharing data with advertisers.
Hertz is going through Chapter 11 bankruptcy. It is reorganization, not liquidation. At the end of it, there would still be a Hertz company, but with new owners.
Well what I really meant was the time between pressing a key and seeing a character on the screen. It’s easy to measure (except for deciding when the key is pressed. I go for hitting the key fast and timing from when it stops going down) by using some high speed camera (or medium speed, see https://apps.apple.com/gb/app/is-it-snappy/id1219667593 ) and it’s the latency that actually affects how usable something is for typing. The problem is that it’s only really good for comparing things as lots of devices in the middle add latency, eg keyboards can have 15-50ms of latency[1], typical deferred rendering can give you something like a frame of latency, monitors may add latency or just have slower switching times (it takes longer to switch a pixel to an accurate colour), and some pixels at the bottom of the screen will make it out of the computer 16ms (or whatever a frame is) later than those at the top.

For comparison with my (not particularly optimized) set up going over a fast internet connection, I get something like 150ms between pressing a key and the character starting to show up in emacs (it takes a few ms for the pixels to finish switching). 10 frames feels like a lot to me. My best guess is that without changing anything drastic or eg reducing resolution, I might be able to get that down to 100ms which is still looks like a pretty big number (eg a round trip between London and New York is something like 70ms).

Anyway, thank you for investigating this. A few frames from the network seems pretty good, especially with a reasonably large delta between frames in that video)

[1] https://danluu.com/keyboard-latency/
Well-written article which explores an issue with which we all struggle.

Here's another possible but related solution. Have two views, and have a control on the page that will swap between chronological and thread views. In chronological view, have vertical lines behind the messages that connect a message back to the parent message - if it was a response. Don't indent messages - I still want to see my messages on the right and everyone elses on the left. In the threaded view a) reorders messages, b) moves these lines to the left and c) indents the messages. Extra points for animating the transition between views.

As for the site, I know that other's likely have different opinions, but here's mine. I had originally viewed the site with a browser with script disabled. It still worked and was a pleasant read. I did observe an empty panel under "The Solution". Later I looked at it on a different machine where the browser had script enabled and found myself annoyed with animations that added no information. But the missing "The Solution" panel was present. I don't know it I'm an outlier, but I find motion to be VERY distracting when I'm reading.

Another complaint - general but I'll highlight this article - is the ratio of words to markup. For this article, the ratio was about 5% - meaning that only 5% of the characters in the html document were displayed to me the user. That is a very heavy overhead of markup. Is that just par for the course in modern web publishing?
Launch HN: Lykely – Instagram for Movie and TV Show Recommendations
Hello HackerNews! We are Arun and Tanin, founders of Lykely (https://www.lykely.net) - we're building an online platform to share Movie/TV Show recommendations with friends.

We had this idea from our own experience of having subscribed to these platforms (Netflix, Amazon Prime & Disney Plus) and yet struggled on what to watch? We clearly had too many options and this made it worse. Watching shows on random clearly did not work as we were constantly disappointed. This led us to speaking with friends and almost everyone related to this. After carrying out detailed user interviews with over 200 people, it was clear that this was a common problem and most preferred watching based on recommendations from family and friends. Hence, we launched Lykely.

With Lykely, finding reliable TV content has never been easier and better:
• See what tv shows your friends have watched and recommended.
• See trending shows amongst your peer group.
• Create your own watch list, take out all the hassle trying to find a show to watch!

Since the launch of MVP three weeks ago, we are improving the site based on feedback from our early adopters.
We would love to get your feedback/thoughts on Lykely and if you have the same problem that we are trying to solve.

Thanks for taking time to read this.
This sort of thing drives me crazy. It's so pervasive that it's impossible for users to keep up with opting out of everything.

All one can really do is treat corporations adversarially and assume the worst. It's crazy that I need to run a VPN from my home since my own ISP would use deep packet inspection (aside from logging DNS entries) to profile my household for advertising purposes.

