skysight-inc/HackerNews huggingface dataset:
GIMP is OSS and doesn't pay the bills.
I'm sure much more man-hours went into Photopea (even with a single contributor) than in GIMP and the [ad revenue / promise of passive income] is what allowed that.
I reported this to Clubhouse in February, no response whatsoever (I am not involved in this leak, just to be extra clear). Essentially anyone with the token from the iOS app (MITMproxy + SSL kill switch) can query through the entire public (records are cleaned) user profile database. It supports wildcard queries and just responds with some 20M records you can page through if you have the time. It luckily (!) doesn't expose e-mail and phone number, which is why I also agree with others here that this is only mildly interesting. The news won't care, however. I think at around 4M users or so they switched from auto-increasing IDs to a better numbering format, until then all records remain as-is (increasing).

I think Clubhouse can fix this quite easily (limit the records returned in search!!!) and apply some harsher rate limits on a per-token basis (tokens never expire, that's another thing).

I think they relied a bit too much on certificate pinning. Once that's bypassed, it's relatively easy to query your way through the data. If you managed to grab someone else's token (which doesn't expire), you impersonate them (without logging the other session out), and continue to show up/talk in rooms using the Agora SDK as that person.

They also do upload phone numbers of the address book in clear-text (non-hashed), although I can see that there's not too much of a point because reverse-hashes can maybe work around this easily if not salted.
How do you make sense of this whole NFT phenomenon?
I honestly don't see it that way. The current wealth inequality factors don't have anything to do with it. The economy is merely broken, not inherently unfair. However, the way it is broken is unfair and fixing the economy (get inflation back on track) will make it fair again.
Possibly memory leak in macOS network request stack
I have written an application for macOS that is dealing with 50-100 network requests per second and the memory is constantly growing (reaching 1gb per day). The first version was in Swift, so I believed it was a Swift related issue and reported it here https://bugs.swift.org/browse/SR-14194. Then I decided to rewrite my application in Rust and surprisingly had the same memory issue. Same code runs fine on Linux.

Example in Rust:
https://gist.github.com/telcy/b1c3a444def65dd0f1d109b6a98db0f1

Usually I try to find the issue at my end, but this seems to be out of my control. It is a bit mind boggling for me how a crucial part of an operating system leaks memory without anyone noticing.

I hope this gets some attention (and discussion) as this would mean most applications on macOS with network requests do leak memory to some extent.
Ask HN: What are some low entry manufacturing possibilities?
What small business can one start with relatively low initial investment (e.g 2000-20.000 $) and low domain specific knowledge, but decent general engineering knowledge ? I'm thinking specialized production machinery, e.g CNC, 3D printer, etc. to mass produce / custom produce common / custom tools / products of relative simplicity but high enough demand (e.g cotton swabs, PCBs, as some examples that come to mind).

On a more philosophical note, I observe that:
- we are flooded by products, information, ads, etc, a seemingly abundance of everything.
- production becomes more centralized (due to complexity)
- individuals are more and more limited in their ability to self sustain (consequence of the above)
- anxiety, depression, agression tends to increase (because of above). More so now, amplified by current pandemic and restrictions. Also, as a sidenote, the pandemic showed as we are not optimally organized (too centralized everything as apposed to more geographically and socially distributed)

In that note, what self sustainable businesses would you think are good to exist more of, to the benefit of the individual and the society as a whole? And what are your thoughts and advices on getting there, one step at a time?
Not surprising, given the strong financial sector whose employees you compete with. London is similar in this aspect.

On the other hand the public transport is great, which means you don't have to live in the most expensive areas to have decent commute.
I weep for you.

As an alternative could you use React Native and borrow an Apple product during compile day?
It's mostly psychology. People have been wired to equate apps = app store. Trying to educate users to simply click "Install this to homescreen", while seemingly simple, seems like a huge gulf for most people. I'd imagine that app installs for app-store variants to PWAs is 100:1.
Have a look at the CTV stats. Quebec peaked at 30 per capita, fell to less than 10 with the curfew. And having kept a version of it, now is less than 15 per capita.

Ontario was 25/7/25. BC was 16/10/23.

Roughly. My prediction would be that Quebec has a lower peak than these two provinces and spends less time with max restrictions. Ontario issues a full stay at home order, and did so before Quebec’s curfew announcement.

Also Montreal is the only place that kept the curfew at all (9h30 vs none until recently) and it has markedly lower per capita case counts than the rest of quebec or other BC/Onatario.

