skysight-inc/HackerNews huggingface dataset:
The following protocols and primitives are used:

ChaCha20 for symmetric encryption, authenticated with Poly1305, using RFC7539's AEAD construction
Curve25519 for ECDH
BLAKE2s for hashing and keyed hashing, described in RFC7693
SipHash24 for hashtable keys
HKDF for key derivation, as described in RFC5869
Maybe sit with your kid while they're learning during the most formative years of their life instead of offloading the burden of raising a child to your DNS configuration.
Can you point to some available and verified carbon removal techniques that I can spend a dollar per day on?
anyone have a link to a story or details of what the lawsuit is about.
Is that considering one can see over the horizon when the conditions are right? https://en.wikipedia.org/wiki/Atmospheric_refraction
Based on the SammyGo project - https://www.samygo.tv/ - I'd say that it's relatively difficult, I think in most cases people are inclined purely to attach a HTPC or something similar to the TV and then just use the TV as a dumb monitor.

I think we are still a few years out from having to worry about TVs that need a constant internet connection - I connect mine to the internet whenever there's a firmware update that interests me, but for the most part I leave mine disconnected from any sort of internet.
If you're running it on the customer's network, then SSO needs to be in the log in loop. (Customer hosted gitlab, e.g.)

If you're running it on the cloud, than the customer has to have an SSO exposed for your app's login to hit it. The reason SSO is important is that if people are terminated SSO can be updated instantly to reflect that and instantly remove access to critical data.
Are you in the US? Not knowing the cost of a doctor visit until you see the bill is a ubiquitous problem with health insurance. Every time I need something besides a basic visit to a doctor I've seen before, I call my insurance company. I navigate the automated menu, trying to figure out how to talk to a human or press 0 repeatedly until the system gives in and connects me to someone. Then I try to explain what I need done, going back and forth with the employee for 10 minutes trying to figure out if we're talking about the same thing. They tell me that if the doctor's office bills it using this particular code, it will cost $x. If they use this other code, it will cost $y. It will probably be covered if these exact parameters are met, but the insurance representative can't guarantee that it will be covered and they can't guarantee that this is what it will cost and I'll just have to try to explain all this to the front desk at the doctor's office and again to the nurse and again to the doctor and hope everything aligns and I don't wind up on the hook for an extra hundred dollars when the bill shows up.

You can try to tell me that this is the only way medicine can be profitable and continue to function, but there are so many middle men and CEOs getting paid to do nothing but make things more complicated and more expensive that I struggle to believe that.
News is always biased. A more interesting question is, do you need news to be unbiased, or even, do you need any news at all?

I highly recommend reading "Avoid News" from Rolf Dobelli from 2010 [1]. This essay was published long before the problem with fake news. I stopped reading the news for 10 years now (except Hacker News and some sports) and I've never had the feeling that I missed something that was important. As a positive side effect I never have to think what kind of bias the author of the news article has, because I never read them.

[1] - https://www.gwern.net/docs/culture/2010-dobelli.pdf
What alternatives do you suggest?
Russia restricts opposition election voting app
Archive.org is a core part of the process for producing a Standard Ebooks ePub. It’s not enough to just start with a transcription; if you want quality to need to back-reference to scans at some point which is where archive.org comes in. OK, there’s Hathi and Google Books too, but Hathi doesn’t allow PDF downloads and Google Books is useless unless you VPN in from a US IP.
Taxing revenue harms the low profit commodity businesses, like small retailers why being excellent for tech giants especially the ad selling ones like Google/Facebook.

A better idea might be tax investors at income tax levels on capital gains, regardless of holding time (adjusted for inflation indexation)

And increase corporation tax for companies above a certain profit level maybe at $1bn up.
gee it's almost like all of those properties can then track you forever and maybe have like some sort of argument as to why they were tracking you - well of course we set cookies, they hit our domain!
This is one of my favourite HN comments. Not preachy, boastful or antagonistic, just the sharing of good information
That's a little unreasonable as school time happens to be be during work hours.
What changed in Objective C since 2017?
I don't understand why rust integration doesn't happen on a fork, especially for important packages like this. I'm sure people would elect to use py-cryptography-rust and it woule avoid an open-goal from people looking to seize on a rust-related headline in bad faith.
But not illegal
Same here, I consider it voting with my back button.
In Czechia and Slovakia we have mapy.cz which gives you more detailed map for walking/hiking, including contour lines. See [^1] for example.

