skysight-inc/HackerNews huggingface dataset:
The premise of certificate transparency is that the CAs themselves (generally) submit certificates to be logged. CAs generate pre-certificates, which are signed by CT logs, generating SCTs, which accompany the certificate in the TLS handshake. The SCT is a promise from a CT log (not the CA) that the cert has been recorded; the CT logs themselves are cryptographically append-only. The system is designed not to simply trust the CA to log.

You can't replicate that clientside by monitoring domains. A malicious authority server can feed different data selectively.

Could you replicate this system in the DNS? Well, it'd be impossible to do it with DNSSEC writ large (because there's no way to deliver SCTs to DNS clients), but you could do it with extensions (that don't exist) to DANE itself, and tie it into the TLS protocol. But that system would require the cooperation of all the TLD operators, and they have no incentive to comply --- just like the commercial CAs didn't, until Mozilla threatened to remove them from the root certificate program unless they did. But Mozilla can't threaten to remove .COM from the DNS.

So, no, the situations aren't comparable, even if you stipulate that DANE advocates could theoretically design something.

I'm hesitant to answer the second question you pose at length, because you have some misconceptions about how CT works, and so we're not on the same page about the level of transparency that exists today.
What do you even call it when the biggest web scraper of the world prohibits web scraping in its terms of service?
Connect digital talent and work in a unique way at OpenUnited. Currently in beta
Can anyone explain clearly and objectively and succinctly what an NFT is, for an audience who knows how the internet works, what a hash function is and what properties they have, and how bitcoin works.
If I remember right the GC lives on a thread, even if the program runs serially.
Sustainable Blockchain: Estimating the Carbon Footprint of Algorand’s Pure Proof-of-Stake

https://www.algorand.com/resources/blog/sustainable-blockcha...
In this day and age with phishing and other impersonation sites running rampant, I wish large corporations would leverage their root domain appropriately and use subdomains. Why isn't this theworknumber.equifax.com to provide legitimacy? Why can't I use my equifax login to check it? And why does it redirect to yet another domain: https://secure.theworknumber.talx.com?
"literally all" in this context was hyperbole, which was then quantified two lines lower down at 81.25%. I think most folks would agree that is substantially all, or hyperbolically "literally all." In the "literally got your back bro" way. [1]

[1] https://theoatmeal.com/comics/literally
But that's just it.. One would have to stand up a server that hosted the 200gb, so their Iphone users could consume the data. Or they'd go through a central server.
it seems neovim doesn't support `-y`.
That's an awful comparison, 5 people were killed at the capitol riot and caused tens of millions of dollars in damages... This was a nothing-burger of a story until the manufactured outrage machine spun up & the PM chimed in.
So ultimately this is the result of someone not actually reading through the changelog notes from over a year+ of iteration? I guess you can be annoyed with a third-party's abuse of SemVer, but practically everybody abuses those conventions and any developer who is versed in dependency management should have known better than to not read over changelogs. Likewise, any reviewer should have caught this.
Access through archive.today: https://archive.fo/O0K7i

For many sites that are paywalled: https://archive.ph/

I have it bookmarked. I just cut and paste the paywalled URL. Works on about 60% of paywalled pages.
I thankfully have never really had issues falling asleep. And I almost always get 4 hours of sleep before waking these days. But that's when my mind starts wondering if I'll get back to sleep. I've heard the advice to get up if you don't fall back asleep but from the times I've tried I don't get a second sleep. Instead if I continue to lay in bed I have a descent chance of getting some additional light sleep. I haven't tried instrumental music but my concern is that I'll start tracking the songs having been played and not being any closer to sleep, that's at least what I end up doing with similar solutions.
Case in point. I think comments like this are going to dominate online discussions much more than they already do over the next few years.
Yeah, I had the same itchy thought when I wrote this; I decided to keep it simple.
Its almost entirely done on crypto twitter. You follow the builders and they talk about this stuff. Tweet threads are terrible but that is where the good information is.

