skysight-inc/HackerNews huggingface dataset:
We can use fingerprints for additional security, but it has to be done carefully. If fingerprints or any biometric data is hacked, the users can not change it, so they have to be contained. The best way I know is to use a mobile device with fingerprint or biometric input, which is saved only on the mobile device. Then use the biometric to enable the user to accept the authentication request but use the mobile device specific info as a password replacement.
Caddy is the best. I use it as the static file server and reverse proxy for several side projects running in docker-compose.

What I like most about it is how little config you need for reasonable defaults that would require 300 lines of nginx boilerplate.

If I could wish for one thing though, I’d really like the functionality to get let’s encrypt certs while being proxied through cloudflare to be built in. Right now it requires building a custom caddy with a plug-in, which is a lot of hassle for such a vanilla setup.
I don't think there's a lot of overlap between folks who are very upset with Apple for not making PWAs work better on iOS, and people who hate non-native apps and wish they'd be banned.
The issue is what constitutes a sufficient amount of "decentralization". Extremists who may or may not have ulterior motives seem to oppose any change which by their estimation might decrease the decentralization. They want to minimize the cost of running a full node without consideration for the fact that optimizing that to the extreme causes transaction fees to go parabolic and thus also prices less well off users out of participating in the network and if the fees are too expensive to transact why would you run a full node for a network you can't use. There is no balance in their thinking.
My favorite "wild west" item from this time period is nineinchnails.net. I don't know who was running the site at the time, but they were ripping and hosting mp2/mp3 files of NIN's entire discography just out in the open and free.

A combination of limited hard drive space + sad dialup speeds prevented me from actually downloading the entire discog before the eventual shutdown in 98 or 99-ish.
I wouldn't short Microsoft with the promise of Windows Continuum and Windows 365.

I mean in my opinion, Microsoft chose to fail in competing with a smartphone OS because there would be an antitrust lawsuit.
JVM (Scala)
Yep, I was given the full explanation of a Roman toilet on a tour of Pompeii twenty-odd years ago. As soon as I saw this posted, I knew I would not be clicking through.
Neat tool!

Since this discussion is attracting IP camera-savvy folks...I'm struggling to find cameras to buy/recommend. In particular, ones that:

* Aren't made by the big Chinese companies (Dahua, Hikvision, Uniview, Huawei) that are actively participating in the Uyghur genocide [1] and/or are considered a security threat by the US. (Most of those are banned for US government installations by the National Defense Authorization Act [2]; future models won't get FCC approval for private use either, according to the Secure Equipment Act of 2021 [3].)

* Support direct RTSP use rather than require a fast/reliable Internet connection and/or proprietary cloud service subscription. (This excludes eg the Nest and Ring stuff, as far as I can tell.)

* Are reasonably priced, although not necessarily as cheap as the Chinese vendors.

* Have decent night image quality. I'd be thrilled to find a model with the larger 1/1.8" sensors.

I know I should renew my IPVM subscription and see what they say. I'd love to find (other) quality review sites or forums that aren't super invested in Dahua/Hikvision (like ipcamtalk seems to be).

[1] eg https://ipvm.com/reports/dahua-uyghur-warning

[2] https://ipvm.com/reports/ndaa-guide

[3] https://www.cepro.com/security/senate-passes-secure-equipmen...
The former is definitely true. There are towns out there in the United States that are on an interstate and play games with their speed limits. You'll see a speed limit of 60-70 up until you hit city limits then it suddenly drops to 30-40, with enforcement lined up at the city limits waiting to nab people.

They're making good money off of these fines.
You have to have your headlights alignment tested every year in Israel. And being caught with badly aligned lights can lead to a ticket if a police car is on the receiving end.
Am I to believe that China was working on weaponizing a virus without also concurrently researching a cure/vaccine?

Virus provenance is important. It’s not a blame game. If it escapes from a lab they owe the world every piece of research they have on it but we’ll never get there if everyone says “hey hey let’s not play the blame game here”
> I find the increasing usage of the word surveillance completely silly and ideological.

