skysight-inc/HackerNews huggingface dataset:
>A reasonably mature person understands that their opinion, if in the minority, shouldn’t prevail upon the majority.

The reasonably mature, less than well-read, or well-tread person, maybe. Given either of those two traits you've probably seen at least a handful of examples where a critical mass of "well-meaning change agents" gets to the point of near wrecking balling a tenuous equilibrium without even realizing the consequences of doing so in the way they want, and which suddenly starts to fracture or fizzle when exposed to the reality of forklifting to be done to achieve their goal without blowing up the house to put out the fire.

Real, lasting, change is hard, and the tolerance of the masses for it much less than anyone thinks. You don't wake up one morning and snap your fingers and every body is dancing to the new tune without generous runway. Oftentimes, that minority isn't against the change, but disagrees on the means employed to facilitate it. When they do straight up disagree, I'd personally prefer they have a plethora of wrenches to throw in the works. Sometimes, the fact the more than half the people in the room think something is reasonable is not really enough justification in my mind that something is worth doing.

Now those same people, standing up for the same thing, after being put through the procedural ringer and filing off the edges? Now we're talking the real progression of the glacier of the Will of the People.

And in fact, that was exactly the dynamic the Founders had in mind.
I didn't realize it was that low - I thought it was a few amps. And even a single amp multiplied by 80 volts is far beyond what I would pump through typical hobby mosfets used with e.g. an Arduino or Raspberry Pi.

By yeah, if it's just a watt, that's going to be on the order of tens of milliamps at 80 volts. It probably wouldn't even need a heatsink.
I strongly agree with this one, too hard to distinguish if you're coming both from the tech space
Note that HTTPS, unlike says VPNs (IPSec, Wireguard...), provides authenticity protection up to the application itself. If the kernel sends a modified packet to the application, it will be rejected by the application.

As a result, to implement HTTPS interception / rewrite / injection you need some degree of modification of the application itself. The "minimal" way is to add a new TLS certificate to the certificate trust store the application uses that is marked as "allowed for every domain" (that's what Burp suite does). It seems that HTTP toolkit does it differently for the browsers it supports, probably a plugin/extension added to the browser that alters the traffic after the TLS block (HTTPS is HTTP over TLS)
Yeah I can second this. The first distro I ever tried was Mint and I think I was on the arch wiki every day for a whole month. Wonderful resource.
It’s 2k only if your family is on the top wealth bracket. For most people is way less and if you are in the lower. Rackets you even get money to attend. Can’t say it was that easy to find employment for everyone graduating in any university… for sure it was for all my class mates (we graduated in computer engineering). I know it was almost equally easy for other majors graduates…
Back then you never needed to dial your own area code unless you traveled far away and called home. At least not where I lived. So it’s no skin off your back that it took the better part of three seconds to dial your area code at ten pulses per second.
Yes, absolutely and I am aware that it is a trade-off. I am complaining that in discussions these trade-offs don't come up. I wish we would deliberately discuss trade-offs and make conscious decisions.
It seems like a reimagining of the style HTML attribute to me.
Perhaps – but well-compressed video is hard to distinguish from noise. You should already be assuming the attacker knows that kind of thing; googlevideo.com doesn't serve much other than video, for example.
The incentive is that the banks remain willing to finance the purchase of Tesla vehicles.
> Please explain, what about my building facade is so incredible private?

Your building's facade is whatever you decide it to be. It doesn't matter what other people think, it's not up to them. So, likewise, you're not the one to say that someone's building's facade is not private. A major part of respect for other people's privacy is letting them decide what they're private about. I mean, sure, lots of impolite things you may be doing are still legal. Laws don't define courtesy.
I have a similar long history of failures, though my failures did generate income - just nowhere near enough to give up the day job. €20k a year at their highest point, €5k a year at other times.

I notice similarities in what you're describing, particularly when it comes to your target market and products.

B2C not B2B.

And generic, anyone products, rather than targeted niche products.

A lesson that took me a long, long time to learn. Targeting consumers over businesses is doomed to failure unless you strike the Facebook / Instagram lottery.

Consumers don't buy software or pay for SaaS apps, businesses do. Netflix and Spotify are exceptions, not the rule. Building a generic app for consumers is futile.

Far better to build a targeted app for a niche business use case.
> Would you mind me updating the article accordingly, and crediting your HN account name/profile in the changelog?