The coloured trails you can see at more detailed zoom levels, are part of the hiking trail system. The outdoor signage even has a national technical norm [^2] (in Slovak, but has some terminology translated int to English and German).

[1] https://en.mapy.cz/turisticka?x=19.8702765&y=48.7675046&z=14
[2] http://www.jazdecka-turistika.sk/images/stories/dokumenty/KT...
Thanks! I've read (again) the article, but it doesn't really answer my question. Here's a concrete example:

An organization uses Tailscale. There's 'server102' that is connected to the Tailscale network that all users of the `devops` team have access to. A new employee, Anne, joins the company. Sysadmins set up her SSO account, as well as makes her part of `devops` on Tailscale.

Anne gets her company computer, sets it up, connects to Tailscale, fires up her shell, types in `ssh anne@server102`, presses Enter.

What happens?
Nice documentation and diagrams, this looks like a hardened Linux with sandboxed apps and a really tremendous level of trust in Tor services.

"Downloads disabled as we are still developing Citadel and the new Subgraph OS. Check back soon for a new release."
I'm SO feeling this topic. I'm finding it hard to control my son's YouTube access when he's given legitimate school assignments that need this access. It makes me wish education could just skip all of Google altogether.
> that case watchmedo will trigger pytest to run twice,

That's what the --drop options is for. It's better than delay, since it drops any event while the command is running, no matter the time it took.

> First, I think for many users typing: ... is a lot simpler than typing:...

I think somebody using pytest is perfectly capable of doing:

alias ptw='watchmedo shell-command --patterns="*.py" --ignore-directories --recursive . -c "pytest" --drop'

Or putting that in a makefile, a dodo.py file or what have you.
Only colloquially. The official name includes "The Republic of".

I think it's important to make that distinction here because "Ireland" can also sometimes refer to the whole island.
As another somewhat old fart, it feels like we don’t see any novel breakout titles take top spot at the box office anymore - titles that come out of nowhere; in addition to the movies you mentioned, Forest Gump, The Godfather, Goodfellas, … etc. It’s all superhero stuff. That’s all people are willing to talk about. It practically dominated the conversation.
> smells absolutely delicious

Apart from smelling nice, is it something that is actually okay to breathe in?
You just have to wait another two or three years for the next framework that will solve all the problems with those obsolete and unsupported things you have used in the past.
Right, no disagreement. No matter how one looks at it a $300 textbook isn't small change for most people anywhere and it's going to be worse for those in poor countries. In some ways it's easy to understand why some countries are dragging their feet when it comes to enforcing copyright.

Incidentally, the $300 I used may even be conservative, recently I was pricing specialist textbooks and one was over $500. If I'd bought the three books that I wanted it would have come to just under $1200. Instead, I managed to borrow one from a colleague and I'm trying to get the others on interlibrary loan but that's not yet been possible.
Ask HN: JMeter Alternative?
What's the simplest app to measure requests per second like JMeter? I'm looking for go-based or rust-based apps. Thanks
Or in my case because of the amount of crap I must allow my son to get access to, in order to receive his school assignments.
Plan 9 Bootcamp, Self-Guided Activities, Streaming Events
Wow, OK. Weird having to reply to this with something so obvious. Most people can't afford to spend 6-8hrs during the middle of the day with their child(ren).
“smells delicious” is hilarious to me. What’s the smell like?
Maybe I'm too much of a nerd, but I think quality can, in general, be defined and measured.

I get that you don't like the genera of action films, and that's fine. But there are moments of the film between the laser beams firing. Sometimes long moments. Sometimes the majority of the film.

