skysight-inc/HackerNews huggingface dataset:
Yeah size is what I was thinking of when I said practical. But I'd take the bulky but safe design over the shitty NA plugs any day.
It really depends on what you want/need. Since I realised that I don't need to only have a single device, it just makes sense to me to have them separated. When you want faster wifi, you upgrade the access points. If you need router with better capabilities, you buy a new router and still have your perfectly well functioning wifi.

I like OpenWRT and not needing to research whether some device's wifi will work is a plus for me. You can of course still have a router with wifi capabilities, I just found that separating them makes upgrading to new devices easier. I can also keep using my older devices - I used an ASUS NT-14U router for a few years. It was great, it had plenty of RAM and flash for the time, OpenWRT run great on it. Then I wanted to upgrade to 5GHz wifi, but I just run into problems with router+wifi combos having inferior wifi performance on OpenWRT compared to stock device - usually only half the speed an sometimes even unstable. Then I realised I could just buy new 5GHz APs and keep using my old router. I have been mostly happy with my home network since that realisation. I bought some TP-Link Omada "small business" APs (EAP245 and EAP225-outdoor) and knock on wood I didn't have any problems that I can recall for a few years already. People also usually recommend Ubiquiti APs and devices, but I have never really gotten into that and the TP-Link offering seems to be a better bang for my buck.

If you are able to run a wire, do it, even if it means some more initial work or it being a little ugly at some spot. It is just simply more reliable than the other options. Your future self will not thank you, because he will not even realise how smoothly everything is running ;)
Yes I agree, just playing devils advocate that you shouldn’t have to change off defaults for ergonomics when there isn’t a real _benefit_ to pascal case.
I’m curious as to whether the HTTP requests re-used the TCP socket or if they were dumb “Connection: close” ones that closed the socket and set up a new one for each request.

The overhead for that alone would outstrip any benefits.
are you not involved in the product roadmap and how that gets translated into the individual, smaller projects that get you there? then you may not be as senior as you think ¯\_(ツ)_/¯
I've considered switching from Authy to Bitwarden for TOTP. But besides the headache of moving all my accounts...I worry about "having all my eggs in one basket". I mean, the purpose of TOTP is to have MULTI factor auth. With both the password and TOTP code in Bitwarden, you actually remove the multi factor part.
Interesting, I think Kanopy uses widevine as well.

How long will this last now that it has been posted to HN?
Glad you liked it!

In my example, I'm using an unmodified gunicorn runner to load the uvloop worker. So I'm still only using a single worker process. Once I start tweaking the `--workers` count, I get a much higher queries per second.

And you're correct - this is a narrow benchmark, not designed to test total TPS or saturate resources.
As I work more with someone from the midwest, and being from the mid-atlantic region myself, I'm growing more and more suspicious of the "hard worker" mindset.

What I'm seeing, over and over, is that this drive to "work hard" ends up creating all kinds of "bad" work; difficult/tedious labor intensive decisions rather than efficient and innovative ways that are objectively better.

He gets stuck on a problem, and won't put it down and go pick up the other problems that are easier to complete and provide similar (if slightly reduced) value to the customer. That's his "hard work" ethic at play, and I've found it pretty difficult to break him of that habit.

And this isn't some idle efficiency meddling on my behalf; instead of providing some incremental value on a daily or near-daily basis, he goes completely dark for days or even weeks at a time before surfacing with a "glorious solution" to the problem he's ratholed on. If he had dropped the work at the first sign of trouble (seemingly anathema to a "hard worker"), he would have found other ways to have an impact on our customers. He's substantially less effective because he wants to "work hard".

I do believe that people who value "hard work" generally don't understand this downside, and it's kind of fascinating to me, because of how ingrained this flawed trait is into an entire subset of American culture (being an American myself).
The 'scam' seems to be insofar as wealthy and powerful entities can exploit the functional inability of those less wealthy and powerful to meet them on even terms in the legal system. I think we could all agree that in an ideal world if someone is at fault, their insurance should pay out to those they damaged. The reality is that may only happen if you have an entity of similar magnitude to go to bat for you.

