skysight-inc/HackerNews huggingface dataset:
> Pinging tty.sdf.org which is a direct access shell service in USA from somewhere between Europe and Asia, from an academic network backbone roundtrips in ~190ms.

Actually I get around 200 from Russia which is also "somewhere between Europe and Asia":

round-trip min/avg/max/stddev = 196.504/197.581/199.833/1.360 ms

> By using Cloudflare workers, so your code is also distributed around the globe?

Great, let's give that company even more control. That's sure gonna end well.

> CSS, images, JS, HTML, you name it.

It all gets loaded once and then cached in the browser. The initial load takes long regardless of whether there's a CDN. Oh, and many websites also use stuff from like 10 different domains, which doesn't help this either.

And, it doesn't matter whether a JS file loads in 50 ms or 300 ms, if it then takes 5 seconds to parse and start running.

> Actually, CDN is the most basic optimization for distributing heavy assets like videos and images, which news websites use way more than text. Why not use a CDN?

So put them on a separate domain and serve that from a CDN if you really care whether that stock photo no one notices loads in 500 ms instead of 2000. That doesn't explain much why anyone would put their main domain behind cloudflare.
By that logic I as AP dev should know systems programming and OS. A systems programmer should know kernel development ? A kernel developer should know assembly and microprocessor architecture?

Everybody has at best little or shaky knowledge of underlying abstraction. Yes it helps to know more, but is not really practical to expect that knowledge as the minimum required.
Show HN: Self Service Deployment(canary..) Verification API for Kubernetes
Feel free to share your feedback, I'd love to hear if the community would want to use this as a product with any enhancements/improvements.
https://hybridk8s.tech
Did you buy any of those reviews?
Okay, but you did not need a vaccine cert for having received the flu shot.

I personally do not get those seasonal flu shots, and I had no issues for years. It was entirely voluntary, and no one gave a shit if you got it or not (it was not the first question that left people when they met you either), it was up to you entirely. We treat the COVID-19 shot very differently, I mean, after all, there actually is a vaccine cert you receive, and without it, you are pretty much doomed these days (it varies between countries, but here many employers made it a prerequisite). What about those who cannot receive the vaccine for health reasons?

Many people here got the vaccine only to get the vaccine cert, because that meant that they could go back to work (as it was a prerequisite). This artificial limitation or restriction goes to extremes somewhere. Here they talk about not being able to receive basic health care without it! Can you believe that? But of course you have to continue paying for social insurance (that covers it).

---

If I may, I would like to have those down-votes explained as I did not say anything that is false, and I did not express my opinion regarding the vaccine either. What exactly could have been down-voted? I believe everything I said is true. If it is not, can you point it out, please?
Ball gets placed under one of three cups. Cups get mixed around and people guess where the ball is for money. The ball isn’t under any of them though. The scammer palmed it.
I'm not so sure. Spending the time (and money) researching it and developing a patent tends to indicate a desire for them to integrate the technology.

I'd argue against "is going to", but "wants to" seems fairly correct.
That's not how system frameworks work.
>If anyone dies as a consequence of this, it's not acceptable

Right, then you are just down some bizarre philosophical rabbit hole if you truly believe that.

Under this logic policing is unacceptable, vaccine research is unacceptable, driving a car is unacceptable, etc.. They all make trade-offs between number of deaths caused vs. some benefit (sometimes lives saved).
Is having a lower peak cellular response meaningful in the long run, or not so much?
Or trauma patients you can't get quickly intubated; could have utility in ambulances.
> That's untrue though, because Linux DEs have been doing 4-way snapping for decades now.

That doesn’t mean it’s not patented. It just means there’s nobody worth Microsoft suing.
London doesn't represent England. Unless you're a millionaire+ most Brits hate London.

