skysight-inc/HackerNews huggingface dataset:
> I understand a university lacking the IPv4 address space to allow arbitrary incoming traffic (although IPv6 can solve a large chunk of that problem), but why on earth would you block outgoing ports from a research institution?

Because production and research networks should be separate.

If there's IP network research going on, it should be isolated from your labs, printers, secretaries, etc.

* https://en.wikipedia.org/wiki/Science_DMZ_Network_Architectu...

> At my university, every device gets a fully reachable IPv4 and IPv6 address, optionally coupled with a subdomain.

Does that include all the Windows desktops in Finance? Your Oracle/SAP HR servers? Does each "device" you reference also include the SCADA stuff that Facilities uses to monitor environmentals?

There are plenty of devices at an university that should have outgoing (and incoming) filtering.
SEEKING WORK | Europe | Remote

Location: Europe

Remote: Yes

Willing to relocate: No

Technologies: Java EE, Spring, Spring Security, REST, HTML/CSS, JavaScript, JQuery, Dojo, Node.js, Python, Perl, Jaspersoft Studio, Eclipse, Tomcat, MySQL, Oracle, Git

Résumé/CV: https://drive.google.com/file/d/1Oyazlm3ucxH1XLgqScKs7g9zBOS...

Email: nishchalaro[at]gmail.com

I am a senior backend Java developer / consultant with over 11 years in the industry. My expertise is in - building robust, secure and scalable backend services and enterprise Java applications, Javascript based geospatial maps and data visualization. I also have extensive experience with the TIBCO Jaspersoft BI product offering - Jaspersoft Studio, JasperReports Server and JETL (Talend ETL).

I am looking for part-time contract or freelance/consulting opportunities at the moment (up to 20 hours/week).

Website: https://www.nishchalarora.com/

Linkedin: https://www.linkedin.com/in/nishchal-arora
Why not just TIFF for container?
This is a minimum with the corporate tax rate in the US being above that. Therefore, the difference between them minimum and the official value is the incentives margin that the government can use to nudge corporations in the desired direction.
Location: Europe

Remote: Yes

Willing to relocate: No

Technologies: Java EE, Spring, Spring Security, REST, HTML/CSS, JavaScript, JQuery, Dojo, Node.js, Python, Perl, Jaspersoft Studio, Eclipse, Tomcat, MySQL, Oracle, Git

Résumé/CV: https://drive.google.com/file/d/1Oyazlm3ucxH1XLgqScKs7g9zBOS...

Email: nishchalaro[at]gmail.com

I am a senior backend Java developer / consultant with over 11 years in the industry. My expertise is in - building robust, secure and scalable backend services and enterprise Java applications, Javascript based geospatial maps and data visualization. I also have extensive experience with the TIBCO Jaspersoft BI product offering - Jaspersoft Studio, JasperReports Server and JETL (Talend ETL).

I am looking for part-time contract or freelance/consulting opportunities at the moment (up to 20 hours/week).

Website: https://www.nishchalarora.com/

Linkedin: https://www.linkedin.com/in/nishchal-arora
Explain What Single-Threaded JavaScript Means Like You Are 5 Years Old
Sight, those socialist thugs...

All of them are above the minimum, so what does that really achieve?

Message for the central planners: you can't tax me anything if I don't work. Or if I work but not here.

And let's not forget that involuntary taxation is theft.
Why are governments allowed to collude like this? Isn't this the same idea as price fixing? Exploiting their monopoly (governments' monopoly on the right to do commerce) to unfairly raise prices (taxes)?

The world needs at least somewhere where you can opt-out from Western neoliberalism and socialism.
WebKit and Chromium split so long ago, i don’t really think you can call them the same engine anymore.
The one which by proxy is totally nonplussed by what human rights violations go on in China as long as the cash register keeps dinging its bell but on the other hand gets utterly flustered at the lesser problems at home so it ends up looking hypocritical?
G7 tax deal first reaction: There is a long way to go to get this right
Its been months of work building and improving blurweb app i will love your all input on how we can make it better
Tenable, for sure. Effective at preventing companies from finding a way to pay a ransom (where the ransomers know it'll take them additional time to acquire the cryptocurrency funds)? Probably to at least some degree; I'm not sure exactly what the deterrence and enforcement statistics might be like.

