skysight-inc/HackerNews huggingface dataset:
Interested in Linux kernel development but don't know where to start?

Join our upcoming session on how to dive deep into your service kernel and extract traffic from it using cutting-edge eBPF technology.

When: February 10, 2022 @ 9:00am PST

Want to read more about eBPF?

- https://www.seekret.io/blog/a-practical-guide-to-capturing-p...

- https://www.infoq.com/articles/gentle-linux-ebpf-introductio...

- https://ebpf.io/
They don't care about these hacks unless they hit their bottom line.
Does dismissing cookie notice means acceptance?
I always dismiss them. Having to click over small "close button" feels much easier than clicking over large accept button. But does dismissing cookie notice means acceptance?
It was explicitly designed to do that. HTML is explicitly designed to allow content from multiple places; it is designed to do so. Your browser is designed to read that HTML and fetch those resources to render the page. The internet is designed to cache that content. Your browser cache is designed to cache that content so future fetch requests are faster.

There's so many pieces explicitely designed to do this, for exactly this reason, that there is no question as to this being the intended behavior.

Font servers are decades old. CSS added support for it in 1998, replacing earlier less common methods. This is not new or unintended behavior.
I can't tell if this is a joke or not, we're talking about websites.
high inequality is one result

Agreed. In the US if you work at a very large company that predominantly has high value employees then you very likely have the best health coverage in the world by far.

I am the beneficiary of such a health plan. I pay $2,400 per year for my family plan. My total out of pocket after that is $750 per year.

Oh and unions. They have great health coverage generally as well.

Everyone else has from good to terrible.
>> This is exactly what happened...

Not quite? Wouldn't the users browser have sent its own IP address to Google? That's different that "forwarding" it, and it may not even be enough for Google to connect the user to that site.
And because of people like you we are stuck with NoScript and the like
bbolt is a key-value store and this package is a SQL database so they aren't really the same thing.
More Fun with Simulated WS2812Bs
Same-sex penguins succeed as foster parents in first for New York zoo
> I'm afraid though, that it'll only lead me to meeting more and more developers

Digital nomadism wouldn't do that in my experience; have done that in Bali, HK, SG, Thai, for a while in China when it was more open etc; I met tons of people and while a few said they were programmers, they were not actually programmers (0 experience, bit of html); most were people (of all races/sexes/ages) that were 'doing their own startup' (99%+ horrible ideas; I have been a tech advisor in a few incubators and these would not pass anywhere, but that's not the point) or writing their first book. But they were mostly there for the freedom; the startup/book thing is more of an excuse to be on nice beaches, forest hikes etc. So it's very social.

The coworking places I found there also had close to 0 devs in them; worse, they all wanted me to 'jump in' (I did a few times which was not smart in hindsight).

Many of these people are actively social, attractive and easy to meet up with for drinks, food, sports, walks, etc etc. And then maybe your new startup so you can do that forever.
In those days, everybody who was anybody had its own star trek fansite, where you could download midi files and gifs of rotating 3d klingon logos.
I agree! The problem is that most browsers have awful defaults. I'm not sure why this is but it does mean that people end up wanting to change them. However my browser uses beautiful fonts by default and if you specify just serif, sans-serif or monospace. I wish this would be the common case so that we can just respect users font settings instead of picking what we think is the best.

I write an article on this a while back: https://kevincox.ca/2021/06/23/respect-user-fonts/
Ask HN: Is it worth it to learn C to better understand Python?
For those who learned C after learning Python, was it worth it? Did it help you to better understand Python?
> all external content providers that are embedded on their page

All the embedding is being done by the people building the websites, so yes, they do have full control and therefore full responsibility.

Just because I don't perform a crime or violation myself, it doesn't automatically absolve me when I pay or ask someone to commit it.

> forcing millions of website providers

Millions? There are billions of website visitors, and most of those don't have any control or deep knowledge over their tools. There are only 3 significant browser technology suppliers at the moment, and none of them provides the hypothetical tools to users, only third parties, and those tools often break websites.

Website builders, however are significantly more technical and able to control their tech stack. If anything just hire another company. The burden should definitely be on them.
Rather than 1x cluster with 4k nodes it might be better to use 4x clusters with 1k nodes. You've now lowered the blast radius of any change to the apiserver and at PayPal scale you'll already be dealing with multi region which would mean you already have the tooling to do this.
I moved to Sidekick [1] an year ago after trying out all the major players available on the market. Best decision ever.

[1] https://join.meetsidekick.com/p1zs4
New engine could save internal combustion from the scrap heap
I expected this too, but is now one of the three pancake recipes I regularly use and on the "healthier" side. Don't over-blend and you should be ok. They do take lower heat to cook (and thus longer to flip) than typical pancakes.
This article should be subtitled, "What's fundamentally wrong with Open Source?".

