skysight-inc/HackerNews huggingface dataset:
Visiting many CloudFlare sites with Tor was impossible the last time I checked because their CAPTCHA is broken and has been for a long time.

I know for a fact that there are staff at CloudFlare who are aware of this problem but nothing has changed, so I guess that they don't care that they are making some sites unavailable to anyone who has to use Tor.
Christ. There's nothing they can't get their hands on, is there?
Right, that is interesting. Goes in the same direction as that the compatibility I praise above is from a certain perspective somewhat of an accident - Wine was supposed to run cutting edge software. It does, but it also still runs the old software, giving it a capability modern Windows is missing.
…People are still outraged over voting rights and endless wars.
EPI put the top 1% at $737,697 in 2019 and the top 5% at $309,348 [1].

Average Income of those normal workers [2]:

* Lawyer: $148,910

* Dentists (across all specialities): $186,300

* Physicians (across all specialties): $218,850

* Architects: $89,470

* Software engineers (across all specialties): $109,950

* All computer and math specialties: $96,770

* Pilots (All specialties): $163,480 [3]

So these “Normal people” are not even apart of the discussion stop making it seem like all these professions seem like they are in the top 1%. It’s paint a really false picture that skews the conversation at large.

1. https://www.epi.org/blog/top-1-0-of-earners-see-wages-up-157...

2. https://www.bls.gov/oes/current/oes_nat.htm#23-0000

3. I think that number might miss out on all the burn out low level contract airline pilots that make peanuts.
As with so many things gRPC, they've had an open issue about it for years, but it doesn't seem to be going anywhere: https://github.com/grpc/grpc-java/issues/1886

I like gRPC overall, but it's definitely got some rough spots like this. I'm fortunate enough to be using it at a small enough scale that they don't really hinder me.

My sense, based on the multitude of GitHub issues like this, is that the project itself is thrashing. They've got a relatively small core team that seems to be micro-managing all the official implementations, largely out of a desire to maintain cross-language compatibility. But the cross-language compatibility is actually rather poorer than you'd expect, because they're trying to maintain it by directly micro-managing the implementations, which turns every feature design project into a complicated n-body problem.

It would be nice if they could just publish a comprehensive formal spec, and let the language implementations follow it. Then each (official) language would have only one external thing to track, instead of ten.
Apple parts ways with ex-Facebook employee – workers cite 'misogynistic' writing
not sure to understand, any concrete use-case to share?

Docusaurus is a SSG, does not need a server in production and it's not a goal. If something happens live, then it can only happen on your dev computer
I agree, but what if it's not and going a step back is then refused? Is there really no other way of testing than large scale deployment?
Yes. Communication software that can be set up by anyone with some technical skill is bad. Communication software run by centralized corporations is good. No drama possible when your entire chat system can be nuked with a press of a button from some anonymous "moderator".
Standing up for Media – open letter
Discord has easier user acquisition. Also anyone can set up a discord "server" and even the smallest fiefdom of power is like crack to people, so of course now there's a discord server for everything.
Asia's pretty wide.
https://archive.is/wWgqP
To be honest, I'm not familiar with the specifics of the benchmark. I was surprised as well.

Currently I think the biggest limiter for small sites is that we sequentially fork the processes and wait for each to bootstrap.

I'm sure we could eek out a huge gain by rewriting it and optimizing, but at this point it is faster than anything else in the ecosystem and throwing more CPU cores at a problem is cheaper than throwing more development hours at the problem. :)
Some of the answers the DoD provided were given in a form that means Wyden's office cannot legally publish specifics on the surveillance; one answer in particular was classified. In the letter Wyden is pushing the DoD to release the information to the public. A Wyden aide told Motherboard that the Senator is unable to make the information public at this time...

It seems strange and troubling to me that a senator would be restricted from making public any government information.
Im not saying what they did was right, but look at toilet paper. Obviously the masses cannot handle news that something is in short supply. The CDC knew that if they said, "masks work, there's not enough masks, don't buy them cause doctors need them" that 95% of America would hear only the first two clauses and go out to buy as many masks as possible. All the masks would disappear, there would be a panic and hysteria more than there already was, and doctors would end up worse off than before.

