skysight-inc/HackerNews huggingface dataset:
A tower might have advantages against long range ballistic attacks.

Consider a wizard who owns a building that is being attacked by an enemy lobbing projectiles, and assume that the building is either box shaped or is a cylindrical tower.

If it is a long range attack all the projectiles arriving in the target area of the building will be traveling almost in parallel. Due to uncertainty and imprecision in aiming they will be randomly distributed over an area.

Suppose the sun at the time of the attack happens to be positioned such that sunlight near the building is moving in the same direction as the projectiles.

A projectile that would have hit a given point on the ground if the building had not been present hits the building if and only if either that point is directly under the building or that point is in the building's shadow. Let's call the area directly under the building plus the area in shadow the building's target area. The chances of being hit by a given random projectile are proportional to the target area.

Now lets compare towers with boxes. Suppose the projectiles are coming in at a 45 degree angle.

Consider a wizard with a cylindrical tower with a radius of 10 m that has 10 floors with 3 m between floors. The gives floor space of around 3100 m^2.

A one story box with the same floor space would have a target area of 3250 m^2, assuming a square floor plan and the attack is coming in from a direction perpendicular to one of the sides.

The tower, if I've done the math right, has a target area of around 900 m^2.

If we double the height of the tower, making it 20 floors and ~6300 m^2, its target area is ~1500 m^2. A 6300 m^2 box with a square floor plan has a target area of ~6500 m^2.

Note that doubling the area of the box doubled the target area, but doubling the area of the tower only made the target around about 67% bigger.

For the one story box, target area is always larger then floor area, and the ratio approaches 1 as floor area goes up.

For the 10 m radius tower with floors 3 m apart, the ratio of target area to floor area goes to ~0.19 as the number of floors goes up.

Although tower wizard's chances of getting hit by a random projectile are lower the box wizard's chances, it should be noted that a hit on the tower is potentially more damaging than a hit on the box. Box wizard doesn't have to worry about a lucky shot collapsing his building. When deciding which kind of building to build, you need to take into account your enemies and decide whether whether a higher chance of a hit being a critical hit is worth a lower chance of not getting hit.
Anything topical (tragedy or not) is a good opportunity to publicize the Musk brand: from little boys trapped in a flooded cave system, to promising "ventilators" during a deadly COVID outbreak
The net effect is the same. Average Russian citizens are being treated as pawns and they will face the most brutal effects of these sanctions.

Oligarchs and authoritarians in Russia have options and resources to weather the storm. Many everyday Russians live close to hand to mouth and they will suffer. I don’t accept the decision to dehumanize an entire nation’s citizens for the acts of their authoritarian elite.

The Russian kings and knights and rooks and bishops will be fine. It is the pawns or plebs who will suffer the most.

They are innocent in my eyes, having only committed the crime of being born within the wrong arbitrary political boundaries.
Caching. That you control in code - not controlled by server headers which never worked reliably back to the earliest days. Already addressed in browsers in window.caches, serviceworker.

It's not so much you need JQuery version x cached from another origin, but once its loaded from your site, it never needs to be sent again. Heck you cache everything, or everything except index.html if you want to.
i don’t think building your own framework is a good idea. react still has plenty of possible patterns to decide between even after making the decision to use it. a team should have decided upon ways to do stuff even inside of a framework/technology/language.
Nothing wrong with spying, it keeps the world safe in a way if your intelligence agency can tell you the enemy isn't planning a sneak attack.
Ahh, the Culligan/Water treatment/softener business model.
> It's clearly more likely than not that both are true.

Very few people seem to have the ability to realize this, on certain topics. It is a major bug in evolved consciousness.
There is Ukraine and there is Ukraine+NATO. In Russia's security interests, only the latter is worthy of war. Ukraine had a coup in 2014, installing an anti-Russian regime who then made overtures of joining with NATO (aka the US military cloaked in international "defensive" armor). This is why they responded in Crimea and now. This isn't happening in a vacuum.
The government depends on its people to be able to do things like run a war. You can't cleanly separate the two.

the only way this war ends without escalation is when the Russian people convince their government to stop fighting it
You can make an exception for payments (where you rely on the payment processor anyway, so the reliability argument goes away - if the processor is down, the payment will fail even if you self-host the payment script). Of course, embed the payment script only on the actual payment page, even if your processor tells you otherwise and quotes some fraud-related bullshit.
Note (without disagreeing). In SQL NULL!= NULL
Why would this make you think Firefox is less secure? They've publicly disclosed they've fixed an issue. That's what you want.
Putin put a red line on Ukraine joining NATO (regardless weather he has the right to) and the west didn't care about his line drawing.
So I guess in international relations, there are no lines? There's nobody to set them
https://blog.windscribe.com/top-r-russia-mod-admits-to-ownin...