That doesn't mean it's a good idea to not get comprehensive insurance, but police reports should probably carry some weight without requiring a suit.
You make a good point, but I think having open and honest discussion around compensation is better than having that conversation slip behind closed doors. I've always admired the software engineering field - it stands out from Investment Bankers, Doctors, and Lawyers as a highly paid profession with a culture of compensation transparency.
> I was skeptical that any mechanism to create bullshit jobs could arise from a system as inherently Darwinian as capitalism.

This takeaway is odd - especially when the entire point is that these bullshit jobs are a core part of capitalism, because they force people to buy into the system in spite of its obvious problems...
I'll do it. $50/hr, maybe 10-15 hours.

My email is in my profile for the next 12 hours.
a number of someones downloaded an exe file and expected a video media file.
I don't see how it's delusional to look for a technological solution to a problem that was caused by technology in the first place.

In any case, at this point even if we stopped emissions tomorrow we'd still need negative emissions to get back to a safe level.
Thanks for that! I have a similar pet peeve when people talk about the economic performance of the CCP, so get where you're coming from completely.

Truth be told, I don't know much about Nazi History at all. I just used Hitler as he's often held up as the paragon of evil, but even he helped some people.
The stasi were impressive also. They would have loved this.
How do you quantify the limits of technological solutions?

PS, I love that you’re making that comment using…a technological solution which would’ve been considered wizardry not too long ago.
Ask HN: Why does YouTube have 200kB of JavaScript before the title tag?
I maintain a bot that listens for URLs in a chat, fetches the first kB of the page to extract their <title> and post it in the chat.

A few years ago, it stopped working on Youtube. I increased the limit to 32kB, as I figured it would give a safe margin.

Well, it broke again some time this month:

>>> import urllib.request
>>> urllib.request.urlopen('https://www.youtube.com/watch?v=dQw4w9WgXcQ').read().index(b'<title')
192194

This seems to be mostly inlined minified Javascript. Why does Youtube do this instead of including scripts that could be cached?
I don't think clean coal generally claimed to be carbon neutral.
> Beware of senior engineers who job hop.

I think this is a bit too much of a generalization. I would caveat this with "understand what you're hiring for".

In some cases, you need a specialist to come in and laser-focus on a problem, and then maybe someone who won't be with you for long, but will tackle those problems, is just fine - and even what you really want: no seat-warming, just get it done and get out.

But if you're hiring someone to lead a long-lived team working on big projects, then your point stands.
Ah gotcha. I understand some of those words.
Whether I misunderstand it or not (I don’t) is irrelevant because customers run scanning tools and demand fixes for any CVE without attempting to understand them.
MSVC is already C17 compliant, minus optional annexes.
I suppose that there could be companies that load logging configs from a shared filesystem share that the non-security-minded now-retired ex-IT director threw up on an insecure server somewhere "so I can debug the outages better." Still not as bad as the log content being an attack vector!
Some obvious questions:

1. How does redo compare with lower-level build tools such as ninja?

2. Why is it important/worthwhile to create a simplified/elegant version of Make, when for a few decades already, it is customary to write something higher-level that generates Makefiles (or builds in ways other than through Make, like scons or again via ninja)?

3. Is there a redo generator for CMake, and does it have advantages over Makefile generation?
You can create a job whose only function is to increase your cost and consequently allow you to charge more for your product or service. It doesn’t work if you do it on your own, but it does work if you can get the government to force your competitors to do it too.

If you pay close attention, you will find that most government regulations that affect whole industries are actually the result of lobbying by the industries themselves. This is clearly visible in finance but it happens for almost any industry where there are powerful players.