In fact the amount of English Londoners fleeing London is insane. Its not just prices but crime and diversity.
Not to mention "intestinal scrubbing".
Considering that the status quo is currently that literally asking the individual and querying the source of truth to confirm the history of an individual directly for the purpose of discrimination are ubiquitous practices... yes, I think such laws would be very effective in reducing discrimination on the basis of criminal and judicial history.

If we have not even said that it is wrong, then it's going to happen. Saying that it is wrong and should stop happening is the first incremental step in reducing its rate of occurrence.
I needed to send data over GET in 2012/2013 and built my own tiny LZW-alike compression to squeeze as much as possible into the 100kb which seemed to be the safe limit for non-ie browsers at the time
The same can be said of driving. Should we remove airbags tomorrow?
Counter-Strike Global Offsets: reliable remote code execution
If someone gets 60k in London, it's probably they have not even tried to negotiate. However even if you get 100k, then good chunk of that is eaten by taxes.
Only way to get reasonable money was b2b, but recent changes to IR35 made it difficult. If you get caught by the rules you may pay over 50% of tax.
UK for IT is over.
The NHS indeed is underwhelming. I have to use private doctors because in my case NHS was useless.
Here's the repo https://github.com/naugtur/ripper/
That is definitely a good article but I especially like the part about haters
The real problem here is that the "back" button doesn't really make anyone happy. If it were instantaneous (like the page was kept alive in an invisible tab, essentially) and preserved state, then 75% of the use cases for tabs would go away.

The remaining use cases are more around opening a bunch of links from the same page, so we'd keep tabs around for that, but maybe auto-group them with the page of origin for some contextualization.
There was no evidence that would support a criminal prosecution. You say it yourself. What exactly are you trying to rebut here?
From my (admittedly shallow) understanding, all of that does kind of exist and has for at least a few years, now. It's also existed for longer for the DDoS-as-a-Service industry. Most of it's in Russian and takes place on private and semi-private Russian forums and chat rooms/groups.

There's definitely a hierarchy to it. Any particular group may not necessarily develop or own the software or infrastructure they're using. You can probably liken it to drug markets, where there are some top-level central players and many tiers below that make up the whole supply and distribution chain. (And potentially, the absolute top-level / "The Commission" may be certain elements of certain nations' governments, in some cases, or at least closely associated with them, which further complicates matters.)

You might find this 2020 interview with a ransomware operator interesting: https://talos-intelligence-site.s3.amazonaws.com/production/...
Whaat, was this new in 2018 ed? I could've sworn it was `()` and so you couldn't do that. I don't write rust that often, and happen to be reading this just as I've written some code that's.. not that messy but not that I'm pleased with, wrangling around exactly this sort of if-assign-else-return pattern.
You can conduct fraud by accessing public, read-only web pages? You can conduct fraud by searching on Google?

Those are the two I find repeatedly blocked when accessing via Tor. The former by Cloudflare, the latter by Google.

I use Tor to lookup phone numbers that have just called me, to decide whether it's a good idea to answer. Since I don't want to be personally associated with such numbers I prefer to search anonymously. But often it's impossible to get a result.

Sometimes even spending 5 minutes solving captchas isn't enough. (I'd only spend that long to see if it's just an outlier. No, it's quite common.)

This creates an immense pressure to tell various services exactly who is phoning me, which is a terrible attitude to privacy.
I wonder if there's a correlation between aphantasia and not reading or hearing stories as a kid.
Yes, that is a poor design - no sarcasm - I mean it.

However it’s better for most people than the alternative.

Fixing this should be job #1 for the Linux community.
How is this not caught by the Secret Service and Whitehouse security teams? Why did a media publication have to bring it to their attention?
yeah but most taxes don't change from year to year. Moreover, if your year zero advantage is "the point" then, why isn't biden announcing the tax changes in november and ramming them through?

