skysight-inc/HackerNews huggingface dataset:
This is not true. Regardless of how secure and properly setup your server is:

Outlook blocks anybody that does not send enough mail, even if you've never sent any spam and are on a clean block. They're happy to let their users to send you spam, but ironically they still block you when you you try to report it to abuse. The good thing is they block you, so the email bounced and you know it wasn't delivered.

Gmail classify messages to a user who has never communicated with you before as spam. This is silent, so you never really know if an email to a Gmail box has been filtered out as spam or not. Their abuse inbox accepts messages but I'm not sure they do anything with it.

Basically, email has been hijacked by two companies.
It depends on what your goal is. If you just want to make a single request to the web server, than loading="lazy" will not work as you said. (Technically speaking, TCP is sending multiple packages anyway resulting in higher latency, so not sure if that is a great goal.)

But if you just want to be able to save the entire website with Ctrl + S, then it works fine.

As an aside, loading="lazy" is the way in which images are embedded in the website from TFA https://i.imgur.com/wIkaE5g.png which was the reason why I mentioned it, although it certainly does not fit all possible use cases.
Super Pumped is a really well written page turner, and the subject is really interesting.
I'm running an email server and I can tell you that this is by and large not the case.

If you put some decent effort into making sure that you don't send spam, try to monitor if anyone thinks you send spam and react when someone complains that you send spam (and stop it), it works.

In my experience people telling these stories often do send spam, but they don't believe they do. ("It's not spam, it's a Newsletter. No, it has no unsubscribe link. These are people that agreed to be put on the newsletter by clicking on some ToS they never read, and they can unsubscribe by some arcane mechanism that we will make as complicated as we can. But we're definitely not spammers.")
I have one, we got to YC top 10% applicant but didn't get in this batch. Hopefully in the next batch: Travi helps users access information about activities, must go places, and things to do from trusted local residents, and provides automatic scheduling of selected activities in an itinerary format.

Yes! I know, we could have picked something non travel related since we launched in the middle of COVID but we have been thinking about the idea for a while and decided to pull the trigger anyway.

Here is the link if you want to give it a try: https://apps.apple.com/us/app/travi-your-trip-planned/id1536....
Where's the "hard dependency on libc" list? Or "hard dependency on Bash"?

It's ridiculous to imagine that no program is allowed to depend on SystemD.
Good article. Having a lot of experience managing remote teams, I wanted to expand on this point:

> Try to focus on the employees who thrive in such environments rather than those few bad apples.

You can’t let the bad apples define the work experience for everyone, but you do need to identify them and remove them as fast as possible so they don’t poison the well.

One thing I didn’t realize at first was that remote work attracts bad apples at a much higher rate than in-person work. There’s an idea that remote jobs are an easy way to get away with doing less work, so you’ll be flooded with applicants who read books like “The Four Hour Workweek” and think your remote job is their ticket to traveling the world while they answer occasional emails from their phones. Or more commonly, a ticket to working a few hours (or less!) per day while they try to convince their boss that the task is just harder than it looks.

Good performance management is important in any job, but it’s even more critical in remote work. If you let remote slackers thrive at your company, the good employees will notice. They’ll quickly burn out after working normal amounts plus also picking up the tasks that aren’t being done by the remote slackers. Resentment grows quickly and the good employees will be leaving quickly if let the remote slackers coast without consequences.

I actually favor engineers-turned-managers for remote management positions over managers with non-engineer backgrounds for this reason. Former engineers are much better at spotting when someone is lying about the complexity of coding tasks.
I don't like them either but having one is definitely better than displaying the manufacturer logo. Far less obnoxious than advertising a product you had to pay for. I also never buy clothes with printed brand names and remove every single logo I can off my car.
How often do you need to send on port 25? In my experience also running my own mail server, never. Receive from servers that don't support encryption yes, but never send. I always send using TLS and since maybe 5 years I've not had an issue with a receiving server not supporting it.
If I remember correctly GNU true violates various specs because it does too much (help and version) when it should ignore all parameters. As you say a valid implementation can be done in three lines.
There's a few ways to approach this question. One is to mention community networks (DIY ISPs) which will ensure you always have a public IP without filtering. Some even provide VPN access so that you can use your filtered internet to acquire a publicly-routable IP. This is a common pattern in the ffdn.org federation of non-profit ISPs.

Another one is to mention hosting coops (libreho.st/chatons.org) and how they could be employed in limited-network situations. On the web, we have SNI/eSNI-aware proxying which enables multiple servers to share a single IP without revealing their private keys to the reverse proxy. I don't know of an equivalent in the email world (because it's assumed there is only one MX with a canonical domain/DKIM per IP), but i'm all ears if you have suggestions!

