skysight-inc/HackerNews huggingface dataset:
It can go both ways. At work, I periodically get in contact with an extremely large codebase that is actively worked on by multiple teams. One complaint I heard was that people doing willy-nilly things cause setbacks to efforts to make project-wide improvements. One example was that build times were very slow and there was an effort to implement incremental builds along some interface boundaries, but then teams would disrespect agreements to not violate constraints for that boundary (because immediate deadlines trump long term large efforts)

A more accurate way of thinking about it, IMHO, is to look at how homogeneous the project is. A project can be very very large, but be entirely CRUD forms, and Rails could fit like a glove. But on the other hand, a project could have predominantly "curveball" features (maybe it simultaneously has a real time chat component, twilio integration, newsletter emails, periodic 3rd party data imports, print-to-pdf, etc).
> Today’s email protocols use the STARTTLS protocol for encryption; it is laughably easy to do a protocol downgrade attack that turns off the encryption.

This can be solved with DANE, which is based on DNSSEC. When properly configured, the sending mailserver will force the use of STARTTLS with a trusted certificate. The STARTTLS+DANE combination has been a mandatory standard for governmental organizations in the Netherlands since 2016.
I think the critical distinction is that the Internet also gave us online banking, shopping, streaming, real-time communication, &c.

It's not clear what cryptocurrencies have given us, apart from a (not very secure) way to buy drugs on the Internet and the occasional slower, power guzzling alternative to a service that already exists.
Those were examples on how to use QuickBASIC vs GW BASIC, I'd imagine.
You joke, but after the backlash to web3 on here I saw multiple people trying to rebrand it as web4.
not some of the tools are propose or standard some of then from Mozilla foundations and try to be implemented safari tend to implement standard a lot more slow than the other because this isn't the core business, and let browsers do more things and you don´t need to use the app store.
Is the Argentinian inflation being "fought" by any government program? I've studied a lot of Brazil's hyper-inflationary period, and boy was it difficult to overcome it. Basically, once the industrial growth went below the inflation-rate everything went (slowly) belly up. It happened at two distinct times: one at Kubitschek's presidency, and the other during the military junta. Trouble is that our economy became "indexed" everywhere, so people would mark-up their prices at inflation+x%, then the _actual_ inflation would be the forecast+x%, which is an exponential process. After two decades of failed attempts, the solution was found via a financial reform, done all throughout the 90s, and then a modern copy of Germany's anti-hyper-inflation Rentenmark program, which created the Real. The solution (or so the mainstream history says) was to create a price "anchor" for everyone, which was pegged to the dollar (one of the main culprits were the large devaluations vis-a-vis the USD, a vicious cycle of inflate->devalue->inflate->...), and at the same time attracting foreign investment via a large real interest rate (far above the remaining inflation).
What we are going through now in Brazil is a slow reversal of that, inflation is picking up again, and the central bank's actions are seemingly slowing down the economy and not being able to control inflation (so long, Phillips Curve).
> Firefox doesn't have a narrative that's compelling for the typical user

Firefox doesn't sell you off to the highest bidder?
It's like turning your car's engine off overnight because that uses fuel.
Bolivian companies I guess, duh.
If every change demands first a detailed study, a logical consequence is fewer things will ever be changed.
Trust me, no one who's actually working on this in the real world is banking on React's upcoming APIs for this at all.

Suspense is still not done, and it's been over 4 years. Server components aren't happening anytime soon IMO. The only reason why I think this year is still tenable is because Vercel ate up all the React devs who can contribute to such a task.

Most JS devs I've talked to or work with are writing code based on what we have now.
Slightly OT: but how many badgers are we talking about here? This many? https://www.youtube.com/watch?v=EIyixC9NsLI
US Population Growth Has Nearly Flatlined
> His claim that his support of a one-state solution does not mean the end of Jewish rights and lives in the region is hard to take seriously. The ruling power in Gaza(Hamas) has, in its charter, the stated goal of murdering jews(not just Israeli's) inside and outside of Israel and actively work to carry out that goal.

