skysight-inc/HackerNews huggingface dataset:
> The midnight courier bike race is amazing, 100-200 bikers on an after 12 PM bike race on city streets - I do not know if it still runs - used to be every few months in the summer time.

For the broader public, Bike R a v e and Bike P a r t y are the Toronto events that usually happen over summer. Usually starts a bit earlier (9PM?) with various stops in parks and blocking of intersections to keep the group together. obviously there’s zero chance of getting a permit. Fun times!

There’s also some alley cat events that are races.
Is anyone else aware of just how minority the complaints are here? Apple has the data for people that replace sims, it’s going to be far less minority than 3.5mm, and that’s never coming back either.

Do whatever makes you happy, but a lot of this seems like yelling at clouds to me.
It also exports crude[1] and metals (which embody the energy used in smelting).

[1]https://en.wikipedia.org/wiki/Druzhba_pipeline
We can use stronger terms here --- whatever else you think of PGP, the shell-out stdio "api" for PGP is dangerous (GnuPG will release unauthenticated ciphertext to "callers" of that API, with a warning you need to catch). This API was responsible for the Efail bugs --- which were horrible --- a few years ago. Don't ever do this.
I was once in sales for a majors electronic components distributor. All salespeople and sales management were required to spend two weeks in the warehouse for onboarding, and were told that if the warehouse staff didn’t give them a favourable evaluation, they would fail probation and be let go.

We often debated whether this was actually effective overall, or was just a culture-building stunt (like Amazon’s door desks). But there was no question that it helped the sales team quickly build relationships with fulfillment, relationships that could make or break their ability to solve problems for their customers.
And then to switch the eSIM to your other phone/hotspot is super easy right?
It’s more complex than that. OSM’s licence isn’t a direct parallel of one single software licence, but it has an LGPL-ish permissive aspect for making things from the data (“Produced Works”).

OSM data is used a lot for routing (pretty much all bike navigation apart from Google’s uses OSM data) and increasingly for GIS-type analysis.
Israeli hospital begins first study on efficacy of 4th Covid vaccine dose
I used to drive Uber and deliver Uber Eats for something to do in retirement. I don't know why, but it struck me funny that I delivered a bunch of smoothies to the Uber Palo Alto office. They tipped well.
That's why I said "capability". Yes, "god helmet" device may not be really working, but participants were reporting having a feeling (false reading, but a reading nonetheless). I compare it to a broken voltage detector which sometimes show a reading of voltage. That reading suggests there may exist a voltage. Yeah, counterargument could just be a signal of "beware, there is something out there going to kill you" being mistranslated as "there is god out there", but still, "god presence detector" seems to at least exist.
Yes indeed - I thought everyone knew that /s :)

You’ll be amazed how much googling I do when having conversations with friends - I wasn’t born in the West and things like movie references leave me confused af! But I hide it… thank goodness for urban dictionary
I agree that, without copyright, lots of creative works would (and did!) still get created. But there are certainly some creative works that only would get created if copyright law exists. Think of a Pixar-level animated movie or Hollywood-style live action movie, that involve huge teams of people working full time for extended periods.

[Edit: just be clear, people working on side projects on their own and huge multimillion dollar projects are two extremes of a large spectrum. I chose the opposite extreme to make a point but almost everything in the middle also only exists because of copyright.]

Maybe some would still exist to some level through alternative mechanisms e.g. government or charitable funding, or a group effort akin to open source. But I think it's clear that you're talking orders of magnitude less output.

Don't forget copyright also applies to software. It's even more clear that open-source movements work for software! But it's still the case that without copyright there would be some software that wouldn't get written. Certainly, speaking personally, my software economic output would be lower if it weren't my full time job!
>Once you get to radio spectrum transmission, each pair of endpoints competes with every other pair in range, in a strictly limited pool of bandwidth. Adding another terminal takes away capacity from all the others. A multicast stream going to your satellite and then distributed to 100 terminals by multicast burns 100x the fixed available bandwidth as each terminal gets.

Multicast is indeed problematic for wireless networks, even beyond what you describe (e.g. FEC, ACK storming, retransmits, etc). But if the phy layer is using OFDMA or similar, its entirely plausible to dedicate a subcarrier for multicast traffic. This doesn't solve the O(N) terminal problem you describe, but it mitigates the impact for concurrent transmission of unrelated unicast traffic while the multicast delivery is happening.

