skysight-inc/HackerNews huggingface dataset:
Ask HN: Real-world Tailscale business use case
I've been reading about the different zero-trust networking solutions (Tailscale, Zerotier, Nebula), and they seem great with peer to peer networking, strong encryption, UDP hole punching, fine grained role based access control, and so on. Tailscale especially goes so far as implying that other authentication and authorization solutions have been obviated by this techonology by writing in their blog about previous generation networking solutions the following:

"As a result, you end up having to add more layers of authentication, at the transport or application layers. Why do you need ssh or HTTPS? Because the network layer is too insecure to be trusted."

Ok, I'm willing to accept that an encrypted mesh network is so secure that you need neither the secure part in SSH nor PAM servers taking care of authentication. But then, how does this work in practice? To reify the confusion, here's a concrete example:

An organization uses Tailscale. There's 'server102' that is connected to the Tailscale network that all users of the `devops` team have access to. A new employee, Alice, joins the company. Sysadmins set up her SSO account, as well as makes her part of `devops` on Tailscale.

Alice gets her company computer, sets it up, connects to Tailscale, fires up her shell, types in `ssh alice.p.hacker@server102`, presses Enter.

What happens next?
The problem with SSL certification on blockchain domains is that certificates from authorities cannot be made eternal. Either unmanned, or from CA. No real alternative.
Footage of Australian Raven Attacking a Wing Drone in Canberra, Australia
Hello, I’m one of them! For context, I’m a software engineer but also do design because I have to (startup, a free no/code website builder, boomla.com). I even bought a Mac for running Sketch but I just couldn’t use both platforms because of their differences (keyboard shortcuts).

I guess there are tons of part-time-designers who don’t switch.
>you can serve your WSGI site without a proxy pass, including static sites

What about HTTPS?
Sounds like working as intended - "supporting an idea" is meaningless without expressing priorities and strength - you claim to support some idea but will demonstrably give up on it if it gets you to the ruling majority - if I care about this idea I should not vote for you.

"We support clean energy" - "we had to support opening new coal plants because we wanted to get support on our budget proposal for some agency"... Do I really give a shit they claim to support clean energy ?
> results: my job is to Sherpa kiddo through life

Yes and also to protect him from the adults who author addictive, compelling content that a 9-year old can’t be mature enough to protect against.

If you don’t regulate his internet activity, why do you regulate his diet? Why not allow him to eat whatever he wants whenever he wants?
Show HN: I turned a prefab shed into an office
You should consider getting a sleep test. As far back as I can remember, I have always been tired and sleepy through the years. I just attributed it to being on less sleep due to my erratic schedule. But I was diagnosed with Sleep Apnea at 29, after likely having it for a couple of decades or so.

Been using CPAP for almost 5 years now. Everyday is fantastically fresh with a regular ~7 hours of sleep. Can't recommend it enough. I am also on path to see if my Blood Pressure medicine can be stopped - since it is understood to be the side effect of Sleep Apnea in my case. Should become clear in a few months.

Also, been active for a year. Started just walking in the evening mandatorily - sometimes listening to podcasts, and other times just using it as a break from everything digital. Then, after a few months, split the walk-time into a morning and evening routine. Probably been regular at it for about 395 of the last 400 days. It's a habit now. Added running to the routine but it is a bit erratic still. Want to add HIIT / Weight-training to workout routine, but that hasn't stuck at all and will try again in a while.

As to the results, I am almost 11Kgs lighter from my max weight, feel healthy, BP is almost always normal, BMI is close to normal, resting heart rate has dipped significantly, and so much more. I track a ton of this info as it can help you stay motivated on the slow, low and tiresome days. :)

Wish you all the best - experiment and find something that suits you best!
First, dependency manager vs package manager. Potayto potatoh.

Second. The reason I recommend direnv is because of ergonomics, so you don't have to remember to reload your shell. Most current version managers either do it themselves through shell hooks or ask you to install direnv. Point taken on using brew: I've changed it to use nix-env.