Twitter is frustrating in that the good content is buried and if you follow the wrong people they just spam your feed.

Its a constant battle to keep the signal to noise ratio of your feed high and the right people to follow constantly changes.
We have something!

We have a ton of money in unregulated markets sloshing around reinventing every financial scam known to man.

That's got to be something!
I honest-to-God don't know how you live, and what it is you get away from in Cuba.

I've been to NYC a couple of times.

Things I got there (in more than one trip):

a terrible pretzel from a street vendor (cold and *wet*)
a *fantastic* cup of coffee at a cafe where I was meeting someone
a bowl of lentil soup (surprisingly very cheap)
some chicken lo mein, about the same price and exactly the same generic dish as anywhere I've been in the US, except perfectly executed, really fresh and hot
a chicken souvlaki pita, one of the best, although the place (in Queens) smelled kinda like urine

As you can see, everything that was memorable consumer-wise was cheap food. I didn't have any expensive meals or buy any "consumer goods" that I recall.
>Except that OpenSea is successful.

thanks to VC money looking to centralize the web3 economy.
> This is why people fucking hate congress.

Wholeheartedly agree.

And to go one step further: how many percent Americans would have voted yes to something like this if they had been asked directly?

Representative democracy is utterly broken.
> I was a webmaster back in the days when one could debate cern vs ncsa and which provided a better server and for a while, I ran my own web servers at home on some static IPs from Speakeasy...

I fired up my first httpd when the current chair of UWashington CS&E was pissed off about a NYT article on how physicists were building this new-fangled computer network thing. So we have that in common ....

> The simple servers are still there. Grab a web server and put static files for it to be served - but people don't want that. They want a fully functional web application with persisted data with a maximum outage window less than the duration of a good night's sleep.

That's actually what most people who've ended up posting pictures on Instagram and blogging on Wordpress want. They need something one or maybe two steps up from a static site. Essentially, something like Squarespace but self-hosted.

> And then you've got to find some way to keep that device patched

Most linux distros can do a perfectly reasonable job of this already.

> For me, even imagining the work that I'd need to do to my home network to set up that

That reflects the incredibly limited work that has gone into making self-run servers easy, stable and correct over the last 25+ years.

> a quote from Ansel Adams about the darkroom and that it was a necessity for photography - but he'd rather be out there taking photographs than in the room making the print.

The difference is that we've have the capability to change the analogy stand-in for the dark room so that you have to spend almost no time on it at all. We haven't done it, because we took the path towards server-hosting companies and left the software to be as technical and fussy as almost anything out there. Adams would likely have been entirely fine with spending 15-30 mins a month in his darkroom.

> imagine a device on the network that is accepting all incoming traffic and talking to anyone who listens.

What web server does this? If such a machine was the only solution, then I'd agree with you - this would be a catastrophic issue. But we really don't use such systems anywhere and certainly would not do so for a toy-level home appliance.

> Spin up that server as an instance on AWS instead and then the worst that will happen is you'll rack up a large bill when it's compromised and someone runs a crypto miner on it.

Now that's a fair point.
> The human race did have some luck with COVID-19: it could have been more deadly, and it responded well to rapidly-developed vaccines (at least at first). So it serves as good training. There is no reason to believe that these lessons definitely won't apply to the next virus, so "planning to fight the last war again" is actually a good idea when it comes to this kind of war.

tbh that is a good point. Sure it was a shit show...but imagine the shit show if it was even just 10x deadlier. It was definitely a good 'practice run', for dealing w/ emergencies and it's not like we don't have a huge docket of emergencies coming up in our future w/ climate change and future pandemics...