There's a fairly large academic body of work on this specific topic re: OFDMA multicast. And though I think your note on caching is a necessary component of this (a la Open Connect), I still think there is a role that multicast can play here.
There have been several major breaches of security in recent months, such as the log4j vulnerability, that could have allowed malware to end up being spread to quite a few people. If your computer has been compromised, KeyPass files are among the list of items malware will attempt to send back. There are also secondary attacks which might have resulted in capturing their master passwords without needing to steal a KeyPass or similar file (such as key loggers). Given the scope of recent breaches it seems likely to me that there should be a sudden cluster of users whose passwords were individually compromised.
My Mac Mini (i7 bought in 2020) running Big Sur makes a startup sound.
Because of the Tobacco Master Settlement Agreement in 1996, states get money based on the smoking rate (units sold). When the smoking rate goes down, they get less money. Like it or not, states /pols are incentivized to keep smokers around.

https://en.wikipedia.org/wiki/Tobacco_Master_Settlement_Agre...

>It would require politicians on both sides of the aisle to be actively interested in budgetary policy.

They are much more so at the state level because states can't print money.
Please correct me if I'm wrong but I feel that this is a first step to a complete power grab over telecoms from the phone manufactures.

1. Step one: Force everyone to use eSim

2. Step two: Bundle a internet plan through Apple One or whatever Google offers.

3. Step three: Move further to a world where all our entertainment and access to services goes through two players: Apple and Google.

I'm pretty sure in 10 years telecoms will be the next industry to be completely disrupted by FAANG companies.

Just think of how many services that 10 years ago was prohibitively expensive are now extremely cheap:

1. 10~15 years ago, long distances calls used to cost an arm and a leg.

2. SMS was still paid by message sent (in my country at least)

3. Even local calls was expensive.

I had to pay 10x in my local currency to "not" have what I now pay 1x.
An approach I’ve seen used in the past was to add lines to the video frame and write other sensor data in “extra” lines in the frame before writing to disk. You can then parse the data after the fact and know what the sensor data was for each frame.
Agreed about GC and exceptions, but I wanted to focus on other approaches. Rust and Go are good examples of doing error handling through regular return values. Similarly Rust and C++ do cleanup with destructors, and Go does at least some of it with deferred function calls. There are ways to do these things that are suitable for low-level programming. But doing nothing no longer seems viable to me.

To the extent that Zig's features in these areas (and also generics) make it "not a real C replacement", that's when I question whether a real C replacement is actually what anybody wants.
> "It risks biasing product development in a particular way."

I'd agree that it's biased, but I still think it's valuable. Being intimately familiar with all possible personas would be nice, however I'd hope that Engineers/PMs/Employees will use this as an additional input into their decisions about how to run the business. Just as they already use a combination of metrics, customer interviews, financial impact, and intuition about the future when deciding how to operate.

Perhaps it'd be valuable for employees to do "ride-alongs" with experienced dashers for the additional perspective you mention
That's based on the 1.0 release. Many of us were using rails before 1.0, which is not quite 20 years, but it's close enough.
I worked at a "campus" where we all called in anyway. It wasn't that bad. Arguably better because if the meeting starts to suck you can read HN or play solitaire.
The point of E2EE messengers is to prevent casual mass surveillance and to increase the cost & risk of mass and targeted surveillance. It's about increasing the noise floor of the internet and making everyone more safe as a result. It forces adversaries to use more legal mechanisms to improve your rights. It's about making you expensive to attack, much like afghanistan won the wars against the USSR and the USA by being expensive as fuck to attack while cheap to attack on their side. They're not about secure endpoints, which is a separate issue that can be worked on in parallel.

So yes, you should make sure if your threat model cost benefit says you should:

* You have a secure keyboard mechanism. No third party keyboard apps, used a wired / built in keyboard.

* You use a secure OS and keep up to date. You verify updates are public and not made 'just for you', you turn off auto updates.

* You watch the network behavior of your devices with external proxy devices to see if anything weird is happening, you filter out network interactions you don't like, use a VPN with the proxy device and so on.

The more you use 0days, the more they get noticed and the more likely you are to burn them, so you've just increased the stakes towards surveilling you. Now the minimum standard to make you a person of interest has increased significantly, reducing the probability of it.
It's kind of shocking to me the number of folks I've seen become hardcore vapers who either never smoked or had quit smoking for years (think decade+). At some point do we get to push the societal cost onto the companies selling these products? We had basically killed smoking for an entire generation of humans (at least in the US) once we finally banned smoking in bars and pretty much everywhere indoors, and now we're right back where we started with something that will be even more difficult to be rid of because it doesn't have nearly the obvious secondary annoyances (smelling horrible all the time, being forced outside in bad weather, etc).
Starting directory names with capital letter is not a good idea. While that might look nice, it requires more keypresses when typing it in the terminal. So /apps or /soft would be better than /Programs.

It is convenient in case-insensitive filesystems like those used in Windows or Mac, but not in Linux. By the way it would be better if Linux also switched to case-insensitive filesystem, or even a filesystem where similar looking characters from different alphabets are considered the same. So that A is always A no matter what alphabet is used.

Also I don't like the way they hide classic directories like /bin. Instead, they should just not create these directories; well-written programs should not require their presence.
Yes. I meant physical sim.

