skysight-inc/HackerNews huggingface dataset:
That message is generally when your user agent doesn't match Google's list of allowed browsers.

It has nothing at all to do with how secure the browser on the end user's computer actually is.
Nice little subtle marketing from Graphy there. In the first paragraph he's just a random CEO giving a quote, then you click through to the survey and turns out it's by SeedCamp powered by Graphy. Oh and then it turns out that Graphy is one of the companies that SeedCamp seeded.

Putting that aside, I think big chunks of this article are trying to draw conclusions from tiny datasets that might not stand up. For example, the chart showing "Average Number of Employees By Annual Salary" is very clearly just a line connecting the individual data points, that should be a scatter plot with a trend line most likely, and what it shows is that most of the companies consist of only the founding team. Or the bar chart of number of founders vs CEO salary - I think they've sliced that data into so many buckets (4 buckets, 3 groups, N=200) that probably the variance between the groups is just noise.
Yeah because dropping someone from your DNS registrar is the same thing as 9/11…

What a horrific and insensitive comment. Christ…
As a German I do understand cheap excuses for enslaving and killing innocent people quite good.
Especially Russians.

There is good reason for Lord Ismay's saying about NATO:
'Keep the Russians out, the Americans in, and the Germans down'

Actually I'm glad about that Americans thing, because of that Germans thing.
Not because of that Russians thing.

But as I said, I'm a geostrategic determinist.

You just can't be sure, your life and hopes die from one day to the other.
Just ask the Ukrainians, the Afghans or half of the middle east from 2003 onwards.

Oh, just in case you are US-American.
Congratulation, everything you need and could wish for you have on your continent, including nukes and cheap labour from the south.
You don't need anybody else, they need you at most.
And there weren't many Invasions on the US, were there?
Of course they're maniacally obsessed with their paltry Civil War.
Ridiculous.
Must be something they really fear.There you have your kitchen sink psychology.

Which brings me back to the mess with Russia.
This is their last attempt for a long, long time.
Their demographics works against them.Their population is shrinking and ageing.
So is the German one.
But the Germans were pampered by the US after WWII because of the Soviet Union.
Supervised and pampererd.
The Russians were just left aside as losers and geostrategical bystanders after Soviet collapse.
Now it's their endgame.
See also: FX rates that affect billions of transactions daily.

Where there's money to be made or lost on the value of anything that's determined subjectively, pressure will always be brought to bear to move the needle one way or the other.
> In mid-2021 we started to think about modernizing MDN’s design [..] with an emphasis on improved navigability and a universal look and feel across all our pages.
>
> A new logo, chosen by our community [..] We worked closely with branding specialist Luc Doucedame

Wait, this sounds like redesign for redesign's sake?

> Coming soon: MDN Plus [..] In the coming months, we’ll be expanding MDN to include a premium subscription service based on the feedback we received from web developers
> Support MDN and make it your own. For just $5 a month.

Ah, this makes sense now. It looks like MDN is trying to rebrand and reposition itself as a subscription service going forward.

I remain optimistic, it's been a great resource over the years.
How are Lizards Able to Detach Their Tails?
The screenshot of Home where they're showcasing widgets otherwise looks almost exactly like Boox. Other interactions also look like the Boox software. Not to mention the device looks like an update Boox Air. Are Boox and Huawei related?
That's a good question! Hate speech as such is also a legal issue[0]. So if you host a platform, you need to comply with the different laws. I think that takes precedence over the different people's definitions. Other than that, I think hosts are entitled to vet their guests for non-protected characteristics, and for one, a group of your users speaking out against another group of your users might not be something you'd like to host. But that's entirely up to the platform's providers, some mind it more than others.

[0] https://en.wikipedia.org/wiki/Hate_speech_laws_by_country
You're comparing apples to oranges - those are social networks where multiple people have to come to some sort of consensus, having rules over that consensus sure, can be a feature. I don't need anyone to agree with me to turn off notifications.
> "3. Sticky Positioning"

Yes but javascript can enhance a sticky top nav by watching the scroll position and updating the nav with whatever is intended by design, relative to the scroll position or direction. Such as hiding/showing or doing something else in response.