It never quite addresses the follow on question, "... and who's fault is it?".
> In the 2 prospective cohorts with many repeated measurements of diet and up to 30 years of follow-up, we observed that a higher intake of fruit and vegetables was associated with a lower risk of total mortality and cause-specific mortality in a nonlinear manner. Our analysis in the NHS and the HPFS and in a meta-analysis of 26 prospective cohort studies documented that intake of ≈5 servings of fruits and vegetables daily was associated with the lowest mortality, and higher intake was not associated with additional risk reductions in mortality. The thresholds of risk reduction in mortality were 2 servings daily for fruit intake and 3 servings daily for vegetable intake. Higher intakes of most subgroups of fruit and vegetables were inversely associated with mortality, whereas intakes of starchy vegetables, fruit juices, and potatoes were not associated with mortality.

https://www.ahajournals.org/doi/10.1161/CIRCULATIONAHA.120.0...

A study doesn't need to be "double-blind, randomised and controlled" to have value. This study of 108,000+ people over 28-30 years is going to be more pertinent to the average person than, for example, an anecdote.
> assuming there’s no Referer header - which there won’t be, assuming Referer-Policy is set sanely (which by default it is in all browsers)?

In Firefox 96 network requests to 3rd parties (in this case Google) still seem to include the 1st-party hostname as REFERER header.
I'm a cryptocurrencies/blockchain advocate in general but this wETH/BnbEth/sETH/stETH and similar crap is just crazy and stupid.
And the government doesn't represent the people of that nation? Then what the hell is the point of democracy?
> superfluous or not a good idea any more, causing more harm than they solve.

Can you expand on why?
Knowledge Bases for Software Teams: What, Why and How?
Hello HN!

I’ve worked at a couple of tech-producing places and noticed how neglected docs are, even though they’re integral to culture and productivity. This inspired me to write in advocation of the subject, explaining the importance of docs.

Here is an intro to Knowledge Bases. Why do teams need them, examples of what Knowledge Bases cover, and where to start.
There are many hardware companies where their embedded software is not actually a crucial moat or even value-add, compared to open source options. Look at WiFi routers: Do any of them have software that is better than OpenWRT or Tomato? Why do they even try? If I were Netgear or ASUS, I'd get rid of 90% of our software developers and just use one of the great open source options. Why is anyone spending money developing bespoke router firmware?

I've worked as a software engineer writing embedded code, at several hardware companies, and nearly all of them see software as just another line item on the BOM, like a bolt or a screw, to make as cheap and quickly as they can. "We need to source 32 screws, 50 resistors, 45 capacitors, a waterproofing gasket, oh, and this 'software' thing. Make some 'software,' and ensure we fasten it to the product at station 25 on the assembly line." That's almost certainly how Vizio thinks of its software.
After this comment the submission dropped from place 25 to place 56 in less than 10 minutes. Suppression of opinion is a standard PSF politician tactic.
What’s the Best First Word for Wordle? (Using JavaScript)
I’m just guessing, but maybe it was flagged. By multiple users. That would not affect the vote count I don’t think, but it would affect its ranking on the page.
What I always liked about SO jobs was it was tech centric, so you could filter on language or tool. It also seemed to have more "transparent" posts in terms of salary, benefits, and dev practices. What are good alternatives to SO jobs?
Technically, Blockchain is an inefficient (bad) data structure that is supposed to control transfer of assets (an important infrastructure). So yes, it is objectively bad just like O(n) is objectively better than O(e^n).
"Almost" is doing a lot of work here.
Cancer like in the health issue? Or cancer like how Open Source (GPL) was a cancer back in the 2000s?
I have followed the EV market for the last year or so. (For excellent coverage look for "Electric Viking" on youtube.)

GM delivered 28 EVs in the 4th quarter. Rivian delivered a couple hundred. Claims of EV pickup trucks in 2024 are "interesting" but that is pretty late in the game. China is already producing millions of EVs and planning world-wide shipments. BYD is building a breath-taking amount of EVs.

There appears to be three constraining factors.

The first is full production. The large automakers are "talking" about building new factories. Tesla has two new factories already pre-producing cars. These are expected to open for full production shortly. There is a big difference between promises and production.

The second is batteries. Tesla has their own battery factory. It has contracts with CISL (the world's largest battery producer), LGChem, Panasonic, and others. It has long-term, high-volume contracts for raw materials like Nickel. Tesla also has a lease on a lithium-rich plot of land. GM is "talking" about building a battery factory in Michigan.

The third is "in-house" development. Tesla software is setting the standards for the industry. Their over-the-air updates improve your car for free even after you bought it. They make their own circuit boards so if a chip isn't available they can design around it. The major auto makers outsource a lot of work. It will take time to build in-house software and hardware teams.