Another thing that I just remembered is that my ISP only allowed me 10 activations on the e-sim before having to buy a new one for 50 bucks.
OG is the old gang of people, the original early founders/adopters/users.
Ask HN: Is digital marketing and software development too competitive?
I'm starting a digital marketing and software development company. I've wanted to for awhile, but my main concern has been it seems to be very competitive. Is that true? If so, how would you stand out from the crowd and acquire new customers?
If my operating system makes sound, I immediately look for the way to remove all sound notifications.
Let this be your Last non-selfhosted Pass solution.
For anyone out of the loop, his paper "The Rendering Equation" is very readable.

https://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.63....
I feel like this is where there could be some improvements. It would be quite nice to allow a review process to be setup for some types of edits. Plenty of examples in the market to get inspiration from.
This is the second link to "The PGP Problem" here. I will only post my critique of that anti-PGP rant once:

* https://articles.59.ca/doku.php?id=pgpfan:tpp
As far as I can tell, the package manager handles dependencies, like most other package managers. Packages can declare dependencies on other packages, and the package manager installs each dependency only once globally.
Coming out of academia, I would say the biggest thing I had to internalize was that nobody in the for-profit world cares about your interesting findings, unless those interesting findings result in more money. So, apart from just being able to write to a format, I don't think grant proposal skills are transferable, and in some sense they may hurt you if you forget that the case you're making is not about research, it's about generating profits.

FWIW, I don't think this a bad thing in many cases. I left academia after I realized that our 4-year NSF project to build collaborative software was never intended to actually improve anyone's life, or even to ever be used outside of our very limited study. It didn't have to be good, or useful, or get adopted by any community in order to succeed. The motivations were completely different: it was to write more papers, and get the next grant, and fund the next set of grad students, so they could build something else that would never be used. Grant proposals all the way down.

Yes, basic research is valuable, obviously, my point is just that it's an entirely different, and largely non-transferable worldview from the private sector.
LastPass's statement via HowToGeek: https://www.howtogeek.com/776450/lastpass-says-it-didnt-leak...
Features of a dream programming language
And herein we see the problem of states :-)

But less flippantly: it's no more "might-makes-right" than the original theft/"sale" was, and is arguably less so, given that national museums tend to survive regime changes (usually for nakedly political reasons, such as the incoming regime lashing its legitimacy to the country's heritage).

And on the aesthetic side: all things being equal I, a mostly disinterested Westerner, would rather see artifacts in their regional and cultural contexts than in a dimly lit room in the British Museum.
Fintechs could help 69M people obtain financial interdependence
DDoS Protection for the Metaverse, Game Servers, and More
Hi guys, I'm Viet York from Lectron.com,

I've been a Minecraft server owner since 2012. I created a server called Waffle Minecraft that was super popular back then with 1000 players online concurrently. All early Minecraft servers back then got DDoS'ed heavily. I even kept one blackmail email from a competitor server telling me to shut down my server or else. It was fun, also was the most stressful time in my life as a college kid. I couldn't sleep, I work nighttime, sometimes didn't to work on my community for 2 days in a row, had panic attacks, and I lost 10 pounds. To make matters worse, the DDoS attacks continued to get more sophisticated.

Fast forward a few years, DDoSing is still a big problem in the gaming industry...

As you already know, Distributed denial of service (DDoS) attacks are a common type of cyber attack that can cripple a company's or organization's server and render it useless. DDoS attacks usually come in the form of a network or database flood: an onslaught of requests that overloads the system and causes it to crash.

That's why I created Lectron, mainly because I see a lack of protection out there for the most commonly used game servers and common TCP & UDP based types of applications, such as:
- FiveM
- Minecraft
- SA-MP
- TCP Service
- TeamSpeak 3
- OpenVPN
- Source Engine
- RakNet
- Half Life 2
- DNS Server
- WireGuard
- ARMA 3
- STUN Server
AND MUCH MORE!

Most affordable solutions out there deal solely with web traffic. I strive to bring in solutions to protect other types of applications at affordable price.

The internet is made up of many different TCP/ UDP applications. Web services are not the only ones that need to be fast, secure and reliable, so it is important for Lectron to offer a variety of solutions to satisfy your needs.

The solutions we offer have anycast built in by default, so it doesn't matter where your server is, we always detect global real-time congestion and route traffic across the fastest and most reliable network paths, to keep the connection to your machine persistent.

Lectron Origin Accelerate is already built into your Protect product to make sure routing decisions are informed by real-time network conditions.

You will have two option: PROXY or TUNNEL (both are anycast) with different setup time requirements and complexity. PROXY is super simple to setup, while TUNNEL requires a bit more time.

Please check out my product and let me know your feedbacks!