No one wants to increase their productivity without a corresponding increase in revenue - this includes corporations as well as individuals. Bullshit jobs need to be created to maintain high prices in face of constant downward pressure.
Is Our Society Manufacturing Depressed People?
I see a misunderstanding here. The therapist is not qualifying the narrative as misleading or not and the therapist is not confronting the person. From my example it's either Joe, or the person they told this two who felt like they were lied to.
One should at least add it to UrbanDictionary.
Because then you're tied to whatever browser you pick. I prefer to stay browser agnostic; Bitwarden for passwords. xBrowserSync for bookmarks.
In the Google Play flavor [1] and with ntfy.sh, yes. If you use a selfhosted server or use the F-Droid flavor [2], then no. In those cases a foreground service with a persistent connection is used.

You can find more info on the configuration page for a self hosted server [3].

You may want to check out this question in the FAQ too [4]

You can also turn off publishing to FCM for ntfy.sh on a per-message by message basis [5].

[1] https://play.google.com/store/apps/details?id=io.heckel.ntfy

[2] https://f-droid.org/en/packages/io.heckel.ntfy/

[3] https://ntfy.sh/docs/config/#firebase-fcm

[4] https://ntfy.sh/docs/faq/#why-is-firebase-used

[5] https://ntfy.sh/docs/publish/#disable-firebase
Of all the theories, this seems plausible. Has anyone done that to your knowledge? The easy way to test this is to take an assortment of Roman-era coins and see how well they match up to the holes and ring sizes. The pegs that protrude could easily help not only to stabilize the system but prevent coins from sliding off if placed in a stack.
> California policies are an absolute disaster for poor people.

It's really just one policy and it's the policy of making it near impossible to build housing.
No, he’s (reasonably) upset that the other side’s insurance did not pay out when it was clearly their client’s fault, banking on his difficulty of filing a lawsuit.

What do you call someone who victimizes people he know have a disadvantage in suing him?
OK, I reloaded it in Brave on Ubuntu and it had the features you mentioned. I suppose it's interesting but it's unclear what path there is to making it the standard that replaces the standard.
I live in SF and have spent a lot of time thinking about the problems here.

I don't think you can understand SF today without starting from this foundational assumption, which is something of a narrative violation, actually. I don't see many starting from this point of view - but I do, and I think it explains almost everything in his article.

That assumption is:

San Francisco is a city for the rich.

That's what really explains the motivations and the things that matter, politically.

Furthermore (starting from there), as a city for the rich, SF cares proportionately less than other metropolises would, about things that in other places would make for strong incentives.

So, housing. Remember, city for the rich: they are housed, in nice houses that should keep their value (not have it lowered by apartments). So new housing doesn't get built.

Thefts: Eh, too bad, but if most if your shopping takes place through Postmates & Instacart... did it really happen? Do you really care? You don't feel the pain all that much. So your response is kind of lethargic. You're not personally losing money so it's not so bad really.

BART: You don't use that, lol. I mean it'll keep running and you can get from place to place on it, for the sake of working people, sure. But beyond that... whatever.

School Board: Your kids go to private school. Next.

Tech: We already have money, and jobs. We (the voters) are already very well off. It's fine it tech wants to add to our economy, but we don't need tech and we're not threatened by its departure. And that's very much what happened.

If you look at most of the problems in SF, and the way the voting public has responded, to me this model has the most explanatory power.

Now maybe the average SF voter isn't rich - but the people who shape the conversation & have the most impact are. SF is very much a city that caters to them.
I don't think the `ab` tool does anything special, so it's likely these are closed and reopened after each request. For the purposes of comparison of one architecture to another, this was sufficient, and mimics user behavior well enough. But feel free to try out the test with different headers!
Not just a functional language -- I found that my ability to write maintainable (and performance) Makefiles drastically improved when I began to think of Make as a Prolog/Datalog variant with particularly heinous syntax and very limited constraint resolution.
> ex-IT director

If only that were true. At least we could bond over what an idiot 'that guy' was.