Recommendations:
- Mullvad: they take cryptocurrency, account ID is a randomly generated number that can't be recovered, no logging, support Wireguard, reasonably fast, works well on mobile
- Cloudflare WARP: centralized corp but they don't sell customer data and aren't incentivized to do so (disclaimer: for now), really damn fast since you're probably hitting Cloudflare sites from your ISP anyway, they use Wireguard (but in a custom setup), works really well on mobile
There are actually two direct links.

I am prepaid and was able to visit the links directly to bypass their decision to break the website for us for no technological reason.

This one should redirect you to the right page after you log in to turn off two of the "features".

https://my.t-mobile.com/account/profile/privacy_notification...

But "for some reason" there is an entirely separate page for "Do Not Sell my Personal Information".

https://www.t-mobile.com/content/t-mobile/corporate/privacy-...

I can confirm that despite being a T-mobile customer continuously for 10 years and definitely repeatedly turning this nonsense off that it was all back on (and do-not-sell was turned back off, I assume "on" means "do not sell" but obviously it's an intentionally deceptive pattern).

Combined with their decision to force prepaid customers to suddenly call them every stupid time that you want to check anything or change anything when before it worked perfectly fine on their website... I'm thinking T-Mobile is getting Sprintified and am very sad that it really doesn't seem likely that I'll be able to keep using them. I used to think they were the best, back when they were trying...
> AT&T automatically enrolls wireless subscribers in a basic ad program that pools them into groups, and Verizon similarly pools subscriber data before sharing with advertisers, the Journal reported.

The article even mentions exactly that...
Warn HN: Popular Firefox translation addon now sends content silently
The popular Translate Web Pages addon[0] was recently updated to silently send all content that is hovered over to Google Translate or Yandex, by default. Needless to say, a huge breach of trust considering how much text you might hover over in your browser.

Previously, you would need to click the addon icon to enable it for specific web pages.

Here is the GitHub issue tracking the issue: https://github.com/FilipePS/Traduzir-paginas-web/issues/109

[0] https://addons.mozilla.org/en-US/firefox/addon/traduzir-paginas-web/
8200/8153 on a CV is a pretty much guaranteed interview regardless of experience, if nothing else than out of sheer curiosity, that also holds true in Europe these days.

That said outside of Israel it’s essentially impossible to validate, I actually wonder how many people take advantage of that, 8200 is huge it’s the largest (single) unit in the IDF (tho 8200 is technically the command level unit number, there are numerous sub units under it) it won’t be that hard to simply lie especially to a foreign company.
“We’ve heard many say they prefer more relevant ads so we’re defaulting to this setting,”

To the extent that anyone wants ads, of course they want more relevant ads. It's a truism.

But that doesn't mean that they want to trade their privacy for such things. And this is T-mobile's duplicity.
I recently listened to the audiobook of Invisible Cities, narrated by John Lee, and it was phenomenal. The strange thing is, I actually don't think I would have cared for the novel, had I read it myself, but Lee captured the sort of surreal mood exquisitely, and it was very pleasant to just lay back and listen to, or to have on while walking through a park.
Absolutely. Reviews have been gamed for a long time.
In the U.S. legal system, is video footage exposed in this manner admissible in court?

E.g., if a prison inmate was physically abused by staff, and his only corroborating evidence would be this video footage, can it be used to justify a civil or criminal complaint?
To the surprise of absolutely no one closed IP cameras that rely on a manufacturer run internet service are not secure.

Consumer electronics really suck, I wish there was an alternative to the DIY approach of Linux SBCs with rsync over ssh.
I see. Now it makes more sense. Thanks for the other links. I never knew about boook.link, it seems to be a very fun idea.
Arecibo Observatory cleanup costs estimated from $30bn
The Jump to Light Speed Is a Real Killer (2008)
Solved until somebody invents some form of technology for storing energy over time,and another for communicating without wires
Why the heck would Xi have any interest in that? What leverage could other countries employ that would incentivize him playing nice?
They'd just start buying their own product (which then goes right back into the supply chain) to skew the numbers. However, I do agree this is a good next step as it ups the costs significantly (the transaction fees as well as logistics of having to move your product in a loop) compared to buying fake reviews.