Do you have an alternate explanation for this data?

https://www.ctvnews.ca/mobile/health/coronavirus/tracking-ev...
"Fonts can be malicious" made me think of security vulnerabilities in font engines that can be exploited remotely by untrusted websites through things like webfonts. That doesn't necessarily involve Turing completeness, just some bogus memory handling in a font library written in C for instance.
That was my solution as well. I have required smoke detectors connected to powerline 1 per 60m2 or so and then have multiple Heiman zigbee detectors, connected to Home Assistant.
Probably no reason to vilify the US as a ‘lesser’ country, everyone in the world has their struggles.
Narrow and simplistic.
As if the political state of a country was independent of power in relation to the citizenry.

A less wrong characterization would be people should be concerned about new ways of having power exerted against them in violation of their interests.
That violation can come from authoritarianism, bureaucracy, simple criminality or any entry on a list that goes on a long way for someone who cares to keep looking.

Capitalism may encourage breeding certain kinds of manipulation and exploitation, but it's by no means the one source for such concerns, nor is it likely to be the worst one.
Actually I think VMs for dev are evil. I hope it's a stop gap measure until tooling like nix catches up enough. Running an entire seperate OS just for development is completely bonkers to me.
Hey, I was just kidding. It might be useful to screen recruiters not candidates. I think the posted app was inspired by this image:

https://i.imgur.com/r0SEEoh.jpg
CloudBeaver – Database Management from Browser
To put it into context, no, these people make around the same as factory worker. Work conditions would be much nicer, still.
Schoolteachers are considered 'poor' by other Ukrainians (who are not too well-off themselves) compared to other occupations without taking into account SW jobs and anything like that.
> Yes, you can beat the market. But anyone cannot beat the market ... a retail investor picking a mutual fund based on past performance is likely to be disappointed.

We are in 100% agreement.

I only wanted to correct the misinformation spread by grandparent who claimed that nobody can beat the market.
You can tell them what you want, if people are stupid enough to continue to download and use Chrome, they lost their free will on the subject to the almighty google!
True.

Though in all those cases, for me, all alternatives are just as bad or worse.

Getting ansible running on a windows server is... unfortunate. Ensuring that your bash script runs on OSX is easier, but I've had lots of unexpected issues with tools like grep or find working just a tiny bit different. And so on.
Liberation of Buchenwald and Mittebau-Dora concentration camps
His direct competitor at the time had a patent out 1 year sooner, entered mass production one year later, had as you say lower resistance. (Blanking on the name).

Prior to this various different bulbs where created that had more or less resistance. It was a wild time period prior to centralized power distribution.
> increased sleep duration by 27 minutes per night by inducing more time in bed
Almost all click-through terms of service are, IMO, designed to prevent people from reading them.

https://www.eff.org/wp/clicks-bind-ways-users-agree-online-t... and many many others if you search for "click through terms of service readability"
I'm in Africa just now. Have you looked at the plans for his city in Senegal? I'll believe it when I see it.
Making sense of conspiracy theorists as the world gets more bizarre
Factorio would be a better model of the problem if backstuffed factories would keep consuming power despite being idle. This would be analogous to having idle workforce that still has to be paid
Don't pay to be a beta tester
Regarding not being able to work at a faang: Don’t forget social anxiety where your mind blanks when they put you in front of a white board.

Or also simply not being a cultural fit. What if you’re a republican?
To give an additional data point for people who are interested how a setup like this performs for daily use:

I am currently running Parallels Tech Preview on the MacBook Air M1 and primarily use PyCharm (remote interpreter and deployment to the VM). The whole thing works better than expected considering it’s still a preview release. Battery lasts around 12 hours, sometimes an hour or so more depending on what else I run.

I am currently working on a Django app. When saving while the debug server is running I can command tab to my REST client and make an API request and the change was already deployed and the server restarted. Despite dealing with a VM the whole thing is just fast.
Yeah, I wouldn't recommend going the IaP route either for a small app with no marketing.

Users will think they have right for personalized support (which makes sense, of course) and will contact you for refunds, the reviews will get meaner as well and then you have to keep the library updated.

I got a notice that I have to re-do the IaP code on my app, an app that made me $600 over it's lifetime of which I saw nil because of how hard (and expensive really) it is to get the money into my country... just removed the whole purchase thing, it should make some users happy and my life easier.
I'd phrase it this way: it is completely bonkers that this isn't bonkers.
There is a psychological component to minimum wages though. A small increase every year would cause companies to renegotiate salaries frequently. A sudden increase will definitively cause underemployment.
Thank you, Photopea looks amazing (even on mobile!) I'll certainly try it in the future. This success is inspiring and your talk is very interesting. Do you intend to make sqzr.js available to others ?
I'm a big fan of "Hadoop is a distributed system for counting words."
Along those lines I'm getting shades/hints that people hire to fit a workforce that resembles something like how they think their software stack works?