The way we did launch the vaccines is def. admirable and positive, society's acceptance is just frustrating ... it's in the way /r/conspiracy is overrun by people who end up in /r/hermancainawards that has me flabbergasted... but I guess if idiots take themselves out of the game by second-guessing true science...at least a comet isn't headed to earth and collective stupidity will annihilate us all, just themselves and their own personal circles.
Ugh, this again. Animal models are excellent predictors of physiological responses in humans if they are used correctly. If you don't think this one is being used correctly, please tell us why.

The "pple aren't rats" line is a knee-jerk response that adds nothing of value, save for revealing the ignorance of the person who utters it.
The should have read over changelogs. What production system just accepts changes blindly without internalizing them?
When you've just had the government mandate that everyone in the country has to buy at least the lowest tier of your product, why would you take any losses at the top when people are forced to pay just about any price at the bottom?
I would say that I sleep very well. Normally 8-9 hours per night without waking up.

The biggest impacts for me are, not being stressed, lifting weights and having a regular sleep schedule.

Lifting weights helps significantly with the stress and the regular sleep schedule is something I’ve always done.
See how this could have just as well been done in Rust: https://tonyarcieri.com/would-rust-have-prevented-heartbleed...

Mind you, I am of the firm belief that C is at fault for many of the security vulnerabilities, but this is not one of them.
Bitdefender has a good false positive rate though according to av comparatives, in contrast to norton which has the most

https://www.av-comparatives.org/tests/real-world-protection-...
They don’t need to keep anything. The card details will be stored with Stripe, if they don’t actively tell Stripe to delete those details then they’ll be able to create a new subscription and charge the card.

For the vast majority of cases all you need to charge a card is the 16 digit number on the front and an expiry date. Pretty much everything else is optional (CVV, Name, Address etc), but opens you up to stupid levels of liability in the disputes process if you didn’t include it in the original payment request.
I doubt it. Definitely 2-3 standard deviations. But that leaves something like 0.05% of the population.
This is a scoping rule, not typing. Scoping is a mechanism of symbol resolution, i.e. what do you mean by `foo` at line N. Is it a local, an argument, a global, or addresses a symbol defined in an enclosing scope? Most languages use explicit local definitions, searching implicit ones in outer scopes bottom-up, ending at the global scope. Python was the first popular non-basic language which made implicit assignments to be local and shadowing and function-scoped:

global x = 1
def setx():
if True:
x = 2 # completely different x
print x # prints 2, visible outside of `if`
setx()
print x # prints 1

This led to a funny keyword 'nonlocal', because you can't simply ignore scoping and pretend that you're BASIC in any serious program.

(To my opinion, python had a good start, but lost in the woods for no clear reason. It's a movie mutant of a language, which tried to appeal to non-programmers and somehow succeed, and then realized that non-programmers eventually become ones, and it's not hard. Now it's too late to fix this mess. End of opinion.)
> Representative democracy is utterly broken.

It's the worst form of government, except all the others that have ever been tried.

You are right on one count, though, there are a lot of broken aspects to this particular flavor of representative democracy. It's the sort of thing that happens when you keep version 1 running in production for 250 years, with limited ability to patch it.
The trend toward passing one 3000 page bill a year that no one knows what it contains isn't awesome.
It's funny how true that is. Every day I write SQL I'm grateful that I'm on a relational database and not on some hot new nosql system that is both over and underkill for the work I do.
Once again I was hoping for a discussion of IPFS, DAT and Hyper. I've written post of an implementation for HyperSwarm and am impressed by the possibilities for decentralization. Does anyone know of a similar article for web3 that excludes the blockchain?
This is trivially solved by including a hash of the object in the ownership certificate.
Downwind at least :)
the data has no value. anyone can right click copy an image. the value is that you own the blockchain address that points to a url. picture of a house = no value. deed to the house = value. even if the house is destroyed (data changed), the deed still has some kind of value
Fun fact, all of the contracts in the UK before 1925 was based on sidereal lunar month at exactly 28 days or 48 weeks a year.

