skysight-inc/HackerNews huggingface dataset:
I agree with all of those. More things that are harder now:

* Finding honest product impressions/reviews.

* When looking for a configuration setting or tip to use any piece of software, find a one minute article with clear bullet points instead of an 11 minute YouTube video with a personal backstory and a VPN sponsorship.

* Finding a cooking recipe that isn’t padded with SEO nonsense.

* When finding an online discussion or blog article in a search result, being able to read it straight in the (mobile) browser without hostile prompts to make an account and/or download an app.

* (Europeans only.) Publish a simple website without worrying that the hosting provider you choose doesn’t perfectly conform to privacy laws that even lawyers won’t explain to you and you’re personally liable for ridiculous damages.

* Run software developed by hobby programmers on machines you own.

* Connect devices like speakers, keyboards and mice to computers. (Edit: You mention that.)

And, completely disagreeing with the article on this one point, this is also harder:

* Writing cross-platform UIs. As someone with a lot of hate for Java from back in the day, this is painful to write, but: Java Swing might not have produced the nicest GUIs, but the stack was so much simpler than Electron+Node+Express+Webpack+React+TypeScript (substitute Svelte, Vite or whatever you want), it’s not even funny.
> nmap --privileged -Pn -sU -p- --min-rate 10000 -oN nmap/udp_ports_scan $IP

This will never find most UDP services. If you don't send a service-specific probe, the service will most likely simply not answer and the situation will look like there is no service running at all.

Sometimes you get an "ICMP port unreachable" in which case you know there is no service running, but more often than not you won't.

You should at least use `-sV`, so nmap sends service-specific probes. This will increase scan time substantially, so if you have more than one host you might want to limit yourself to the top 100 ports with `-F`.

There are surprisingly many subtleties involved with UDP scans, so I recommend reading this article: https://nmap.org/book/scan-methods-udp-scan.html

Also, check out nmap's timing templates (e.g. `-T4`) instead of simply setting the minimum package rate to a ludicrous value. Nmap's man page (which, in my opinion, is the best man page I ever read) says this:

> Specifying a minimum rate should be done with care. Scanning faster than a network can support may lead to a loss of accuracy. In some cases, using a faster rate can make a scan take longer than it would with a slower rate.

A min rate of 10000 may work in a lab environment, but I'd stick to T4 in real environments.
Credit Suisse leak unmasks criminals, fraudsters, corrupt politicians
Humans and animals are inherently fallacious in judgment. We can no more trust a flawed machine.
> commentary as to what constitutes a derivative work under copyright law

That's part of my point actually. The question of API copyrightability in the Java case has a lot to do with whether copying APIs/ABIs in the code (whether from headers or binary symbol tables) is copyright infringement.

That said, it's unfortunately true that the conclusion is far from clear. (Sidenote -- given that the Supreme Court dodged the question, does it mean that the Court of Appeals decisions still hold? [I'm not familiar with the US legal system])
Would you please stop breaking the guidelines so we don't have to ban you again?

https://news.ycombinator.com/newsguidelines.html
Linux has XDG base directories despite many vendors no using them.

https://wiki.archlinux.org/title/XDG_Base_Directory

PS. I don't know about Mac but Windows also have similar directories although more of a mess.

There's no reason to save artifacts or local user config along with data.
* Making sure you're not being spied on

Not sure if this was ever easier, but to me it seems it got harder. With all the possible attack vectors, ranging from chain of supply attacks hard-coded deep down on the cpus, up to malicious dependencies being replaced everyday on npm, how does anyone trust their machine?
Storing a null value is a legitimate operation. How do you distinguish "never stored a value under key K", and "stored null under key K"?
> Are you a child..?

No, I thought I made it clear that I don't like Fortnite ;)
Couldn't agree more. Sadly paid with my tax Euros.