Even though it might still function as a basic nav without js, if I made a movie and found out people were watching it with "special effects turned off" it wouldn't be fun to learn that about the audience.

> "1. Animating SVGs"

Cool, but the more interesting animation possibilities are javascript driven. Like when using timing, waiting, chaining multiple animations, and responding to user interaction or other events. Need javascript for dynamic animation.
Yes -- I wish my 2012 was an i7, but it's an i5. It does have the RAM upgrade and I guess it would be zippier with an SSD.

I've never been quite ready to dedicate it as a dev server but it is now beyond usefulness as a fallback developer machine; just not quick enough.
I still remember seeing the announcement of the 3090 during the keynote presentation. People that aren’t waist deep in this area and haven’t struggled to get a GPU that can actually handle large, (language in my case), models didn’t realize how great a deal the 3090 was. 24 GB of high speed memory in your desktop GPU for ~$2k is just a remarkably cheap increase to productivity. If your access to cloud resources is constrained, it doesn’t need to be the absolute fastest GPU, but you do absolutely need the model to fit in memory otherwise your training problem typically remains intractable.

Getting one for MSRP is a different story, but I was lucky enough to get one from the EVGA queue just a couple months after release for right around $2k. Interestingly it also might be my most slowly depreciating piece of computer hardware ever. It’s just so overpowered for a consumer, I probably won’t need a new GPU for the better part of a decade.
>The sheer suddenness of the flip on Russia, and its scale, surprises me

What do you mean by this? My impression is that most western countries responded mostly the same way: with more sanctions. Are you referring to all the voluntary actions taken by NGOs/corporations?
Wouldn't the best perspectives be those unaffiliated with either side in the conflict?

Ok sure, you may wish to discount "western" media, but Russia is directly involved in the conflict, and has a vested interest in the outcome. They are ground zero for propaganda.

Shouldn't you go for something like Hindustati Times or Al Jazeera for more "neutral" stance?
If SCP works but SFTP doesn't, then they are most likely running an outdated version of OpenSSH with insecure algorithms.
Most staff and engineers are Ukrainian and are getting shelled by the country your officials openly support. Read the reply from Namecheap's CEO.
Came here for "things I don't need Javascript for", from there flowed into Lexoral as a product (pretty cool) and then into the architecture behind it which was interesting. Nice ride.
There is no "apparently." That's what it means. That's the acronym.
A key thing missing from today's web is a sense of *reputation*. Websites run by centuries old establishments of fine journalism can look exactly the same as blog spam or straight up fake news websites run by some random internet weirdo.

My solution for this at the moment is the Media Bias Fact Check extension. https://mediabiasfactcheck.com/appsextensions/

MBFC has a good breakdown of where any given news source gets their funding, as well as previous articles posted from a particular news source and if they are considered to be reasonably fair, slanted, or provably incorrect.

Really though, this level of exposure to domain reputation needs to be built directly into the address bar of every major browser. People should see flashing red red lights when visiting any domain with a bad reputation. This would also go a long way towards tackling many forms of phishing as well.

Obviously giving this power to some central authority would be bad. I've been donating regularly to MBFC, but I'm not sure how well that scales. What we eventually need is a crowd-sourced domain reputation database. There's a few ways to do this, and really we need the browser support first, and the built in agility to let users point to alternative trust databases. This sort of thing is badly needed, soon.
You can use XOAUTH with IMAP just like any other IMAP client (including Thunderbird, as I noted above).
No, Russian banks are also joining CIPS, so there is no need for double Forex.

Chinese banking has actually spread around the world a lot more than you'd think. They aren't starting from zero.

And also, CIPS software-wise is designed to be a plug-in replacement for SWIFT.
>"If a linter is required to tell me when I'm writing a bug that is not immediately obvious, that is a failing in the framework to round those edges".