But wise or ethical? I'd argue about as wise and ethical as classifying cryptography as munitions. Cryptography in general is certainly more broadly useful than cryptocurrencies, but strong cryptography also enables far more and far worse crimes than cryptocurrencies alone do.

And can you believe there isn't a law preventing US ISPs and network providers from shuttling traffic to or from known Tor nodes? At least 90% of it is obviously used for unethical and/or illegal activity, and it'd be tenable for ISPs to regularly null route public IP addresses they confirm Tor nodes were listening on. Sure, Tor has a few niche use cases like cryptography does, but it so overwhelmingly enables atrocious and criminal activity that it's an injustice no bill has been passed to fight it. Some people could still get around it, and I'm not sure exactly what the deterrence and enforcement statistics might be like, but it'll probably still help to at least some degree.

Governments that shield criminals are the cause here. Go after them rather than the technology the shielded criminals happen to leverage.
Unfortunately, it's largely backed by USDC right now... The failure of USDC would hurt the DAI peg.

If your threat model is government-backed censorship, though, it should be an improvement.
Some teams don't need managers.

Companies should use "not having a manager", as a perk? As long as the team produces.

I don't think I have ever met a manager whom deserved the title.

I have met talented employees whom are unofficially recognized as the leaders though.
You could still enumerate every option in practically no time.
Ground breaking on Sagrada Familia in Barcelona was in 1882 — it was consecrated in 2010, but still not finished!

According to Wikipedia they're expecting it to take more than 5 years more, with a completion date of "post 2026"
Cost of the Cloud
Sorry for the rant but some things are not comparable i see m1 and graviton vs Intel or AMD CPU and what i see really is like saying like as image hosting solution nextcloud+owned nas is bad and costly why Google photos is cheaper.. (free.. Until it's not..) ! The two are two different things one can be your.. the other.. not
It's an artifact of the projection also being used to slide off walls smoothly, and then just reusing that idea - which could be a accident, or an "accident" (choosing by what feels better).

Goldsrc surfing was most exploitable in the form of "wall-running" by strafing against rounded surfaces(e.g. the cylindrical sewer pipe interiors in cs_siege and cs_militia, I think, both did this). Same bug, different mechanism, easier to control.
> small government, low regulation, wealth makes right

How does this explain their stance on issues like gay marriage, trans rights, abortion, and criminal justice? We really have to stop saying that American conservatives are primarily motivated by small government.
Oh yes, you are right. Obviously, do not hire me for any kind of information security. Lol.
G7 backs Biden's sweeping overhaul of global tax system
Yeah, but if you regress to 'legacy DNS' by removing systemd-resolved then there's no good way to do per-interface DNS (~client-split DNS), or (optionally) validate DNSSEC, or do DoH/DoT; and then nothing respawns and logs consistently-timestamped process events of substitute network service processes.

FWIU, per-user DNS configs are still elusive. Per-user DNS would make it easier to use family-safe DNS (that redirects to family-safe e.g. SafeSearch domains) by default; some forums are essential for system administration.
Restrict expense claims of that nature and/or tax on revenue and minimum expected profit for large companies?
JPEG was designed in 1992
JPEG2000 was designed 1997-2000
FBI demands info on readers of USA Today story
Also, the engine has little-to-nothing to do with the plugin system.
Not sure what you mean by that, but yes, would be interested in an example.

