skysight-inc/HackerNews huggingface dataset:
Fastmail also supports subdomain addressing for your own domains so that if your email is user123@yourdomain.tld you can use whatever@user123.yourdomain.tld rather than user123+whatever@yourdomain.tld and it will be delivered to your mailbox. This is great because:

1. You can create a new alias spam@yourdomain.tld and sign up for services with whatever@spam.yourdomain.tld and it’s all centralized in the same inbox.

2. I’ve found some websites that don’t allow ‘+’ in their email checker/parser. Also since plus addressing is such a common pattern, when sites sell your email to marketers, they probably strip the ‘+whatever’ part anyway so you’ll never know who’s selling your info.

3. They make it really easy in the web UI to reply to emails sent to whatever@user123.yourdomain.tld from the same email address (whatever@user123.yourdomain.tld) vs. for example if you use wildcard addressing. I’ve found this helpful for the few times when an automated email system or customer support person requires you to reply from the correct email for “authentication”.
Not necessarily. Let's say you want to build aggressively to $1B revenues with a $1B annual run rate. Let's further say you pretty much keep expenses and revenue directly in line, so you don't lose money but you don't gain either while building. So, your cash reserves remain the same. As your revenue grows, the cushion you have to deal with a market downturn or seize unexpected opportunities declines. Having a cash cushion up front solves this problem.

I don't have any special insight into 1Password's strategy. But I run a company that is essentially bootstrapped and what I described is exactly how we think of cash reserves. In the bootstrapped case, there's a basic math problem that to maintain a constant runway while growing rapidly you must be cash flow positive by an increasing percentage as time goes on. Perhaps 1Password is just looking to protect a long runway that will get them to IPO.
One need merely do a web search for “parallel construction”, Joe Naccio, etc to see how well such a law stands up in face of a representatlve of your regulator demanding that you breach it.

The same applies to bank policies and privacy when it comes to doing business with certain industries.

BTW I’m pro government and pro regulation so my statements are not some sort of libertarian rant. I simply recognize that complexities and misbehavior do exist such systems.
Thanks for your question! I began writing a technical explanation of the art here: https://notes.spacefiller.space/living-wall/

It's a very early draft, but hopefully provides a glimpse into the techniques I use.

(tl;dr: it's way more low-tech than ML generated art.)
> I say no, [photo IDs] would not solve it. (...) How would ever more restriction, requirement and verification, have helped here?

This almost starts to sound like an Onion article: "No way this can possibly work," Americans saying about yet another system implemented by virtually every nation in the Western World(TM).

The whole point of a national photo ID system is that it's the government's responsibility to provide its every citizen a functional ID. Which has its shortcomings, but it's miles better than everyone implementing their own ID system anyway in incompatible ways and then all citizens trying to figure out which one to use where.

There's a strong parallel with a national healthcare system, which is also objected by a lot of Americans on the ground that the mythical government will never get it right.
> the cynic in me can't help but think [...] the supply chain of tests [...] is being used as a means of controlling the current number of "cases" reported.

Check the dashboard for your county to see if the PERCENT of tests coming back positive has increased. Where I live the % positive rate spiked to 20%, twice has high as the last surge.
You can't mount even a fuse filesystem without root privileges (or an equivalent narrow capability). Mount is a privileged operation in linux, and it has to be for the reasons I've outlined.

In plan9 mount is not a privileged operation. Anyone can do it at any time for any reason. It does not impact or interact with the security of the system (except that you can implicitly remove access to things by unmounting them).
For sure. It's not trivial but I also wouldn't say it's difficult either, maybe more of a moderate difficulty? The policy file format is straight forward, as are the necessary TXT and CNAME records.

In my case, I use Cloudflare for my domain so I set up a Cloudflare Pages project to generate and host the policy file at the mta-sts subdomain which is nice because I don't have to worry about hosting or SSL/TLS.

As long as your provider supports MTA-STS, you're only on the hook for setting up the records and hosting the policy file.
Google has been working on another OS, Fuchsia [1], for 6 years. That may be where the system developers went.