> The point of a tax is to redistribute the money a government thinks should be redistributed to account for externalities in the market

That is not the point of a tax. The point of a tax is to raise revenue for government programs. That includes bombing children on the other side of the world, financing explorations to space, bailing out boeing and goldman sachs, etc. Nowhere in tax law does it say "redistribute to account for externalities in the market". Just because you dream something ought to be so, does not make it so, now or ever.
Sure at first then like cable TV it will suddenly cost a lot more later.
Alas, the nature of computation makes this only ever a matter of squinting hard enough at the problem.

Just as it turns out that matter and energy are almost the same thing seen from a different point of view, it's the same with code and data. Running code and processing data are no different to a computer.

You think a picture of a dog and a Windows program are plainly different kinds of things, the computer does not agree.

Something like Wuffs † aims to at least control the blast radius. If (in some alternate or far future world) you were only ever looking at pictures of a dog via Wuffs, you could at least feel confident that doing so did not have some entirely unforeseen consequences, like exfiltrating your SSH private keys. Today you certainly can't be sure of that, none of the tools you use have such a cautious approach.

† https://github.com/google/wuffs
Adding on to the other points.

- Zero to very minimal devops / syadmin knowledge required.
- Monitoring and few other important tooling is usually out of the box

- Add on / Related services in serverless stacks like vercel/netlify etc also handles email/auth type components, a framework will only provider library for these, implementation is in developer hands.

- Simplified deployment : most services can sync with Git repos, provide one click deploy and have simple CLI binaries .
I think the good of Kubernetes may be the sweep-away standardization in the network layer. IIRC it prescribes a certain network visibility of all the services that a lot of IT departments may have resisted under the banners of various motivations (security! obstinance! laziness! security!).

Also k8s adoption standardizing the visibility and forcing security to all (ssl everywhere, encryption, authentication for each request, etc).

That mass organizational evolution in enterprises opens up a lot more simplicity for just-containers or bespoke scaling strategies. Go ahead and run micro, nano, macro, or mega services. Don't be limited by docker "conventions" on size or complexity.

Of course serverless was the natural evolution to k8s, but the "DC OS" is still a very very very nascent thing that is far behind something like a POSIX standard or anything like that for portability. Serverless is all lock-in right now. k8s was nice in a way because at least it was SOMEWHAT non-lockin as an architecture/framework. If you squinted. Hard.

Standards and portability breed true flexibility and good tools, and we probably need a lot more of that in the cloudrealm.
FWIW in June of 2011 the Pentagon issued a report that defined how 'cyber attacks' can be classified as an act of war. Part of the defense department review of threats against the US. However, they have to be plausibly tied to a state actor such as Russia or North Korea (to give two examples) The net result was that the Pentagon considers military response (both kinetic and cyber) as legal and sanctioned ways to respond to cyber attacks.

Generally though, the Justice department defines terrorism to be "the unlawful use of force and violence against persons or property to intimidate or coerce a government, the civilian population, or any segment thereof, in furtherance of political or social objectives"

These ransomware attacks fall in the middle. They are 'deniable' by state actors as just crooks who happen to be within their borders. They certainly don't push any social objective other than to enrich the criminals. So that leaves them under the jurisdiction of law enforcement.

I have read anecdotal evidence that there are the equivalent to "Letters of Marque"[1] for Russian criminals who attack enemies of the Kremlin. They wouldn't completely qualify as the Russians aren't actually in a declared state of war (this works fine for North Korea) but conceptually if you accept that criminals are gonna crim, then pointing them at people you don't like at least keeps the damage outside of your area of concern.

In this particular case, the fairly rapid take down of these guys gives me pause. One wonders if the FBI and Interpol had Colonial pay with Bitcoin that they then traced to the destination wallets. And then working backward from there to the server infrastructure. That would be an interesting capability if it exists.

[1] https://en.wikipedia.org/wiki/Letter_of_marque
Right, and that's my point. Almost no one gets a CS degree to be a computer scientist. They get a CS degree to be a software engineer. So dontcha think we might want to teach them what software engineers do, rather than what computer scientists do? We don't require civil engineers to get a degree in physics and then pick up civil engineering on the job site. Why do that to software engineers?
The only reason Corp Dev is establishing a partnership is because they want to buy you but they aren't sure yet, so it's like a trial. It's also a good way to convince you to sell to them while also locking out competitors.