That's nice. I find downplaying the reality of surveillance to acclimate people to even more of it very dangerous and ideological.
Well, that was mostly a neighbor who accidentally clicked on your TV's bluetooth broadcast signal. But still if you leave it at that and not let your TV connect via bluetooth, it still remains a dumb TV
I have worked as an ML engineer.

I also have strong ethical feelings and have walked away from clients who wanted me to introduce methodologies (e.g. Word2Vec for a medical information system) where it was clear those methodologies would cause enough information loss that the product would not be accurate enough to put in front of customers.
iOS is literally the only reason that all websites don't require chrome at this point.
I was digging around this morning and found this from 2020. You think he was just feeling the heat lately and wanted out? Or has this been in the works from opposing forces for a while now?

A billionaire Republican megadonor has purchased a "sizable" stake in Twitter and "plans to push" to oust CEO Jack Dorsey among other changes, according to new reports, raising the prospect of a shocking election-year shakeup of the social media platform that conservatives have long accused of overt left-wing political bias.

Paul Singer’s Elliott Management Corp. has already nominated four directors to Twitter's board, a development first reported by Bloomberg News, citing several sources familiar with the arrangement. The outlet noted that unlike other prominent tech CEOs, Dorsey didn't have voting control over Twitter because the company had just one class of stock; and he has long been a target for removal given Twitter's struggling user growth numbers and stock performance.

Aside from these two paragraphs the rest of the article is a lot of speculation and some quotes from people who've been against Twitter for some time:

https://www.foxnews.com/politics/twitter-paul-singer-republi...
My current car has auto high beams. Beam shaping is different technology, rather than a boolean operation, it allows the computer to turn off specific LEDs that are pointed at oncoming traffic, leaving the road ahead of you fully illuminated without blinding oncomming traffic
Ruby 3.0.3 Released
I still don't understand. What's wrong with Winamp 4 skins?

Edit: Maybe I have to sound it out. Is it because 4 skin sounds like foreskin?
There's a German manufacturer called Medion [0] who offers some "dumb" TVs without any smart features. Not sure if you can buy their products in the US though

[0]: https://www.medion.com
I've also been thinking a bit about that :-)

And, it's happened in real life that I said something sarcastically, without indicating this, instead assuming the others would realize -- and instead they thought I was crazy. Maybe my voice sounded too serious
I agree that CAs are pretty dumb, but the certificate transparency logs are pretty nice to have. If a certificate must be logged to be used and if the logs are publicly accessible, I have a chance of noticing if someone got a certificate issued for my domain (either by tricking a CA, a nefarious CA, or by compromising DNS).

I don't think I have a chance of noticing if certificates are just TXT records and someone can compromise DNS (especially if it's selective). Maybe if you also require DANE certificates to have certificate transparency records, but automation of ACME is probably simpler than automation of DNS changes.
> No one likes to be controlled by someone else.

The irony is that millions of the people you’re trying to defend as free-thinkers who can look at any speech and make good choices, are literally controlled by Fox News and Alex Jones propaganda.

Side note: In fact I believe there’s a legal path to suing Tucker Carlson out of existence by proving, with real data, that people really do believe the nonsense. The only reason Carlson is still trumpeting destructive lies from a megaphone is that so far, judges have accepted the argument that “no one in their right mind believes that what Carlson says is true; he’s obviously a satirist.”
I think OP is pointing out the irony that HN is popular among people who claim to not accept that.
Yeah context is required for these discussions. Anyone will love coding small digestible functions in python in a jupyter notebook. It's really fast. You might make a lot of mistakes (wrong import, wrong type, incorrect variable reference etc) but since the edit/refresh cycle is instant, it's not a big deal. Let's see how you feel about Python trying to application that has to be industrial strength and grown quickly for a business.
Some of the things said in this article are ridiculous. Especially the wiping your butt with a communal sponge-on-a-stick. Even if we are to believe that the same people who went to such great lengths to rid their cities of waste would then share sponges with faeces on them, why would you reach around with a long stick to clean yourself? How would that even work? This looks exactly like modern shower sponges made for reaching your back. Try wiping with one.