[1]: https://fuchsia.dev
Hotcaml: An OCaml interpreter with watching and reloading
So, what I did for a similar use case:

-Buy domain from name cheap

-Setup email forwarding to my gmail account with namecheap

-Setup gmail to optionally send as dtparr@domain.name (I forget the steps, but I think it's under settings -> accounts)

So although the email comes to/from my custom domain, gmail is the real sender so I've not had any trouble with delivery (that I've noticed, at least)
I am currently making >$1,000 per month with sponsorships for my twice-weekly newsletter https://www.workspaces.xyz/

Workspaces brings you inside the workspaces of entrepreneurs, designers, developers, etc.

Currently a mix of inbound and outbound work to gather the sponsors for each edition.
This is the first I've heard of this as well. I went to admin.google.com and verified that this does impact me. Glad I check HN I guess??
That sucks, I'm sorry to hear about that. For future reference, the best way to get a politician's attention is to get on FOX News and talk shit about their pet program. It's like how people post on HN when they can't get support from FAANG.
I really wish it was, but no. It's a "grassroots" campaign, supported by the UK government, using statistics from the US. It's really pretty unbelievable
Here's what I use, in brief. It's in my daily journal text file w/ Markdown formatting. The journal files are generated via cron job.

For day-scope items I use a master to-do list & daily schedule. The goal of the to-do list is to arrive at a schedule (previously the two were less related in terms of which arrived at which).

Example from today:

- META Schedule +sked
- 910a
- x Coffee
- x PROJ Maint.
- x Rank programming languages
- 12p
- Intervals of work design
- META Points Tally - Use scaling
-
- [V-/.] Develop, Progress, Organize, Check-off (-1 pt per)
-
- [F-/.] Check Universe Levels (-0.5 pt per)
- Vnt - like/dislike
- Prmt - can/cannot
-
- [T-/.] High-Executive, Low-Contingency (+2 pts per)
- [T-/_] [xsc] PROJ A
- [T-/_] [_sc] Work CRP review
- [T-/_] [_sc] Invoicing Review
- [T-/_] [_sc] Reset settings for X

There are a lot of optional features here like playing golf to avoid productivity burnout (points tally, unused in today's example), determining whether a task is yet on the schedule (xsc) and the type of task (V/F/T), which is determined by a system I designed for balanced productivity [0].

For longer time scope items (maybe what you're referring to by "larger" tasks?) I also integrate a milestone communications, calendar & deadline system which naturally breaks things down into more manageable portions.

This system has changed a lot over the years, and will continue changing...good luck with whatever you decide to do.

0. https://www.friendlyskies.net/intj/the-balance-first-approac...
I have a some what similar stint. Worked at a start that got acquired by big co for the product and customers, although not the product my team was responsible for. Our product got quickly put on maintenance mode with promises to rewrite the whole thing at some point.

So by that point I had been working there for a year and some, knew the system pretty well and we had pretty much nothing to do. No new features, very few bugs due to little change in the product.

I'd show up to work at 10, leave for lunch for 2+ hours, and leave the office at 4. And even then I was mostly surfing the web and chatting with friends most of the day. The rest of the team and my manager knew, but they also knew there was actually no work. We'd all go play badminton before lunch some times and so there were 3 hours periods where no one was around.

Was pretty nice at first. Steady pay, no responsibilities or stress. But quickly got really boring. And since it was my first job out of school, not very good for learning and growth. Ironically the slow pace also really dampened by motivation to look for another job, so I hung around probably a year longer than I should have.
I'm definitely getting screwed over by this. I've hosted close friend's and family's email for a decade now on an old G Apps instance. We only ever used it for email on a custom domain. It was most useful because I could reset passwords for them if they forgot it. Now I'm going to have to figure out what to do.

