skysight-inc/HackerNews huggingface dataset:
The average young adult in the UK has to visit about three websites - Money Saving Expert, Reddit, and Trustpilot to find enough information to make a decision on what financial platform to use or product to buy.

Every year, Google receives about 840,000 queries for "best savings accounts" in the UK alone. And there are many more queries like this. I am building Koody as a hub of information to help young people make smart financial decisions.

I am aware that the journey ahead is still far, but I am happy with the progress I've made.

I launched Koody on HN in August last year. Back then, I didn't understand the scale of the problem or how best to solve it. In the last three months, I have overhauled the entire website and watched people actually use it to make decisions.

I am presenting Koody to HN today to get feedback and suggestions on how to make it better and more useful for the under-35s.
It also had a built-in pop-up blocker which none of the other browsers at the time had.
the thing with CDN is that they may have many edge locations, but the cache does not sit there.

They frequently have a common caching servers located close by. so maybe every 10 or 100 edge locations have a single cache location.

Edge is a reverse proxy and probably handles ssl handshakes. So if your cache is down, all your edge locations in that area are down
> he's heir apparent to lead the party nationally

He’s not even an MP! He’s not allowed to be the leader.
Even in the 1800's, in a good library, I'd have more information available in a searchable, indexed form than I could quickly read into "working memory" to be able to "process" with.

Having a Grey's anatomy book in front of me, all available to read, does not make me able to perform anatomy at an advanced level.

It's similar to having data in secondary storage, that still needs to be loaded into a process's working memory, before it can be worked on. This is specifically true of condensed terminology that's used to compress further explanations.

Following the anatomy example - if I don't have the terminology to describe the different positional views available without doing an external lookup first, following a basic description becomes very difficult and involves so many lookups as to become impossible to follow.

I can't find the article/paper, but I remember reading something where someone calculated the trade-off for a specific API between knowing a percentage of the API method signatures of by heart versus looking up each one using the IDE documentation each time. It made a very big performance difference in the end.

BTW: knowing what you don't NEED to remember and can just reference when required, is probably part of the skills making you an expert.
Are you perhaps confusing it with SPARC? That one does have dozens of different relocation types because its instructions can have displacements of about 10 different widths.

As for interesting stuff... relative jumps are normally not used for jumping to a symbol defined in a different object, and base address computations are trivially supported by sticking a special symbol at the beginning of every object file.
>Security by obfuscation is generally not a good option if you can avoid it.

Of course, but obscurity increases security
A playbook is usually composed of many roles and potentially custom modules. I'd rather have this as a CLI tool to run in my repository.

As of now, I see very limited use to this, but it has potential for CI/CD workflows.
> isn't using lua a problem because of it's memory management causing GC stalls?

Perhaps even more important is the increased memory use due to Lua. Some devices have very little memory to begin with.
Hackers can mess with HTTPS connections by sending data to your email server
[Context : Which correlations might we find into the writings of Nikola Tesla and the writings of Fulcanelli ? By comparing these two author's books, what kind of hidden knowledge would emerge ? Are there some innovative patterns to identified ? Are there hypothesis that would be interesting to investigate deeper ?
Article :] http://www.sciencebuddies.org/sbe-resources/science-council-...
Experiments : https://en.wikipedia.org/wiki/Rhythm_and_Color
Possible approaches :
In depth research on the imagery in Nikola Tesla's works (what have been determined so far)
Comparisons of the imagery in Fulcanelli's “The Spirits’ Book”

A:

I've found many 'hidden codes' in Tesla's writings and have had several interesting discussions with people over the years who found them.
When I say 'hidden code', I mean Tesla talks about a particular topic and gives no explanations. While reading the book, I'm seeing the implications of the topic and it's not so obvious as you can just'read off the words' and can't see the'relationship' between the 'hidden' topic and the topic being discussed.
Tesla claims that he can make thunderstorms

if he will be in the right position

and later on

I have thunderclouds sometimes, but never more than once a week.

There's no mention of 'position'. I feel like it's a bit of an 'echo' from the Adwa Document

Why I was engaged in the mission I now write of as follows. I had much work to do, many inventions to make, much that was yet to be done. It was necessary to build a vessel, the carriage of which would be out of the reach of the current of atmosphere which is
sufficient to destroy the equilibrium of the Globe and cause its
destruction.

In this article, he talks about the relationship between Magnetic fields, gravity and Light.

But this light seemed to be generated in space by the Electric and
Magnetic Waves, which, as it were, created a sort of opaque
Body-Powder which makes a perfect Picture or Picture-Print when the
corresponding Picture or Pattern is applied to it by means of the
electrical process...