Are there any films that aren't formulaic? Or are original in some way? As far as I can tell, the trend is: human or human surrogate faces challenge or complication that is resolved. Often following a heroes journey pattern. Sometimes the enemy is nature. Sometimes man itself (I would interpret as another form of nature, but not so useful). Sometimes the challenge is loss. Sometimes the challenge is fear. Sometimes it's fear of loss. Sometimes it's a mating attempt. Sometimes it's an existential risk.

Of course you can dress up the underlying formula a variety of ways. If your a french or whatever filmmaker and want to pander to artsy types you add lots of long slow scenes where nothing happens. Sometimes you spice it up with a gay kid or something. Maybe throw in a racial aspect to make a statement.

I don't know how many times people can look at any human endeavor and not realize it is all bullshit. But if it is all meaningless bullshit (in a meaningless universe) then perhaps none of it is? Perhaps many MCU entries are technical achievements with interesting twists that are exemplary specimens of exactly the type of film they are meant to be.

I'm not asking for proof, I'm asking for evidence of anything beyond a facile, intellectually lazy approach to media criticism. And believe me, there are a lot of flaws in modern Hollywood, but action movies being too well produced isn't really one of them.
No need to call out that it's for horses. Ivermectin is also used in humans for the same purpose (parasites). It's ineffective for covid, but adding the "horse" bit makes it seem more dangerous than it really is.
I think the problem there is more one of library design than specifically a mutable object problem.

If `a` is mutated by the `.add()` method, then it should probably return void rather than returning a copy of the object.

Is the immutable DX still better in this specific example? Probably. But the above at least would help developers avoid the major footgun with mutability.
I think the Elixir DateTime API is really clean and well designed. The key was letting libraries explore the problem and surface the right interface, before baking it into the standard library. It does mean it took a long time for this to land but I'd say it was worth it. Learning from the failures of others also certainly helped.
There was a paper on Objective-C in the last HOPL conference for those who want something meatier:

"The origins of Objective-C at PPI/Stepstone and its evolution at NeXT" https://dl.acm.org/doi/10.1145/3386332
Great idea doing this!

If the author is reading, just an observation; because the local repository column is pretty solidly coloured, I kept confusing it with the selected column.
I've got YouTube plus at least, it helps somewhat to filter out some rather toxic advertising.

Whoever started pushing WorkSafe ads into this platform, I do not wish well for. It's the stuff of true nightmares, the sum of their worst fears, for children to see.

Edit: Eg this one. https://m.youtube.com/watch?v=ffC9FfMYpW4
If you are into that sort of thing here is United Airlines Flight 232 where they lost all control except for being able to throttle one remaining egine (and consequently steer but only to the right) https://www.youtube.com/watch?v=099cHWSbAL8
Sounds like a no bloat government. Problem is who defines that? Does it mean no police, no public healthcare? Minimal laws? Not sure.
The same way as JSON is a subset of JS, it has radically different properties that way, so comparisons to postscript is not really meaningful.
Sure, there are. They do almost nothing about having to modify the generated code afterwards though. They are just a start; you don't have a command like "modify this validation to be this or that".
Depends where you get it. Here, it was 40 days between Moderna shots.
VPN client doesn't decode video.
>The irony of the GP comment is, is this is the one rare time when healthcare access in the US doesn't differ between the rich and the poor, the vaccine is free for all

There no irony here. It's just bad business for the ruling class if the proletariat that works for them and is the pillar of their wealth, dies off.

If there's no one left to grow and harvest your food, maintain water and energy infrastructure, then it doesn't matter how much cash, stocks, how many jets, yachts and McMansions you own.
I've seen a lot of these MCU movies. I tried, but for me they are mostly fluff I forget the second I get out of the cinema.
Pure low brow spectacles apart from maybe a couple.
Am I closed minded oh great judge of taste and personality?
Google have managed well enough without giving a flying fuck about any of their products or users for over 20 years.
https://twitter.com/i/events/1434938925185896449
Look for products that advertise 10 day delivery. I usually get them around 1 week after ordering.
> the only thing we can see is that many other media companies want to mimic the money-printing machine that is the MCU, only to fail by outputting (unanimously) subpar films. The poster child is DC, but there are other examples, like how Universal tried to make a 'Dark Universe' and has effectively canned that

They both tried to create universes from the outset, Universal IIRC even announced their Dark Universe before the first movie was released.