Microsoft's Family offering is way better (not saying much considering Google doesn't have one). Right now I'm really considering moving over to them. But I have no idea what the migration of a decade of email across 5 inboxes will look like; not to mention Calendar and contacts. I used this as my primary email on at least 7 android phones (the original Pixel up through the Pixel 6 I preordered). The loss of Youtube purchases; android play purchases, etc. is going to hurt. I'm sad it isn't illegal to turn a free account into a paid one when it means losing purchased content like this.

I'm not 100% sure what to do, I don't have dozens of hours to walk everyone through a migration; and Google provides absolutely no migration tools to help with this. This is the last time I'll be burned by Google though. I used to be a huge fan; but at this point I'm done. I'm really looking forward to cutting them out completely. As an added bonus; I no longer have to worry about them deciding to ban my account one day and lose everything.
> do the work first, clean up the commits later

I'm not sure this gives the right impression. Yes rename/squash/interactive rebase if necessary to tidy, however I still believe you should strive to create clear, separate commits as you go.

If you have to regularly make major changes to history before review, I could be a sign that your process/approach is disorganised.
Agreed. I'm fucking livid.

I don't know what their freeloader costs are on the grandfathered Google domain accounts, but I'm having a hard time believing it's going to be worth the amount of goodwill they're going to burn by shitting on their most loyal users of all. These folks have been using Google services (and presumably suggesting as much to others) for at least 10 years.

But I'm not paying $100/mo so my extended family can continue to have a vanity Google account.

Google ought to think long and hard about this one. The email I draft to everyone to tell them that they're losing access to all their email, docs, pictures, apps, music, etc. is going to be harsh as hell on Google. And I'm sure that I'm not the only one that's going to have to author one of those...
and nothing of value was lost.
Apologies - I just looked for the software and can't seem to find it on my machine - may have been on an old iPad, but not likely to have been your excellent software.
I've read "Taking Smart Notes", and Zettelkasten seems like an amazing solution for a problem I don't have. It seems to be geared around writing longer works out of notes you collect, and if I were doing that, I think I'd be all-in on Zettelkasten. But I'm not. A wiki-like setup is far more valuable to me.

I have a daily note with "Work" and "Personal" sections. As I go through the day, I add entries in those sections:

- Worked on the [[Foo project]] with [[Joe]]

- Called [[Mom]] and asked her about the [[Meatloaf recipe]]

- Helped [[Jane]] with the [[Qux problem]]

This morning it's very easy to see what I was doing yesterday, and have the context for all the mischief I was up to. Also, when I open "Foo project" and look at its backlinks, I get a timeline of when I'd worked on it, and can see what other things I was working on at the same time. Being able to instantly recreate that context is incredibly valuable, and it's very lightweight for me. I'm not going out of my way to associate "Foo project" with "Joe", but still end up with a graph view that has a lot of notes linking to both of those notes.
Hi there, not sure how relevant this is, but there appear to be few “alternatives” to the firebase. Some open-source [1].

And if you already consider Kubernetes, even better. It removes a lot (but not all) of headaches for managing infrastructure. I wish there was better market for quality k8s operators to automate the management tasks for some specialized deployments.

It is open source, the hosted vendors will emerge, so you will be able to buy it, if not yet.

That said, I sympathize. Re-doing already done feature rather than focusing on new things can feel discouraging.

[1] https://supabase.com/docs/oss - no affiliation
That is not going to negate the existence of cheap chips. Those are luxury features of higher end components.
Hi man, beautiful product, if this were an external monitor, or at least a website kiosk, I would buy it in a heartbeat. :D
Boris Johnson lifts all mask and WFH mandates for England effective next week
> you cannot use all the free tools

Aka spyware.
Tangential thought: if you're using a passphrase you're not going to ever type manually, for example something you're going to generate once and stick in a secret management system, why not build the passphrase using all possible UTF-8 characters as your corpus? Seems like restricting yourself to ASCII characters is just giving an advantage to those attempting to brute force the passphrase.
Sorry about being snarky, but you had time to post this comment.
Would your life be better if you spent $100 on junk food, alcohol, pot, gasoline or Netflix instead?
Thanks, will check it out!