But I believe the less I care the less it impacts me directly. There is actually nothing I could do as there is not one viable political alternative promoting defunding DW.
Like if I click an ad for, say, hunting gear… I’m instantly inundated with “thin blue line” and not very subtly threatening “guns rights” stuff and pretty much every single thing I would expect to see in a far right mob.
It's very hard to accept the statement that writing fast programs is now simpler with Go/Rust. I think that what happened is more like this:

* With Go is now possible to write reasonably fast (not as fast as C) programs in a simpler way. That's great indeed, but is not exactly the above statement.

* With Rust it is possible to write programs that have a speed that is comparable to the one of C programs, that are memory safe. So Rust made memory safety simpler, but writing a fast program in C is often simpler compared to writing a fast program in Rust, if we ignore memory safety. Overall Rust made programming harder: something that I'll hardly excuse to it.

EDIT: The blog post was modified, so it only lists "Go" in the section about fast programs. My comment refers to the version of the blog post I read.
Skills over specifics.

When you use the popular your average skills are lower. Also teaches you bad habits. Learning programming is different than learning a language. Once you learn programming you just learn syntax to learn other languages.

Also, Python might be popular but it is almost always the second-best option for whatever task you're doing. I still like to use the best tool for whatever I am doing.
Would you please stop posting unsubstantive and/or flamebait comments to HN? You've been doing it a lot, unfortunately, and we ban that sort of account. It's not what this site is for, and it destroys what it is for.

https://news.ycombinator.com/newsguidelines.html
> but on my system for example, it's 128k. Never ran into this problem.

That may be because of decades of defence against it. For example, the naive way to run foo on all your .c files in one go is:

find . -type f -name "*.c" -exec foo {} \+

(aside: also note that I had to escape the + at the end of the command. RANT: of course, man find doesn’t mention that, as that’s a shell issue that has nothing to do with find. Technically correct, but beginning users will be baffled)

In my home directory, that’s about a megabyte of arguments, so I have to fall back to

find . -type f -name "*.c" -exec foo {} \;

which calls foo thousands of times, to invoking xargs, or to some other workaround. Either way, foo is called more than once, so the result may not be what I expected.

For real-world examples, see

- https://stackoverflow.com/questions/55453993/argument-list-t...

- https://www.linuxquestions.org/questions/linux-software-2/ar...

- https://www.baeldung.com/linux/argument-list-too-long-error

> You'd probably make it so that it has its own parsing too in that case, so you can do calc '3 * 4 + 5’

That’s what you would do, yes, but that’s not ideal, and won’t work well if you want to write a one-liner for a tool whose language can contain single quotes, such as sed/awk/perl/….

> Hmmm, does it create the output file first and then expand the arguments?

Yes, it does.

It all works, but isn’t ideal, and I think using a library to do argument parsing would help here (variable expansion may be a problem when doing that, though, as postponing that till after the tool runs may introduce a race condition when running a tool in the background. If that is a problem at all, I think that’s solvable, though)
There hasn't been a huge amount of progress in this area since this came out in 2009 at least from looking at Wikipedia. https://en.wikipedia.org/wiki/Cancer_vaccine
> Your comment implies that Georgia might have had better ways out of that situation, that’s probably not true.

Georgia was pushed and encouraged by Western allies which then turn away and abandoned it.
People on the drive team should feel great shame for this. Catching a Google ban can be very very damaging to someone's life. Scans of files like this don't need to happen.
Would you please stop breaking the site guidelines, regardless of how wrong someone is or you feel they are? You've been doing it a lot, unfortunately, and we ban that sort of account. It's not what this site is for, and it destroys what it is for.

https://news.ycombinator.com/newsguidelines.html
Credit Suisse Leak
Every modern army is completely reliant on military satellites. I think the idea is a surgical strike that doesn't leave space clogged up with debris for the next few hundred years.
A referendum held amidst annexation cannot possibly be legitimate.
> I pity the fool who loses their phone in the age of 2FA.

This keeps me awake at night. Especially as it is no longer possible to contact humans at a lot of sites to prove who you are. I went to jail for eight years, when I got out I could only access two of the thousands of accounts I had made over the previous 20 years.