Also the claim that these toilets were for the unwashed masses, yet those same people supposedly wore togas on a day-to-day basis.

Who even writes this crap?...
There are monitors built specifically for digital signage, these have the same specs as large TVs but no tuner or adware.
Cloudflare Tunnel (the service used here) is my current recommendation for most people when it comes to tunneling. Nobody wants to pay for tunnels, and it's the best loss-leader product offered by a reputable company that I'm aware of. The DNS integration is particularly nice.

My only concern is if it gets popular enough that a lot of self-hosters start using it for things like Plex and Jellyfin, which I believe is against Cloudflare's TOS, they might crack down on that.

If you prefer a self-hosted tunneling system, I maintain a list here:

https://github.com/anderspitman/awesome-tunneling
A major difference is that with Tailscale every visitor must install a client. The article's solution should be fully browser-based.
Is there something wrong with running a local web server and opening the app in a browser tab? Not my area of expertise, so maybe it would have its own set of issues.
Walmart is doing a terrible job. Progressive degradation has largely been forgotten because just about everyone is using a full-featured browser. Most web developers stopped caring and I'm one of them. Chrome won the browser wars. If you don't want to use it, enjoy your bad experience.
> Doesn't imply they don't already have the tech or couldn't implement the tech for cold distribution

I think you've forgotten that you're the one arguing that Africa's experience with contagion means they're ahead on the logistical hurdles for distributing this particular vaccine. :) You have yet to explain how that experience is relevant for tackling these cold distribution challenges, especially in light of the countries' extreme levels of poverty and corruption.

I understand the impulse to cheer for third world countries, but we can be realistic about their challenges while also opposing poverty and prejudice.
Congrats on the launch! Woo woo.
> For DNS, we're used to not worrying about private systems at all. You probably have or know somebody who has, a Pi-Hole, which deliberately trashes DNS in order to reduce the amount of advertising you see. It can't trash my DNS this way, and it couldn't trash DNS for somebody using say, Google's DoH servers, so we don't fret about it.

Just yesterday, I got banned by gatekeepers at privacyguides.org for pointing out the disconnect between their "must support DNSSEC" stance and the content-blocking scenarios made possible by services like Pi-Hole.

I wish I was as eloquent and convincing as you are.

[0] https://github.com/privacyguides/privacyguides.org/discussio...
I have a dirt-cheap TCL 43S425 and have never plugged it into the internet. Works great.
> it's not allowed in the US

My MDX does it, and they have had that capability since at least 2017.
Both concepts are related but separate. I'd argue that monitoring is the act of alerting or taking action when some metric is out of bounds with normal values. Those values are based on absolute thresholds, or some changing thresholds based on historical values. Observability is the ability to see what's happening across and between multiple systems so that any issues raised by monitoring can be diagnosed quickly. "I know theres a problem vs I know which part of the system its happening in"
No time to waste, I'm learning Plutus. :-)
"DNSSEC is vital to the security of the internet." If this is true, I'm curious: in the six years since this post, what attacks or security incidents occurred which could have been prevented by DNSSEC?
Why aren't chains sold with wax on them?? This is so much better!!
Another approach is to look not for things advertised as "monitors" but instead look for "digital signage"[1]. Nowadays most of these contain some networking features but they'll be oriented at local control (i.e. by you via something on your LAN), not some third-party control center accessed via the internet.

Anecdotally this is the approach I took ~20 years ago when buying a (then slightly exotic) plasma flatscreen from Panasonic. It is still working flawlessly today, though I keep hoping it will die so I can guiltlessly replace it with something newer/bigger/higher-resolution.

[1] A random example
https://www.usa.philips.com/p-p/86BDL3050Q_00/signage-soluti...
I see it as a tiered approach - Detailed Process Logs saved to a db, Audits, Regular logs streamed to your favorite log dump, Monitoring, Health Checks, Metrics, and Usage Statistics are all part of Observability.

