skysight-inc/HackerNews huggingface dataset:
> How is SSH possibly unencrypted on the wire?

Not really a practical answer, as your SSH client doesn't (and shouldn't) offer this, but of course the rest of the SSH protocol just relies on a negotiated arbitrary encryption for moving data between client and server which is transparent to it, you can drop in different algorithms (on most PCs today AES will be the best option because it is hardware accelerated, on cheaper or lower power hardware ChaCha20 may be much better). So, it is technically possible to have a NO-OP encryption layer but just a bad idea.

SSHv2 negotiates this stuff up front, before anybody authenticates anywhere. Key Agreement protocols like Diffie-Hellman allow two parties to agree over the network on keys and encrypt all their data even though they don't yet know who the other party is, and in SSH the encryption protocols just have string names like chacha20-poly1305@openssh.com so you could invent useless-empty@example.com and if anybody wants to agree to use that the consequences are on them.
Speaking as someone who has debugged a considerable number of DNS problems, recurring from the root as described in the post is the only dependable way to determine a domain's authoritative servers. I've seen every alternative method (`dig NS $DOMAIN`, `dig SOA $DOMAIN`, `whois $DOMAIN`) give the wrong answer in some cases.
NASA says Webb’s excess fuel likely to extend its lifetime expectations
Big difference is that Uyghurs are not rapists and murderers, and they didn't commit crimes.

What's wrong with prison labor in US? Those criminals committed acts deemed bad for society.

We could either pay for them to stay in a fancy hotel, or make them pay back debt to society.

This is not comparable to imprisoning people based on ethnicity.
> So is the position of Intel that slave labour in concentration camps is an acceptable means of production?

Maybe their position is that they have not established as a fact that there is slave labour in concentration camps in Xinjiang? Have you considered that as an alternative possibility?

From the article:

> The letter now reads that the company prohibits "any human trafficked or involuntary labour such as forced, debt bonded, prison, indentured, or slave labour throughout your extended supply chains."

That automatically covers Xinjiang is there is slave labour there, in additional to all other instances of slave labour, no? That sounds like a better wording than the original.
I love firefox too and I have a different question. Why is the general sentiment negative towards firefox on HN? While other threads are generally anti Google.
Covid: Half of Europe to be infected with Omicron within weeks – WHO
Isn't this precisely what you're describing? YC has never preacher taking VC money as the one true way, but until now, options were pretty limited.

If you join YC now, there's a much bigger likelihood you don't need to touch VC money (excluding YC itself, of course).
Twenty Years of Blogging in the Pipeline
A new design of wind tower for passive ventilation to reduce energy consumption
GP explicitly referenced the drug's Wikipedia page:

> "The emergency use authorization was only narrowly approved (13-10) because of questions regarding efficacy and concerns that molnupiravir's mutagenic effects could create new variants that evade immunity and prolong the COVID-19 pandemic."

The quote above has its own citations in the Wikipedia page posted by GP.
Patent law is dumb.

I hope Google goes nuclear on Sonos with their ridiculously huge patent portfolio just to show everyone just how petty and stupid the patent infringement system is.
Kagi seems to be in closed beta, so I wasn't able to test this claim even on an anecdotal level.
Thats sympathy. Empathy is different from sympathy.

I can be sympathetic without really empathising with someone, and I can have empathy with someone without being sympathetic. Empathy uses more energy.

Ingroups tend to avoid empathy with outgroups because that weakens the separateness between people, and ingroups try to strengthen ingroup sympathy. Pity is a form of sympathy.

Sympathy: "I feel bad for you"

Empathy: "I understand you"

Often an ingroup member will not understand an outgroup member but can sympathize with their troubles or feel pity for them. Sympathy doesn't cost as much as empathy. Empathy challenges one's ingroup cohesion.
Even stating they have control even if they do nothing is more of a risk than I would be willing to take. Two security researcher took control of a vehicle several years back [1][2][3][4] and didn't really think through how they were doing the demo. The vehicle was on a live highway. There were articles that spoke of the trouble the researchers got themselves into but appear to have vanished from the google.