For those that are reading this too and are curious:

https://aws.amazon.com/workmail/
It's against the law in many countries (any EU countries, and therefore also likely the UK) but only tested in court in two countries.
Show HN: Sudokle
Hello Hackernew,
I just built this up, its a mix of Sudoku and Wordle. Does the super minimum (not a web dev so its all old school).
I think its super fun. Please let me know your feelings.

[DNS propogation is still going on, sorry if you can't access it yet]
>one of those parties advocates policies to increase voter participation

The argument could be made that they are also intentionally making it easier to cheat during the election.

These complex issues are never black and white.
git still expands wildcards even if you dont run it under msys.

git add \*.cpp

works just fine in powershell and cmd.exe
Canada fears armed conflict in Ukraine
It became way more frustrating when they started to add ads in the subtitles. It was a few years ago and since then i never even tried to use them
Offtopic: funny to see the first five or so links I followed were all marketing websites made with TailwindUI. It’s a bit like a decade ago when all websites looked like a Bootstrap website.
> without you ever having to pay server costs - i.e. for the person deploying the smart contract it can be much cheaper

That's just offloading the costs (or passing the costs down to the users), that's not a solution.

> it's the default way of writing blockchain applications

There's no default way of writing smart contracts, where does that come from? I've seen my share of smart contracts (tokens, stablecoins, NFTs) where one single address control everything, or where external approval is required for any interaction to happen. There's no "default" there.

Even if you manage to convince a bank or other financial institution to use a blockchain, they won't relinquish control over what they deploy there. There's just no incentive in favor of that, and so many against (regulations, complexity). But more to the point: "using blockchain" as a constraint doesn't change the incentives when it comes to interoperability.
My OP about demonizing hatred is about baning 'toxicity', 'hate' etc. that serves only as a rationalization of violence or exclusion. There is no rule we have to be productive all the time, but hatred can be a great motivator, there are books, games and music that grew out of some very intense hatred.

>It is just that I can't see how someone can get angry about something someone wrote somewhere on the internet.

Can you see how someone gets angry about something off the internet? It's exactly the same except some non-verbal actions are not possible for expressing that anger.
I think you’ll find a lot of very dedicated, well meaning people in government service. Especially at the local level. You have to actually talk to them and get to know them, of course, before you can judge their intentions.

If you instead base your opinion off the attention whores you see/hear in media, then yeah you’re going to be distrustful. That’s because those people optimize for being in the news. They are a small fraction of the political world.
Well no, it's not a statement of faith, but it is a statement that presupposes you're familiar with human psychology.

I've got a number of other comments here at this point that cite sources which explain things better than I'll ever be able to, if you're actually curious, I recommend you read those sources (and others, "are people good?" is a fairly well trod area of psychology, and indeed philosophy).
Great content is x% of all content. If you want more great shows, the industry will need to make a ton of shows and most won’t be great. We’ve had a decade of really amazing tv, it’s no wonder there is some mediocre work in there too. We also just spent 2 years in semi-lockdown, it’s hard to make movies and tv in that situation, there were a lot of delayed great projects
If you refresh the browser you get a different challenge. Was that intentional?
I guess CoPilot has seen bit swapping in its Python training input but not in its Go training input.

The Python code is wrong because the 17th bit is shifted up, not down. Also, the bits are shifted by the wrong amount, not up/down by 11 (= 17 minus 6), but up by 6 and up by 17. What a joke.

Not only that, even if the shifts were correct, it's simply xoring the bits. The swap is completely wrong.