More generally, what inspired you to make this, what did you feel is missing from prosemirror-markdown? What does this do differently or better?
I have played FPS games for as long as they have existed, competitively in the early days of CS. I don’t see why adding this feature deliberately would be appealing. It makes the game look unnatural for what? There are tons of hard to use glitches in every FPS game and the policy on any enjoyable server is “no glitching”, that is - play the game as the developer intended or be kicked. This bug was just too
widely used to be considered unfair but thankfully games these days use movement code without obvious bugs like this.
Mailbag #1 – WaitButWhy
to be fair, the way plugins/addons are handled in a browser is a part where browser differs completely despite having the same engine
There are some countries that you can move to that are generally free of the laws of western nations.

For some reason, people from “western neoliberal and socialist” countries generally don’t move to them, though.
Yes I understand that, but I believe that many corporations today pay even lower than a 15% effective tax rate. I suppose you're saying that these loopholes will be closed up to that minimum?
Financially, complying with these censorship laws make sense.

Ethically, an American company should not be doing business if it involves censorship like this. Right now, things like LGBT+ rights are (sadly, in my opinion) still political decisions, as are decisions surrounding the ever-violent conflicts in the Middle East. Microsoft seems to err on the side of progressiveness in most of these political statements, proudly proclaiming "pride" on their Twitter page, presumably because it makes financial sense more than anything. Microsoft has no problem with politics if it serves to make them money.

The sad state of affairs is that money is more important than ethics for most companies. Microsoft made a political decision and that decision was that it's okay to censor recent history of violence against unarmed protestors.

I don't see how you cannot blame them for that decision unless you've fallen victim to Chinese propaganda.
At this point you have to assume that is by design.
All these are stupid. Latino includes everyone. There's nothing wrong with masculine gender in grammar, there's nothing wrong with the suffix 'man', and there's nothing wrong with being a man or being masculine
Python: Using ASTs to Patch Code and Assess Code Quality
Twitter would print out nudes for the communist police state.
I love how an application which modifies the UI of windows does not have a single screenshot showing the application on their website. What is going on with this trend?
Thinking in a “functional way” is an upside and preferred by some and often a best practice by many (functional core, imperative shell crowd, much of the JS community post-React, etc.). It’s definitely a skill to have.
I will watch the talk later, but I think it is pretty obvious why to write compute shaders. :)

https://home.otoy.com/render/octane-render/
Ack, I do indeed. I blame the JPEG org for having such confusing names!
IconVG is a compact, binary format for simple vector graphics
I don't know, JPEG has the "problem" of being good enough for what it is used for. We could do better for decades but because everyone understands JPEG it is still the standard. And if JPEG doesn't fit, chances are that PNG does.

There are alternatives. Google optionally uses webp, because it saves them bandwidth and they control the entire chain. And specialized applications like maps sometimes use better suited formats, but if you want to share a picture, that's JPEG.

The same thing happens with audio. The go to format is still MP3 even though it is well outdated. In fact, we had what is close to the perfect lossy audio codec (Opus) since 2012 and support it is pretty much only used when you control the entire chain, like in video games.

So maybe JPEG XL is the perfect image format, but it is still a tough sell when you have something universal that is good enough against it.

The only way I can see it gain traction is if tech giants get together and force it on us. Like they have been doing for web standards. And if there are patents, even that may not work.

Video is different because it uses a huge amount of bandwidth and no formats are "good enough" yet.
Good point. At the company where I work, we have an ISO compliance team that converts that guidance into mandatory requirements. So the authority is coming from company policies rather than ISO itself.
C++ ensures this will never be used widely.
Unavailability of Duo’s MFA product is extremely rare. But when it does happen, IT admins can switch to “bypass” mode to only require the 1st factor. So even though Duo doesn’t have 100% uptime, you’re no worse than no MFA
Collusion between governments isn't illegal, and there is no governing body that would prevent this. At best there are economic treaties between countries.

This applies only to "global companies with at least a 10% profit margin". By definition, you're already playing ball with all of these actors if you're a global company.
Fundamentally this comes down to the very American idea that everything legal is moral. What they did may not be illegal, but it certainly is immoral. People who do immoral things do deserve the public shaming they get.
Cease Fire
The cumulative amount of popups on Google websites, and apps has been unbearable for quite some time.
It's complicated. "Money they made in their country" is hard to define. Large companies abuse intangible assets to shift profits around, but it's hard to say at what point abuse starts. For example, Google USA sells advertising to its clients. But, the assets it is selling are actually owned by Google Ireland. Google Ireland charges Google USA a license fee of 100% of the revenue they made. Suddenly, Google USA has net profit of 0 and Google Ireland has a large net profit.