[1] - https://www.wired.com/2015/07/hackers-remotely-kill-jeep-hig...

[2] - https://www.cbc.ca/news/science/hackers-kill-engine-of-movin...

[3] - https://www.reuters.com/article/us-fiat-chrysler-recall/fiat...

[4] - https://nakedsecurity.sophos.com/2019/01/10/supreme-court-re...
This looks really interesting, and you're speaking right to me with things like "infinite canvas" and "work in any direction", it's exactly what I've been looking for (and disappointed with current apps, e.g Miro).

That said, I would never use something like this on a subscription model.
I think part of what's wild about that for me is just imagining the risk analysis that would lead to that kind of thing. Like, obviously not an explosion that's over in seconds, but everyone would be dead anyway. And not a normal fire because then you'd just evacuate as usual and carpool if you can't find your keys.

But there's a class of refinery-specific disasters where I guess you have tens of seconds to get out, where looking for your missing keys could well mean the difference between escaping or now.
Probably on the basis of not expecting a rapid increase in people wanting to become nuclear engineers...
Well, but you're also cutting the cash outflow. From a P&L perspective it doesn't matter if you're paying $20 in cash or in stock.
One Lesson from Recent History
The most recent doctor I asked was 6 months ago. I've been diagnosed with Chrons specifically, so that may be a factor.

Incidentally, my current diet is extremely high in a subset of FODMAPs and has helped dramatically.
Looks like a sports car isn’t a specific design. Compare a Bugatti Veyron with a 911 Turbo. They both have lot’s of rounded edges but somehow they are very easy to tell apart as are every brand of hyper car on the market.

This wasn’t two companies that happened to come up with the same design, this was just blatant copying of pointless aesthetic details, which is illegal.
I have bid fond farewell to (audio and video) cassettes, records, CDs, etc. Just threw out the last few of my actual spinning rust hard drives, too. I love it.
I was disappointed not to see an article about a unicorn of guns, like a Star Trek phaser pistol or some such.
Luckily for search, it is how the vast majority of users use things. Less than 1% of users doing things differently makes the stats a little messier, but still works quite well.
There's an amazingly high number of people not reading this article, even by HN standards.
He linked to a source that contains that claim, it includes several sources for that specific claim.

It's unclear why that is relevant in this thread though.
I see you've switched from “he didn't break anything” to “it's the users' fault for not catching what he broke faster”.

Hint: going from 1.4.0 to 1.4.1 is not a major version bump — https://snyk.io/vuln/npm:colors
Yeah most of the PHP hate came from old school PHP 3 code co-mingled with HTML 2/3 that didn't take advantages of the simple OOP added. PHP 4 took decent steps but couldn't shake that stigmata. PHP 5 and some good MVC frameworks (written in 4 and 5) made great advances and 7/8 and the spinoffs make the language pretty good for any scripting or web job. These days I prefer JVM based languages but if I needed a quick web task with minimal overhead PHP would still be in the top 3 options.

But some old timers (genX) still today bemoan php as if it had no progress made.
A context switch happens when a thread blocks on I/O. An async event loop will context switch when 'await' happens. (Which is, also, usually when it wants to wait for I/O.)

You're assuming that an async event context switch is somehow vastly less costly than an OS context switch, which isn't true in the general case. (And unless you really went out of your way to make it happen then yours is the general case.)
"I often find that there's a tendency to endlessly navigate a streaming service just to find something to watch."

I miss in person product discovery and wayfinding mechanisms, even if I know they themselves are (were?) curated (toy stores, record stores, book stores). I have diligently tried to adapt well to digital discovery, but it hasn't been the same for me. Part of it is haptic, but another part is that digital seems overwhelming. I also get discouraged when I know exactly what I want to find digitally and I'm given myriad other options except the one I want. I look forward to constant evolution in the space and I actually think that AR/VR scenarios can help there.
> members of an elite Italian police squad raided the Naples office of small news website. The previous day it had revealed links between elected politicians and organised groups in an illegal waste dumping racket.