No problem. I'm retired now so my name doesn't appear in changelogs as often as it used to!
Yes, pretty much. Feel free to expand though. I enjoy these kind of conversations and there's always the possibility I might got this whole thing wrong.
Yes, you can put an email address in the "about" field of your HN profile:

https://news.ycombinator.com/user?id=lsjfd

This will be public, so consider creating an email just for this purpose.
One would hope that fossil fuels are just a quick step in the technological bootstrap process on the way to clean/renewable energy, though I agree it's not looking too good at the moment. My guess is they are necessary though in order to go from pre-industrial to more advanced. Despite the negative externalities, the amount of energy they contain that is easily unlocked is remarkable.
Implementation is whatever two parties agree upon, otherwise it isn't decentralized.
I don't think any of this is "good" web-design.

But my argument never was about the layout or design of Hacker News being "better".

What I meant to argue was, that content is king, and that everything else should serve the actual content - not distract from it.
For simple requests where it's just convenient to have them in a list, with a description/easy to find for replaying, a VSCode extension like Rest Client [0] can be useful instead of the desktop apps. Well, VSCode is a desktop app too, but if you already use it... :P

I like it because you can just write a text file with the request and any comments you need around them, and... being just text, it's so easy to manipulate.

When I need scripts for special auth I fall back to postman though, haven't digged enough to see if I can make it work with that addon (or any other one).

Also there's Thunder Client [1] which I haven't tried but apparenly has more features.

EDIT: references

[0] https://github.com/Huachao/vscode-restclient
[1] https://www.thunderclient.io/
I also read before bed every night. No goal, I just use reading as part of my sleep ritual. Reading fiction pushes out the stress of the day and lets me fall asleep rather easily. There's something about the pace of reading a novel that relaxes me.

I'll also add that I only read on my phone. Haven't read a physical book in a decade or more.
It’s too late for the OP but for the rest - consider if you can handle stress of your own at its peak and having kids before having them.
I'm writing an offline-first database and it typically uses a server for storage and coordination. The difference is that I don't think the server should be able to see what it stores and coordinates, for which searchable encryption is the solution.

However my database is address based, it reads and writes blocks of encrypted data, and it is protocol agnostic, it works over S3 and Google Drive, or could work over a pendrive sent in a letter back and forth, or IPFS. It just requires a single source of truth and optionally event notification.

So would this fit into an every peer-to-peer system is decentralized, but not every decentralized system is peer-to-peer picture, or is this not decentralized at all, because you would normally use it with Amazon S3, albeit in a maliciously-secure manner (the confidentiality, integrity and authenticity of your data is secured via authenticated encryption, the client keeps the key, the access pattern is obfuscated).
> Do I like these consent banners? Most of them not. Neither as consumer, nor as the one implementing them.

Then why would you implement them (assuming your company is not rotten), if not for compliance with regulation that failed to find the sweet spot?
The Technology Industry’s Year of Escapism
If you leave your trash out the night before, someone will come by, slit the bags open and remove anything made of metal. They will leave your trash in your yard.
> For instance, how can one be guilty of a crime if one had no choice in committing it?

Why do you think you had no choice in committing it? Are you saying these people don't have any reasons they think justified committing a crime? That seems clearly false in general. Certainly if someone was literally forced to commit a crime, ie. they didn't want to do it, then they are not guilty, but why wouldn't they be guilty if they wanted to commit the crime and then did so?

This is a common confusion in thinking about moral responsibility under determinism.

"Choice" is a process whereby a set of options is reduced to one. This process is typically driven by an individual's reasons for acting, ie. there existed a hypothetical set of possible actions Y, but I did action X from Y because of reason Z. Z counterfactually describes why X was selected from Y, and when Z is an internally held value/justification for acting, this is a person's "will".

When a person is "free" to use their will to make choices, then they are acting of their own free will. If they are instead coerced into choosing W from Y instead of Z, where W is defined by somebody else's values, then they are no longer free to act on their will. This is Compatibilism, where free will and moral responsibility are compatible with determinism.

I also think it's important to distinguish "free will" as used in ethics and "free will" as used in science, where they speak of the experimenter's freedom. They are simply not the same thing, because one is compatible with determinism where the other may not be.

> Why try at anything if you have no choice — everything that will happen was decided at the universe’s origin and is merely playing out.

What you're describing is fatalism, not nihilism or determinism. Given some tragedy is caused by a person, consider two scenarios:

1. they wanted that tragedy to happen

2. they fought tooth and nail to prevent it from happening

It's very clear to most people that the person in scenario #1 should be held responsible, where in #2 they should not. #2 is fatalism and absolves a person of moral responsibility, but this does not describe what happens under determinism. Under determinism, the people who make bad choices wanted to make those choices, and being held responsible is the moral feedback they need to correct their flawed decision process.
Hello, I have a similar thread going here. I think we need to "shard the centralized monolith".

https://www.unturf.com/let-us-define-a-permacomputer/

I avoid writing prescriptively to avoid setting a bias on the talent.