> My wife lost her phone when we were on vacation and it was literally impossible for us to login into her Google account in order to use find my Android.

This is a really frustrating situation.
Wouldn't that imply that every single published thing under the .in-TLD is just pro US propaganda. I wouldn't go so far and discredit a whole TLD as a prior in my mind.
That's why you always copy the secret recovery codes for the 2FA(which may not be helpful if you left your notebook in your home country during vacantions).
Kubernetes Documentary Part 1: A Critical Review
It’s still the largest of the two economies.
The reason being those are proprietary tools.
> It's definitely not an informed engineering decision.

I think it's more likely that they are evaluating the engineering decision by different criteria than you do. The people in most organizations that make the Slack buying decision probably don't know what Electron is. And frankly, Electron Slack works just fine on any modern Windows/Mac business laptop I've used it on.
I've used new aftermarket batteries in several ThinkPads (X230, T440s, T400, T480) without any issues. I've heard similar from several other users I know. I'm wondering about this battery DRM, as I've never seen or heard of it until now.
I assume it wasn’t your intention, but I read this comment as very harsh on the author. I, too, remember the 90s and I think calling OP a script kiddie was somewhat uncalled for.

I don’t work in security, but I’ve always been very intrigued by it and have enjoyed some success in CTFs. Having said that, is automating stuff not a goal of every software engineer? DevOps has exploded in popularity; terraform didn’t exist in the 90s. Am I a script kiddie for using pre-built (and tested!) terraform modules?

As for the “mostly for fun” quip… OP is literally writing up a HackTheBox challenge, performed purely for fun. If you want something fun and security adjacent to play around with I can’t recommend microcorruption strongly enough; I really really enjoyed that.
Whoa. You've been breaking the site guidelines egregiously lately. We ban accounts that do that. I don't want to ban a long-established account like yours, so if you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules, we'd appreciate it.

We've had to ask you this sort of thing more than once before. This kind of thing is not ok on HN, regardless of how wrong someone is or you feel they are. Please make your substantive points thoughtfully and respectfully.

https://news.ycombinator.com/item?id=29777845 (Jan 2022)

https://news.ycombinator.com/item?id=25900942 (Jan 2021)
The worst part is when people somehow think all these things necessarily must follow from the things that are easier rather than suggesting we could have the good things without the worse off things.
people have different strengths and perspectives (the non-sphericalness of real people) so it's not surprising that folks gravitate towards an area of strength/interest even if they can functionally work on the 'full stack'. as a 'full stack' dabbler[0], i enjoy the view layer stuff the most, but not so much with the js-dominant frontends of current fashion. for that reason, i'm really digging hotwire as a retro-futurist take on server-side-rendered-but-reactive web dev (along with cousins like livewire & htmx).

[0]: product manager who likes to make stuff, in my case
> The GPL is a license that applies only to software code and not to the end-user software.

I don't know what you are trying to say with this. Binary code distributed to end users is a derived work of the source code, so there is no difference between distributing source code or binary code, from any point of view. And if I illegally create a copy of X's work and sell that copy to Y, X has a right to ask for Y's copy to be destroyed.

And again, I was explicitly talking about the fact that work A can be a derived work of work B even if A includes no amount of B directly. If I re-tell Harry Potter in my own words, replacing every single phrase, name etc., but otherwise keeping the story identical in every way, then my work is almost certainly a derived work of Harry Potter and J.K. Rowling is the only one who has a legal right to distribute the work I created - which also means she has a right to ask for the destruction of all copies of said work that I illegally distributed (not that this would be too easy to enforce).

Similarly, the question arises: if I create a program that has a GCC-shaped hole in it, and distribute to end-users under a proprietary license, to be used with a copy of GCC that they obtain separately, is my work a derived work of GCC or not? This is a real legal question that the GPL has no bearing on.
I know, of course. But at least on macOS, I can usually instantly tell when something is using a cross-platform UI library. Even if controls look native, they're usually laid out wrong and don't follow platform's conventions.