Don't confuse promises with production. Tesla is years ahead.
> The services (here: web fonts) could be supplied another way

The problem here is that every service could be provided another way. It seems that the only actual hosting option that doesn't leak a user's IP to a thrird-party is first-party only over Tor. Do we demand that every website is built that way? It turns out that outsourcing actually has a lot of value.

So where do we draw the line? Google Fonts apparently needs to be reimplemented first-party. What about Google Cloud CDN? What about an ISP that sees the user's IP in the packets?
> Experimental and computational comparison of freeze–thaw induced pressure generation in red and sugar maple
I'm not a layer (web dev in my spare time), but how far does "provide more directly" go? A private ISP? There's no limit, only what seems to be considered by the courts as "reasonable". Then again, that is how law is interpreted most of the time, no?
Whose “consensus” ? Google or ad techs. That is not acceptable. The right way is GDPR pop up listing the companies you will share user data. With. If the user approves I am sure no court can touch you.
I’m curious to see an update since after pegasus broke apple put out patches to curb it
> So everyone showing youtube videos would be affected unless users also start agreeing to IP exposure

Yes, and that's a good thing! A web page should only communicate with the server i've reached, there should be zero third-party involved unless i explicitly consent.

That for example <img> tag can use an arbitrary URL is explained by the fact that back in the day storage/bandwidth was expensive. The same is true for video to this day, but i guess it's good that heavy-to-load content is click-to-play.
That‘s what it reduces to, yes, and german courts seem set on actually creating precedents [0] for that dreadful situation.

[0] https://www.taylorwessing.com/en/insights-and-events/insight...
Having flat mates is not always easy but makes a huge difference in the quality of your life and makes some level of socializing a regular part of your life instead of an optional project to attempt.
Nonprofessional observation from.

"Anecdotal, but It seems like Apple’s DNA is still very hardware focused. People in my friends group have all interviewed there but none of them accepted offers because they would never match other Big Tech."

It seems most of the real magic, long term R&D ROI, and difficult hires. Now rest in the switch from OEM to in house made chips. I would be interested in others perceptions of this.

A modern phone is built on tech from chips like a Z80. However now the amount of chemical engineers, electrical engineers, process, and so on has changes so dramatically.

We have large teams of people becoming so specialized the first stack software is far more times the abstraction it was year by year.

Security is hard. Just like quality, they both take back seats more and more often since they generally only hurt ROI.
Sometimes the other party will happily oblige with your request, but only after a totally vacuous phone call that serves absolutely no purpose other than (i) signalling how much effort the other party is spending on you (ii) punishing you with synchronous communication so as to limit your potential request rate.
Dude should have called 911 when he was at 12 hours of insulin left and let the hospital and the insurance company fight it out.

That's seriously f'ed up.
Register to the webinar here: https://us02web.zoom.us/webinar/register/7116435455782/WN_aL...
Installing the GNU versions is as easy as

brew install coreutils

etc., which I suspect is sort of what Spivak was referring to, and not that MacOS ships with them.
It is fascinating that we've developed a sense of aesthetics around this, though I suppose it is to be expected with how much we are oriented around language.

I personally use 1TBS wherever possible. It just looks the cleanest to me.
Yes, but the website ordered your browser to contact Google without informing you, for no obvious purpose. That's not exactly how consent works.
Google Fonts is a CDN. The *C*ontent they *D*eliver are fonts.
Informing them is probably not enough – you would need explicit consent and a fallback option. The only reasonable option is not to do it or maybe it's possible to get a contract with google regarding processing of personal data.
But it has since evolved, greatly, in complexity. Just because things were like something once, doesn't make it easy to go back. Hey, I'm all for more privacy, I'd like to go back to how it was before but keep the good parts from today, but this would make it harder for the small guy without some advancements in IT, private CDNs and easier font management. IT is already a nightmare just to keep it from breaking.
People don't just use third-parties because it is fun. They do it because it reduces cost. If we have to build every service from the ground up as first party is that good economically. Does every website need to build its own CDN now?
This is how Librem 5 smartphone works, with hardware kill switches.
Price, simplicity. 8m mirror size would equal some of the largest telescopes currently on the ground. A lost of cost could be saved, if the whole teslescope could be completely assembled on ground. Later iterations could have larger mirrors, but just having a Hubble replacement with modern cameras would be a huge step, having a 4x larger mirror will be magnificient enough.
> The price of my prescription without insurance was $339 per vial of insulin

In most countries insulin price is around $30. I remember it was cheap in US too.

Seems like another problem created by US kleptocracy. Make something prohibitively expensive, and "solve" problem by providing handouts to cover costs.
250 points in 3 hours and this post is not front page? What is going on with HN today?
You may not serve a website to german visitors from GCP at all, certainly not without getting consent first.
Never heard this one from Steve, but this is akin to thinking moving your speedometer dial down makes the car go slower.
What do you mean generally accepted word? A word is or is not a word . Dont get butthurt because you were pointed wrong after trying to correct someone.
If you're gonna deal directly with the forex industry without any safe-guards there will definitely be a bunch of jargon around, have you ever dealt with the insides of forex trading before?