So, the subject of Fulcanelli's "The Spirits' Book" is Light and 'the spirit's' where Fulcanelli has a bit of 'cryptic code' of his own. In The Spirit's Book, there are codes for Pythagoras, Alchemy, Solomon's Seal, Tarot, and Venus.
What was found so far are the hidden/hidden patterns in the linked wikipedia articles.
These were found after many years of researching into the works of Tesla and the "Spirits Book" of Fulcanelli and I know that in the last two years of research, I've found an new interesting hidden topic. However, it would take a book to cover the topic in any great detail, so, I hope my efforts won't go to waste.
I still have an old desk for a desktop PC I had at my parents house and took to university with me. It is made of cheap particle board, has many nicks/scratches, and a warped surface, but is still sturdy. Since it isn't new or made of expensive wood, my favorite part has been customizing it to fit my needs by drilling holes, adding makeshift shelves made of scrap wood, drilling in stands for my speakers, attaching pipe for mounting a camera, making an under-desk mount for my laptop, itd. It isn't pretty, but it has allowed me to fix any annoyances I had as far as comfort, desk space optimization and efficiency go. I drool when I see some of the battlestations people post, but my desk makes me happy because it is the one I have to use.
elephants can identify each other at up to 2km distance

After a separation of more than 20 years, they recognised each other

Wow, incredible animals. Make sure to watch the video (linked in the article) https://www.youtube.com/watch?v=-77wtMxT3-M

Why can't we just leave these majestic beings alone? :( We have crap ton of stuff to entertain ourselves, why force a 3 tonne animal perform stupid tricks? :( This just sucks
Tell HN: SMS-based two-factor authentication is not secure
SMS-based Two-Factor Authentication is not Secure. I’ve read this before but brushed it off. It wouldn’t happen to me. It did.

I am with Boost Mobile. On Sunday night I received a text message that my PIN was changed. Within minutes I confirmed this to be true on my PC. I used the Boost application on my phone to change the PIN and received a confirmation text.

A few minute later I received a text message welcoming me to Metro PCS.

A few minute later I received emails to my business email that my account security information was deleted from my person email account. They used SMS authentication to my mobile number, that they now have control of to gain access.

A few minutes later I received an email there was an account recovery attempt on my coinbase.com account.

It took less than 30 minutes for these events to transpire.

I've spent about 15 hours trying to get my phone number and my email address back to my control.

I've accumulated a list of eight other people in the Boost Mobile Reddit.com forum where the exact same thing happened to them.

I filed a police report and filed a report with the FCC. I received a response from the FCC that they have started the inquiry and contacted Boost.

I finally did get my cell phone number ported back to Boost. I have not gained control of my Microsoft email address.

I didn’t realize I could only have messages of 2,000 characters. So I will wrap this up.

When account settings were changed, Coinbase gave me a link to lock my account, Microsoft gave me a link to log in to my account, which I no longer have control of.

Unlike competitors, which allow pins from 6 to 15 characters and for accounts to be administrative locked, Boost offers none of these options. The last Boost operator suggested I pick a more secure PIN.

I am calculating my losses and documenting all interactions.
I have a CO2 monitor, and with all the windows open the range is ~400-430. There is very little variation globally. 250 is not a reading you can find anywhere on earth anymore. CO2 diffuses very very quickly so global readings are very close to the global average.
The parent comment is actually quite insightful and your comment is quite dismissive without actually bringing anything new to the discussion.

I had a ligh bulb moment while reading the parent comment since it made perfect sense.

I felt enough rage about your comment to add my reply.

Be like the parent comment.
I don't want to say your wrong about your own experience, but I think sometimes SRS can subjectively feel very unproductive even when it's working great because of the way it constantly surfaces material at the edge of your knowledge. It doesn't often give you the satisfaction of smashing through a series of problems you can answer easily. If it did, it would be wasting your time.

I also think there is a real skill to formulating good flash cards when using SRS that I for one don't think I've yet mastered.
An edge case triggered an edge condition at our edge location.
Would a smaller CDN provider have no outages at all?
Facts you don't know about the Twitter Ban in Nigeria
But bubbles have collapsed in the past
Hello, considering using it: where's pricing?
The article touches on new signups being blocked, what happens to the current paying users in the region? Are they also blocked? How is fastmail helping them move/supporting them in this situation?

I am a fastmail customer in a different region (Poland). I am however looking closely at this as who knows, maybe I will be on the receiving end in the future?
Good conceptual art should be like a PoC exploit for what people percieve as real. Either it prompts us to patch our beliefs with concrete experience, or we just accumulate intellectual debt that eventually makes us unable to grow, respond, or cope, and become utterly dependent on surrounding ourselves with people who preserve our fictions for us and we'll give them anything to just reassure us of the safety of our compliance.