If it is a critical process, use detailed process logs.

If it is an extremely critical process add Auditing.
Care to back THAT up? I'm aware of that hypothesis, but it hasn't been conclusively demonstrated afaik.
> not because v2 + v3 = v5 but because nobody would want to download a Winamp 4 skin

I wish the people who named Gimp image editor were this thoughtful! Searching for image masking info has caught me out multiple times :/
Give this man a nobel prize!
Reducing the rounds from 10 to 7 results in a ~10/7 = ~1.4x speedup. But single-threaded BLAKE3 is 5-6x faster than BLAKE2b, and most of that comes from SIMD optimizations. Thatonelutenist (the author of the original post) points out in a sibling comment that BLAKE2sp closes a lot of that gap, and that's very true. BLAKE2sp and BLAKE2bp can take advantage of many of the same SIMD optimizations that BLAKE3 can. But not all :)

A fully optimized implementation of BLAKE2bp/sp is about 2x faster than BLAKE2b and more than 3x faster than BLAKE2s. That's an enormous speedup. Consider that SHA-3 has a reputation for being slow, but the software speed difference between SHA-512 and SHA3-256 is smaller than this. There are some complications when you get into short input performance, but any application that needs to hash files (where short input performance is dominated by the cost of opening the file) would almost certainly be better served by BLAKE2bp/sp than by BLAKE2b/s. In that sense, I think the biggest practical advantage of BLAKE3 is just that it doesn't ask users to navigate these tradeoffs. We discussed this a bit in the intro section of the BLAKE3 paper.
Except that it doesn't, you just won't engage on the major flaws in your arguments that I raise in the article.
Thanks! Woo woo. :)
Whispernet is dead from what I understand. As countries began shutting down 3G networks, Amazon was no long able to get connectivity at a price point where it was economically feasible.
It’s the Swiss who fixed it and say huitante. The Belgians say quatre-vingt like the French.
What do you need security updates for if you don’t connect it to the Internet?
This is incredibly oblivious to the fact that we, the West, as consumers are enabling these awful working conditions. Do we need to buy an iPhone every year? Does Apple really need to release a new iPhone every year?
Your comment basically says: they're poor but they're not too poor. Is there a line where poverty becomes tolerable?
In a world like ours, where we are so productive, where we can mass produces practically anything, poverty should not exist.
The difficulty does and has (in the short term) decreased when the amount of hashpower being used goes down.

Presumably if the price went down by a substantial chunk and stayed down for a while, the hashpower would also decrease, and so the difficulty would also decrease.

Also, if electricity prices went up, or if CO2 emissions were taxed, then hashpower would decrease, and the difficulty would go down in turn.
Automated ad networks still require a lot of engineering and relationship management
Asmrepl: REPL for x86 Assembly Language
I agree on your last point. It's very sad. An example I've come up with is fusion. The many scientists and engineers working on fusion, and the fans on the sidelines, are a bit too wide-eyed that it will "save" humanity. While it will obviously be much cleaner than existing energy production plants, I predict its cleanness will be outstripped by its enabling of even greater consumption.

I very much hold little hope for civilization at the rate we're going. Like you say, we've gone from trying to be in a sustainable balance to just trying to keep up. Technology is just allowing us to destroy everything about the planet and even our own societies.

And thank you for the reference. Although, I'm not sure I can take reading and watching more depressing material. It feels like learning how to scream into the wind.
Ad-hijacking?

The referral code thing was a bug that got fixed - the intended function was Firefox Suggest-esque sponsored links from a local directory when you typed a word but not a complete url, eg. "binance". The bug was that it gave you a suggestion for complete, legit urls too (eg. "binance.us") and put the suggestion at the top. The bug was fixed to make the feature work as intended, and the feature is turned off by default.
I wasn't being serious, of course, but since you brought it up: why IS the Baltic less salty?
>flag of the USA by "English" as a language!