The Conjuring Universe on the other hand started the same as the MCU, and seems to have been a success: Make a good movie or two, then sequels and spinoffs, expanding organically until there's nothing else to call it but a "universe". It seems to be going well, with the 8th movie released this year, 2 more planned, 5 short films, and a comic book [0].

[0] https://en.wikipedia.org/wiki/The_Conjuring_Universe
almost makes me miss paid private MS dev boards
We are almost talking about the same thing. But it's better to accomplish this on all your customer links, otherwise they can still spoof within your network.

Read up on bcp38? This is from the first hit on Google:
Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing
It's not a miracle -- most of the holes in the cheese lined up [1] but the final protection (good CRM in the cockpit and capable, well-trained pilots) worked. They certainly screwed up in pre-flight, but they redeemed themselves ten times over in the air.

[1] https://en.wikipedia.org/wiki/Swiss_cheese_model
It is a movie. It is all 100% fake whether it is CGI or involves real people fake fighting with the use of practical effects.
Neural networks: simply explained for beginners
https://www.businessinsider.com/ftc-investigating-why-mcdona...
When you log in to a Google account, as the 2LD is a cookie boundary, it has to do this redirect if it's to cookie/log you in across all Google things that run on other 2LDs, such as YouTube.

Seeing as YouTube doesn't have a separate auth db, and people would be confused if they logged in to google.com then weren't logged in to YouTube, this is sort of expected behavior.
If you listen to the ATC recordings, the Air Astana pilots repeatedly asked for vectors to the ocean with the intention of ditching the aircraft. They had trouble following headings provided by ATC, though, and then eventually regained enough control that they abandoned the idea of ditching.
Thats quite reasonable speculation. I just wish in that forum an official google rep replied and explained this.
It depends on how much they will pay. There are studies showing that it does not have to be that much. The Grundgesetz (German constitution) allows not paying market value in certain cases.

https://gentrificationblog.files.wordpress.com/2021/08/ag-so...
https://www.wsj.com/articles/mcdonalds-mcflurry-machine-is-b...
That doesn't really make sense to me - a market of that size ought to have niches and market segmentation. After all, no matter how generic and broad-appealing the script is, I don't think my 60+ year old mother is going to get excited about the next Marvel movie.
I have not used it myself but colleagues of mine recommend k6: https://k6.io/open-source/

There is also a Github repository keeping track of all the load-testing tools out there: https://github.com/denji/awesome-http-benchmark You will probably find something that will fit your bill.

I do not understand though why it is of any relevance what language the application is written in. Yes, Go and Rust indicate a certain speed and novelty but you can write fast applications with good UX in other programming languages too (and bad ones in Go and Rust).
i agree streets of harlem tho on the same streaming service is brutal.
The apperence of not having logs is useful for both the law enforcement and the VPN owner, so why whould they subpoena the logs? The VPN could leak some details to the law and in exchange the law mostly leaves them alone. And the law would get cases where they know that spending their time will pay of: Saying "yeah, the computer repair shop found CP on the guys computer", thinking "because we told them where to look".
On the bottom of the page we can see the way Google "replied":

> This question is locked and replying has been disabled.
New platform lets you buy shares of blue-chip paintings. A wise investment?
And Google will be so moved by that that they'll stop having depraved business practices? I don't see how your suggestion solves the issue at hand.
Apparently, it does not fully conforms to POSIX as README claims - AFAIK, that "_POSIX_X_SOURCE" feature test macro should be defined with positive integer value per POSIX standard, not empty as defined in bestline.c
> The best name in the DDoS protection business is Cloudflare

They definitely have brand recognition and are tip-of-the-tongue for people who have no prior experience.