If you have a partnership with Google, it makes a lot harder for Amazon to buy you because first they have to unwind the partnership.
Look up "Henrietta Lacks"
This is a successor to 3.1.4, yes.
I, too, dislike rolling updates for my workstation OS.

I don't like using anything OS- or package-manager-provided on my dev workstation for per-project development dependencies, since usually it's much less painful (sooner or later) to manage those with a special tool for that purpose, or to vendor them, or to pick some OS that you might not like for your workstation as your deployment target (Alpine, say, or a very vanilla stable Debian) and just use scriptedly-reproduceable VM or docker or whatever.

I do like rolling updates for my actual tools and programs that I, personally, use. Editors (code or otherwise—image, video, audio, document, whatever), multimedia programs, browsers, quality-of-life improvement tools, command-line tools that aren't build dependencies, that kind of thing. If I hit a bug, then see that it's fixed in the latest release, I want there to be a very good chance I can just update my packages and get the fix, no further effort required. Or at worst wait a day or two for the package to be updated, and get it that way. If I read that a tool has some functionality, and install it specifically for that functionality, I don't want to lose time wondering why the hell I don't see it in the program, only to realize that it's because Ubuntu's packages serve a version that dates to before that feature was added (real thing that's happened to me on Linux).

That's where LTS Linux distros end up being a bad fit for me, because I want most of the stuff I actually use to be newer than what's in the repos.

macOS with Brew is about as close to perfect (for me) as I've seen. Slow-paced and relatively-reliable major OS updates, but my tools and programs stay up-to-date, and I can install damn near anything though the package manager (the closest I've seen to being as good as Brew as far as likelihood of my asking it to install something without checking that it has it first, and that actually working nearly every time, including for closed-source software, is Gentoo's Portage). I wouldn't prefer to install a project-dependency (say, PostgreSQL) through my workstation package manager anyway, so I don't care that it's rolling, since if I need something pinned I'll be fetching it some other way.

Given how fragmented Linux's GUI desktop is, and the way so much of it blurs the line between system- and user-packages, I think it'd be very challenging for a Linux distro to deliver as clean an experience, if that's the workflow you prefer (as, I've discovered, I do).
They'd put ads under people's eyelids if they could.
I think you're thinking too far into the future. They'll be on this sort of tech much sooner than 50 years in the future.
Sadly for CollapseOS' users, this Forth implementation doesn't have ".S".
Memoirs of a Cybernaut (1993)
Your tax dollar at work
I think something like gay rights provides a great example of hundreds of millions of people becoming drastically less judgmental over just a few decades. Of course it involves changes in the law as well, but massive cultural shifts do happen!
Interesting - the company I work for (based in US) was recently acquired by a Canadian business, and one of the immediate changes was the retitling of all "software engineers" to "software developers".
> Writing for people to read is not “very logical and very precise.” It’s “very expressive,”

There’s a continuum between writing technical manuals and ‘Ulysses’, with airport-bookstand thrillers somewhere in between.
Perhaps a Nobel prize?
My local police department posts mugshots on their Twitter, sends copies to the local newspaper, and types up a detailed report for the local radio station for _every_ _single_ _interaction_.

"John Doe was pulled over by X police Saturday afternoon for a speeding violation. Jane Y was ..."

And every Sunday, the local station plays these. So you know every single person who was pulled over. The vehicle they drive. Etc. Small towns are a special sort of hell.

You get pulled over and your grandma is on your case about it. What's really sad is you get used to hearing "resisting a police officer" as their supposed reason for getting brought in - you'll get one a month usually.
Vaccines.gov vaccine finder not working
> Can't help but feel the UK had incredible luck on their side here.

Some people might call it incredible luck, while others might say that it was a good decision made by world leading vaccine experts informed directly by the scientists who created the vaccine.