Garbage code, total fail.
>This matches an 'empathy' element that many people say occurs after their usage

The empathy LSD fans are talking about isn't "yes, I have experienced drug side effects similar to your natural illness," it's something broader than that.
Hey there! for full disclaimer I'm the dude who wrote the NeuraLegion scanner so keep that in mind, having said that our DAST is one of the most capable working against SPA\Dynamic Apps. there are a few reasons for that:
- We wrote a full webdriver engine, we use this to crawl and interact with the target allowing us to do anything from capturing all of the JS events and triggering them while also mapping the APIs in use.
- We have a unique tech built around what we call "Interaction Chains", in modern apps most of what you got in the browser is a full client side application, most of the actions you make happen only in the browser context without sending requests to the server, this means that to map the application correctly you need to interact with it fully. think something like clicking on the drop down menu, choosing an option, filling in the popup form etc.. our interaction chains map those use cases automatically allowing us to "touch everything" on the app.
- Parsing of data - Crawling is just one step, understanding what you see is the next part before attacking. we have tech built around universal parsing of data, not just "id=1" and saying ok this is a parameter, but actually to parse multiple levels on the fly of everything from JSON to GraphQL and pure binary files (break png and change the data for upload attacks).
- Other then those we have a very neat way of digesting a HAR\OpenAPI\Swagger\Postman files to allow you to test API endpoints directly without the need for crawling.
Those are just the tech highlights and I'm trying to avoid sales talk so, you can just try it out, it's free :)
Aruba. Biggest hosting provider in italy has a very competitive mail service. Domain + 5 mailbox x 1gb each at 9 euro/year. At 20 Euro year you can create unlimited mailboxes x 1gb each. https://hosting.aruba.it/en/email.aspx
I don't know, I think we may be too focused on SpaceX/Astra when looking at trends. Are any of the incumbents or traditional aerospace companies acting similarly?
I have a few legacy Google Apps for Your Domain accounts, but lost the domains per-se several years ago during a perfect storm of clinical depression and financial hardship (which hasn't really ended, just tapered off a bit) where I let the registrations expire. The domains are now being squatted on. The legacy accounts still work for things other than email like Drive, but I've mostly switched to using my Gmail account on Android and elsewhere.

I'll have to think hard about whether I want to start paying for the custom domain accounts, to preserve the option of eventually registering new domains to associate with them (I'm unlikely to pay what the squatters are asking for the original domains I lost), or just do my best to migrate all the old data off, finally.
Not a child? Are you speaking of the exception to the mandates for children? Otherwise, it's usually children that have to abide by arbitrary rules without having the power to question them,.
Boris Johnson: "The Government Will No Longer Mandate the Wearing of Face Masks Anywhere." https://www.youtube.com/watch?v=v-sgL29JSz0&t=17s
Jonathan Blow on work-life balance and working hard [video]
The conversations can be interesting to put it mildly. When I get the chance to play, I mainly play a police officer and it has caused more than one moment of confusion when I didn't realize my partner had taken a work call and their co-workers could hear me barking out "lawful orders" from the other room.

Roleplaying games are really great for exercising your social skills and creative expression though, that's for sure.
> Can you talk about how you advertise and got traction enough to get to $500/month?

Pure dumb luck. I made the site to scratch my own itch many years ago, and then it took off because there were few similar sites at the time (that let you mix together different sounds). Only promotion I did was mention the site on reddit a few times. Users were prepared to tolerate a lot of rough edges at first.

There has been zero advertising. The site gets a regular influx of new users because it's been featured on a number of discover-interesting-website portals (the modern versions of StumbleUpon). This happened with no input from me. I assume it's a good match for these kinds of portals because it's immediately usable without any kind of instruction, signup etc.

I only made the decision to monetize after a long period of the site getting lots and lots of organic traffic with no input from me.
Many players sounds like it's still a hard nut to crack for AI approaches (although as poker demonstrates its getting easier), but the deck size doesn't sound like it'd be the main issue.
We're already at the point where I can deepfake a person from a single photo, I'm not convinced biometric data is useful at all.
On Monday one of the developers on my team told me he might have to drop out of our meeting. He'd been on hold with ID.me for 3.5 hours in order to get to his IRS data. Midway through the meeting he said that his call had just been disconnected and he was going to have to start again from the beginning.

It seems like this "service" may not scale.
Remember: ketchup is a vegetable.
Any group raising their money from small dollar donations has an incentive to do nothing. As soon as they accomplish something, their funding dries up.