I AM growing my own "YouTube". Not open source yet but I'm planning big things.

https://media.unturf.com
I don't know how long you've been on the Internet, but if this post leads to a helpful resolution and gets indexed, that's precisely how we end up with a bunch of neophytes asking us how to get their <anything> working again. I get wanting to be kind and empathic and all that, but think about how this impacts the platform. There are better, more appropriate platforms for this, this is not it.
> only actually requires plain Apache

... and a hosts file entry. Still, trivial for any machine that the operator administers.
Reminiscent of http://ronja.twibright.com/about.php , from before wifi was cheap. It's a 10mbit optical link (AUI ethernet!) using bright LEDs and magnifying glasses.
"Student loan forgiveness would take a huge existential burden off an entire generation."

So would having you pay my mortgage.
> When the wireless industry deploys 6G networks around 2030, they hope to usher in an era in which everything, not just our phones, is sensed, connected, and intelligent.

And every tiny detail of everyone's life tracked in real time. What a horror.
Yes, go based programs observe the proxy variable unless specifically compiled not to. But that doesn't break applications, they just ignore the env var.
Go's default package manager doesn't seem to work at all with HTTP Toolkit.

Here's what I did.

* Intercept Tab > Fresh terminal.

* In the terminal, do your usual stuff, it intercepts curl, etc.

* If you try to use go's package manager, example: `go get golang.org/x/oauth2`
It errors out with

```
go get: module golang.org/x/oauth2: reading http://127.0.0.1:8000/golang.org/x/oauth2/@v/list: 500 Server error
```

Ideally it shouldn't break the application, just ignore if it can't intercept.

> absolutely not a hard guarantee for applications that actively ignore standard proxy configuration (handling that is very hard, and definitely out of scope here).

I encountered a usecase where this was needed and LD_PRELOAD trick (used by proxychains) etc failed because the application was statically compiled. I ended up using https://github.com/hmgle/graftcp which somehow manages to force tcp traffic through a socks5 proxy.
Microsoft’s Xbox Chief Phil Spencer on Minecraft, Metaverse
If you can't pay back a 50,000 or 100,000 loan in 10 years, you're doing something wrong.
Usually read something to learn for 15 mins while eating breakfast, and about half an hour of fiction before falling asleep. In addition a few pages here and there on my phone if I need to wait for something.
Quit perpetuating the tying of these basic things to the standard employment model. Get 'employers' out of the business of managing access to health care for employees.

Let people 'pay' for their own vacation.

You can provide 'profit sharing' to non-employees.

Give me $3k/week and let me manage this myself vs giving me $2.5k/week and telling me how awesome my 'health insurance' is. I want my access to health care impacted by as few third parties as possible - adding in employers to the mix is completely the wrong direction.
His world seemed completely and utterly divorced from mine. He was deeply connected with big enterprises and how they manage to meet business objectives regardless of not being software engineers themselves. In our world, we take for granted that our managers and leadership are technically proficient. In his, the "Engineering Manager" is a rarity, the people managing engineers are just ordinary managers.

Software architecture, in this world, is how you escape the rat race of soulless ticket punching without having to go into management. You use your skills and experience in an advisory role. Obviously there are better or worse architects, I've had the pleasure of working with really good ones. But it often feels like a title and field borne out of a need to retain top talent. (read, not push them away to competitors)
from page:

Frequently asked questions
Does it work on iOS devices?
Yes. We're using a workaround, since iOS does not support native browser fullscreen.
FWIW your reaction to previous vaccines/doses doesn't predict your reaction to future vaccines/doses.

Up until my second COVID vaccine I had never had any reaction to any vaccine other than a bit of pain in the injection site. My first COVID shot caused zero symptoms. So I was surprised when my second shot caused a day of flu-like symptoms. My booster, however, caused no symptoms other than swollen lymph nodes in one armpit.
Maybe you can! Take an uber every now and then instead of driving yourself. Let somebody else deal with the traffic.
Personally I work on a 2 person team, the vast majority of my reviews either have no changes or "hey maybe this thing should be named something else so its more consistent".

For us the peer review is almost completely for knowledge transfer. Sure we know what each other is working on, but we still have to maintain each others code if something goes wrong and the other is not available.

So I agree with this 100%. Even in bigger organizations where the peer review was more formal, I feel like that is still the primary goal.

I do fail to see the benefit of this, especially looking at the price of it. Outside of maybe scripts? I can't really see how much they can actually help without the context of the larger application. Without that context can they really provide more benefit than AWS CodeGuru (or similar) could offer?
> that has DMCA

Do you mean DRM?
That's what I used to do in my younger days. Now about 1 hour per day, before bed.
iOS or Android?
Homomorphic encryption could be of use here if there is meta data for the encrypted content, but I also don't see the direct benefit to let a low level transmitter manipulate contents.