Look at the gas crisis in the south. It's obvious that enough of America truly _are_ "petulant children" as you say that they cannot be trusted with such information. Given an opportunity, the American people will choose to make the national situation worse, to improve their personal one.

I think the main disconnect here is that the CDC communicated like it's job was to say what was needed for the best possible outcome (and still made mistakes and miscalculations) while (some of) the people believe the CDCs job is to communicate the whole truth 100% of the time. We can see from looking back at literally any war or the 1918 flu pandemic that the populace is routinely lied to for the 'benefit' of the country. What is happening now is that we can instantly fact check and communicate to millions of people our opinions on what was said. I am not saying they were right to do it, but attempting to provide the framework in which is becomes believable that _they_ believed it was right to do it.
First patient to have AngioVac procedure in Atlantic Canada calls it a 'miracle'
Be the change
Assuming you're being facetious, I have always wondered where the line is. If I discover ten thousand dollars in cash in a hole in the ground and deposit it, will the IRS notice? Will the bank require some kind of information? What about if it's a hundred thousand?
Thanks for this comment. You've clearly outlined something I've been trying to convey for years, especially to people who read too much Taleb: "skin in the game" cannot be a purely financial concept, otherwise it fundamentally misunderstands the notion of "risk".

"Financial risk" is a proper subset of "calculable risk" which is a proper subset of "risk".
To be fair, I'm more likely to get the official site in the presence of a typo via a search engine. In the case of .gov it doesn't matter as much since it's a tiny bit difficult to spoof them, but typo squatters are a problem for the rest of the web.
I used to do a lot of Blender work on a 2013 macbook pro (up until last year or so). It's fine for modeling, but rendering is rather slow as the macbook thermal throttles when all its cores are being used.
Very neat. I wonder if there is some kind of soundpattern that can be used to 'sweep up' the smaller globules back into a single larger one.
You can convert .class files directly to native.

https://dzone.com/articles/profiling-native-images-in-java
I still don't fully understand it, but they wrote a lot about the topic here: https://dotty.epfl.ch/docs/reference/contextual/motivation.h...
The article here ignores the view of the Web that Cloudflare has, which coupled with "something you have" (the U2F keys) makes for a compelling alternative to CAPTCHAs.

Sure, bots can automate keys, but those keys could also be banned just as well. Cloudflare only needs to know which ones are the good keys and track those forever. This means, for every non-bot out there, the CAPTCHAs are as good as gone.

The genius of Cloudflare here is that they (ab)use WebAuthn, which can also be implemented on Android and iOS natively. Before you know it, Cloudflare has built an identity platform (where it may not be helpful for KYC) is plenty useful for websites Cloudflare fronts. Imagine never having to bother with user registration and authentication and bots... that's the next extension I see to all of this.
As another non-Chinese Asian, really? You don’t want to be lumped in with the Chinese so it’s easier to know who the “bad ones” are?

I hate this rhetoric. Whenever a hate crime occurs, it’s so common to hear “they didn’t deserve that, they’re not even Chinese!”. As though being Chinese would make it ok.

It’s easy to forget that 3 decades ago, people were saying the same thing about Japan as they’re saying about China now. The people who want to hate Asians will find a reason.
PIA was aquired by a company that some consider to have a shady past.

https://news.ycombinator.com/item?id=21679682
GNU/Linux phones?
Have they solved the erosion problems with it that lead to it being dropped in the 1960s?
you compare aggressive teams with literally billions of dollars to an un-ending network activity that generates more costs than new nickels? have you ever been actually poor and yet working every day? stunningly insensitive, not funny
Can you elaborate on the changes in TS that hint at dependent types? That's interesting.
That doesn't really help since the home server more corresponds to my irc client (or something like quassel-core or a bouncer) and not a irc server and will just have me as a user and no one else.