Of course, we could mention onionMX and other key-routing systems (CJDNS..) but the problem is you need it to be supported on the other side as well, which is highly unlikely.
Windows isn't crap though.
Equating the relative value and effort that went into the underlying FOSS tech to "just a pencil", is a pretty accurate description of what a company does.

Take Facebook as an example. The first version of Facebook was essentially built on 4 FOSS projects - Linux, Apache, MySQL, and PHP. Facebook couldn't exist without them (or alternatives). But of themselves nothing about those projects represents the value that lies in creating Facebook.

Suggesting that the value in a product is within the programming language, database, server software, or OS that it's built on makes no sense. Certainly no more than suggesting a valuation picture owes something to the person who made the pencil it was drawn with. It absolutely doesn't.

FOSS applications are tools that we use to build things. They're essential, and critical, and immensely useful, and companies ought to fund the maintenance of them much more, but they are not where the value in the applications that people use them to build comes from.
> Make a landing page easier for regular users to login, and prioritize login over signups...

This. I suppose it's become so prevalent due to A/B tests finding it more efficient to optimize for new users, but at some point in a company's growth it would make sense to put the focus on user retention. Then again, it wouldn't be that hard to make both signing up and logging in easy and attractive.
I built a mobile web app for a conference that way [1], workes really well and is way more performant on older mobile devices than the previous version that was built in react.

[1]: https://app.ishl.eu/2018
My Pradas are very much for being seen in on formal occasions! Walking any distance is not much fun, they weren't designed for that. And they are made of such stiff leather that I don't think they will ever be moulded to my feet. :-)
English Weather review – the sound of the post-60s hangover (2017)
> Remote != home.

While technically true, I have yet to talk to a remote candidate or employee who doesn’t work from home.

We had one candidate who wanted us to pay for a monthly remote office for them, but it was curiously expensive for some reason and he had other problems that ended the interview process early so I never followed up on it.

So basically, remote should be assumed to be at home.
This is an unusually defensive response. There's a big gap between "all kinds of straight up garbage, some of it meant to do very ugly things" and the tiny amount of JS that would replace what this does. This doesn't even enable any interesting functionality. You could simply put multiple html files on the same web server rather than putting everything into one file. The visitor to the website would not know the difference (a point made in the linked article).
This defeats the entire point of selfhosting whether it's for security concerns or autonomy. The ecological impact of VPS hosting every single service you need is also not negligible: datacenters require huge amounts of resources and infrastructure which a simple second-hand machine at home doesn't.

(also worth mentioning: email protocols were explicitly conceived so that uptime is not a worry)
REST API for Nebula network
"Except of course that it isn't an artisanal choice, a very practical one that is made increasingly impossible by the few very large email providers that are left. It should be as simple as hosting a web server."

I don't get this one. How do large email providers make it difficult to host your own email?

I host my own email. It was a pain to setup so I try not to touch it since it is running fine.
Setting up email on your own server is just complicated unless you install server management software. I am not sure big email providers are to blame for this.
Agree regarding learning the magic words. There''s probably no substitute to just diving in and setting up a server with a domain you can afford to get blacklisted for a few weeks while you make mistakes. But once you know the magic words, Dovecot's documentation is actually fairly decent these days: https://doc.dovecot.org/.
Yeah, that's a fair point. Everyone has to put in the effort.

My thinking was that the employer has to make it part of the duties of the employees, and, more importantly, ensure employees have the time, tools, etc. available to do it.

E.g, when there's an outage, an entire day of someone's time might be spent writing up the post-mortem.
In the context of how not to be screwed over by an employer, and with the frequency and distribution of tech jobs in mind then yes, I believe that the number of situations where no alternative positions exists and the employer requires the complete sign over of all IP generated by the employee at all time to be so low it has no meaningful impact on the discussion.

And thus brings no value to such a discussion. That does not mean I dismiss the existence of such situations. I simply decide to see the whole forest, rather than focusing on a single tree.

And in case it had eluded you, we who work in the tech industry (which I would hazard a guess is the majority here on HN) are all privileged beyond what most of humanity has ever experienced in terms of job security and wages (even when taking into account the great big gab between the lowest and highest levels).
People often say the rich must "pay their fair share"... but how is it fair than some people pay MILLIONS of dollars in taxes, while others pay 100s or nothing?

How about reforming the something more towards you pay for what you use?

If you can't afford what you need, you should ask for charity.

"Taxes are the price you pay to live in a stable society"... when trillions are spent to fight wars that you don't support...

"Tax the rich" they say, when the rich pay the overwhelming majority of all tax.

Maybe, just maybe, people get tired of the lies. Maybe not the public in general, but the most productive who get taxed very hard, are beginning to look at how mobile their skills are and how some countries charge far far lower tax rates, and wondering....