This at the same time happens frequently, but also some amount of intercompany shifts in profit are reasonable. Google Ireland might be the actual owner of the asset. Company ownership might be fuzzy as well - maybe foreign subsidiary is only partially owned by the parent and partially owned by another company. Drawing the line can be very hard. Do we make it so companies are not allowed to sell or transfer assets overseas?

Probably the best solution is a minimum tax worldwide. This reduces the incentives to shift profits around, since the tax rates are the same everywhere.
Show HN: My one click video review plugin
Some would argue that the current circus show headed by the far left is the epitome of "every other crazy idea you can think of".
AFAIU proposals for taxing companies wherever they do business rather than where they are headquartered often involve paying MAX(X% of profits, Y% of sales), precisely to avoid these kinds of shenanigans.
If you disagree please explain your perspective...
Of course it could be argued that the second company is also making the money in the first country where it’s IP, trademark etc. gets used and has to be taxed there.

Tax authorities already try to control for arbitrary cross country bills that try to shift profits (at least in some jurisdictions). The downside is more bureaucracy and unproductive friction of course.
Many bird species have low survival rates for their young but the species survives because each adult lays a large number of eggs in its lifetime.
This is the crux of the problem, the desire for personal wealth overcoming the ethical qualms that come with supporting dictators.

I dare say that no ethical shareholder will fault Microsoft for making the decision to fight Chinse censorship. I also dare say that there are probably very few ethical shareholders in this world.
> Michael H. Horn, a professor emeritus of biology at California State University, Fullerton, said that although the loss of 1,500 eggs might not threaten the long-term health of the elegant tern, which has a worldwide population of about 100,000 to 150,000, the drone crash was still troubling.

[0] https://www.nytimes.com/2021/06/04/us/elegant-tern-eggs-dron...
Is a zero-sum job defined as one where the only person benefitting is the employee? If so, it seems like the only ethical way to eliminate those jobs from the economy would be some kind of guaranteed minimum income.
> Good. It’s a shame that Biden had to back down from the initial 28% because of domestic opposition.

It's a compromise/balance and as we know of many taxes - easier to raise them than to get them inplace too start with.

Biggest issue in all this would be that it will need the weight of those supporting it to peer-pressure the other countries to join. So Ireland, Luxenburg and other corporate tax over-friendly countries need to come onboard and that will be easier to achieve with a lower bar of 15% than to go in hard at 28%.

Also when negotiating, there are always compromises and by going in high at 28%, left a lot of room to compromise had he gone in at 15% inititialy and with 15%, whilst far from what people demand, it is better than currently and good foundation start.

Far more important though is the second aspect: "Secondly, the rules will aim to make companies pay tax in the countries where they are selling their products or services, rather than wherever they end up declaring their profits."

That is far more important IMHO as currently see countries seeing their taxes due being off-shored and lost - that in itself is the bigger issue and this addresses that aspect.
Huh.

I didn't know about SawStop before, so your comment sent me on a wiki-hunt.

"Gross negligence" seems like a huge understatement for all the rationalizing and lobbying manufacturers did to avoid having to use safety technology.

https://en.wikipedia.org/wiki/SawStop#Opposition_from_trade_...
The larger the attack surface, the easier it is.

Large corps with thousands of employees and legacy infrastructure is usually not that hard to breach.

While i haven't kept up with cyber security in a while i think the problem is largely the same. Security is not baked in, it's an afterthought at best and because of that there's shortage of talent.
> I don't really understand what the fuss is about.

There are only so many hours in the day/week, and it's usually already filled with work that needs to be done for internal needs. Someone external comes along unbidden and wants to add to your work for something that seems to have very little benefit for the organization.