Not every Palestinian is a member of or supporter of Hamas. Why not take him at his word?
I wonder what the story is there. Why wouldn't MS just have him continue to work on Puppeteer? They're both open source, so there's not much point in "owning" their own clone of it.
Who thought of this as a good idea? Ok, besides emergency response of public services or alike.

Air taxis are pure luxury, energy wasteful, begging for irresponsible usage and definitely not, what our littered airspace needs more of. Money well wasted for the headlines, because its so Muskian-futuristic.
I’m not even so sure I’m totally against banks doing that either.

From where I sit right now, I have within arms reach my MacBook, a Win11 Thinkpad, a half a dozen Raspberry Pis (including a 400), 2 iPhones only one of which is rooted, an iPad (unrooted) a Pinebook, a Pine Phone, and 4 Samsung phones one with its stock Android7 EOLed final update and three rooted/jailbroken with various Lineage versions. I have way way more devices running open source OSen than unmolested Apple/Microsoft/Google(+Samsung) provided Software.

My unrooted iPhone is the only one of them I trust to have my banking app/creds on.

I’d be a bit pissed if Netflix took my money but didn’t run where I wanted it, but they might be already, I only ever really use it on my AppleTV and my iPad. I expect I’d be able to use it on my MacBook and thinkpad, but could be disappointed, I’d be a bit surprised if it ran on any of my other devices listed…
Sort of! Depends on where you live - it might not be much in Sweden.
That's absurd. Spotify is not the only place you can publish a podcast.
If you have made it through multiple years of building UIs without ever needing to google that, then you must have a profound lack of curiosity.

You can certainly stumble your way to a semi-working app without knowing that, but your mental model of how Javascript works is fundamentally lacking if you don't know that.
It works great (in my experience) and doesn't sell your privacy to the highest bidder.
There are a lot of NFTs and most are not controversial. These happen to get popular but not for the reason OP has found but for the fact they are interesting pieces of art which some liked and then it turned into a gold rush. I thought they looked kind of cool and I would have purchased one if I has a chance. I didn't know they has anything to do with Nazis and I think most people don't.
Another thing I wonder about is what are the affects of wearing masks at young age and not getting usual amount of exposure to viruses and other germs.

I remember reading here and elsewhere that early childhood exposure to germs builds a robust immune system.

While my kid doesn’t wear mask in his class but his school is following very strict cleaning procedures. So he hasn’t gotten sick as much before pandemic. Maybe that is good, definitely easier on us. Maybe we will always have higher level of hygiene now. Or maybe in future there will be a lot of young adults with underdeveloped immune system.
Only someone who never used Minix would seriously argue it was better in any respect.
Application "tripwires" are just another obstacle for an attacker to overcome. If audits aren't external to the system being audited they're just as vulnerable to manipulation.

A Customer of mine in the financial sector sent their backups to a third-party for independent verification quarterly. The third-party restored data into a clean system reconciled against the production system.

That would be the kind of auditing that would be more apt to detect the "low and slow" attack.
Yes. That was bonkers.
I don't know about Argentina specifically, but in many countries unions negotiate salary raise percentages for the whole sector. If the country follows universal collective bargaining, this may also be a binding minimum raise for non-unionized employees in the same sector, even in companies that aren't members of the trade union that bargained the deal.
People fall for scams/cults/MLMs for all kinds of reasons: because they're bored/lonely, because they're in a bad place in their life, because they put their trust in a person they shouldn't have, etc. Not just because they're idiots.

My personal belief is that the best way I can set myself up to fall for a scam is by incorrectly believing that I would never fall for one. "Pride goeth before the fall." That's why I try to remind myself I'm as fallible as the next human.
How could a build be verified to be the same code without some kind of signature? You cant just validate a SHA, that could be faked from a client.