Deep packet inspection is still a security flaw in my opinion. For me it destroyed the chain of trust. I know that practical application to inspect the next trojan an employee downloads through https, but I believe interception should be done after the download (before anything is executed of course).
HelloSystem 0.7 Released
My company has used them before. I thought the same before using them. However I was surprised the level of talent they have. For a super senior dev the context that you need for most projects isn’t as much as you think.

It was a net positive for us. Sped up our developer process given its so hard to hire senior devs right now.

They also have domain experts. So say you are using some tech your team isn’t as familiar in. Great to get some extra eyes of that code to check for security issues, potential computation issues etc.

Also they are much more broader than their company name suggests. Think of them as developers as a service. In this hiring environment it’s much needed.
This isn't quite true because in most real world scenarios, one of the requirements for code to be correct is that it provably halts in a fairly limited amount of time.
Thanks, Dad!
Where is the article? I only see one paragraph on that page and tried multiple browsers. Strange.
An Atmel ATtiny9 playing chiptunes – 1KB of flash, 32B RAM, 16B register file
Way to the Cloud-Scalable Vector Database
How is it unfair if they agreed to take on the debt?

If they went to school, got a degree, and a job, then they got what was promised and need to pay their commitments.
It's pretty hilarious that you think Sabine Hossenfelder doesn't understand standard quantum mechanics.
There is no point in comparing apples to bananas.
DevOps should be embedded on the team. Doing development and taking care of pipelines/iac when needed. If these people are not embedded on the team, it’s just more of the same with a new title.

I get paid a lot because I can write api endpoints, front end code, iac, pipelines, and understand networking enough to make our apps SOC2 or HIPAA compliant.
Hahahaha for real !
How is that different from just settling between banks? There's an end record of transactions with traditional banks already. You just trust the end result to be accurate.

The only selling point of bitcoin was that everything was recorded and immutable, and thus volume was transparent. If all of these transactions happen outside of the blockchain (until later, maybe) you can fudge around with trading volume, and game the market, which exchanges have already done.

You are literally just describing banking as it has existed forever, but with less oversight.
I’m going through a reboot right now. I’ve removed virtually all social media apps from my devices, and cancelled all subscription media except for Spotify. No more TV, streaming shows etc.

Replacing all free time with reading has been a big adjustment but I feel like I’m absorbing knowledge and improving myself. I’m also finding that I can express myself better through writing.
I wouldn’t be surprised it varies a lot. Just vehicle registration varies. In California the plate stays with the car, but in other states new plates are issue and old plates move to the original owners new car.

No doubt it would be fascinating to see how each state does it. I only have experience with a few.
This is using strange terminology, but it sounds like 'layer B' and 'layer C' are literally higher layers in the network stack. Why would those things be locked in to '6G'? Why not use them with existing 5G hardware or on my home fiber connection?

Consider the following paragraph:

>Including level B technologies would look something like each video call participant locally predicting and rendering any missing portions of the video data if a glitch or network hiccup happens. Currently, we allocate significant amounts of time, energy, and computational resources to ensure very high transmission reliability. But instead, each participant’s machine—whether it’s a laptop, phone, or something else—would “fill in the blanks” by inferring what was missing based on what had arrived. On a deeper level, machines would be able to reconstruct data with the same meaning as what was sent, even if it’s not the same on a bit-by-bit or pixel-by-pixel level. The machine learning techniques to do this already exist, though they are still relatively new: Two examples are variational autoencoders and generative adversarial networks. The latter in particular has gained attention in recent years because of its ability to develop deepfake images.

The author is talking about video codecs. Certainly codecs can be much improved based on a higher-level understanding of the content. What does that have to do with networks?
I'm the author of HTTP Toolkit, I actually built the internals much earlier as an open-source library (Mockttp: https://github.com/httptoolkit/mockttp) designed for exactly the end-to-end testing mocking use case you're talking about.

It's MIT-licensed, and you can build an automated HTTP/HTTPS rewriting proxy using that in a handful of lines of JS, and script any kind of transformations or inject any responses you like.

There's a general guide to getting started here: https://httptoolkit.tech/blog/javascript-mitm-proxy-mockttp/.

For the more general interactive testing/debugging case, you can also use HTTP Toolkit itself (it has a rules builder for this kind of thing) but if you're building automation you should just use the internals directly, they have exactly the same capabilities. HTTP Toolkit just provides a UI and convenient interception setup tools over the top.
I also want to know how many secrets just flow in