But he probably is friends with the CEO so we can't say shit.
Nimble Chinese satellite grabs hi-res images of US city in seconds: researchers
well log4j will be old enough to drink in a few weeks (January 8, 2001). It's way older than bcfg2 or ansible, chef, puppet, etc. I'm not sure when the functionality was added. I'd bet it was the bees knees at the time.
With a few minutes of googling the only reference i can find says that Tardigrades have approximately 200 neurons in their brains [1] and their dry weight is on the order of one microgram [2]. They also have a lower count of synaptic connections (from the same paper):

>Thus, miniaturisation of the tardigrade nervous system is achieved largely by reducing cell numbers, neuropil branches and the number of synaptic connections, while, at the same time, increasing functional specificity. Nonetheless, given the proximity of synaptic neighbours, these adaptations are unlikely to compromise functionality to any great degree.

Now go to YouTube and search for videos of tardigrades operating in their environment. Here are a few examples:

https://youtu.be/bVDtzHM2-QQ

https://youtu.be/kux1j1ccsgg

https://youtu.be/slYQTMUz62s

I'm blown away by the complexity of their interaction with the environment and the stark simplicity of their neurological wiring relative to anything else that I can think of. For me it also raises the question of whether they have any subjective experience approximating what we describe as consciousness, or if the entirety of their life is just a long form electro-chemical reaction of deeply nested feedback loops programmed into ~55 million base pairs.

Either way it’s simultaneously amazing and humbling.

1 - https://bib-pubdb1.desy.de/record/401705/files/Martin_et_al....

2 - https://benthamopen.com/contents/pdf/TOZJ/TOZJ-3-1.pdf
But what's considered as an OG account? Age? Short handle? Something that isn't imaginative or a portmanteau of something?

I remember the ICQ days where the shorter your ICQ number, you are the OG of OG's..
Because the installed based is ridiculously huge, and you want discounts on Apple stuff? Also, it's a good way to get your foot in the door and maybe switch to something more unique to Apple later on.
This one is pretty milquetoast. Clickbait-y title to it, even.
The recent season 1 of the Wheel of Time television show reminded me of how the Aes Sedai are magically bound "To speak no word that is not true".

Of course, they're all master manipulators, ironically able to lie better than the common people because they can leverage that apparent veneer of truthfulness to deceive even more completely.
You never heard of Self or the Alto, the JVM, BSD jails/Solaris zones/whatever the 360 had, etc? Mobile I'll give you, but the rest have lots of antecedents.
I think this is where `gRPC` shines. It can feel tedious but really, define the interface and use the tooling to generate the stubs, implement and done. It prevents having to think up and implement a protocol and importantly versioning for if/when the features of the containerized apps start to grow/change.
Leaving for Google or even Microsoft I would understand it but for Meta?! Why?
Yes that is what is so weird about the whole thing.

1. If LastPass has been compromised, the scale of these attack would have been tens of thousands times higher. But it isn't. And I think it is reasonable to trust and assume Lastpass does not hold the masterpassword, as they have stated.

2. If it was browser extension, and clipboard sniffing, the scale would have been higher as well. But it is important to note there are many reports of those password have not been used for 3-4 years. They would have sat on a drove of password and decide today is the day. And yet report of these attacks, while scary, are still very very limited.

3. It is hard make a guess without everyone posting their OS, Computer, Browser, extensions, list of software, and even Router, Location, Network ( MITM ? ) etc.

4. We have tested the theory of Lastpass triggering the wrong email notification even with wrong password. So far doesn't seems to be the case here.

5. Nearly all reported cases are unique passwords. ( A few didn't specify )

6. There was a case where the whole Lastpass App and passcode was stored on an old laptop which hasn't been used for a long long time.

7. And yet there are also cases where account was only created in October / November this year. Meaning this activity is fairly recent. ( Doesn't rule out they could be two independent leaks or attack )

8. I was expecting someone working in InforSec would jump in, but I guess they are all on holiday at the moment.

9. This happened just after LogMeIn announced they will spin off Lastpass. I am thinking of the incident with Ubnt where the actual problem was internal, an employees hacking their own companies for bitcoin or something. Still I dont know how any Lastpass staff, without storing any Masterpassword could have gained access to it.