Why should I do the work for them? What problem of mine does this effort solve?
Slavery is on.
NAT and stateful packet inspection (SPI) work with UDP similar to how they do with TCP, but depend a little more on heuristic timeouts because there is nothing equivalent to TCP flags.

Outbound packet 4-tuples (source IP, destination IP, source port,, destination port) are tracked and translated with NAT. For some heuristic amount of time after, if an incoming UDP packet is received matching the same 4-tuple it is let through and the translation is reversed. This is UDP "connection tracking", and the details are a little more complicated than described here but not a lot more.

As with TCP, these are considered outbound connections because the initiating packet is outbound. There's no need for hole punching, which is a set of unreliable techniques to enable inbound connections.

Firewalls and routers have supported NAT for UDP as long as they have for TCP in practice. They haven't supported NAT for other IP protocols such as native SCTP.

This a major reason why QUIC is built on top of UDP, so outbound QUIC connections work already over most NAT routers, at home, at work and mobile.
Jack is the Queen of censorship.
Is this where they are going to send their asylum applicants? It would be a lot safer for them than in their home countries where they are being persecuted.

https://www.bbc.com/news/world-europe-57343572
A 100% license fee seems like a non arms length transaction at a non market rate.
Because if they did, bombs would soon fall in order to destabilise that threat.
Transpile Anything to Everything [video]
I'd ask some economists if thus is net negative or net positive for developing economies. If the principle is you pay tax in the economy you supply service, then a lot of service is supplied over mobile devices to emerging economies. Maybe their tax revenues will rise?
Show HN: My wannabe entrepreneur daily podcast
> I'm Peruvian and married to a Colombian and have never heard of this.

That’s not surprising, since it’s purely a product of “woke” culture in the USA, and the only people who use it are either multiple generations removed from their “ancestral” country, or have degrees in social sciences from Ivy League universities (or both).
This shit looks cool

As do some or many of the other competing technologies

I've been struggling to pick a stack that is super gd simple

But still let me do some SPA stuff for certain parts of the app

I might never actually write a line of code myself, but even so I want to easily be able to tell what my contractor is doing

And fix if necessary

Guide architecture

Maybe choose the initial stack in the first place

I'm overwhelmed at this point as to which stack I can use that will suck the least

Prob the biggest issue I have is just that '80%' number I often see thrown around with these new front end non-js js frameworks

That is, this will probably be able to handle about 80% of your use cases

Tf?

Noooooo

100%, please

At least, 100% of all up-to-medium-or-high complexity use cases

Not that I'm planning on rocket science

The question I want answered for any new tool like this is

Can it do basic UI interactivity like Duolingo?

Ok, then I'm in

Other than that

How to really compare this unicorn for django with livewire for laravel, inertia and or vue for everything, nuxt (which looks interesting), etc.

And my preferred contractor prefers rails, gd.
>Why are governments allowed to collude like this?

Because otherwise everything becomes a race to the bottom.
It's one cause, but in my opinion the root here is the fact that ransomers are frequently identified but brazenly don't skip a beat even if they get publicly doxed, because they know they'll face no repercussions. Their governments turn a blind eye as long as the victims aren't citizens of the country or closely allied countries.
On the contrary, those countries are extremely popular places to base your business activities or start a company or manage your finances from. Ever been to Bermuda? Or the Virgin Islands? You can't move for wealthy industrious Western expats and their business ventures. And also to a lesser extent Ireland, the Luxembourg, Singapore, Switzerland, etc. These are all some of the most popular countries to move to in the world.

But now the United States and Canada and whoever else is the G7 are trying to shut them down and force everyone to follow their hellish tax laws.
Might sustainability and geological context play a role? I thought the the Chinese islands were build on coral reefs and existing small islands. I also wonder about differences in currents and even requirements based on future use. A small military base to extend your empire probably needs to be less stable than a place you want to build a city on that should last forever.

Comparison to the Palm and World islands in Dubai strikes me though.