Third. Yep. Sort of like having to learn English before you can learn programming.

Fourth. As they say: start with the basics.

Fifth. No other package manager can freeze the complete dependency set you are using AND allow you to revert it exactly when things don't work. That's the power of declarative, reproducible builds: you try to update and it doesn't work? No problem, revert to the last working version and things are all good again.

Sixth. Ever tried updating a project using a Dockerfile that uses an old version of ubuntu? Then you can't find the packages anymore or no is building them anymore for the new version of Ubuntu and you have to pull random PPAs from the Internet to get things to work? In Nix, you can keep two pinned nixpkgs versions at the same time. In this way you can keep working on upgrading your project one working step at the time.

So yeah, it's not just cHeCKmATe FP-atheists sort of stuff.
Aleister Crowley is now mostly forgotten, but he seemed to be fairly influential in his time.
I'm curious what do you mean by "adult content" on YouTube? Like sexually explicit or suggestive things, music videos, etc, or rather some other too mature topics?
Do not confuse forms of governance intended for whole societies with those that work for smaller, more controlled and more selective organizations.
> The common use case is

Citation needed. A lot of (most?) design work happens in cooperation with others (clients, teammates).
It doesn't really say how common they are in each of these country, and I'd be curious to see that.

From my very limited perception, Stemwijzer and Kieskompas in NL are quite popular (for the young-ish, progressive and tech-inclined generation), more so than similar alternatives in Italy. On the other hand, it seems that in NL there's more openness to vote for a different party at every election - while in Italy the electorate seems more polarized and rigid (in Italy the electoral system is not fully proportional, this has surely a great impact in this).
I wonder if the usage of these apps reflects these dynamics .
Why are political parties necessary? Instead of chosing representatives in bulk we should decide democratically about each of these particular questions. Then, a professional executive power (elected independently, or simply hired) would be legally bound to implement these decisions.
Thanks, I actually did suspect they do. They still aren't Web friendly and require dedicated software unlike IPFS via gateways being more Web-ready.

Who knows, BitTorrent might have never fixed this without seeing how IPFS works.
multiple ctrl-s' per few characters typed/whenever I stop writing something.
If you want to do something like this in Ruby, have a look at HexaPDF - https://hexapdf.gettalong.org/ - which provides a full-blown implementation for reading and writing PDFs and is quite mature already (n.b. I'm the author).

It is licensed AGPL+Commercial but if you just use it for yourself, this does not matter as you can use the AGPL.
The databases still needs to bootstrap first, then the code can search on it. Initialization phase should prepend showing a record.
I meant "the main problem" when I said "the main reason"
Mounting the LEDs on the back can work quite well if you have some kind of reasonably reflective surface on the back. You don’t even need a hole in the PCB, just a gap in all of the copper layers. I used this approach in my light meter project: https://github.com/addrummond/mlm In this case the reflector is just plastic painted with gloss white.

Also, awesome project!
What does it take for a language is like this to get enough critical mass to be the kind of language you don't get fired for choosing?
You can surely see how this could be problematic? Q1: Should we lower taxes? Q2: Should we introduce 5k/month UBI?
It's not just a contract though. France actually has a maritime border with Australia and its own interests in the Pacific -> the entire French Pacific strategy was wiped out by 3 "allies" behind its back.
I am really looking for a "code review is a waste of time, let's skip it" article. Seems like there's a market need that isn't being fulfilled.
Sweet idea!

Page is a bit broken on iOS safari fwiw
Sure, that's why the anchor would be faster, because you can use the same initialization code and still accept the query in the URL.
> But why isn't it backward-compatible?

It is, mostly. 1.8->1.9 was famously a big change, but breaking changes since have been comparatively minor.