This is so Italy it hurts. A group of journalists investigates a possible collusion between the mafia and politicians, and the police raids the journalists' office instead.
Maybe let's start with the easy stuff then, given that it's genocide.

https://en.wikipedia.org/wiki/Uyghur_genocide
Someone on HN recently did:

https://news.ycombinator.com/item?id=29878971
Sonos thought they just got a sweet revenue stream on a BS patent. Such a mediocre company (Sonos). I'm not saying they are a patent troll company but they aren't too far. As a user with lots of their tech in my house I'm very unimpressed with their offering - this patent defense seems inline with their mediocre tech.

Far from a Google Booster here but just funny to watch their revenue stream go up in flames - probably will impact my sonos experience (less R&D money to spend). Sorry to users that will be impacted - don't worry Google will come out with a volume adjuster in the near term.
Source? That’s very hard to believe.
Which heavily penalizes sites that make information easy to find.

Especially for use cases like reviews where you are looking for multiple opinions.

The hard to navigate site full of waffle, and SEO duckspeak nonsense gets a positive while the site with clear concise information the user can absorb in 2s gets penalized.
checked for a fresh laravel install: 110 packages, 40 of those are development dependencies. Of the 70, only 38 are non (symfony/laravel) dependencies.

The PHP ecosystem tends to use packages-for-interfaces, so that ups the count somewhat.
The enterprise level security I've often noticed is around integration with SAML or LDAP. Both of those do take time and effort and I appreciate charging extra for it. As for RBAC, MFA, etc those should be made at a lower level like RBAC could be at a Teams level. MFA of course should be for everyone.
Most of my projects are fairly simple stack (either plain Javascript or with jQuery, using Firebase as a DB if necessary), but I tend to build relatively complex WebApps with it (e.g. a collaborative map editor, audio editor, motion graphics editor, animated mockup maker...).

The simplest product I've ever built in terms of code (fewest lines of code, no dependencies besides jQuery) is Omni, which is an extension that adds an omnisearch to your browser to manage tabs, bookmarks, history, perform multiple actions, add shortcuts, commands...

It's basically just an array of available actions with a simple UI to search through them and select them. I love it because it's incredibly simple to add new actions, I've also open sourced it so anyone can easily contribute: https://github.com/alyssaxuu/omni

I still don't know if it's going to do well or not, I am going to publicly launch it tomorrow, hopefully people find it useful despite its simplicity :P
>slave labour in concentration camps

Not an english speaker, so is Is "slave" correctly used here or is more like a "metaphor"?, In my mind a slave is someone you own, you can sell or kill.
Someone you keep in prison is called different and people kept in prison for political reasons have also different label, religions/race imprisonment might also have a different label.
If you don't like nasty surprises, I recommend that you use Firefox ESR instead:

https://www.mozilla.org/en-US/firefox/enterprise/

(In the same vein, if you use Windows, I recommend Windows LTSC)
Mate I'm not sure how to make this any clearer to you. Literally none of the examples you gave are in any way comparable to injecting a completely novel medical intervention both in mechanism and function for which zero long term data exists. You're doing the equivalent asking me to believe there's a population of unicorns underground plotting to wipe out humanity, so we should plan to combat them by building up specific unicorn destroying weapons, with no evidence they exist in the first place. "It's safe trust me" Sorry but no.

All your examples have comparable or well studied technologies and preexisting science behind them. None of them have zero comparable long term data. HDTVs and VR are built on well understood technology, CBD oil, Impossible Burgers, Chocolate bars are built on well understood food chemistries. None of them come even close to the risks imparted by direct health intervention that has failed animal trials repeatedly.

>You had no hypothesis, no argument and designed no experiment.

I've literally explicitly stated it several times. If you choose to ignore it, that's a personal problem.