Thank you,
Viet York
all the speculation in that thread about how the password could have been leaked reminded me of a post earlier this year that drastically changed my view on password managers. (also generated a lot of discussion here)

https://news.ycombinator.com/item?id=27407603
obligatory: I use passwordstore.org by Jason A. Donenfeld and its local, relatively easy to use, works with git, and free. Too niche for hackers to take interest I hope.
Which studies in specific? Can you cite one?

The tobacco industry is making lots of money off of these and can sell them in flavors that were banned in cigarettes a long time ago (opening up the market to kids again).

https://tobaccotactics.org/wiki/e-cigarettes/
They have separate directories for libraries under /Program, so I guess the library gets installed into a separate directory only once.
Brought to you by Brian Eno!

https://en.wikipedia.org/wiki/Brian_Eno#The_Microsoft_Sound
> Some customers have also reported changing their master passwords since they received the login warning, only to receive another alert after the password was changed.

Must be a compromised browser extension at this point.

> To make things even worse, customers who tried disabling and deleting their LastPass accounts after receiving these warnings also report [1, 2] receiving "Something went wrong: A" errors after clicking the "Delete" button.

Is there anything more infuriating than this type of error message?
> - have you reused your LP master password as a password anywhere besides LP.

No. I computer generated this password to use it for this LastPass account only. The password was secure (mixed alpha case + numbers, longer than 12 characters), and stored in an encrypted KeePass file.

> - have you entered your LP master password into anything besides a LP login window. (edit: nvm, ya it went into the other PW manager. Without investigating that, not worth pointing the finger at LP and causing enterprise LP account usage chaos).

I have probably logged into lastpass.com's web ui directly i.e. without using their extension. So a compromised extension (back in 2017 when I last used this account/password) could have sniffed it. Or a malware monitoring my clipboard.

> - Do you enter the LP password into only the browser extension from LP, your phone's LP app, and any other LP-official services when you log into it.

As above, I most probably have used the password while logging into lastpass.com in Chrome with other extensions active.
This is really good. In the meantime my Chinese parents who believe video games are evil and whoever make them are moral monsters will only agree that I try something similar for my son over their dead bodies.
The thread on that post:

https://news.ycombinator.com/item?id=27181576

Obviously consider the source, but: I think that thread is better reading than the article.
BlockbusterDAO Wants to Raise $5M to Crypto Crowdfund Netflix for Web3
As a one off, a person willing to jump through those hoops can also shop around for a doctor willing to go off label etc. When I say minimal utility I mean chances are they die sooner and or suffer significantly more.
Lazarus / Free Pascal - It's easy to understand, fast to compile, handles strings nicely, and matches the way I think pretty well. The component library is modeled on Delphi, which makes very solid use of the object oriented model of programming. It is also multi-platform, you can compile to quite a few targets, including WASM.
Colonial repression and enslavement of a nation is not the same as "gross mismanagement".
IIRC creating muons is not that hard, but the fusion ratio was too small anyway. I still think combining it with some weak containment might work… I guess it doesn't and this is why it's not worked on anymore
Absolutely none, just looking over the shoulders of friends. Happy to hear what you think.
I think libs are installed in /Programs too, and everything is versioned, and all libraries are linked to a central /System/Index/lib directory, which is referenced by ld by default: ( See https://gobolinux.org/at_a_glance.html )

~] ls -l /System/Index/lib
libgtk.so -> /Programs/GTK+/1.2.10/lib/libgtk-1.2.so.0.9.1
libgtk-1.2.so.0 -> /Programs/GTK+/1.2.10/lib/libgtk-1.2.so.0.9.1
libgtk-1.2.so.0.9.1 -> /Programs/GTK+/1.2.10/lib/libgtk-1.2.so.0.9.1

Also:

~] cat /etc/ld.so.conf
/System/Index/lib

I guess it's up to the package manager or application to reference the version of the library at the correct specificity. And then it's up to the package manager to GC libs that aren't referenced anymore.

Personally I think it would have been interesting to version the system index itself, like /System/Index/Current|1.0|myappenv|etc/lib|bin|etc, and each app is chrooted into their own system index by default.
Self hosting sucks for an average user, and terrible for a mobile user. It is possible to have hosted password solution that is secure, so why not use it?

This is basically the same "cloud" vs "on-prem" debate. Cloud won, I think.
It's not. Actually it's almost worse because it tends to hide issues even deeper.

This practice is very similar to when teachers would reward students for good behavior on days the teachers would be evaluated.

Principal looks good to the board/state, teachers look good to the principal, and students look good to the teachers - but yet, we get caught up in looking good and impressing others, that we forget the real issue of children that are still getting left behind.
As a Canadian, I think the Chinese have more interest in me than Russia.
I last changed my master password in 2019, and it gave me the option to revert to previous password. So it's not just a 30 day thing.