Does the flag properly denote spelling ontop of language? Gray/grey/ color/colour shop/shopppe?
Well this is amazing!

This would be an amazing fit for my side projects that are a little more serious than "do my own 30s design," but not nearly so serious (yet) as "find, manage, and pay a freelance designer".

And it seems like a great business too. The upsell prices are a little hefty for side project, but if I build a project on this that gets a bit of traction, a few hundred bucks for a landing page / ui library / marketing email template starts to seem pretty attractive. Especially if it lets me put of "use a real designer" until a little further along in the product's lifecycle. :)
If it happens once in a century, by some fluke? Probably not. If it happens with any consistency (say, 20% of the time, favoring a particular side) over a long enough time period, the majority is going to become disillusioned for obvious and frankly good reasons. A disillusioned majority is not good for a democracy.

Edit to add: Of course, with this particular effect, it is not necessarily clear to the demographics whether they are in the majority or the minority. This can lead to the paradoxical situation where everyone believes they are in the majority, and still get their way less often than they should. I think this is the case in much of the world today.
The vast majority of people posting to YouTube make nothing from it.

It might be unethical if they were marketing it solely as a way to avoid ads but there are a wealth of benefits to using it. YouTube in a browser on iOS is a nightmare to use and I suspect that they don't fix the many issues because they want you to use their app. This extension removes those issues.
You're seeing a lot of political consolidation around getting rid of, or revamping considerably section 230 which most social media platforms have been protected from lawsuits for a while now.

When you have both parties in agreement that FB, Twitter and Google are a threat to free speech and democracy, you best watch out.

This was my thought. The heat was getting too much for him. Law makers repeatedly asking him to come testify on this and that. The pressure to get rid of 230, and have better controls on banning people may have just worn on him enough where he just decided to toss in the towel and move onto something else and quietly disappear.
Twitter Blue apparently was another not so great idea I guess...

Look folks, Twitter was never really profitable and it showed. Innovation has been lagging for years, and they had to rely on sensationalism from Trump that simply can't be allowed to persist any more.

The profit model has changed, and therefore the CEO music change.

The big question is where it all will go next. I can think of several ideas that will improve the platform, but nobody asked me to write them, and I'm not getting paid CEO money by them to spit it out.

The biggest question now is what will happen next... I guarantee you though, any more plots to start billing users and turn Twitter into more of a "pay-for-play-ware" or "freemium" service will lead to a giant user base exodus. ;/
In most cases where I have been given company stocks as part of compensation, I usually sell them as soon as I can. Depending on your role in the company you are often very restricted about how much you can sell and when. There are limited trading windows where you can legally sell and any inside information may prevent it even then. I’d rather have my money in some other stock where I have more freedom to trade.
> yet 50 million people still choose to pay $12/mo for YouTube Premium.

Yes, because de facto YouTube has no viable competitors, so I am not feeling that analogy.

If I want to watch YouTube videos specifically, I have to go to YouTube. People don't use YouTube because they necessarily like the experience of how YT does things, they use it because it has the content users want. Browsers aren't like that. Both Firefox and Chrome on a high level provide the exact same content.

Sidenote: adblockers and such are nice, but, as others have pointed out alread, non-tech savvy users won't bother. And the situation on mobile devices and smart TVs (which account for a growing percentage of YT consumption) have a pretty non-simple adblocker story (or non-existent, if we are talking about using native YT app on a mobile network).
There are certain events in human history that are so destructive, that paying a regular cost to prevent them is wise.

Famine is one of those calamities. It will absolutely destroy the entire economy, and get even bring down governments/democracies.

Over-production is an absolute conscience choice we make.

Do not mistake insurance for waste. Also note that US food surpluses are funnelled into the US Food Aid program which distributes excess production (which we actually used to outright destroy) into preventing famines abroad. This has significant humanitarian, as well as diplomatic value.

Because of the intentional overproduction , the US has not had a food shortage for over 100 years, despite occasional crop failures that have occured.