skysight-inc/HackerNews huggingface dataset:
Unfortunately it's not that simple for everyone. I personally would lose contact with a lot of people if I delete Messenger or Whatsapp. On all my contacts, I have two on Signal, zero on Matrix.
> chinese libgo

I believe you mean this one? :

libgo -- a coroutine library and a parallel Programming Library

https://github.com/yyzybb537/libgo

(no information about the main contributor unfortunately)
> And of course keep up to date on openssh patches and security advisories.
What about 0-day security breaches? Often fix preparation takes months before been available to end users. All this time your system is vulnerable.
I disagree. The transformation should be valid; if p is null then the result is undefined and may crash, including the rest of the program after that occurs. However, I do think that it should not make such a transformation for a volatile read/write; in that case it should not make such an assumption (who knows if it is meaningful on the target computer or some sort of emulator or operating system or debugger or whatever).
> Interesting nugget: the author repeats the lies that apple doesn't collect/store/index your data.

I always wonder why the bias is always against facebook and apple. As if people don't realize that all the privacy smoke and mirrors was just about being able to compete with the Ad Industry. Apple Ads now does the same, in a non-blockable manner. I mean, it clearly was about business tactics all along.
I'm not finding ways to to use MD5. TCP MD5 is supported on Linux and BSDs, and TCP-AO isn't.

TCP MD5 has been used for decades to protect BGP, and exactly because it's still safe there's been no push to add TCP-AO.

And it inherently requires kernel support, because it's part of TCP, not the application.

I would have preferred TCP-AO (RFC5925), not TCP MD5 (RFC2385), but the former is not supported anywhere.

See more at https://blog.habets.se/2019/11/TCP-MD5.html

(I should have added this link in my comment, but I forgot I wrote a blog post on the topic)
But since in this case it only allows certain other formats, it's the wrong wording.
Or with uBlock₀ filter:

news.ycombinator.com##[title='downvote']

Then for showing the downvote button someone can temporarily disable cosmetic filters from the uBlock₀ popup.
> I personally would lose contact with a lot of people if I delete Messenger or Whatsapp

See Beeper (bridges to various chat apps based on Matrix.org): https://news.ycombinator.com/item?id=25848278
> Judges definitely do have the individual power to dismiss charges against someone; I have personally seen it done.

I did not say they didn't.

They may do so - may meaning they are allowed to - if it is obvious that there was no crime or there is insufficient evidence or there was a procedural error etc. (rules for this can vary greatly).

In this case that does not apply at all though.

Don't you think if the judge could just dismiss the charge they would have done so? Do you honestly believe you've got a better handle on the legalities of this than the person whose job this is?
I believe you. I was shocked by how low Amazon offered for a senior-ish position. I walked away from it. Went to a medium-sized high-growth pre-IPO company with Facebook+ comp. FAANG is overrated.
There was a cottage industry of interesting floppy distributions back in the day. I remember Hal91 (mostly for the ascii art and the creator's email at an online.no domain - funny for a young student who hadn't internalised the meaning of ccTLDs) and muLinux (which used superformatted floppies to cram an amazing amount of stuff into those few megabytes).
Apple is a data giant, that’s for sure but article talks mostly about location data which Apple has raw access to.
taking back technology where it belongs, in short few years the Europeans are coming full steam ahead with their own 4nm fabs.

that means Asian profits and fabs in Asia will need to start looking for new jobs.
> I have consistently gotten good ratings since joining and have been promoted twice so its not like I have been coasting either.

I read everywhere that for promotions at Google, you need to keep making new products. How true is that? And how do you deal with it?
A picture with messengers comparison is wrong: Telegram has 7 positions in Data Linked to You, not 3.

edit: grammar
Citation needed. The ISPs I've worked for run this pretty much everywhere.

I mean it's the only auth that exists for BGP, so why would you not want it?
I last used HAProxy about a decade ago for fairly simple load balancing and caching - worked really well.