Another fun fact, after 300 years the actual difference between synodic lunar calendar for Hijri and synodic solar calendar is 9 years or approximately 11 days per year[1]. This time difference in years is recorded in the Quran (Chapter 18 Surah Al-Kahfi or The Cave) regarding the story of the seven sleepers in the cave of how long they have slept. Strangely the Quran provided exactly how long they have slept but not precisely the number of the sleepers and mentioned that their exact number only known to God.

Yet another fun fact is that the story is not revealed in any holy books (Abrahamic religions or not) except in the Quran. According to the Quranic tradition it was the answer to the questions suggested by the Jews of Madinah (Yathrib at the time) to their Meccan allies in order to test the veracity of the Muhammad prophethood.

[1]https://sciencing.com/difference-between-solar-lunar-years-8...
same reason people are moving to aws, and people which used to use aws instances are moving to serverless.

Leave infrastructure work for other people.
What was the rationale for adding yet more complexity for us filling taxes...
hey thanks! If I can just focus enough to launch something this year it'll be a good year, if I can get a few paying customers or donors (if FOSS).

Working on a SaaS/Dashboard/UI gen tool for laravel, stuck on some things I want to do w/ it but might launch it before it's fully there to get feedback and maybe some help.
Why is paperwork optimization an issue for you? Tax cheats literally are stealing from the government, which increases the debt or taxes the rest of us have to pay. The only issue I have is that the IRS cannot send me a draft tax return I can accept or reject based on all the data they collect.
Do. Not. Break. Userspace.
...and I look forward to reading the apologia and propaganda from their supporters here on Hacker News.
2x sounds like not a lot?
The word "ideogram" has fallen out of fashion because it's a very poor description of Chinese characters. A Chinese character doesn't describe an idea: it describes a concrete word, with a definite pronunciation. It's just that the relation between the shape of the character and its sound is much more obscure than most scripts.

An example of an actual ideogram is the exit sign (you know, a green man running out of a door) - it conveys the idea without having a canonical associated word.
Amazing! That must have been very interesting as the show did a good job leading one to think it was a dead end.
This $600 threshold corresponds to the point where a business would have to issue a 1099 to a contractor. It makes sense to have this sort of symmetry - is there a reason you think paying using an app should have different reporting thresholds than using other payment options?
> It does not apply if a person is using the service to send someone a gift or pay someone back for buying a dinner. According to some payment providers, they will be asking for more information about transactions to see which category the transactions fall into.

Reading just the title, you might assume this means personal payments too.
I prefer python as well. It has some built in caching that makes DP problems trivial at times.
> After 2 decades and billions of investment in web services, it's not realistic to expect a generic "home server" to serve all possible use cases. Those that work best are usually based on an open protocol (e.g. WebDAV, SSH/SCP, SMB).

Surely HTTP is the common, open protocol here? Other than email, at least. Is anyone using SMB-from-the-cloud for network file systems? Are they serious? :)
This only applies to business transactions so just continue doing what everyone does right now which is mark your purchases as personal with an innocuous comment like “taco Tuesday” or for larger purchases “sorry I dropped your laptop.”

Like I’m not the IRS, if some small artist on TikTok wants to commit tax fraud by not reporting my purchases or charging sales tax that’s on them. I’m not gonna narc.
Yeah and I think the point here is that the cognitive overload is unnecessary.

Most people don't want to build their own car but most people would rather own their own car instead of rent one every time they need to go somewhere. In the server world, the options are to build or rent, there's no real option to just buy one that works already. Even having to set your rear view mirrors and seat position is worthwhile, even having to check tire pressure periodically is worthwhile, to continue the car analogy. If we could buy a box that we plug into the wall, and have simple minimal maintenance and setup UX, like a car, or even like a desktop or mobile device, is not impossible. But it doesn't really exist.
This is a really good and well=researched article. I think it highlights a lot of current problems with the existing web3 ecosystem. A few thoughts after reading it:

- For NFTs in particular, I agree that the ecosystem is way too centered around OpenSea. But things also seem to be generally moving in the right direction here too. I've seen a lot of new exchanges pop up recently, some of which put more of an emphasis on decentralization (such as zora [1]). There are also some new standards on the royalty front [2]. Exchanges may or may not pay attention to it, but it's at least a start.