The Matrix architecture is much closer to the one used by Jabber Multi User Chat (with perhaps a fancier MUC protocol) than IRC.
Planned roll-out in 2024? Ok. Who wants to take that bet?
Most Americans, and Europeans too, really don't know much about China. The picture you get painted by only reading news articles is not representative of what real life is actually like over there. China is not a third world country, and the CCP is not a North Korean style military dictatorship. It's really just a normal place, and visiting Shanghai or Hangzhou just feels like you're in US cities. You don't have to like the CCP to enjoy China and respect its people.
Rescue Mission for Sci-Hub and Open Science: We are the library
I haven't been vaccinated yet. I was planning around fall of this year to give the vaccine more time to be studied and also to (I assume) have better protection during the time covid-19 is likely to come back (the winter).

Now I'll probably be vaccinated in the next week or so. Before this change I assumed there would be minuscule risk over the summer. Now it's been upgraded to a very slight risk. So might be worth the vaccine.
If I understand it correctly, you cannot ban attestation key without potentially banning lots of legitimate users.
Maciej Ceglowski's critique about pg's "Hackers and Painters" applies here: The biggest difference between programming and writing is that one of them can get you laid.
Agree. I worry manufacturers are going to consider a range near 300 miles or 500 km “enough”. Many people in the US at least live in rural places where a 300 mile round trip might be needed weekly or even daily (for “shorter” distances like 200 miles that could still challenge a battery on a hot/cold day).
You have got to be kidding... When will someone stop Match Group, who own every dating app most people have heard of: Tinder, Match.com, Meetic, OkCupid, Hinge, PlentyOfFish, Ship, and OurTime.
Coinbase, for one. There's a whole process under the KYC/AML regulations if you want to deposit large amounts of crypto with a legit exchange.
Too bias - This statement is over-generalized and exaggerated. You can share observations, but to extract what is underlying - it needs a backup data. During a pandemic, most big tech let their employee work from home.

WFH means that you are able to get tasks done by yourself with lots of autonomy. IMHO
Disagree. As an open chat platform -- ie. not for private/confidential communications, to me, IRC is still superior to Matrix. We use it at work in parallel to IRC, and it still happens today (at least with elements.io) that a message or two can get lost when you restart your client in an unfortunate moment, and sometimes channel user lists get out of sync, so you're addressing a person that's not there, or suddenly someone replies you don't see in the user list. It's happening rarely, but it does, and it is annoying.

IRC's concept of requiring an active TCP connection for your session is archaic but dead simple, and the only times you have to wonder whether or not someone received your message is if they got a ping timeout shortly after, and the user list might get out of sync once in a honeymoon when there's a net-split. Nothing about IRC changes anymore, so you won't get surprised by regressions and bug fixes every month. I can see how people miss long multi-line messages and animated gifs in IRC, but I just don't. It's straight forward text communications, no bullshit.
Asia is a big continent, and often Pacific Islanders are also thrown in with the jumbo term. Africans probably also feel weird when we bucket everyone from their continent under a single African label.
One thing I noticed switching to a custom DNS server on my phone is that search ads are a little hard to identify on mobile nowadays, and I find myself accidentally clicking them up to a few times per week (the mistake is immediately apparent because the site won't load).
I'm sure they'll come after them with the same fury they go after alleged billionaires paying $800 in taxes for a year.
It's called thorchain and it's on the way to the moon...
>> In December, 2020, he published The Janus Point, his first book since The End of Time. It’s named after the two-headed Roman god who simultaneously looks forward and backward.

Dammit. I thought I was going to read an engaging discussion about the philosophy of physics, say. Instead, it seems I'm once again sucked into an advert for someone's book.

An advertisement, even complete with endorsements as one expects to find in the inner cover:

>> Lee Smolin, a faculty member at the Perimeter Institute of Theoretical Physics, called The Janus Point “simply the most important book I have read on cosmology in several years … both a work of literature and a masterpiece of scientific thought.”