Sounds good in theory but in practice people aren't actually programs/cogs and stacks are messy?
I just have a list of movies I want to watch. Then my wife can pick any movie from that list and it will be pre-approved.
There is a lot of conflating of “project manager” and “product manager” in these comments.
He reminds me of the oldie irfanview.com from the 90s.
While Denmark have problems and many policies I disagree with I do see this one as a good idea but I agree it wouldn't work in the US. I do feel this is a bit sad though as it would be helpful in the US too, likely more so.

Comparing the Deceleration on integration with the US version that is both religious and force you to accept the US above all others I find quite ironic in The Land of The Free Vs. So-called socialist Denmark (I know it isn't but Americans often say it is).

I'm Danish btw. with English and Pakistani first and second generation immigrant family members that come from a poor background (textile factories in England and rural Pakistan) who are now well integrated ranging from university degrees to working industrial jobs.
Here's the important part of the video, in my opinion:

https://www.youtube.com/watch?v=Iuv6hY6zsd0&t=274s

Basically, two floating balls are used to create waves on the surface of a pond...

From the waves created; from their interference patterns on the surface of the pond, we can see exactly how light behaves in the double-slit experiment.
Would normally refrain from upvoting this on account of the title, but the actual topic was important enough that I think it can be worth an exception.
Does this mean we'll now see miners make 3-5 vVGPUs from one 3090 for triple the hashrate per card? Because I'm already having trouble getting a 3090 as it stands.
> No, that's not correct.

See the commit for yourself! They removed the sharing between string values when you created a substring a while ago.

https://github.com/openjdk/jdk/commit/f55750d05a04484b719220...
It's too late. I've already spent all my social capital moving those people over, and it'll take at least two years to build that back up again. I don't mean to be too negative about this because I'm sure you're suggesting this in good faith, but nobody is going to switch to something that literally none of them will have heard about. Whether a particular technical solution is the best or not will never trump network effects when trying to move 50+ non-technical people over to a new messaging app.
Are you a former professional driver?
I completely agree, re: HN paranoia around FB. I feel like the engineers lose their minds (speaking as one) and need the FB boogieman to exist. Is there no room for the (very plausible) explanation that a group of people had benevolent intent yet the wheels fell off when they didn't understand the scale of what they were working with?

This happens all the time at work for many of us, we underestimate scale and shit breaks. I don't know why the same logic can't be applied to Facebook, albeit taken to the extreme, being one of the biggest data hoarders on the planet.
Great stuff - I love the map: https://raw.githubusercontent.com/takaakit/design-pattern-ex...
I’d recommend a password manager
A survival world that contains itself
I run Oracle DB (which is a scary piece of software) inside Docker on an Intel Mac. It runs perfectly fine.

What exactly are you guys running that causes it to be "unbearable"?
The biggest guns part gives it more money than it needs and that money has to be put somewhere lest it causes unemployment.
It's not unauthorized. You are presented with terms while setting up your smartphone for the first time.

This article also sounds like GPT generated text optimized for mild outrage. It offers nothing substantial to the issue
Hadn’t seen these before.

Bunch of JSON files there - any advice on which ones to use??
We are also one year into community transmission, which means a subset of the population already has organic/natural immunity (both variant-specific antibodies and long-lasting T-cell protection against a range of coronavirus variants) after recovering from Covid.

Vaccine clinical trials excluded people who had already recovered from Covid. As antibody and T-cell immunity testing becomes widely available and affordable, we can quantify the subset of the population whose natural immunity precludes the need for artificial (vaccine) immunity.
Obsolete German Units of Measurement
If you think that's bonkers, I'll give you an even worse idea: a dedicated desktop machine. I have a dell optiplex running Intel i3-2100 with 8GB RAM and 1TB Samsung 860 Evo SSD. No display. Fedora runs like a dream with dnf automatic. Use cockpit if you'd like.

You can use your windows or Mac laptop with visual studio code to do web development. ng serve works as if you ran it from your laptop.

The biggest drawback I can think of is if you ever needed to leave the house. Thankfully, I have no life so I don't have this problem.
This is not a loaded question. A loaded question would be something like "For those who use Chrome, do you like having no privacy?" The question as posed contains no malicious presumptions and thus is not loaded.
Got it, thanks, that was good reading. Where is that consolidated into a black-list? It’s crazy that hiring and firing in the US comes
to that list.
“Homosexuality” isn’t a sin, it’s a typo
Your browser is probably too old, or you use some "exotic" browser extensions
Thank you! Will definitely watch it!
Why software developers leave you
Show HN: Blazr, a Ballblaster – Style Game
This is a PC download, 33mb, from my website, for my game Blazr, which is a take on the 1985 futuristic sports classic.
It's early stages, but has sound, controller support, 1 or 2 players, bots and nice graphics.

It plays on a spherical field, so real over-the-horizon shots are possible, and one can jump.