There are examples of the opposite, of course. IntelliJ IDEs, despite using modified Swing GUI, feel native-ish to me because Jetbrains put in enough effort to replicate macOS native behaviors.
This is definitely true. Just trying to download a file can become an async chain hell-hole.. it's asyncs all the way down!
The general trend has been towards less confidence in 3rd party software and packages. I'm not sure that is going to reverse any time soon.
In the US any NASA project is and will be hampered by competing states wanting the resulting jobs coming to their own cities. China might be behind the US for now in space race and many science fields but the trajectory they are moving at they are likely to get ahead. I do wonder sometimes if the creationist and other such bullshit anti science getting larger support in the US might be a well a financed trojan horse.
Interesting. Out of curiousity, is there a flow for if a package author gets permanently locked out of their google account? There have been cases of people losing access to their entire google account due to ToS breaches on one site (e.g. Youtube).

The safest option here would be to create an orphan package, but that has some usuability concerns (will people realise it's orphaned and update accordingly)
More of that moronic "let's serve our primary customer segment and fuck everyone else" aka "You can have any color you want, as long as it's black"

Modern capitalism... thanks, Henry Ford
Might be a bit hair splitting (probably appropriate to do so in this context?), but the GPLv2 states that "mere aggregation of another work... does not bring the other work under the scope of this License". But it technically does not imply the converse is true, i.e. if it is not mere aggregation it must be a derivative work.

Since "derivative work" does not seem to be clearly defined in GPLv2, I would say it's hard to argue that statically linking creates a "derivative work" in the GPLv2 without showing that this is the general legal position of copyright law as opposed to a specific stipulation in the GPL.
I've been working on a pub/sub server that supports both Websockets and SSE as a hobby project for a couple of years. It have been successfully implemented and is used in production on some high traffic sites with 300k+ simultaneous connections. If someone are interested the projects webpage can be found here: https://github.com/olesku/eventhub
Distrust is why Covid response broke in US. With distrust, everyone is going to just do what they want. Society becomes dysfunctional.

Healthy skepticism is good approach to institutions.
Nope. Granted, I wasn't an adult at the time, but I just didn't have many peripherals that used the serial connection.

USB-C just doesn't have many benefits over USB-A for a huge number of peripherals and cables. It's useful for bandwidth for one webcam I own, but for my mouse, my keyboard, my e-reader, and most other devices... there's no difference other than the cable shape. It's enough of a sidegrade (and enough of a pain in the ass to deal with adapters) that it just isn't worthwhile. And, as I said -- backwards compatibility is a big issue for me, since my personal laptop only has USB-A/Thunderbolt 2 ports.

Not to mention the fact that my raspberry pi 4, which I'll be using as a lightweight home server for years, only has USB-C for power input... USB-A for all other peripherals. A minority of devices in my household (only one!), between my personal laptop, work laptop, home server, car, and wall warts, use USB-C. Upgrading would require a lot of inconvenience and redundancy.
USB C and the removal of headphone jacks are an example of how not everything in American society is "market driven" but can easily be imposed on the whole market and consumers by a single big player.
I am not going to be scolded into changing my opinion about an internet article. But I see that you like the article and the author. Cheers. Thanks.
Would building a broken copyright enforcement system fall under engineering or product management?
"If you work from home you can get bars that attach to doorways."

Careful with those. If they fall off while you're doing your pull-up (which has happened to some people), you could seriously injure yourself.

I personally prefer to take a jog to a local park that has a playground and do my pullups on the heavy-duty metal bars they have there. Those are never going to fall off.
My whole library, a few hundred books, is on an iPad.
Ghirardelli is easily available so it's not that "craft". And, yeah, it costs maybe twice Hershey's, but if someone is that hard up for a few bucks, chocolate itself probably needs to be less of the budget.