If you want to get a package that is in the Arch core/ repo, doesnt that require a form of attestation?

I just don’t see a slippery slope towards dropping support for unofficial clients, we’re already at the bottom where they are generally and actively rejected for various reasons.

Still, the Android case is admittedly disturbing, it feels a lot more personal to be forced to use certain OS builds; that goes beyond the scope of how I would define a client.
> the fact that you thought this at all shows that we're well into "brainwashing" territory with this mask nonsense.

I don't agree with that. As noted, blood oxygen levels for most people are not changed by mask wearing (presumably, most of us just add the extra 20-30% effort to keep the airflow up and/or were nowhere near close to requiring the full breath).

> once you have tried it, there should be zero doubt in your mind that your breathing airflow is affected

As some comments in the main thread here have noted, masks like the 3M Aura+ (which I've been wearing for a few months now) really do not have much impact on breathing airflow. My actual experience of wearing KN95's and N95's even while running is that I do not feel that my airflow is impacted at all. My mistake was to combine that actual personal experience together with data on physiological state while wearing masks (not changed much in most people) and make the false claim that there was no impact on airflow.

Some of those comments noted that the construction and fit of the mask can make a huge difference - damp cloth masks, for example, do seem to have an outsize impact. I have never used cloth masks during the pandemic, and I live in an exceedingly dry climate, so people I know who have worn them have not commented much on the effects of them being damp.

So, no, I do not agree that what I said (even while actually false) was "obviously contradictory to reality".
I am no lawyer or legal expert but...

Amendment I
"Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the government for a redress of grievances."

You have a US Government official specifically saying "Joe Rogan Must be Censored" which took an oath to uphold the constitution. He is paid from US tax dollars and is supposed representative of the people. No government official should call to censor anyone, this is literally KGB/H1tl3R/China Dictator type stuff and should frighten and scare the living crap out of everyone.

Joe Rogan hosted free speech from medical and world renowned vaccine experts who have been de-platformed, censored, bullied, fired, threatened with medical licenses being revoked...etc. etc.

Do you not know anything about history? "Today it's me, tomorrow it's you."

I stand with Joe Rogan, free speech, free thinkers, the right to say and write what you think wither I disagree or agree with it. If you can't tolerate that, then you might as well live in a George Orwell 1984 world. Not me.
What UX people took from you
Use Firefox and if a site does not work just move on with your life. It passively improves our future to squander our attention on the less egregious actors.
As with many things, nuance is a subject that many on HN fail to grasp.

They believe that masking is a binary decision and that once made, the die is cast.

Rather, if we tied masking mandates to thresholds of community spread and encouraged/provided high quality masks, the public would at least show medical professionals we're interested in keeping another body out of the morgue, aside from the obvious vaccination need.

But I digress - there are many slow moving disasters that were every so slightly accelerated by COVID that are only going to surface in the years to come.
> The challenge I suspect was more one of the political machinations to keep the project afloat.

Do you have evidence of this? Assembling things in space would be a major engineering advance with proportional considerations.
Ask HN: Why do we never see inovation in web browsers?
I was reading a thread today about yet another Javascript framework. The general consensus seemed to be that a new framework isn't going to make a meaningful impact on productivity. It made me wonder, if there is no more juice to squeeze in the JS Framework world, then why don't we see more innovation in browers? Instead of marginal improvements, what if replace Javascript or html or even http?

I understand today's browsers are hugely complicated, but they didn't start out that way. Why don't we see micro-browsers that fetch some document and render something useful in some innovative way?
Well, this line of reasoning is why accessibility is federally required. It's something that most companies explicitly do not care about.
Tax evasion is likely what’s causing the inflation.

Not saying I don’t get why an individual does it, but without the ability to reliably collect taxes, there’s no way to stop rampant fiscal deficits.
Remember porn on the web or spam on email?