Question about the suitability for a dynamic backend case. I have a system where clients are assigned to backends exclusively for the duration of a session. At the moment I have a pool of backends and each client is explicitly told which backend to use so they can route to it. Ideally I’d make this transparent so it was easier to reassign on the fly. Is this case reasonably supported with HAProxy and which features should I be looking at to get a sense of it?

I’m working under the assumption that I’ll need to build the machinery to maintain the pool and registry of where clients should be routed to.
Twitch streamers will be able to select from over 350 new tags
No, this is part of the TCP layer, which is why it can even protect against RST packets.
To expand on this I believe an aws load balancer is $30 / mo.

For early stage projects, and particularly for personal projects it's more cost efficient to use haproxy.

As an added bonus it's got all the bells and whistles to match demands as you scale, and no (cloud) vendor lock-in
The limited whitelist of video formats is IME secondary to that of uploads in general. Having to put archives in archives because github rejects the original one is painfully dumb.

Had that recently, as GitHub still has no support for private upload I wanted to upload an age-encrypted tarball of the logs / repro (incidentally this otherwise works extremely well as github exposes public keys through an endpoint, you can just age with a few `-r$(curl …)` and you have a file decryptable by all the specified github users, really convenient).

But then I had to zip the entire thing again…
Windows actually has screen recording software built in now with the XBox Game Bar. It’s meant for recording games but there isn’t any reason that you can’t use it for other programs.
I haven't played with or against the deck. So this is a purely theoretical discussion that is likely to miss something important. But here goes:

- The deck's plan is to attack for damage. It will do this by getting creatures onto the field without paying for them.

- There are 9 cards in the deck which require mana to play: the 4 Deathrite Shamans, the 4 Sticher's Suppliers, and the 1 Swords to Plowshares. The Shamans can produce mana and the Suppliers serve the important role of getting cards into the graveyard. But mostly, this deck seeks to avoid playing mana-producing lands, and therefore also won't play cards that cost mana.

- Bazaar of Baghdad is the center of the deck; every turn it will allow you to draw two cards (good!) and also discard three cards (great!)

- After that, it's just a matter of getting creatures into play. Basking Rootwalla can be played for free whenever you discard it. (Which you can do via the Bazaar.) Bloodghast will come out of your graveyard whenever you play a land. Hollow One can be played for free as long as you've discarded 3 cards. (Luckily, that's the exact amount of discarding provided by the Bazaar.) Hogaak can be played out of your graveyard as long as you have two creatures already in play. And Vengevine, which is probably most of the damage, will come out of your graveyard whenever you play a second creature in one turn. (You have to play them, so Bloodghast won't count, but Basking Rootwalla, Hollow One, and Hogaak all will. If you can play a Deathrite Shaman or a Stitcher's Supplier, those will count too, but this is not a necessary part of the plan.)

- Vengevine has haste, so whenever you do manage to get one out, it can attack immediately. It has been the core threat of various decks in the past.

- If you can get 3 Bloodghasts and 2 Hogaaks into your graveyard, you can recur all of your Vengevines just by playing a land. This deck has a tremendous capacity to bounce back from creature removal. (Graveyard removal will hurt more.)
Here’s the one billion dollar idea: per person authentication instead of one code per room.
I wouldn’t know, still busy trying to fill out your cookie consent form.
> Also, disable turbo boost.

Is there a way to disable it without installing some 3rd party software?
Amazon approved my eBook 'NICE ' having “nice” written over all the pages
As a kid I learned to program using a book introducing a Logo-inspired programming language with the Russian syntax - Robic [1,2].

It had a concept of an Agents living in an Environment.
It had several builtin agents, i.e. an "Ant" and a "Painter", etc.

The syntax was more Pascal-like than Logo itself.

Just like Logo it was designed to teach programming to very young kids.

It was rather limited, so the second half of the book was introducing Rapira [3,4] - a SETL-based programming language with Russian keywords. It was rather advanced dynamic language and had lots of data types: tuples, sets, etc.

Recently at work I did some simulations using NetLogo - so it was fun.