In fact, the BMJ said at the start of January:

> The trials of the Oxford-AstraZeneca vaccine did include different spacing between doses, finding that a longer gap (two to three months) led to a greater immune response, but the overall participant numbers were small. In the UK study 59% (1407 of 2377) of the participants who had two standard doses received the second dose between nine and 12 weeks after the first. In the Brazil study only 18.6% (384 of 2063) received a second dose between nine and 12 weeks after the first.3 The combined trial results, published in the Lancet,4 found that vaccine efficacy 14 days after a second dose was higher in the group that had more than six weeks between the two doses (65.4%) than in the group that had less than six weeks between doses (53.4%).

So there was knowledge/thoughts when the decision was made that an extended gap could change efficacy.

Besides, let’s give the UK’s biomedical community more credit than assuming it was a fluke anyway!
I don't know what worksheets are, but does Scala3 work with vscode now? Previously the plugins didn't do much, especially if you didn't use SBT.
I have no clue, I have personally tried it and yes it can be very fun. It's supposed to be done with two people ideally^1

But it can get really dark as well. I have done this between 10-20 times on my own, and the one time the visuals are about like... fruit, and the other time they're about really really bad super shameful and traumatic personal experiences.

It's not necessarily a game, although I can imagine it has the potential to be one. The danger is that this requires you to speak up about anything that comes to mind, and sometimes your mind will wander to very serious memories or pictures.

I can say that it works incredibly well though. The purpose of image streaming is that it should improve your ability to imagine shaped in your head, and it works _really, really well_. I personally stopped because I didn't feel comfortable speaking out loud many of the things I saw (even when I was alone), it involves "confronting your shadow" in Jungian terms

Here's the inventor's article on it by the way: http://www.winwenger.com/imstream.htm

^1: the person who invented it says it has something to do with how the feedback loop is more real if there is real consequence to what you say iirc
I've never seen a job in Canada advertised for Software Engineer, unless it actually required you to have an Engineering degree. In which case you could have an Iron Ring.
https://www.youtube.com/watch?v=hGAfimeeCD8
We used to do this with conductive/antistatic foam. Same idea.
>"What happened to Don't be Evil?" I asked. "I don't think corp dev got the memo," he replied.

Why is it that every company that starts with good intentions eventually succumbs and becomes that which they claimed to not like?
Terrorism has to have some ideological agenda, which is what makes it dangerous - I doubt you'll see suicide bombers for hire.
I was disappointed by that website. You can’t see much without registering and once you have, you still can’t see much about businesses (let alone ask questions) without buying a 300$ membership.
Plenty of comments here have documented the headaches around microservices and predict a shift back to monoliths.

However an alternate perspective is the microservices were not micro enough to make it worth the overhead + cost. My opinion is the reason this none of this feels great is because a container is not small enough of a base unit to enable you to completely forget about infrastructure.

That's why I'm betting the next paradigm that gains traction is fully serverless architectures. The overall direction things have been going for decades is to make hardware more invisible and I think we finally get pretty close with serverless.
IR35 has ben completely messed up recently.
338 ms to Sydney is my worst. 234 ms to Singapore.

AWS does offer a CDN, right? Somehow they do it without captchas and without me ever noticing. So I'm somewhat right at cursing at cloudflare because it's the only one actually announcing its presence by actively disrupting your browsing.
If you need to keep conversations across 2 messengers, that's at least less convenient. But noone seems to see that and everyone else around here is living in their idealistic bubble.

I'm also a privacy advocate, but there are downsides that you need to acknowledge.
I don’t believe it should be new, but this can happen by accident sometimes. Like, if you included a ; on the non-return branch it would return () overall and you probably thought the return did it when it wasn’t that. Hard to say!
That’s crazy.
It's things like this that make me say that Macbooks aren't for developers rather than running Linux in a VM.
Just the bit about making it accessible so you can get it indoors when it's windy left then?