"Best" in terms of actual product and protection is going to be F5, Akamai, Imperva, Voxility, etc.
"craftsmanship"

Inspiration 10%, practice 90%. You're just a bit rusty - out of practice. ;-)
Perhaps this means the OP can blacklist www.youtube.com and whitelist accounts.youtube.com ?
Could that be done for individual but not all computers on the network?
They will get more value from the extra data they collect on people and basket data than from the extra % of fraud that will inevitably happen.
Do you sit down with your kids while they're learning in classrooms?
They invest heavily into public opinion
You really need to use a MITM proxy if you want to do more granular blocking/filtering of content. I've been doing that for adblocking/style modification/etc. for near 2 decades now.
Lutfur not Luther.

I was once encouraged by a canvasser to vote in my home town and where I was studying because 'they'll never know'.
Note that Google has in recent years started introducing a great complexity into people's life.

Different activities (in this case, watching videos and schoolwork) are being linked. Google provides an extreme nexus for web activity and don't provide meaningful support.

There is a risk of some sort developing here, between Search, Docs, Gmail and the cloud as Google becomes more entwined with the web. It'll be interesting in 20 years to look back with benefit of hindsight and see what sort of risk it is.
I came up with this trick (reviewing other PRs, after thinking how I would to it) to speed up learning technology at my working place where we don't have enough man power to do mentoring.
LucasFilm was a shell if it's former self that could barely produce anything passable long before George Lucas sold it off to Disney.
Just to clarify, there has been four MCU TV shows this year so far: Wandavision (great), Loki (great), Falcon and the Winter Soldier (terrible), and What If (good and sometimes great).

All four are made by Marvel Studios (not Marvel Television like Daredevil and Agents of Shield) with actual Marvel actors and firmly take place in the MCU.

It's worth checking out What If. If you don't like the show, I still recommend watching the fourth episode (Dr Strange).
For sure, I use a lenovo 45Watt as its pretty compact and charges most laptops and phones.
Yep, indeed there are ways to migrate, but it's not necessarily easy. For instance in my last project, we used moment-timezone, and integrated other libraries such as https://github.com/urish/ngx-moment to format date/times in component templates. Of course it's possible to move away from that, but it would take time away from more useful work.
I think the sound recordings are great!
The website captures left/right arrow indiscriminately of modifiers, causing short cuts like Alt+Left and Alt+Right to go back/forth in the browser history.
> Shellac is labeled as GRAS (generally recognized as safe) by the US FDA and is used as glaze for several types of foods, including some fruit, coffee beans, chewing gum, and candy. Examples of candies containing shellac include candy corn, Hershey's Whoppers and Milk Duds, Nestlé's Raisinets and Goobers, Tootsie Roll Industries's Junior Mints and Sugar Babies, Jelly Belly's jelly beans and Mint Cremes, Russell Stover's jelly beans, and several candies by Godiva Chocolatier and Gertrude Hawk. M&M's do not contain shellac.[6]

https://www.eatlikenoone.com/shellac-a-candy-ingredient-made...
Funnily enough, I just found out BT Info (or SuperBluetoothHack) still exists and you can run the old .jar with J2ME Loader on Android. Or you can use the new apk. But of course it only works on the old phones.
Yes but if you're making a movie that costs $200m then it needs to target the average of the planets expectations for a movie to make money. Any divergence from that ends up confusing some of your target audience.

Sure this will end up turning off a bunch of people who have tastes that demand something more authentic, but you don't care about that because most peoples tastes are clustered around the mean.

Look at pop music for comparison. Or imagine the Apple of the 00s announcing Memoji as a feature.
Putin forever.
But that's not an official reply. That's just "ok, this question is valid and bring out people's frustration. We're going to stop that now"
That k6 app looks sleek, I'll try it out. Thanks!

Yes I don't mean to dismiss all other languages I just happen to only have these two runtimes and few others and I'm currently having problems with Java runtime which result in me not being able to run JMeter. Plus, if it's open source it can benefit me because these are the two languages I practically use.