IMX the most common cause for gem breakage is simply rot - old gem, maintainer lost interest, a tiny change required (often due to an open-ended dependency on another gem) but there's no one to do it. Unfortunately, adopting an abandoned gem is non-trivial if the original maintainer doesn't respond, and a lot of gems were written in the Rails goldrush but have fallen into abeyance since.
Use of the convoy system to protect people crossing the bridge, like WW2 defence against U-Boats? Ingenious, but it's sad that it's become dangerous enough to justify that.
Binary sizes all around ~ 20MB

For comparison, the original Win9x mspaint.exe is 300KB, and if you thought that wasn't a fair comparison because that still needs the OS libraries etc., you can strip down the entire OS that boots and runs it to <5MB:

http://web.archive.org/web/20090209050149/http://www.etek.ch...
It is hard to decipher your message, but just to clarify, firmware doesn't process packets (dataplane) it only manages and configures hardware (control plane). And no, you definitely won't be in "much better place" by "ripping it off" because modern NICs have very complex firmware with hundreds (if not thousands) man/years spent implementing and optimizing it.
> If you make a coalition government with the conservatives and you take their program as the coalition program, you did a bad job in forming the coalition.

I like your reasoning. In the end (within reason) I do not care how the laws are implemented, I am voting for the party, which matches what I would like to implement.
> But as a voter who is in favour of a higher CO2 tax, why would you care about that distinction?

You cannot find a party that you agree with 100%. If you have to choose the lesser evil, you may still want to check why exactly a party disagrees with you.
There have to be some additional tradeoffs with distance? What city would you hope to power with energy from Yellowstone? Seattle? Denver? What would be the realistic costs of getting energy to those places? How much infrastructure build out would be needed? Would the tradeoffs be clearly worth it?
All watched over by machines of loving grace.
It makes no sense to compare the prices without also comparing how their wildly different feature set applies to your needs.
> I'm going to have to say if that's the basic motivation for censorship resistant communication in the USA, I am disappointed and sad.

P2P was mostly about piracy. NNTP was used before that. BBS's were before that. And what comes next? IPFS?
I’m guessing you don’t have any kids age 5 or older.
I think also because of that rich possibility for failure, heroic successes are also much more interesting tales in those same games.
I applaud to this newfound maxim, "an alternative is not a solution (per se)". Very good synthesis.

The sinister side of these times is in the roots that made such notion shaky to some. Something related to the fading of the idea of "doing it properly".

--

Edit: in the example of the idea of "extending the right to vote to infant children", which I mentioned in a parallel post as part of the trend, there is an important image: one of the proponents, during an interview (in the recent podcast of Jeremy Paxman), asked why, replied along the lines of «To shake this stagnant system».

There is the point: _do not shake it_: improve it, fix it, debug it, re-engineer it; do not hit it with a hammer hoping it improves by winning determinism through the sheer force of luck, do not attempt electroconvulsive therapy, do not stick an ice pick in that thalamus in the idea that random sabotage can be even remotely comparable with the clever blueprints of a neural organism - it cannot bring an improvement (which should go without saying, yet was actual practice).
The sad thing is that DI doesn't need to be heavy. I looked into this for some projects I was planning, and there are some lightweight (if technically off-putting, IMO - see Dagger 2 syntax) ways to achieve this. But everyone just reaches for the big frameworks in the first instance.
I don't have an issue with the size of a project. On the other hand, I worry about a large number of dependencies and the need to understand the security and compatibility models of their respective authors.

I'm fine to depend on, say, JVM or Qt - large projects. Not with thousands of small packages developed by thousands of independent developers.
Figma is basically Canva for the design and tech savvy online entrepreneur. With the right plugins it becomes the center for all digital design, not just for UI design like other programs (e.g. Sketch).

Figmas pen-tool is quite good and suitable for more complicated logo design and simpe illustrations. With this and its plugin ecosystem it's kinda sitting in the middle between more complex Adobe apps and "fast design" apps for non designers like Canva.

Canva realized that Figma is coming for them and they've even added some basic prototyping to their app, lol!
Have you ever been threatened by a right-wing extremist that they would come to your house when you answered their hatred online and pointed out the flaws in their logic?

I have been.