>The moment you convince everyone that it’s smarter to wait for long-term data, you lose the ability to obtain that very data you want

lol no you don't, you just do actual science and studies/trials while not fear mongering the population into authoritarian complacency over unstudied medical interventions that have not mitigated excess deaths at all.
InteliJ's code analysis and refactoring capabilities in its most-supported languages (Java and Kotlin) are miles beyond anything else. There's basically no comparison.
Quit using The Terminator as an example of AI gone wrong
He meant "like this" in terms of a reactor of a similar design and scale. Because that particular design turns out to be too expensive.
That's more or less what Microsoft did with Apple for I believe the same basic reason. They invested 150 million in 1997 to keep Apple afloat. Now Apple is worth 3 trillion. It can be turned around.
*with COVID
average number of co-morbidities: 4.5
what really killed them?
The Hut Where the Internet Began (2013)
I hope too.
Full tweet[0] text:

> "One lesson from recent history is that once Russians are in your house, it's sometimes very difficult to get them to leave." - @SecBlinken

> [img]

[0] https://twitter.com/USEmbassyKyiv/status/1480898393916514306

[img] https://pbs.twimg.com/media/FI01KMGX0AgShTF?format=jpg&name=...
Pretty small chance she answers to a female name, I imagine.
Nobody is talking about the ‘middle’, or even lies.

Most people are at least partly wrong or mistaken about most things, but there are usually some things they are right about.

There is value to be gained in finding out what another person is right about, even if they are wrong overall or you disagree with them.
I was. Thanks for the clarification.
> I’m also skeptical that all of Google’s enormous investment in ML and staffing is completely powerless to identify bad actors with atypical usage patterns.

Isn't that exactly what people are complaining about here though? At least part o the problem with search results is that google seems powerless to recognize and remove useless bad actors (stack overflow copies, etc.) from their index.
If I was in prison, I would rather work. What's the point of sitting around and decaying?

I bet if you gave most prisoners a choice, they would rather work too.
Have fun with that. I'm sure Pfizer has your best interests at heart.
This is never about Pluto of which much is understood.

It's always about the word 'planet'. That discussion is not useful nor scientifically significant.

Nothing to see here. Move on.
Every time a Firefox thread pops up on HN, I read through it hoping to learn the source of the persistent vitriol, which often comes off as entitled whining.

I once wrote a little app for myself and (what the heck) decided to release it under the GPL in case it might be of some small use to someone else. The emails I received were split between a very small fraction with useful feedback (and even a couple patches), a group of people who merely wanted to thank me, and the rest were various levels of upset and demanding. What an eye-opener that was.

What am I missing? People being defensive because they use some other browser? I'm truly mystified.
I'd love to see where this goes! I don't have an immediate use case since my current projects aren't complex enough to warrant an OS. Would love to have that in the toolkit.
If you ever need employment or salary about anything in the United States, the Bureau of Labor Statistics has you covered. For your question, I would start here:

https://www.bls.gov/ooh/computer-and-information-technology/...
Show HN: Threeboard – a full-size mechanical USB keyboard with only three keys
I've only been rude to the asshole that came out of the gate swinging with accusations of being a conspiracy theorist.
I wonder where the bigger pressure is coming from to make more repairable devices. Is it because that's what it's starting to seem like the market wants based on competition? Or is it because they are trying to head off any regulations that might come if they don't show that they are making repairable devices?
Alcohol and I vape a lot.
I would say all of us, but you do you and take that pay cut if you want...weirdo
It’s economic warfare against a destabilized region that only recently quelled constant terrorism.

The US casts a blanket assumption that ALL products from the region are produced by slave labor unless proven otherwise. That’s backwards.

And meanwhile US government and corporations have no problem buying products produced by US prison slave labor, or overseas child labor.
TLDR: Because they can.

SSO is the one feature a SaaS company can use to force people that can afford it up to higher tiers when their usage remains low but the the value to the customer is high enough to justify the tier increase because of a mandated SSO requirement etc.
> If you choose to download my code and include it in your project and it doesn't do what you expect, that is on you.

Completely agree.

But the key concept that keep avoing is malicious intent.

Let's make an analogy in a completely different topic: Are (D)DoS attacks wrong? do people owe us not to (D)Dos our machines?