HN's hate for crypto is hilarious.
In an open air room, the difference between walking past and sitting in the same room as is negligible.

Total theatre, does nothing besides allowing restaurants and patrons to feel ok/that they are “doing something” and stay open.
Flying without lift from wings or like as people think of sci-fi flying cars isn't practical, unless we break the physics as we understand today. I honestly can't think of anything more wasteful than hovering flying car...
A Pipe Operator for JavaScript
The raises are often negotiated months to a year in advance based on predicted inflation (and other factors). This means they can easily fall short. When inflation rises enough faster than expected, there may be additional raises put in to compensate, but it isn't guaranteed.
If you haven't stumbled upon it already, you may enjoy reading about rule utilitarianism: https://en.wikipedia.org/wiki/Rule_utilitarianism

> Rule utilitarians argue that following rules that tend to lead to the greatest good will have better consequences overall than allowing exceptions to be made in individual instances, even if better consequences can be demonstrated in those instances.
> Commercial Unix like Solaris and QNX were far better engineered than Linux ever was.

As with many other fields of endeavor, it is very hard to compete against free. Throw in the ability to fix any problems that might affect you personally, and you have a powerful combination.

The same goes for Apache as well, and to a lesser extent MySQL and Perl/Python/PHP.

Trying to set up an equivalent commercial stack was both painful and expensive (and not just the software licensing, but the minimum hardware requirements too). Not to mention that once you're considering commercial options, Microsoft was a contender, often with better initial ROI (the cost to exit Microsoft platforms was quite another matter).
Services, which include iCloud, Apple Music, search licensing and App Store fees, continued growing strongly, rising 25% annually to $19.52 billion.

Keeps blowing my mind how consistently services keep growing. Highest margins too. Just printing money!
They've added yet another section to that FAQ: "possibly maybe let's see what we can do because I like your face sir" they might do something with up to ten users:

https://9to5google.com/2022/01/26/g-suite-legacy-free-person...

As you'd expect from Google it's vague and unfinished - what happens to the other users you don't choose to save, or perhaps you have to delete all but 10 users, and what happens to those 10 users anyway.

Tune in again in a few days and see what else has changed on that FAQ, or search for news articles about this process because they sure as hell aren't going to email you about it.

They can't even kill services properly any more!
You can download Safari for Windows. I don’t know why you would, but you could.
Censor proof, private, transactions.
I lost 600€ last year in an traditional transaction.

Told the police, they said, they can't do a thing, because the scammer stole the bank account and probably lives in Estonia or somewhere.

So, while I use banks on a daily basis, simply because I have to, I don't believe they are much safer.
Love this framing. Feels like the three body problem is relevant.
Supply chain attack bypassed MFA through theft of Chrome browser cookies
If you actually read the article, most of the scams of all types start on social media. Why is it so easy for a scammer to talk to my nephew on the same places he talks to his friends? If you look at actually consumer fraud (1) according to the FTC, crypto isn't even mentioned.

The abundance of crypto hate is confusing to me as one hand HN believes it's a pointless & worthless technology but also somehow this unstoppable force giving criminals limitless power to burn all the trees and rob the youth.

(1) https://www.consumer.ftc.gov/blog/2021/02/top-frauds-2020
Just what I was waiting for. I missed the 12:59 one :p
We could say the same thing about phishing attacks. “Any company that hires idiots so dumb they’ll type their password into a random site without confirming the certificate deserves what’s coming to them”.