--

[1] https://en.wikipedia.org/wiki/Robic

[2] https://ru.wikipedia.org/wiki/%D0%A0%D0%BE%D0%B1%D0%B8%D0%BA

[3] https://en.wikipedia.org/wiki/Rapira

[4] https://ru.wikipedia.org/wiki/%D0%A0%D0%B0%D0%BF%D0%B8%D1%80...
It's really hard to make it output small videos with audio!
You still need the explanation, videos are not accessible nor search engine friendly.

It's a good complement though.
If frequency hopping IPv6 becomes popular, I wonder how long until we start having IPv6 exhaustion problems?
Extreme weather kills 21 ultra-marathon runners in China
12 years worth of absence in one go sounds like a lot.
No, "why use MD5" is because MD5 is the only one supported by kernels. And it has to be supported by kernels in order to allow any realistic use of a BGP daemon.

I thought this should be clear from the fact that it protects against RST packets. Nothing on an application layer can do that.

I wish I could edit that comment because while I expected people to go "oh, I didn't know TCP had that!", multiple commenters seem to have not read past "MD5" and assumed that this is pure application-level.
ShareX is pretty good for recording short clips/gifs of part of the screen
Yes, but as I recall it's fairly reasonable (maybe 10MB?). A huge pain for GIFs which are huge, but it should be fine for videos.
Not just dance music but hip hop too! The Akai MPC has been a dominant sampling and sequencing tool of some of the most prolific producers, even as software started to eat the electronic music world.
Setting up your NAS Box, 2021 Edition, Part 2
Three Paradigms (Inspired by Uncle Bob)
HAProxy is great software, mostly because Willy can focus.

But I feel sorry for him now, with HTTP/2 and HTTP/3 the pain will never stop. And IPv6 makes most of this obsolete if it happens!

I stick with HTTP/1.1 since I'm building a native 3D MMO; only Microsoft can block port 80 which I doubt they will atleast in the coming 5 years!

Linux wont, they are not that stupid.

Edit: allready the bots have downvoted, this is beautiful.
Never.

> The [ipv6] address space therefore has 2^128 = 340,282,366,920,938,463,463,374,607,431,768,211,456 addresses

https://en.wikipedia.org/wiki/IPv6
They're free to use real specific words that aren't actually offensive if they want.

Although in this case I would have thought GitHub uses a whitelist rather than a blacklist, so they should have said "webm isn't whitelisted".

(Notice how that is different to "webm is blacklisted" but your alternative wouldn't have captured that distinction.)
I don't really like Rust; I like C. But, it could be improved, making one with less undefined behaviour and better macros and less confusing syntax for types etc. Many of the new programming languages that try to avoid the bad thing from C I think are avoiding most of the good thing from C, too.
> remember to cut down your kernel.

yes, my Linux kernel is 3.4M, bz2 compressed. Unfortunately, some things are no more possible to get removed from the kernel, like the xattr in ext4.
> CDN is hardcoded into the JS library. Why would you even do that and then shame people?

It’s worth noting that before the fakercloud.com URLs were hard-coded into the library, the library was hard-coding a different service’s S3 URLs (uifaces.co) and only stopped when they became inaccessible:

https://github.com/Marak/faker.js/commit/e45648439ff5dd9adbe...

https://github.com/Marak/faker.js/issues/1055

So it seems a little unfair to complain that Retool are embedding URLs to your CDN when this library was doing the same thing to UI Faces a few months ago.
-- as most decisions you get there by eliminating the causes of not having good work life balance

avoid VC funded companies.
avoid pre-revenue companies without a clear path to revenue.
avoid companies where the engineers | co-workers don't have life outside the company
avoid companies with hard / set deadlines - this means they've no redudancy in the system. anything without redudancy will always be under pressure
In super low power hardware, it is easier/cheaper/smaller/more energy efficient to count days/weeks/months in hardware.

That way no multiplication or division is necessary.

For any hardware with more than a few hundred bytes of RAM there is no need for it.
I've yet to see anything I'd consider calling a startup having a DBA. I'm positively impressed if they even default to use foreign keys.
> as it has a (very rarely used) feature that allows information from the caller to be passed back to the generator.