10. For now this doesn't seem like a coordinated PR attack on LastPass. If it was, seriously guys you need to do a better job with Social Media marketing. :P

Anyway It is an interesting thread to watch.
Dupe from yesterday 399pts, 268 comments https://news.ycombinator.com/item?id=29702110
Why do you think the technological solution is less likely to succeed than your 'reduction and degrowth' political solution?

Do you have any examples of a successful political solution like the one you describe?
That's fair, but it's not really the fault of MITRE / the CVE database, it's the fact that people have been incentivized to submit these. Similar conversations have come up around how NPM handles vulnerability reports, since they treat all vulnerabilities the same, including very low-risk ones like DoS risks that require control of your build pipeline.

The problem is compounded in cases like Log4j where not even the CVE score can be trusted, or in cases you're describing where end-users don't understand CVE itself and only know it in the context of these 'world-ending' vulnerabilities.
Specifically, if uBlock was compromised you'd expect widespread reports of cryptocurrency theft!
When was your era?

FBI violent crime data certainly indicates a spike, but that’s coming off historical lows. And, still quite a bit lower than 1990’s levels.

https://crime-data-explorer.app.cloud.gov/pages/explorer/cri...
GnuPG had been battle tested for almost two decades before Efail was discovered and disclosed.
I think we are both in agreement that photonics will not replace silicon for logic gates (at least with current technology). However both what I was talking and in the specific example from TFA photonics are being used for analogue computing which does not necessarily require logic gates.

The simplest example would be AM modulating a laser with a signal and passing the result through a prism. This calculates a Fourier transform on the signal. This is not a great example because, for most domains, the output is too noisy to be of great use and ADCs/DSPs can do this fairly efficiently already. I believe the computer mentioned in TFA involves matrix projections.
In spite of being presented as the future of work by some venture capitalists, the incentives just don’t make sense. Floors don’t have to be swept in the metaverse unless they’re designed to need sweeping.

They make perfect sense. You probably can't be a King or Queen in the real world, but for a modest outlay you can play one in the virtual world. The product being sold is not the fun of clicking around doing pointless things in a Monarchy Simulator, but the emotional satisfaction of bossing a small army of other people around. Within the game, you can be the sun around whom others revolve.
Ask HN: How do you build complex web apps with vanilla JavaScript
Hello everyone, I wanted to ask you how do you learn to build complex web apps by just using javascript? It seems to be a common thing to complain in HN about bloated websites with a heavy use of js and frameworks, for example: https://news.ycombinator.com/item?id=29703546.

Every time I try to build anything more complex than a weather app, my codebase becomes a mess. I'm still very new to software development and I still have a lot to learn, so maybe that's part of the problem. How do you manage your app state, how do you get back your state after a crash or a refresh? All these seem difficult to accomplish without a framework.

Any good courses, blogs, repos to study in order to learn this? Thank you!
Gavin Smith (Robots and Dinosaurs) has a theory that they are calendars. He has an interesting series of articles in which he tries to recreate their use.

https://tinkerings.org/2020/06/17/roman-dodecahedrons-part-i...

https://tinkerings.org/2020/06/17/roman-dodecahedrons-part-i...

https://tinkerings.org/2020/12/25/roman-dodecahedrons-part-i...

https://tinkerings.org/2020/12/25/roman-dodecahedrons-part-i...
> it should be provided by the state and paid for with taxes / annual registration fees

The free market is required to accurately price the risk for each driver.

A 45 year old female driver with no infractions is much less risk than an 18 year old male with a DUI, so the former should pay less in premiums. The current system is doing that.

I do not see how a state-provided solution would come up with "accurate" pricing for individuals. Some market is needed.

I could see how some people (especially in high risk groups) would prefer not to pay according to their risk, but I do not agree that is better for society.