This one isn't a wormable meme, but it exposes a glimpse of the cultural substrate and challenges our ability to sustain dissonance.
Twitch: Lessons Learned
From the technical perspective this is a great execution of an idea. But those actions will probably be considered as ad-fraud and web sites will be penalized by ad-networks.
I wasn't "banging on", I was answering why the article didn't mention the cause...because the source didn't either.
Everyone is "banging on" because there are important lessons to be learned from such incidents, and people want to learn. They hunger for more details about the generalizable aspects of the bug, even if a full post mortem that also covers internal processes etc. might take longer to do. Having participated in many post mortems, in many roles, for systems just as complex, I believe it's entirely possible to provide that information the next (not same) day. Is that still setting the bar too high? Perhaps. Fastly deserves kudos for providing even the level of information that they have, since that's already above the pathetic industry standard, but I don't think there's anything bad about wanting more. Defensiveness is the enemy of effective post mortems.
Shameless plug but I built an app [0] to help with this workflow. You can write note cards in markdown and then review them with spaced repetition.

[0] https://mochi.cards/
No, but it would take down less sites if it does have one.
Ask HN: How do you deal with "task immersion" when juggling projects?
Fortunately with GPT3 and the like I’d imagine this approach will soon have had its day. Not that I’m optimistic about whatever will replace it.
It's the tech equivalent of "thoughts and prayers" isn't it?
>I will bet that a Linux kernel maintainer is a more capable coder than someone stitching together web apps with Rails.

but who's coder?

in my opinion definitely Linux kernel maintainer will be better at topics oriented around OSes, low level, hardware, "system" programming, debugging

but I doubt he'll be also better at web development, fancy software engineering patterns/architectures (sagas, blabla), microservices, distributed apps, web security

I feel like those use different skills / kinds of knowledge.

Try using 'goto' around Java/C# people and you'll be considered as a witch, meanwhile I guess it's relatively not rare in Kernel development
Ratko Mladić loses appeal against Bosnian war genocide conviction
Cloud Database Is Pinecone the Next Snowflake?
I have trouble believing any company that makes claims about privacy but won't provide source code to back them up.
Hey, it happened plenty for me during the holidays between school and university terms.
"Rigorous app review"

> https://www.theverge.com/2021/4/21/22385859/apple-app-store-...

Bad news buddy, you're already in the boat you don't want to be in.
I know you’re mostly joking, but it does no such thing. The blog post explicitly states it was a “valid customer configuration change”.
There are at least 5 major CDNs out there. CloudFront, Fastly,Cloudflare, Akamai, Google CDN. You can use more than just 1. Shopify uses two. Akamai and Fastly.
Redundant implementations only help with uncorrelated problems. With complex software, problems are often quite correlated across multiple implementations. Add to that the additional complexity of managing those multiple implementations and the potential for problems may be net worse. The consensus among safety experts is that multiple implementations are a bad approach to safety or reliability.
Ask HN: Appointment Lesson Scheduling Apps
Are there any lesson or appointment scheduling apps/sites that allow users to switch appointment times between themselves rather than have the provider do it?

I see a lot of feature-packed apps like Square's Appointment app. I don't see any that would allow users to swap appointment times between themselves. I know this use case might not be applicable to many activities, but I think it would work great for some.

For example, a tennis pro could create a schedule of time slots that they are available to teach. A person would sign up for a lesson time slot. If they realized that they needed a different time slot but the schedule was full, they could post a message to the "program" participants (program could be all users in that tennis pro's schedule for the same day or next few days). This would save the pro time from contacting everyone to try to find a person to switch times and reschedule.
That's a nice analogy
I think it will continue to happen. People and orgs, when picking a service, don't have an incentive or a way to ask around to see what percentage of similar-service users are using that particular service. People and orgs will always flow towards cheap/popular/well-known services.

On the other hand, those handful of companies could be asked to structure their services so that an outage only affects a portion of customers and not all their customers. However! That would be more inefficient for them, and more expensive, and that cost would cause the people and orgs mentioned earlier to just flow towards the company that took those shortcuts.
Study on 255 Ventilated Covid Patients at the Beginning of the USA Pandemic
What's your take on spam?
If you are not a very large company, you might not need the full functionality of a very large CDN either.

Now, building the functionality you require can still be unrealistic to build yourself. One thing that springs to mind is DDoS protection.
But what will you (or he) do to prevent that it happen again?
How do you compare with https://matrix.org/?
That sentence is about storing Facebook logins, for example, not storing other data about the user. Apple is saying you may allow people to login to their social networks (to post through your app) but you cannot save their login from Facebook into your private (off-device) server.
A sufficiently powerful state actor can find ways to penalize you, harm your company, or make the lives of principals or employees terrible even if you don't think you have a legally vulnerable presence in their jurisdiction. Just ask the USA!

I would imagine their lawyers recommended it. I too would be curious to see the legal memo, but I'm not surprised that a company would take this course, it does not seem unreasonable to me.
Maybe they are not really testing the IQ, but instead they are just testing peripheral vision.