Very frustrating.
OFTC is another IRC network - irc.oftc.net
I agree Matrix hasn't seen the level of attacks IRC got. Once it has been through that we will see if it is really a viable alternative.
Interesting. Thanks!

I've been using a lot of Swift lately, and they have a generic type roadmap that talks about "existential types" and being able to "open" an existential. This looks very similar.
Ask HN: What is the best network equipment brand for a new home?
We're building a new home, it's 2600 sqft + an unfinished basement (1300 sqft). What brand of network equipment should I go with? Ubiquiti was the default choice until a few years ago, but after the recent breach(es), not so sure. Recommendations?
Whether masks could be effective was never in debate. If you recall, they were concerned people would use the masks incorrectly and that could do more harm, as well as potential shortages in the supply chain and getting the masks to the most important workers. I don’t recall the CDC ever saying “masks do not work”
Writers get laid sometimes too.
Is CAPTCHA a necessity only in ad-sponsored web? Is there other compelling use-case for it?

Can we make CAPTCHA obsolete with decent micropayments solution, when you pay for every transaction with every website, just like we pay for every drop of water we use? Perhaps ISPs could handle it for us?
not new, we have many sites that are just using the blog, or just using the docs.

Example of just using the blog:
https://blog.johnnyreilly.com/
https://blog.developersam.com/
I read somewhere that Apple were going to encrypt backups but that would mean if a user lost their key the data would be lost and as such decided that for usability they would keep back ups as is.
You can provide fake info to 23andme.
Yes, because four million Indian Americans, 2 million Americans born in Africa, 5 million Chinese Americans, etc. aren't going to mind at all if you sever contact to their friends and family.
https://fidoalliance.org/fido-technotes-the-truth-about-atte... explains this pretty well.

Basically:

* Attestation keys are not unique per authenticator; they're shared among batches of authenticators.

* If you extract the batch's attestation key, you can imitate authenticators from that batch. That doesn't mean you can authenticate as a registered authenticator, of course; it just means you can pretend to be a "Yubico XYZ" device.

* Yes, I think Cloudflare is assuming it's hard to extract the attestation key. I think this is basically a safe assumption, but if it isn't, they can always choose to distrust batches known to be compromised.
The bank will have to report it to the IRS. They will cross-reference it with your taxes. They will also come talk to you if you have a pattern of doing it regularly. But you will probably not have an issue with it.
Perhaps can say the same for organizations of animals even. I know there are politics amongst some groups; don't know enough to state if there is always politics within any group of animals or not.

https://www.biologicaldiversity.org/news/center/articles/201...
It is very true. I probably still have a resignation letter at a company I ended working for 12 more months. Nobody knows about it (except the NSA)

That said, it did mean a lot about my intent and feeling at the time.
The bank will fill out a form about "structuring deposits" for any transaction around $10K. They will also report transactions in general over $10K.

https://en.wikipedia.org/wiki/Structuring
The phrase "Russian collusion" has become a catch-all for anything involving Russian influence, it's ridiculous and it over simplifies reality.

The basis for the (actual) Russian collusion investigation had a reasonable starting point. Joseph Mifsud[0], the guy that nobody can find right now. It was absolutely worth investigating and it's disappointing that it became the dog-and-pony show it did.

And Russia interfering with foreign elections is real[1]. There are plenty of other sources as well that cover the ongoing efforts by GRU and other Russian groups to influence the election process in many countries.

[0]https://en.wikipedia.org/wiki/Joseph_Mifsud
[1]https://www.blackhat.com/us-20/briefings/schedule/index.html...
They do have a one-time payment option of about $40.

But in my experience, it simply does not work compared to other platforms. I still see a lot of ads even with their strictest settings, and it also seems to break a lot of sites without having any toggle switches in the browser UI.

It's gotten to the point where I put the iPhone down and pick up another device if I need to access a website. After a few months, I'd like to just resell the phone. But on the social side of things, having a number with blue chat bubbles is a depressingly effective status symbol, and Apple is better about in-app tracking.