Mostly I'm pushing back on the meme that Americans don't produce or appreciate good chocolate. They do, though bigco chocolate certainly has better market share, product placement, mind share, etc.
Show HN: Wrap, a browser extension for capturing and editing product screenshots
indeed, concurrency being 'easy', nice one. Concurrency is only 'easy' if there is no shared mutable state.
Atom is also Electron-based. Why Electron text editors at all? I personally use Sublime and vim and don't even consider the electron ones.
The article does not describe a digital social credit system though?...

They are complaining about bank account freezes.

This has nothing to do about a social credit system. It has to do with the perverse relationship between the government, the bank, and the individual. We already know the solution to this problem.

I won't continue further because it's all very socially delicate, and I would prefer the discussion happen over something more ephemeral.

Take this comment as not an opinion, but an observation. I could be incredibly wrong.
I've had wrist and back issues intermittently during an 18-year career. What worked for me:

- Minimize working on a laptop keyboard.

- Rowing machine.

- Be well-rested, which may require limiting caffeine intake.
"cruel and oppressive government or rule." is the Oxford English Dictionary definition of tyrrany.
> there must be absolutely no way for the cloud or server hosting provider or someone gaining access to the server e.g. via an RCE in the SSH or other sync daemon to access any data (both content and metadata like file name) both in transit and at rest

Gocryptfs.
other methods kind of leaves a mess that pisses off other people.
On the Abolition of All Political Parties (S. Weil)
Sure. All predictions are guessing. Based on prior facts. E.g. annexation of Crimea.

We're literally seeing multiple reports from independent sources of bombings in those areas. The whole kindergarten bombing clearly there to trigger action that would result in a war.

This also piles up on what they say on national TV, the fact that they issue Russian passports to people in the area to justify the whole thing etc.

Will they eventually invade?

Who knows, that's like predicting the weather. But we don't guess the weather. We use maps and facts to make educated guesses based on facts.

Are they trying to trigger a situation that will give them an excuse to invade?

Sure. Obvious as daylight.
Please don't take HN threads on repetitive flamewar tangents.

https://news.ycombinator.com/newsguidelines.html
I highly disagree here. Within seconds I can have all the technology I want running in a Docker container with little to no setup. Just make a docker-compose.yml file with the services I want, say Postgres and Redis, mount my local folder to a Golang Docker image, and then I just do `docker compose up` and all three are running and communicating with each other with little to no effort.
Not about India but on the topic of favorite podcasts, anything by Mike Duncan. Starting with the History of Rome series to the whole Revolutions series. Not too dramatic, but not 100% dry either.
Just checked here: https://www.waitrose.com/ecom/shop/browse/groceries/waitrose...

and it's from Italy.
Could you please stop posting unsubstantive and/or flamebait comments to HN? You've been doing it a lot, unfortunately, and we ban that sort of account. It's not what this site is for, and it destroys what it is for.

https://news.ycombinator.com/newsguidelines.html
> * (Europeans only.) Publish a simple website without worrying that the hosting provider you choose doesn’t perfectly conform to privacy laws that even lawyers won’t explain to you and you’re personally liable for ridiculous damages.

I'm sorry but that's just FUD. GDPR fines are only for serious infractions with intent, most violators get off with a warning. Furthermore, access logs are OK because they're a legitimate purpose, as long as there's rotation.
CISA’s purview is information security. Why would they mention anything about anabiotic’s?
That is why being responsible for security is such a shitty position in most organizations. You have barely any upside since "we didn't get hacked" is the default, but if you do get hacked it is at least partly on your plate. Most vulnerabilities are things you never have heard of and possibly never will. Finally, you will be hated by every PM/dev trying to get something shipped and will continuously have to defend yourself from executives trying to get their pet project expedited.

Even worse than a full time security person or team is the dev who cares a little more than usually and gets manipulated into doing "security" part time while still being part of a normal team. That is just a fast track to burnout: massive responsibilities with almost no power. I've seen it multiple times now and it never seems to end well.
Zoom out a bunch of times and then size your window to the ratio you want. If you open the developer console in chrome it will show the resolution of your window.