IQ is a dubious concept anyway. The definition is as unclear as the definition of physical fitness.
Are you unconcerned about asymptomatic transmission? As I understand it, a big reason why there's a pandemic is that you might not necessarily know whether you're infectious.

Asymptomatic individuals are indeed less infectious on an individual basis, but I know of at least one study [1] which purports to show a lot of transmission from asymptomatic and pre-symptomatic people.

[1] https://jamanetwork.com/journals/jamanetworkopen/fullarticle...
As soon as they see how the extremely high CTR results in zero conversions on the landing ad page the value of such articles will go from something to zero.

If anything, this will devalue climate content in the eye of advertisers.

EDIT: No, seriously. This is *BAD*. It is technically interesting but super counterproductive and will have the opposite result of what it was made for in the first place.
Toronto’s losing bid for Amazon’s ‘HQ2’ headquarters still delivered benefit
Gorgeous photography in that article. Great read. I love HN for posts like this.
Do others find that it can be really difficult to move on to another task if you reach a state of "flow" with something technical? I feel like my mind gets so wrapped up in a problem that it might take 2 hours to "re-immerse" myself and land where I left off...
60 degrees might make sense from a South American perspective, but for them anything much further North could put it next to much of Argentina and Chile.

I think a boundary based on continental features makes more sense. So a boundary on great circles from, roughly, Windy Harbour Australia, to Cape Town, to Isla Hermite, then back to Tasmania.
Did they just miss a where clause on the update statement??
I don't think he has to be? But he could easily be dropped into a safe seat. That's what they did for Boris in basically the same circumstances.

Maybe Heir apparent is a bit strong? He's not defonate. But I can't think of anyone else with the name recognition...
>the Australian government wants to put its northern boundary as the southern Australian coast (which reflects Australian cultural understandings of it.)

That's probably why as 57 year old Aussie, I'm wondering why this idea of the Southern Ocean is new. When I first went on a road trip 10 years ago on the Great Ocean Road, what I saw couldn't have been anything other than the Southern Ocean. The Pacific coast was a 1000km away to the east towards Sydney, and the Indian Ocean was what you saw when the sunset over Perth to the Far West.
Leaving aside the rights and wrongs of the Russian government, I think that their general goal is sensible and we'll see more and more of this from all countries.

By their general goal I mean "the Russian media regulation body, the Roskomnadzor, demanded that Fastmail comply with Russian data laws. This is because Russia has a national goal of controlling the flow of information within their borders." (from the blog).

A company may not have any presence in a country but if they have customers there it's not unreasonable for that country to expect that its data laws should apply to the company's relation with those customers (and as it happens that's what the GDPR stipulate as well)
I don't get why they won't plant trees there, could help to cool the part of Berlin down.
It may be more acceptable to have more frequent outages if the impact radius (number of websites or services impacted) is smaller.
Obviously that isn't an honest comparison. If you're asking whether or not 10 small CDN providers could provide a more robust, higher quality service with more uptime than one large CDN provider, then I think the answer is probably "yes."
Vulnerability Assessment Pricing Estimator
We have built Vulnerability Assessment Pricing Estimator, which will help lot of you in understanding average global pricing for vulnerability scans.

Do check out the calculator :)
What? What individual have I shamed here? I have no idea what you are talking about.
I couldn’t disagree more with “avoid speaking”. Being forced into conversations is my main method for learning another language, even with a small vocabulary it’s how I retain most of what I learn… by practicing it.
I do agree with the “Don’t translate” though. That never works.
Exactly. This will have the opposite result of what it was made for.
I believe Google's Firebase also uses Fastly.
Not buy a house, not buy stocks, or do buy assets. Later if it's going to inflation or former if it's going to be just contraction.
Blinded by Brighter Headlights? It’s Not Your Imagination
As far as I know Mozilla is not a foundation for charity towards unemployed developers. So their goal is not finding work for their existing employees, their goal is improving the browser in meaningful ways. They're free to lay off and hire people to do this.

Also honestly any developer worth keeping could figure out the task at hand given sufficient time. So to talk about developers as if there's a developer who can only alter the rendering of tabs and what not is kinda silly.
Yes, the author is totally talking about the London underground railway system. Most Brits - at least people in London and the surrounding area - call this 'the tube' and use the term 'subway' to mean underground pedestrian tunnels.

[Edit] We also never use the phrase 'the metro' to mean 'the tube' (i.e. the London underground') although some UK regions call have named their transport systems 'metro', e.g. https://www.nexus.org.uk/themes/custom/nexus/images/metro-ma...
I've taken the opportunity to write up the story of the first time Varnish Cache's 503 was heard around the world, or at least in Norway:

http://varnish-cache.org/docs/trunk/phk/503aroundtheworld.ht...
Visit the International Space Station – Virgin Galactic
Getting Started with JavaScript Design Patterns