I do not want this handled at the framework level though. There are plenty of times in my day-to-day where that linter is wrong. If I were to add one of the dependencies (it's sure I should add) my component would re-render over and over. Sure, one could argue, "well, then you've poorly architected your code"... but THAT is where I feel like the failure occurs. Having to do write my code to please a paradigm. What that means is I only "sorta agree" with the design trade-offs. And much like Ruby on Rails, you either go all in, or spend your days hating the framework.

I do worry that Solid also has these "If you know, you know" edges though. So I'm trading looking at a function and assuming it'll run over and over with, looking at a function and thinking, "how can I make this thing run again when it needs to?" I'm not saying it's wrong, it's just another piece of tacit knowledge one has to learn when adopting a new framework.
OpenSSH is promoting their post-quantum key exchange to the default.

It had appeared that we were waiting for NIST. I wonder what changed.

"ssh(1), sshd(8): add the sntrup761x25519-sha512@openssh.com hybrid ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the default KEXAlgorithms list (after the ECDH methods but before the prime-group DH ones). The next release of OpenSSH is likely to make this key exchange the default method."
I'd be a little concerned with using this in production, because it would make your menu completely unusable for anyone without JavaScript enabled.

As with most things, the ideal is somewhere in the middle - use these techniques to get a baseline, then embrace progressive enhancement and round off the rough edges with JavaScript
Super-App
App passwords are not limited in scope, AFAIK.
I didn't get the sense that the author is implying that anything is or is not a big deal. I believe the author was just correcting for a technical audience that can understand it what SWIFT is. As the author said, the media makes it sound like an API for moving money around. There were some other posts on HN about the consequences of misunderstanding what SWIFT was, I recall one person mentioned being assigned a project to "integrate with SWIFT" which turned out upon deeper analysis to be impossible as assigned, because the people handing them the assignment didn't realize what SWIFT actually was and also had the same misconception.
I still don't see how that's an excuse for killing hundreds of thousands of innocents, though.
Flow Browser: Flow makes HTML faster
Well, the difference between Kindle Paperwhite and Oasis is just one inch - but you need to pay twice as much. You could say only the former is subsidized - but wouldn't it be in Amazon's best interest to make reading experience more comfortable?
At least Maersk ships are included in the ecological balance sheets of Denmark, whereas all the western companies that produce stuff in China just offload their carbon bill to China.

So yes, it is bad but that's how globalized capitalism works.
My daughter just turned 16, and we had saved up to buy her a car for her birthday. One dealership we talked to tried to add a $2000 charge as a "penalty" for paying cash instead of taking a loan.
IMAP with OAuth is standard. What am I missing?
> Maker of capital intensive hardware seeks revenue streams to bolster development and hire more engineers.

If China wasn't in this conversation, the above would be criticized as an example of greedy MBAs nickel and diming the consumer.

The capability to do file sync for free has existed on computing devices for ages, yet somehow this is an area where rent-seeking is acceptable? At least Chinese vendors like Onyx use Android under the hood, so setting up Nextcloud, Dropbox or Syncthing Fork can be done in a matter of minutes, without any ridiculous subscription fees.
Looking at the MD source files is enlightening. Every markdown documentation system eventually approaches an underspecced, less powerful, and domain-specific version of reStructuredText/Sphinx.
Are Baltic countries still importing natural gas from Russia or has is completely stopped?
Yes, invoke bankruptcy, buy the assets for .01% of value gazprom takes it over
I imagine it's to try make it seem like MDN is still viable - Mozilla fired a good amount of their staff including allegedly most of the docs team.
> What really surprised me was the equity that they keep until series A (below 20%). I expected something at least around 35% for a successful startup that even makes it to series A.

Keep in mind that it’s common to have at least one cofounder. Some times more. Start with 3 cofounders and an equal split and already nobody can have more than 33% of the company.

The term “Series A” has also become kind of diluted away by a growing list of earlier rounds: Angel, pre-seed, seed, etc. It’s getting kind of funny to see how much fundraising a company can do before “Series A” these days.

Equity is a tough topic to think about because everyone expects to have a lot, but numerically a startup with multiple cofounders and multiple investment rounds and an employee option pool and equity for early hires will end up with a lot of entries on the cap table. It becomes difficult for any one person to have >20% equity very quickly in most cases.