- The ecosystem's current centralization around Infura and Alchemy is also concerning. But as with the other issues, I think there's a definite path towards improvement. In the meantime, choosing an Ethereum node service feels kind of like choosing an ISP. But at least I'm not bound to a single service by physical architecture.

- In the absence of any improvements to Ethereum's scalability, I don't think it has much of a future. Sure, you can do some interesting things on it today, but high gas prices and low tx throughput make it impractical for many applications and most internet users. That said, there seems to be a lot of resources being thrown at various scalability solutions. Whether or not we see them in the near future is one story, but there's at least a viable roadmap, which makes me optimistic. And I think a lot of the centralization issues are a direct result of the scalability issues. So as the latter improves, I'd expect the former to improve as well.

- I disagree with the analysis that OpenSea would be much better as a centralized service. Part of what makes it valuable is that it can (fairly easily, but no seamlessly) integrate with other software (contracts) deployed to a global public network. I'd imagine it would be very difficult for OpenSea to get off the ground if they had to build their own general purpose contract VM that thousands of people would be willing to build on top of. On top of that, it would be a lot harder to tell a convincing story about what happens to peoples NFTs if they go out of business. However, if scalability doesn't improve, I agree that OpenSea and Coinbase will likely move in an increasingly centralized direction until most of the web3 components are stripped out.

- I definitely agree that people (myself included) don't want to run their own servers, but I wonder if Ethereum's Proof of Stake will change things. Supposedly I can run a validator on a raspberry pi. So if there's enough of a financial incentive to keep one running, I may do so.

[1] https://zora.co/
[2] https://eips.ethereum.org/EIPS/eip-2981
Being too high is not the same as being poisoned.

I wonder how Canada defines 'cannabis poisoning' since any child would pass out long before reaching a dosage that could result in injury or death.
No you can't - the social graph is private.
I should have thought to search the source... thanks!
This doesn’t affect personal taxes.
Maybe I'm just misunderstanding something then? I'm not trying to be dismissive or act like I think I have some special intuition here. It really does just seem straightforward.

Imagine the problem this way: The host of a game show presents you with 100 doors, behind one of which is a prize. You pick one, and you know that your odds of having chosen the correct door are 1 in 100. The host, who knows where the prize is, then opens 98 other empty doors, leaving one. You know that the odds were 99 in 100 that the prize was behind one of those other doors, and the host just eliminated 98 of them.

...what am I missing here?
The concern is that since these companies are iterating faster than the protocol and providing their own API services that apps/products built on these platforms will not in fact be portable, and in practice will suffer from the same lock-in and network effects as web2.
Oh ok, I thought you meant if you were using serdapi as a customer.
I'd agree that running a server is easy.
I built one for my company once. It ran on a standard PC (early 2000's).
But for some reason it never worked from my house. (Rogers ISP in Canada)
It took me hours and hours to find out my ISP didn't allow me to run a server. BellCanada ISP did, so the server worked on my co-workers system perfectly.
To be allowed to run the server I would have had to pay an extra 200$ a month, and be classed a business address.
It's not just that the tech is hard, the ISP's don't want it. So they gate keep.
> you think it will happen again? Why?

Because we have infinite time available to wait. Of course it's not a 100% logical argument, this sort of thing usually can't be, but to me it's more convincing than just decreeing things like religious texts do.
That value increase is theoretical, not cash in the bank.

People sometimes need cash in the bank.

Sometimes theoretical is fine.

And since it takes awhile for a buyer to turn the theoretical value into cash (and risk, and work), the theoretical value is also going to be lower than you might think.