Except we know that at scale very large organizations, i.e. Google, cannot 100% stop phishing attacks just by user training. Humans are always fallible in a large enough group. The solution for phishing protection is to take the human out of the equation and rely on something like U2F to perform the authenticity check for you.
It gave us an uncensorable, global, and decentralized payments system. To some people this is extremely valuable.
For hospitals it's the federal EMTALA law which makes it illegal for hospitals to deny emergency care on the basis of vaccination status. If a patient shows up with unstable vital signs then the hospital is required to at least stabilize them. For COVID-19 patients that's usually based on respiratory distress or low blood oxygen saturation.

https://www.cms.gov/Regulations-and-Guidance/Legislation/EMT...
Inching closer to the complete digital lockdown, I see.
Not impossible to compile WebKit for other platforms, but sounds hairy.
https://schepp.dev/posts/running-webkit-on-windows/
> I don't understand why Europe is being so bearish on nuclear. It'll solve all of their energy woes without becoming dependent on Russia.

you are just clueless.

> Germany shut their plants down and is now buying LNG. That's a downgrade.
> Nuclear is the quickest path to green, and it's staring us right in our faces.

you would need both anyway?

nuclear does not change the fact that you need LNG.

I often hear so many stupid arguments like yours, I wonder where do people think that nuclear means solving energy problems and reducing coal and gas?
in fact nuclear solves the base load problem when there is low wind, BUT it's not the reason why germany uses so much coal. germany was always strong on coal and it was political that we neither reduced it as much as we should have.

btw. even frances uses tons of lng besides a heavy nuclear user (60% at the moment I'm writing can serve up to 80% of it's energy with nuclear), in fact it's second highest energy is gas.
What Does a DevOps Engineer Do?
Ask HN: How do I turn a B2C SaaS product into a self-hosted enterprise product?
I've been working on a SaaS tool for a while, selling it B2C. People come across the product, sign up with their emails, and pay for a subscription if they like it. It's useful on an individual level, not inherently team-oriented.

In the past few months, I've gotten a couple inquiries from fairly big companies asking about a self-hosted/on-prem version. The usual reason is that they need the user data that my tool helps with to not be sent to any third party.

I've never done any sort of enterprise sales so I have only a vague idea of how much extra effort would be required and whether the reward would be worth it.

I've done some research but couldn't find much info out there - it doesn't help that most enterprise offerings are just "Contact us for more info". Would really appreciate any insights on any of my questions!

== Effort ==

1. How is self-hosted software typically deployed? Would I just be handing them some docker containers and instructions, or would I be the one setting it up on their machines in a kind of support capacity? Or is there a standardized way of doing it? Right now my infrastructure is reasonably portable, it's all on AWS but it's basically just a couple different containers that I manually setup (no Kubernetes) and a database or two.

2. How "safe" is it for my own business? Do I need to have a lawyer draw up some service contract? Do I need to obfuscate my code in case they "borrow" it or should that not be a concern? (these are fairly well known companies in completely different industries from what my tool does)

3. How many decision steps are there typically between "Do you have a self-hosted version?" and "Ok, let's do it."? I have a couple inbound leads but if I spend X amount of time building out a self-hosted version and none of them end up actually paying for it, that seems like a bad use of my time since I don't know how to find more leads.

== Pricing ==

1. What kind of pricing model is common in a self-hosted scenario? Is it still a license per user, say $X/year? A one-time payment with ongoing support/maintenance costs?

2. My SaaS costs about $10 a month for regular people. How much does that scale up for a self-hosted version being sold to a company? Now it's $20 / user? $50? $100?
So Venezuela is all fine now, thanks to blockchain?
Are you sure it's actually been used unironically?

I've wondered about that, but don't personally know anyone who's used it in any way. Are you on good enough terms with an actual white supremist who has used it unironically to confirm the intent is racist?
Fair enough, thanks for the gentle reminders to maintain decorum. Will do!
That makes it futile (for someone as big as Rogan anyway), yes. But Young still made the ask. It's the ask I find objectionable. He could have just taken his ball and gone home, but he went farther than that.
> although I believe they're more inconvenient for me than most because I'm blind and no matter what I do they always fog up my glasses

Sorry if this is an insensitive, stupid question, but why do foggy glasses bother you if you're blind?
We can only speculate, but it's very unlikely this had anything to do with how good minix is.