At startups I often had to explain this to early but post-investment hires who expected 10% or more equity for themselves on top of market rate salaries. Unfortunately the equity gets spread across a lot of different parties.
As someone who has been enjoying 3-5 day battery life, i am fine with Samsung killing background apps. And they have a system for whitelisting apps.

Also, totally not relevant to the article.
cryptocurrency seems to be dying off

This is your claim with no evidence, no source and no explanation.

This could not possibly be more ridiculous. Any search you do produces an avalanche of links that directly contradict what you are saying.

Your sources of absolutely nothing are not very convincing.

Is this a joke? This is like someone getting soaked in a flash flood while claiming it isn't raining. I've never seen anyone deny reality this hard, even here.

https://www.nytimes.com/2021/12/20/technology/silicon-valley...

https://www.paymentsdive.com/news/blockchain-startups-landed...

https://originstamp.com/blog/top-blockchain-startups-to-watc...

https://www.cnbc.com/2022/02/02/crypto-start-ups-raised-huge...

https://www.institutionalinvestor.com/article/b1w6r1v3pjg15s...

https://bitcoinke.io/2022/02/crypto-startups-in-january-2022...

https://blockworks.co/report-vcs-invested-33b-in-crypto-and-...

https://fortune.com/2021/12/01/investors-fund-crypto-startup...

https://www.bloomberg.com/news/articles/2022-02-01/new-york-...

https://news.crunchbase.com/news/private-crypto-vc-funding-u...
> rate was so low that I had no reason

What was the rate though? If it was > 0, you lost money not accelerating the payoff.
Agreed, but as a user sometimes I turn it off because an article doesn’t work well with it. So the default should be user’s global preference but I want local control
It said it was when I created one before posting to make sure I was thinking of Gmail and not Fastmail.

Not sure why there'd be a dropdown to select the service if not, maybe I misunderstood

E: I misunderstood, you're correct. The dropdown is for your reference (e.g. "Mail [on] iPhone") and if you select "Other" it's the same as selecting the other dropdown's "Other", it lets you type a custom name. Guess that was never as secure as I'd thought!

I've long since moved to Fastmail which does do the limiting by service, thank you for correcting!
Yeah, I should note that choice of TLD is important for your primary email. In my experience so far, no one blocks .com/.org/.net. Other TLDs may be trickier.
Thank you! That's just about the nicest message I've ever read :D If there's a specific bit you're interested in, let me know because I'm happy to chat about it / write future posts about it
Pandora papers reveals holdings of Volodymyr Zelensky and his Inner Circle
I think the point of checkbox is fine as long as they default to prefers-color-scheme, because there are times when it is nice to be able to switch on a site without having to change your OS color scheme.
Google provides the App passwords feature:

> An App password is a 16-digit passcode that gives a non-Google app or device permission to access your Google Account. Learn more about how to sign in using App Passwords.

Maybe I misunderstand the announcement, but it looks to me that this feature will still be a valid alternative when Oauth can't be used.
Wouldn't details and summary be better for a hamburger menu, assuming you can style them the way you want? Using a checkbox seems problematic for accessibility; a screen reader user certainly wouldn't expect to open a hamburger menu by checking a checkbox.
This article hits home for me. Especially the description of the exploration phase. In a world run by clocks, it's easy to overlook how important this phase is. The tip to value the exploration phase, regardless of the outcome, is an important one.

To be honest, by judging the title, first I thought this was 'yet another journalist' writing a nice fluffy article. Glad I clicked and read though. The author has experience, that's very clear from the text. Thanks for submitting!
One thing you can generally be sure about, no matter what changes they go through: They won't ruin their own services and income-streams. Removing cookies? They have replacement for that in their browser that no extensions will be able to help with. Removing sign-in methods? Within their ecosystem they pass whatever token they want, wherever they want.
Show HN: Atlas Connex – A tool for simplifying systems integration
Hi HN,

Avid reader here, never a poster - til today. I've built Atlas Connex and wanted to show it off and hear what you've got to say!