On one hand we connected our machines to the internet and declared ourself as ready to accept incoming traffic; on the other hand spinning up a bot army to render said machines unsusable is not nice.

Is it correct to say that you should have some kind of (D)DoS pretection on your services? yes. Is it also correct to say that people should refrain from crapping on other people stuff? also yes.

Getting back on topic; there is possibly a solid case to argue that this was not criminal (as no unauthorized "access" happened) but as much as open source volunteers should be more appreciated the "don't intentionally damage stuff with the SOLE intent of damaging stuff" is something expected of any human regardless of their social position.
Just in case you didn't see the uodate to my original comment, I corrected it because it was wrong.

The FSF has a much better analysis of the EUPL here: https://www.gnu.org/licenses/license-list.en.html#EUPL-1.2
"Incubated in Harvard Innovation Lab, the Experfy platform enables the pipelining and hiring of external talent at unprecedented speed, while career pathing, upskilling, and mentorship of your internal talent. License our self-service platform or hire SME-vetted talent from our TalentClouds."

What made you sign up?
> The biggest problem with Covid is that it spreads -before- people have symptoms. Flu spreads when and after, but not before. An Omicron "improved" to kill people in a few days would still travel perfectly.

If that happens then society as a whole would react to it more strongly and it would thus spread slower. That's a natural selective force.
> There's not even a decision to be made.

Look at e.g. Google. Yes, they've had some trouble sticking to their decision over the years, but they have so far. Corporations staying out do exist.
How does that compare to executives in similar roles at similarly-sized software companies?
Yes I would say it is used correctly here, with the definition you mentioned. And your english is good for not being an english speaker!
But that's literally all we would be doing... imagining... You could accomplish exactly the same thing by leaving the lens cap on a camera here on earth. It would see just as much of the interesting parts of Webb as a camera 20m beyond Webb's orbit looking back at it.
That would contradict "even if she wanted to, France couldn't". If she wanted to, France could make nuclear engineering a highly-paid profession with strong job security. It would just cost more money.
Moxie Marlinspike leaves encrypted-messaging app Signal
I would also like the option of using whatever transportation you like to get around. But my observation has been that the roads are unfortunately not for all in Boston and we need to make a choice. Boston is a great pedestrian city, so I would focus on public transit and prioritize cars over bicycles, it worked better that way in the recent past.

The public transit buses have been highly impacted by the bike lanes. By reducing the main roads to one lane because of the bike lanes has created more traffic so it's harder for the busses. The solution to that was to create lanes that only busses can travel, in certain parts of the road, which in turn has created even more traffic and not really improved things. I applaud them for trying, but it really doesn't look like it working from a quality of life stand point.

I think your right how it's become a part of the culture war.
> "fixed the extension API"

What does that constitute in your opinion?

Because if it's "go back to XUL", that's:

1. never going to happen,

2. would invalidate A LOT of work that's been done to make Firefox more performant and more secure and reduced technical debt (IIRC XUL leeched into FF internals all over the place, making pretty much any sort of update to the browser into a breaking change for extensions)
I too hope the 1.82T dollar company doesn't have to pay the company that's roughly 500x smaller than it is.
All old is new again, in different context. Windows 3.X programming was famously painful because it didn't have per-emptive processes. Each program had to yield the control. Windows API was just cooperative async messaging.

If you want to scale massively with async, do it Erlang way.
Any chance we can have bookmarks back on a new tab page? Not 'recent' bookmarks. Regular, old, cultivated bookmarks.
> I'm not sure I can believe that anyone believes that, much less agree with it.

You can believe in whatever you like, it doesn't change the reality and facts.

Its not my opinion, china is a capitalist country run by communist (with Xi totalitarian) government.

The companies adhere to market laws/regulations and operate like any other capitalist western corporations.

Of note is the fact that as corporation gets to certain size their board must hire certain number of party official who will oversee the business operations.

Those people ensure the company is heading in the broad direction set by the party. If they dont, party will bring out the knives and it doesnt matter if you are jack ma or not.