It's one thing for the government to take so much from you in the form of taxes, it's another for them to then vilify you and make it sound like wealth and success is evil.
> I wonder how much benefits you actually get from decentralization.

I'm active in the SSB community. These are just some anecdotes that might amuse you and maybe help you glimpse how I see the protocol and ecosystem.

I was on a transatlantic flight from Brazil to Paris. I had SSB on my computer and that gave me access to multiple years worth of messages by my friends and their friends. I spent time learning all sorts of cool stuff, and reading amazing convos. I could reply, like, interact with all of it, even without a network connection. Once I landed and my computer found a connection again, it gossiped all my changes.

The Internet was not working well at a conference. All the decentralization workshops and talks were suffering because of it. The local venue firewall was preventing them from reaching their DHTs and known services. We didn't noticed any of it as our machines were gossiping locally. Our workshop just moved on.

Wanted to onboard a friend on SSB. We were at a beach house without decent internet. I was using macOS, he was using Linux. Some other people were using SSB as storage for NPM and Git artefacts. I managed to get the source from a client from the SSB feed, copied over to him, and onboarded him by doing git clone, npm install, all from SSB.

A machine of mine had broken down — my fault really, I learned the hard way that renaming the single admin user on Windows is not an easy task — and I ended up having to reinstall everything. I reinstalled the SSB client, and copied over my keys. It restored all my data and feed by asking my friends for it.

> in practice centralization is usually fine

For many cases, yes. Centralization doesn't mean expensive or anti-privacy. I agree with you there. I don't think it is a binary situation. In many cases, centralization is the way to go.

I do enjoy decentralization though, especially when it doesn't rely on blockchains and cryptocurrency. I want my decentralization without financial incentives and cheap to compute.
It's a way to express your opinion. Quite a lot of stuff on devlids.com is political. Like a bumper sticker or a t shirt. Althoug it probably is a "everybody posts, nobody reads" situation.
Indeed, after setting up dmarc and such delivery is no longer really an issue. I guess around 10 years ago, that was different!

But what is a problem is providing a good enough web interface, search, and so on.
Why can't the button be on the bulb? It's not vacuumed glass
From the developer perspective the most enjoyable remote work I have done, has been when I did larger projects (weeks to month duration) with the primary responsibility (choose stack and libraries) and with the customer concerned with the result, not the onboarding, cultural alignment with company values, day-to-day instructions, scrum etc. The latter is just expendable (micro) management noise.
:-) I can remember the excitement at the time over Java.

There was a massive Java event at the QE2 hall in London, I went to I still have the little metal pin of the Java Mascot from that event.
Well not sure about your data center comment. But it has gotten those making purchasing decisions asking about ARM based and their alternatives. Apple doing ARM lends legitimacy to other ARM vendors where previously the topic could lead to ridicule.
> SystemD has something of a reputation for being a bunch of arrogant young engineers making fundamental changes to the long established status quo in order to solve clever problems that range from tiny-minority-edge-case to non-existent.

With all due respect, but this is bullshit. The devs that started and are working on systemd are clearly veterans of linux system programming and understand quite well the ins and outs of initializing a linux machine. Unless by some chance you're a gray beard that was working on posix in the eighties, I would give the title of veteran to Lennart and the gang.
There's no reason for a subsea cable latency to be worse than starlink, both don't go in the straightest line possible but close to that.
They actually have the “toothbrush” mustache on there. LOL
Same goes for me. Running postfix server on DO box for a decade. Hotmail is the most troublesome.
Hah this sounds pretty close to what I did a few months ago trying to transfer files from my PC to a Win98 machine with only the tops I had.

Except, I started with thinking up my own HDLC-like protocol and ended up using xmodem/Kermit (the 98 machine had a terminal emulator with implementations)
>GDPR legally requires you to respond to requests within a month

GDPR requires nothing of me, I don't live in Europe or do business with anyone who does.

Anyways, this email wasn't a request for data, it's an inquiry about business practices.
Only really comes up when you commingle stock, but it's not like the customer can ask for a return, so does it even matter?
I got an extension that just adds a "search on google" option at the top of any duckduckgo search results page. For most things DDG suffices fine but when it isn't I'll just have to do one extra click.

This feels like a better flow to me than having to remember when I explicitly need to use google in the address bar or having to go to google.com and search it there.
I don't know if it's just me by I would love to have these as t-shirts. I would buy them all in a heartbeat. Great for conversation starter or as a prank to my fellow CS friends lol
Thanks for the kind words! Anything I can do to resolve your issue? Is there a way to reproduce?
Yeah SMTP relaying is quite common. The problem is due to email architecture, to my knowledge, that same relay is going to be able to read your incoming emails because remote servers will block emails from user@endserver.org sent from relay.net unless endserver.org has MX entries pointing to relay.net.
You may just have been unlucky with your IP block having spammers. How were you hosting it - own ISP or another provider?