That’s why I deeply appreciate having a pseudonym that’s separated from where I live so I don’t have to fear Neonazis turning up at my doorstep or attacking my kids when I write something they do not like.
They could just leave NATO, see what happens. I hope they do. The alliance clearly doesn't care about anybody but the US.
> What is a "connectionless api"? I have not heard that phrase before?

It just means that we offer an HTTP based API, so you don't need to do connection pooling. This is convenient for serverless apps, because they can't hold onto a connection.

> Can I use this instead of DynamoDB global tables? Where does it sit RE CAP?

Yes, we do want to be an alternative to DynamoDB global tables, but with a more flexible data model. The in-region writes/reads are consistent, the replication to the analytics/search engine as well as replicating between regions are eventually consistent.
GP is kind of right though. Flakes are effectively packages for Nix expressions. Even priginal Flakes RFC calls this out.

But the difference is, as you mentioned, flakes are integrated within Nix, and provide better ergonomics.
Not sure if it's the same thing, but heavy cardstock is great at collecting dust off a flat surface - for some reason it sticks to the edge.
The Socialist Party in the Netherlands more or less wants to leave the E.U..
GPT-3’s Islamophobia Problem
I think you're right. This is discussed in the article- GPT-3 does very well at the small-scale, like short poems. The architecture of GPT-3 is based on Word2Vec, and attention - it doesn't really have a good understanding of large-scale semantic structures in writing. (Also mentioned in the article - it can't rhyme: it doesn't understand sub-word semantic structure either).

I think the next big advance will be when we are able to apply attention/word2vec-style algorithms at other semantic levels.
> it only looks at what parties claim they will do, not their historical voting record.

In multi part parliametary systems, parties will form governments and small party A has to be prepared to vote against their program or election promise, because that's the concession they had to make to rule in coalition with party B.

Basically all the programs and promises has the form "if we get a majority ourselves and the budget allows then..." but that effectivley never happens. So it's all ambition. Some things can be expressed as promises e.g."we'll never allow X to happen or rule in coalition with Y, we'd rather topple the government and call new elections if that was on the table". If parties fail to live up to that, there is (rightfully) a discussion about broken promises. But otherwise, I think it's rare to see parties say one thing and vote another.
Get the official bitcoin client, sync it, and put your own file in place of the default wallet file. Then you're done.

Also don't forget you will have coins on all the forks, get those as well.
It is either cross-platform or native. Can't have both.
I have a static website (granted, it's not well linked), with no JS, and it does not seem to be in the index. But I saw in a sibling post that you had index limits, so it makes sense IMO.
Not even the lingerie section in mail-order catalogues? Kids use what they have. And yes, sexual content is a normal thing. just talk to kids about it, and why they are too young watching that stuff. You cannot prevent anyways.
FWIW, Figma is only at #2 in https://alternativeshub.gitlab.io/web-design/software/figma/
> the Chinese mathematician Sun Tzu (not to be confused with Sun Tzu who wrote The Art of War almost 1,000 years earlier).

Well, this is the kind of result you get if you insist on referring to people by the combination of a common last name and a standard courtesy title. Imagine if we referred to the author of The Wealth of Nations as "Mr. Smith" instead of "Adam Smith".
As usual. And they wrongly claim that you find that by chance. Reality is: You don’t, except if you go searching for it. Just like in the clearnet.
The cases that you're raising are all ones that the nix ecosystem has had to find solutions for, but they have generally done so.

The first thing to note is that it's generally discouraged to use full paths like the one you gave for python in shebangs in loose scripts. Instead, it is encouraged to write e.g. /usr/bin/env python. In this case, the python from the current environment will be picked up "impurely" when the script is run.

That said, it's pretty heavily encouraged to package anything that will be used seriously, since this is very easy with nix and gives access to better tools.

For example, there is built in automation for recognizing shell shebangs and rewriting them, based on the dependencies expressed in the build description.