The Twisted library encouraged heavy use of this before Python implemented async/await.

https://twistedmatrix.com/documents/current/core/howto/defer...
Your point seems valid and reasonable, however looking a couple years in the past there was a situation where you would be screwed with that setup: https://www.debian.org/security/2008/dsa-1571

That was the infamous security flaw where SSH keys generated on debian/ubuntu were always out of a set of 32768 keys due to lack of entropy in key generation. So if your SSH setup is compromised like this, the approach in the article would have provided an additional layer of security.
For me, the biggest issue with capitalism is that it narrowly tries to optimize "profit" above all and at all cost.

The problem with that is there are essential human needs that should be taken care of without trying to optimize profits but currently it doesn't work and people suffer needlessly.

I'm not necessarily advocating for completely getting rid of capitalism or switching to socialism, but the capitalism model certainly needs some adjustments to account for essential human needs (health, food, shelter etc), the environment and so forth.
It works as long as you set the right flag before launching it.
You could always use the other title when you look for a new job.
My experience of launching my first ever product – SelfSchool on Product Hunt
HackerNews and YC's initiatives has always meant something to me. It's my dear community of makers and visionaries.

Today is very special for me, I am launching my very first product on Product Hunt

I am an individual who is self-built and self-taught by learning things by myself on the internet. Today I want to offer the same to all the budding learners, irrespective of where they are and what they want to learn.

This gave birth to SelfSchool. Presently SelfSchool has 500+ courses extending to 10+ categories with 100% verified courses. The story has just started, we plan to create the world's largest free courses platform.

I consider this to be the first step towards the democratization of education at SelfSchool. I am looking forward to building this into the world's biggest free learning platform.

Join me on this journey.

Today, I have launched SelfSchool and I need your help. Please provide valuable feedback on the product here in the comments and buy me a coffee to support, keep lights on SelfSchool.

Head over to SelfSchool. Would love to hear from you folks
https://www.producthunt.com/posts/self-school-me

Cheers
Balaji Rao
Lets connect on twitter: https://twitter.com/intent/follow?screen_name=balu14012001
If you're recording the full desktop, then use ShadowPlay if you have an nvidia card (it comes with the nvidia software and utilizes the native GPU encoding). Otherwise, use the Xbox Game Bar, which is installed by default in Windows 10.

If you need to record a specific portion of the screen, I'd recommend the open source tool Captura: https://mathewsachin.github.io/Captura/

It's no longer maintained as of July 2020, but it's quite effective at what it does and is not lacking for features. I use it for recording UI interactions all the time.
Time and dates are awful enough without having to deal with hardware feeding you bogus data. I could imagine that if you were unaware of this that you could really drive yourself insane thinking your code isn't right.
Maybe try systemd, the boot times are legitimately quicker.
Benchmark: SQLite vs. RocksDB in Node.js
What's the value of such a bridge if Facebook still gets my messages ? And this doesn't support video calls.
I wonder if Google search is going to be the primary interface through which people will end up reaching some of the helpful videos.
Test Your JavaScript and TypeScript Documentation with Deno
As another comment recommended, ShareX is a very good and popular (if not the most popular) tool for small recordings. Also it's open source, small in size, and it has portable versions available in its repo[0] (so technically you don't have to install anything).

[0]: https://github.com/ShareX/ShareX/releases
There are a lot more possibilities. The reason why they are so complicated is simply to give the library developers all possible options. This features is afaik something targeted at them, so that boost, asio and others can implement powerful solutions without language restrictions.

The only way to enqueue a coroutine is to call schedule() within a co_await statement/expression. In this process the coroutine is suspended. Therefore there should not be any coroutine within the queue, which we cannot immediately resume.

I'm afraid I don't have any numbers available to compare coroutines with other approaches. But nevertheless in my opinion coroutines are benefitial because they keep their state (the stack frame, local variables) alive. If you use callbacks you would have to handle all these things yourself. Think about a generator for a sequence of numbers. You would have to store at least the counter variable manually. With a coroutine this happens automatically.
It's not about speed. It's about kernel support. And RFC2385 has kernel support and TCP-AO does not. See other comments.
Shoddy hardware here, not shoddy software.
Came here to say just that
Christopher Nupen has made an outstanding documentary about Viennese Radicalism portrayed in particular through Wittgenstein and Shoenberg. I can't recommend it enough.

https://www.youtube.com/watch?v=DRI_ZSh6iF4
> when every library already ships more modern alternatives.