I have not had deliverability issues for years with my Kimsufi (OVH France) server. While I am confident my server is well configured using best practices, I suspect some of it is also just luck not to be in the same IP block as a spammer.
> As negative as the experience was, in some ways I am glad I had it, because it gave me a much deeper understanding of where my mind could go - both positive and negative.

So is it still appropriate to consider this a “bad” trip? It’s a serious question; psychedelics are experiencing a resurgence in clinical interest precisely because of their persistent effects, quite apart from the acute trip experience itself. One might assume that a trip saturated in negative affect might leave a person worse off than before, but it is clearly more complex than that. Perhaps it is akin to the difference between post-traumatic stress vs. growth, and proper management of set/setting/aftercare can promote the latter over the former.
Onboarding is much more important in remote work. I actually left my Engineering job at a large YC backed company a month ago to focus on an onboarding/documentation idea that I came up with while seeing smart employees not being able to get up-to-speed. We would just throw them high level confluence docs without any context. They said they read the documentation, but without context they really had no idea what it meant. https://www.gainknowhow.com uses a skill dependency tree kinda like the game Civilization to incrementally get employees up-to-speed.
A journalist "advocating" for anything is already pretty radical.

I'm sorta one, and I'll be the first to say that the newsroom is not a place for activism.
Here's the no-ads .pdf version (linked at the top of their web page) -
- https://inspiratron.org/wp-content/uploads/kalins-pdf/single...
(Note the mangled Stasi logo in the .pdf:)

The 5-page article focuses on state security organization (Stasi, FBI) with massive resources and legal powers, going up against opposition movements with neither. Younger folks might not know that such organizations do such stuff...but to me, the stories read like "mighty army manages to track down and kill a 3-legged cow". Wow! Really? /s

Like most stuff I've read, the essay makes the Stasi out to supreme masters of their craft. Um, no. Remember what happened to East Germany when the Soviet Empire fell? The whole State vanished away like a sand castle in the face of a rising tide. The Stasi, like most such organizations, were a bunch of creepy machismo control-freak thugs with state backing. Their goals were: 1) indulging their own sociopathic inclinations, and 2) keep State backing, while said State lasted. Understanding why states endure or fade away didn't seem to be on their radar. Let alone doing anything to help East Germany endure.
An interesting perspective.

A late youth hobby of mine was being active in a coding community that wasn't open source, it was "lost source": based around a piece of freeware that was literally lost to a local storage hardware malfunction. But it had an API and a decade of stability (as in lack of API change, not lack of crashing unfortunately) and that caused an amazing amount of creativity, cooperation and so.

Perhaps this is an inherent weakness of open source: it's always easier to accept one more feature PR than committing to an API that remains sufficiently stable for that feature to happen in an isolated module.

I'm not saying that its always better to strive for the API instead of inclusion, it's a weakness as much as it is a strength, but chances are many situations where separation would have been better will be missed. It's a cultural bias.
returns on investments such as stocks, bonds and real estate have been incredibly high over the past decade - the ultra low interest rate environment that central banks around the world have created is a big contributor to this performance.

It would be deeply naive to think that starting to invest today, at historically high valuations will yield the same annual returns in the next decade. Stocks are very expensive, bonds are super-crazy expensive (given that you have a contractual guarantee that upside is impossible and that real yields are negative). Extrapolating from the recent past is a dangerous game. Reversion to the mean is a law of the universe and we cannot keep going like this.

If you quit your job expecting to be able to live off of your portfolio, you should have enough to still be comfortable after a 50%+ loss.

Inflation is flaring up, historically this meant raised interest rates, which in turn translates to lower asset prices.
I switched to Nixpkgs earlier this year, after getting annoyed with other options for working with Java and Python (in particular).

NixOS on servers, Nixpkgs-darwin instead of homebrew (mostly), and Nixpkgs on Fedora for a laptop. Solid results so far.
Yep. You need to buy a lot of parts though; we bought 100k/year from napa, which was the smallest account we maintained. The discount varies with how much your shop buys and how good you are at negotiating. Not sure why you have "commercial account" in quotes, wholesale pricing for business customers is available at lots of businesses. Your grocery store likely offers this exact same thing, commercial terms for businesses aren't exactly a secret.
I'm sorry this happened to you, but it's a shame. You end up giving money to your perpetrators and leaving the rest of us in the same situation you were in previously.

Maybe a hosting coop could be an option? Large enough for reputation but ethical enough to still federate with smaller hosts?
Thanks, that's a really elegant approach.
500k *Sobs* and goes off to drown my sorrows with an early Christmas Negroni
Oh, I had no idea! Thank you for the correction.
It was opinion of both researchers and review board.

What kind of deception is supposed to be present in my comment?