I plan to make it a four player game.

There's also a VR Oculus Rift version, which I'll publish if there's interest, it's very rough now, but interesting.

I'm not sure if the jump mechanic is practical for such a high speed game. The AI doesn't jump yet, so the goal stays fairly low.

I didn't follow the classic exactly, but most standard features such as bot-vs-bot, angle shot and dribbling are implemented.

This is actually my second take on it, the first was a Blitz3D version 15 years ago, which I started with a friend who is also a huge fan, and who made the 3D-models. It was never published, only shown in an art context.

I played the original on C64 and Amiga a lot, but didn't quite get all the subtle details until now.

Actually, as is visible on my site, I'm trying to craft awareness games which aren't too boring, so this is a spontaneous side project. I hope it rocks!

I'm not too sure how much I'll have to change to make it fairly original if I ever craft it into a finished product, which will largely depend on how much fun it can be to play...
Rebuilding your app in a completely different technology that you may or may not know seems like overkill for short-term computer woes.
JsonLogic – Build complex rules and share them as JSON
Seeing the title, I was anticipating something more exciting than a run-of-the-mill resize script...

Namely I thought, did someone make a clever tool that recognises "boring" pictures and would reduce their size? You'd want high res for a group photo of say 100 employees (not that we'll have that in 2020-2021...) or a panorama with interesting details if you zoom in. For the goat, of course zooming in you'd just see its fur, or individual leaves of grass, so reducing its resolution wouldn't matter much.
All of my experience says otherwise. I don't know the specifics because I'm not actively working on it but ZK is the cause of a lot of problems at current company.

Additionally many years ago when I was investigating Zookeeper at previous company there were a number of fairly critical bugs that were unfixed in the mainline branch after having been reported years prior and patches provided. The solution was to find the Netflix or Etsy (I think?) fork and use those because they had merged in patches to fix things.

We ended up going with raft because while it might not be as well tested as zookeeper it was actively being worked on so issues we would run into would have a chance of getting fixed.
A few hours? That is a fantastic return on investment!

By the way, you should definitely add this to your CV. It's the sort of technical thing that really stands out from other candidates.
It's a very useful suggestions, thank you.
I will make improvements based on your suggestions in future
(i am not a professional ui developer, so i really need suggestions like this to do improvements)

thank you again

Best regards
That the web is the better platform for solving his problem and doesn't suffer from the monopoly.

Yes, I think that's constructive. I don't say that what he's done is bad, but have a suggestion how he could have saved some trouble. Why the negative sentiment?
> I also recommend the recent WaPo article on his move in Uganda, I found it revealing. https://www.washingtonpost.com/world/2021/04/06/akon-city-ug...

Paywalled.
I get the point but it's misleading to attribute the entire year to integrating payments.

The server code base has historically had periods of non public updates and doing a quick grep of the commit log payments first appears in October 2020.

It's been clear since 2017 that Moxie has wanted to integrate payments to "stay competitive", so such effort was always on the schedule.
Some mistaken policy choices:

* Not requiring masks at workplaces or schools once seated (common in many areas)

* Not aiming for ventilation and denying aerosol spread

* Denying asymptomatic and presymptomatic spread. Giving health/testing advice mainly based on symptoms

* Not using and blocking rapid tests

* Not scaling testing capacity with cases

Japan had a more coherent approach on some of these with their three C’s approach: avoid closed spaces, crowded rooms, and close contact. The West generally just emphasized the latter. (The west did have capacity limits, but only to space people out within rooms, not for aerosols)
If you don’t absolutely need a local VM I’ve found it much nicer to have a beefy ec2 instance be the Linux vm that you connect to in order to work in Linux on x86.

Recently I’ve been doing this with VSCode which has a remote dev mode that works amazingly well. Before that I was just using ssh and tmux/screen which, as we know, also works and has worked for decades.
433MHz coupled wireless smoke detectors are about as cheap as ones without. And their signal can be intercepted by a cheap Rflink device: http://www.rflink.nl/blog2/devlist

Granted they are not as fancy as a Nest, but you can buy 5 of these for the price of 1 Nest. And the Nest's aren't flawless either. I've had to reconnect 2 of the 3 Nest's at my parent house multiple times now and also a Google account is now required.
Life by design is rigged and there is little we can do to change it. Natural selection may help with some problems, but it is also cruel in its nature. Knowing it does not mean we should not try to make the world a better place, we should. But there are fundamental limitations like IQ, free will, laws of physics etc that we should not forget about. Going back to the ToS problem, they could probably offer a more expensive version with a ToS aimed at more demanding customers, so that they could opt out by paying more. I think it would be fair.
I use ZooNavigator quite a bit at work for development purposes: https://zoonavigator.elkozmon.com/en/latest/