In general, giving someone money does not require intimate knowledge of what's happening behind the scenes, that's true. But the submission is not about a normal transfer, the user is explicitly avoiding the safe-guards in place, and got burned by it. It's no surprise really.
i worked at a company a while back that decided it was time to refactor due to application complexity, which was driving developer productivity down significantly

a team of elite coders and a senior architect was put in charge of the project, and they decided to implement IoC & OSGi throughout the code base and split the repos up into cleaner modules

a year and a half later, they were done. glowing company wide emails were sent, it was a new era

things got significantly worse: the new system was very difficult to understand, testing cross-module issues was impossible to coordinate, OSGi added almost no value at a heavy cost across the code base, etc. developer productivity, already low, fell even further

the senior architect left shortly after the project was completed

careful with that refactor, eugene
By this argument, then, should third party requests always be blocked? If the user "is in no position to decide", that means that the only way to avoid potential liability would be to load everything from the same domain, right? No CDNs, no off-site scripts, no off-site embeds, ever. Seems a bit extreme to me.

Thoughts my own, not those of my employer.
A determined actor can still infiltrate their supply chain. Almost the entire phone manufacturing and assembly, firmware etc is handled in China.
Incentives to do what?
You're free to license things however you wish, however let's not delude ourselves into thinking that permissive licenses somehow result in more "freedom" than copyleft licenses. The only freedom that you get with a permissive license is the freedom to make code non-free, which is to say, permissive licenses result in strictly less code being free.
Aside from someone being denied life-saving medication, the most awful thing for me in these stories is the relentless Kafkaesque quality. We never get any answers to our basic sense-making questions about the bureaucratic process:

- What did the insurer expect to happen, in order for this person to keep getting their medicine?

- Why did those things not happen?

- Whose job was it to make sure those things happened?

- Did that person know it was their job?

- ...etc.

I get that it was about prior authorization, but whose job was it to make sure the prior authorization happened? Why didn't that person do it in a timely fashion? Why isn't there an understanding within the insurer's system that Type 1 Diabetes is a life-long condition and not something that will just go away when the insulin runs out?

Was there a "happy path" here or does a scenario like this invariably degenerate into a scramble involving dozens of calls and day-destroying last-minute errands?
There is a nice variant of bubble sort called comb sort. It uses a variable stride between compared elements. IIRC stride = len/1.3 and then shrink it by the same amount each pass. It's way faster than plain bubble sort.

I still dont know why quicksort is so common given its worst case performance.
I'm also quite sure it's harder to fire someone in Germany for something they tweeted, and "opinions are my own" is not as popular as a disclaimer.
> You'd expect that invalid actions lead to idempotent errors, not glitch states where you lose everything.

Indeed, and that's exactly how most cryptocurrencies work today. You try to send funds to an invalid address, the wallet will present you with an error that you cannot do that.

The user in the submission did not perform an invalid action, because they wouldn't be able to perform an invalid action.
Others have commented about the lack of clarity in the homepage so I'll skip that part. I like the multiple data sources part. I think that's big.

There is no tool today marketed at developers that helps them look at all their data and further script it. You either put everything in a data warehouse or you write custom scripts.

As soon as you're not querying sql, your sql IDE and even metabase are useless. (And this isn't to say sql IDEs are bad, they are awesome, just more limited in scope than what developers actually query when you look at their whole data ecosystem.)

I'm working on this too. A desktop data IDE for developers to query, script and graph all their data sources. And a server edition for teams to do the same plus have recurring exports and alerts like you're doing.

I think you're on the right path. Good luck!

https://github.com/multiprocessio/datastation
The terminology for these concepts in common use is "user" and "user agent".
Sure, the tech is not perfect. But it will get better over time, not worse.

Soon there may be a "good version" of it that replaces a big chunk of anything financial and financializes another chunk of everything else.

Or maybe not.

I understand assigning a low probability to that event, but the upside is so big that it's still a bit weird to be just a hater and not make a lottery-ticket-sized investment.

Or I guess the chance of being able to tell randos on the internet "I told you so and they never fooled me!" in a few years if it fails must be a similar-sized reward in utility.
In the argument of the SF conservancy, the contract is between a distributor of the software and someone receiving the software. If a company only writes the GPL software in question, they wouldn't be liable to their customers in the same way as in this article because they aren't on the receiving end of any code. If a company uses and redistributes GPL code someone else wrote, they could be sued by their customers to enforce the GPL, but SF conservancy argues that's a good thing.

IANAL
That has interesting implications for anycast CDNs. In fact do you now need a separate DNS name for europe to be sure that the DNS query doesn't get anycasted to another country ever?