Kernel needs support. This cannot be done in user space.
The search space is too enormous. Which is why you (somebody with a SSH server) should do IPv6 and then forget this other weirdness. [You should do publickey and so on, but I mean the Tosh stuff is "weirdness"]

Suppose you can write code that can try to connect to the SSH server on one million IP addresses per hour, if they respond you attempt an attack. You can try all of the servers in the entire IPv4 Internet in a few months even with a pretty naive algorithm.

But if you do this with IPv6 you won't ever finish trying addresses and indeed almost certainly won't find even one server (let alone successfully attack one) in your lifetime.

So immediately you need a more expensive attack method. Maybe you buy a supply of "passive DNS" (name -> address answers stripped of information about who asked, many big DNS providers sell this) which is not cheap and not well suited to this problem but it gets you somewhere. You pull out IPv6 addresses and try to SSH connect to them from your supplied list. This could work, but now you need to hope that your potential victims revealed themselves to you, all the juicy SSH servers in the world are invisible otherwise.
His point seems to have been that the tutorials were like that, because the languages were like that.

Functional languages born out of theoretical concerns and commentary tend to prioritise the art of the possible, not the art of the needed.

His point - and I've only ever dabbled with Erlang, so can't attest whether he's right or not - is that as a functional language born out of real industrial practice, Erlang prioritises other things that interest him more.

He makes a compelling case. Most Erlang programmers do. And unlike proponents of many other languages they can point to decades of industrial success.

Those tutorials of other languages can't. They exist because they can, and that's fine, but if you're building stuff salaries - maybe even lives - rely on, maybe those accoutrements are more distraction than essential feature.
I edited the image in the article. It appears to be cropped from Fig 2A on page 11.
I know all of these. I also don't need a reference to Zero Trust or beyondcorp. What I'm asking for is specifically authority that can be quoted in an enterprise context to make a case for these issues.

I would however also like to hear cases against Zero Trust and Beyondcorp. The most obvious I see with the old approach is that oftentimes Engineers in those environments are not able to work and when security punches holes into the old system the whole thing becomes way more insecure than they're actually aware of.
> I also certainly learned a lot at Amazon (although the thing I learned most was “how to be effective inside Amazon,” which isn’t a particularly great skill in the long run!).

Can you speak more to this? Why is being effective inside Amazon different from being effective at any other large organization?
I mean, that's kind of a tautological statement; if you change the code to either eliminate the need for the optimization or manually implement it, of course the benefits of the optimization disappear. That would apply to most, if not all, optimizations.
At least in EU that will be the case.
My point is that any business would have done the same. Expecting one to not look out for its own bottom line and rely on the kind heartedness of its customers is misguided. The problem is with the game, not the player.
Trabant: The East German car remains iconic
Thanks! I couldn't read the article because I'm in Europe.
Not a joke. I'm suspecting you don't understand that this is using a kernel-level feature, so if you think the joke is MD5, then please add rfc5925 to every OS so that I can switch to a better algorithm.

You use what actually exists. It's orders of magnitude better than portknocking BS.
> I sometimes seriously wonder if you born around the 1960s, how didn't you become a millionaire?

> wages were higher

Depends, of course, but for engineering jobs wages are way higher today.

I wasn't around in the 60s but my father was making less than $10K (as a professional with a PhD). That's about $80K today according to https://www.usinflationcalculator.com/

I can easily make twice that anywhere (without a PhD) and 3x-5x that if I shop around for best paying jobs.

No need to go back to the 60s though. In the 90s, $30K-$40K was a very nice starting salary for a software engineer. That's 52K-70K today. But entry level jobs today are paying far over 100K. I just hired a new grad last year for ~150K.

So salaries are certainly much, much higher today.