As far as your case of programs shelling out to other programs: that can either happen "impurely" (which would work like that you describe, including the potential drawbacks) or "purely" (where a specific version is captured). In order to attain "purity", nix has automation for generating wrapper scripts which manipulate the PATH before delegating to some underlying executable.
How to Read Someone's Mind?
How to read someone's mind? https://www.youtheuniverse379.com/2021/09/how-to-read-someones-mind.html#.YUhE476w5oM.link
> If there's one party who thinks climate change doesn't exist and one who believes in climate change but is unwilling to do anything about it

That's obviously not the distinction between the parties here. The second one intends (or at least has a policy to) do something about it, but just not by raising the existing CO2 tax. Maybe instead they intend to raise the top rate of income tax and increase subsidies for public transport.

If you incorporated all of the parties policies into the Wahl-O-Mat, that would all come out in the wash and you'd end up with your preferred party, but also you might abandon the process because it's taking too long.

The challenge is to distil the parties' policies into a reasonable subset that accurately captures the differences between them, some kind of principal component analysis.
I know I’d still be reluctant to give those kinds of details, but that makes sense. Hope you end up recovering your coins… or at least getting over it.
Internet Speed Test – Measure Network Performance – Cloudflare
"For years, bike activists and workers pushed for legalization, though the apps that benefited from them were largely silent. It was only when another group of tech companies — hoping to make scooter-sharing legal — joined the fight that a bill moved forward in Albany."
I’d suggest to delay that to tomorrow :-)

An OSX package manager should work (I have no current OSX to test that, though).
Out of curiosity, how did you discipline your child? What were the consequences?
I think you would be surprised how many immigrants have an anti-immigrant stance once they are in. I know a couple.
> It is not the same level of reproducibility like Nix and Bazel provides.

What is "the same level"?

> You can pin ruby to exact version you want with https://nixos.wiki/wiki/Overlays

That page says: "Overlays provide a method to extend and change nixpkgs"

I don't want to change something. I want to simply pin a version. This is neither simple, nor scalable, nor maintainable (also here: https://news.ycombinator.com/item?id=28591202):

Overriding a version

self: super:
{
sl = super.sl.overrideAttrs (old: {
src = super.fetchFromGitHub {
owner = "mtoyoda";
repo = "sl";
rev = "923e7d7ebc5c1f009755bdeb789ac25658ccce03";
# If you don't know the hash, the first time, set:
# sha256 = "0000000000000000000000000000000000000000000000000000";
# then nix will fail the build with such an error message:
# hash mismatch in fixed-output derivation '/nix/store/m1ga09c0z1a6n7rj8ky3s31dpgalsn0n-source':
# wanted: sha256:0000000000000000000000000000000000000000000000000000
# got: sha256:173gxk0ymiw94glyjzjizp8bv8g72gwkjhacigd1an09jshdrjb4
sha256 = "173gxk0ymiw94glyjzjizp8bv8g72gwkjhacigd1an09jshdrjb4";
};
});
}
The thing is, for people for whom going through the one paragraph of reasoning the parties actually give is too much, what better alternative is there?

Given the alternatives: Vote by personality vs vote by Wahl-o-mat score, I would 100% of the time encourage people to vote by Wahl-o-mat score.
Pfizer accused of holding Brazil ‘to ransom’ over vaccine contract demands
It's hardly low-level property crime:

"...food-delivery workers returning home after their shifts have been violently attacked there for their bikes: by gunmen pulling up on motorcycles, by knife-wielding thieves leaping from the recesses..."

Those are crimes that carry multi-year prison sentences.
>We will have our own API which will allow us to develop features like no-downtime migrations, branching, and caching.

Please please use an industry standard layer like Graphql. Otherwise it becomes very very hard to push for adoption here.
> You're primarily voting for a party, not a person.

It's the same in the UK and in both cases the party leader is in charge.

One key difference is that the UK's political landscape is bi-partite so coalitions are usually not needed.

The voting system in the UK is also designed to produce a clear majority in Parliament in order to allow for a stable and effective government (by 'effective' I am able to implement its policies, i.e. to legislate).