It's getting hard to ignore how harmful the duopoly in phone operating systems is to consumers. Carrying two phones around is not a tenable solution.
Yeah, except that because the other 999 users probably wouldn't be using Tor to access the same websites, in practice this would be pretty much guaranteed to give a highly accurate, persistent tracking identifier.
Yes because giving your privacy to someone requires trust if you want it to stay privacy.
There are a lot of people who use databases without really understanding anything about them. They mostly won't understand why it is important to control time and execute multiple statements at the same logical moment in database world. That is a difficult concept to intuit naturally, people need to be told and they often don't have time or a teller.

Databases that only do the technically-correct thing are weeded out because they lose the big supportive cloud of novices that experts grow out of. So the good databases support the intuitive way and the the correct way of manipulating data.

There are more computing concepts to learn than there are hours to learn it in. People use systems they don't understand and systems need to support that.
They already have that but it's just for internal teams. I used it recently to lockdown Wordpress installations
So why do people still get weird random text narrated? There weren't really any conclusions from the article. Very incomplete.
And? The kinda of communities that used to be on IRC and aren't invested in the "indie web" are on Discord. That's just a fact. I don't like it either, but I totally get it when when Synapse+Element are still a slow inconsistent error-throwing mess if you don't disable federation (which all large-name adopters have done).
That doesn't sound unreasonable. Out of interest, what would you consider a ridiculous speed to be crawling at?
How do you know who to pay to?

Sure, you are paying for the every drop of water, but what if you really wanted to pay for water from a specific region, doesn't want water from another region, and trust that the water company does not keep a cut or rip off either of you?
Seems odd that even RISC-V has external GPU support but ARM boards don't.
Notcurses III: The Saga Continues (1080P)
No offense, this framing is so dumb. I hate it.

The ‘Internet 3.0’ isn’t coming because of Cloudflare. It’s coming because these monolith big tech companies have an army of engineers who have been centralizing and building it this way for years.

Cloudflare didn’t build these walls, it’s more of a giant boat now navigating it because other companies have no choice.

I like to think of them as giant data ferryman in this regard versus “a wall builder”.

I’m not saying frustrations aren’t warranted but — like come on — have a little perspective of what’s really happening with the Internet and who is actually driving it.
Launch HN: Moonshot Brands (YC W21) – We buy and grow e-commerce companies
We are Allan, CJ and Jesus, co-founders of Moonshot Brands (https://www.moonshotbrands.com/). We offer e-commerce founders a simple way to sell their companies, which we then grow.

The story behind this began several years ago when CJ and I were trying to sell our e-commerce companies. The process was the most stressful experience of our lives. Drawn-out negotiations. Terrible payment terms. The buyers wanted us gone. We lived with a fear that the businesses we worked so hard to build would be sucked dry and spit out as a shell. We have sold 5 companies and experienced this pain before.

Unlike technology businesses where a large group of buyers exists, e-commerce has an anemic acquirer base. We started Moonshot Brands to fill this gap and make getting acquired approachable. We work with both direct-to-consumer brands and those that sell on online marketplaces.

Our timeline is fast: we provide a valuation within 48 hours and close in 45 days.

We don’t restructure companies. Since founders who have achieved product-market fit are onto something, we want them to join and build with us. We bring the experience and resources to help them grow.

Unlike private equity firms, we’re not in it for short-term gains that leave customers and employees on the hook. We invest long-term and make money from sales growth on the e-commerce sites.

Our goal is to build the acquisitions company that we wish would have existed when we sold our own businesses. The e-commerce sector is growing rapidly, so the timing is right. We have $160M in funding and $15M in revenue to date.

If you know a founder of a profitable e-commerce company looking to sell email allanf@moonshotbrands.com. We pay finder's fees for successful intros. Also, we're hiring, if you know of any great marketers, devs, or BD email or apply here https://moonshotbrands.breezy.hr.

We’re excited to tell you about this so if you have questions we’d love to hear from you!