What's it do/what's it for?

It's a SaaS/IaaS tool meant for taking the burden off engineering teams when integrating disparate networked systems.

For example, you need to build some continuous, event-driven ETL type data flow, but you can't modify the source and/or destination systems or it's a pain to do so, Atlas Connex is meant to plug in here.

It can accept data from any source type (HTTP requests, MQTT topics, polled APIs, etc.) route it through a series of filters and transformers (which either make decisions about dropping the payload altogether or massage/format the data) and then send it on to a destination, which can be a multitude of endpoint types and formats as well. Delivery is done via managed queues which can be paused, throttled, etc., so unreliable endpoints are not dropping data, they are just queued up for later delivery.

The idea is that a team only needs to write a small piece of Python code (which is the filter language) and define a route to get a reliable data flow up and running. Whether it's a fan-in (many sources to one destination) topology or fan-out (the other way 'round) the platform is meant to unburden teams with the "getting the data there" part so they can focus on using that data in automation, building real value, etc.

I'd love to hear any and all feedback, from first impressions, to anyone who will give the system a test run and give technical feedback, let me know!

Lastly, thanks HN for being an awesome place for makers, builders, and tech folks!
I had a bad experience with one UASP caddy, I must admit (a Sabrent) -- it's fine on my Mac and doesn't work on the Pi. (Even after the manufacturer firmware update that says it should).

I found a reliable way to test it was to try to load a 1.5gb database into mariadb.

The caddy I am using is this one, if it helps you at all:

https://www.amazon.co.uk/gp/product/B00FCLG65U

Discontinued but I think any replacement Inateck should be a good choice.

I think even the newer Sabrents should be fine but I don't know.

This Inateck caddy is excellent; it's the one I have been recommending. Though I'd like to test some M.2 stick adapters.

(I'd originally begun to devise a Pi 4 SSD appliance for one of my customers to sell with their database product, but the chip shortage has put paid to that.)
All Algorithms Implemented in Rust
How much say does Namecheap's CEO have over the worlds use of Russian gas and oil? Probably as much say as I have over here in the US: None.

As with a sibling commenter, you're asking the CEO to fight with the weapons you wish he had, not the weapons he has. The CEO, the company he runs, are not "the west".
You absolutely should own your own domain and use it to email somewhere besides Google. I use Fastmail but ProtonMail is great, tutanota, mailfence, etc. Getting locked out of your email is no joke you don’t want to be in that situation.

I have a paid account with Fastmail and a free account with protonmail just in case something goes wrong with Fastmail I can transition my free protonmail account to paid and use it with very minimal downtime

Edit: adding my fastmail referral link just in case https://ref.fm/u26310488
> If it was > 0, you lost money not accelerating the payoff.

Not if they could put that money somewhere else with higher expected returns than the interest rate.
When I went to get my first car (around 1996), I had some cash from a settlement that happened when I was a kid. I remember my mom saying that I'd get a better deal because I had cash, but it turned out to be quite the opposite, they wanted me to have a loan. So whenever this changed (couldn't read the article), I'd imagine it was prior to the 90s.
> have you tried being a botnet enabler?

Heh.
Open-Source Distributed Security Scanning Platform
Not if inflation is >0%
Russia, Ukraine, NATO, the EU – and a Few Good Men
Nobody has a neutral stance at the moment. That's why I watch both sides. The NATO propaganda is shoved down my throat while I browse the web, watch tv, talk with a neighbour. For the Russian propaganda I go to the RT streams.
>falls back to the old behaviour

Showing up at the bottom?
We think they are solving a similar problem and a rising tide lifts all boats ;)
We look forward to competing with them over the next decade to enable companies to onboard customers faster and better than ever before
While neat, browser navigation isn't a bad thing on forms considering it is good to notify the user that the form was submitted. Otherwise, they will likely just keep hitting submit.
Indeed, and now that I've been using it for years and many people also use it to contact me, it will be as painful to change it as it would be to drop Gmail.