Yup. It's crazy how many of these are out in the wild. I mostly notice Chinese ones from my time there or ones highlighted by friends. But the Russian disinfo coming out in the lead up was insane.

I'm all for freedom of press but state sanctioned media is such a fucking blight.
> I have no idea what the solution is.

I think this is a case where legislation is a clear win. It should be illegal for manufacturers to gate core functionality of stationary appliances behind an internet connection. Appliances already have a legal definition in the U.S. so it's not a far fetched idea.
I must be confused because I don’t see how. Isn’t it the exact opposite?

GP is essentially saying “that’s what you’d say if you were lying” and I’m responding with a silly, opposing example of “that’s what you’d say if you were telling the truth”. They are both meaningless statements. The second serves to point out the meaninglessness of the first.

Or I’m just going crazy.
I'm not sure there's that much difference in browser security. There were tiny nits where Chrome was somewhat stricter that I was aware of (e.g. handling of nosniff header), but most of that has been fixed at some point. Mozilla was somewhat slower with some security improvements like site isolation, but eventually catched up.

Memory safety is a general problem, but all browsers have it. "We urgently fixed this use after free bug because we've seen exploits in the wild" is something you can read about Chrome every now and then as well. It's not good, but noone has a solution for that right now. With Rust Mozilla is at least working on getting a handle on that.
Show HN: Xordle, a Wordle variant I made
i forked hello-wordl to put together this wordle variant

there's two secret words rather than one, they don't share any letters in common, and your clues will be green if they're green in either word, yellow if yellow in either word, grey otherwise

i find it pretty hard, my friends seem to be pretty good at it though
If you propose no alternative, you propose doing nothing. In this scenario russia takes everything outside of NATO and Chinese influence. And by "takes" I mean hundreds of millions of civilians killed, with a faster rate than currently, because if we show russia we're too soft to react, there's really nothing demotivating putin, or whoever comes after him, to do anything he wants.
The comment of Daniel Darabos points to an interesting resource, explaining how these lenses are designed:

https://www.pencilofrays.com/lens-design-forms/#mobile
Wikipedia's whole system is not designed for interested first-party to intervene. They do ALL. THE. TIME. but it's not built for that.

At this point you need to fight fire with fire. Everything you know that is factually wrong needs to be investigated; are there credible sources for those lies? Can those sources be discredited?

It takes a mountain of work to fight casual lies, unfortunately.
Most people cannot afford to self insure for retirement, and living in poverty is a burden on the social fabric, “damage you cause to others” in your own words.
It's the same in some ways. Already there has been an uptick in hate towards Russians outside Russia. Also Belarusians[0].

Even if they're anti-Putin and anti-war, if they've been trying for years to change things they can't escape being Russian/Belorusian.

[0]: https://twitter.com/AlinaLeonovaSF/status/149945792856210227...
Very much the opposite of Corbosieur, but still great and a really interesting exploration of similar ideas.
Self host would not be putting them on github pages unless you own github.
:+1: for the effort to document this, and coordinating the disclosure with the vendors. This mainly talks about rate-limiting bypass/DoS, but if XFF is also used for audit trail logging of IP addresses and/or IP-based access lists, then the security implications can be even more severe, with falsified audit logs and bypassed security controls.

Setting up an application server behind a reverse proxy to use the "real" client IP is unfortunately very typically just a trial-and-error based process, with very little room for this kind of nuanced security-conciousness, because the configuration and exact behavior is all so non-standardized across different implementations of reverse-proxies and application servers... Typically users will just try different configuration settings until they find a combination that seems to work, and you would actually need to dig in with curl and tshark to understand the edge cases, because the documentation of the application-specific implementation is typically just one brief sentence...

Getting XFF working correctly through a complicated HTTP stack with multiple layers of nginx/haproxy/apache proxies (yes, they have different non-overlapping feature sets), custom backends implementing custom XFF handling/forwarding, and jetty/spring backends upgraded across a major version bump that changed the implementation and configuration properties related to XFF handling was insanely difficult. And of course it broke when migrating from a F5 LB to an AWS ALB, because it behaved differently for that one edge-case for an important customer... highly recommended to just override the entire XFF header with a single value at the appropriate point in your stack, if at all possible.

If just the naive leftmost-first vs rightmost-ish-with-configurable-list-of-trusted-upstream-proxies wasn't enough, then yeah, HAProxy does the thing where it adds a new 100% standards-compliant header continuation line [1] that maybe 1% of backend application developers have ever tested with. And trying to configure HAProxy to interpret the incoming XFF headers for logging/access-control ~is~/was even more weird [2].

[1] https://github.com/haproxy/haproxy/issues/44
[2] https://github.com/haproxy/haproxy/issues/90
If it's this easy, go start a hedge fund. You are literally leaving billions of dollars on the table by not.

An average first year finance student can do a "brief DCF analysis". They put garbage in for the cashflows and get garbage out for the valuation - and then write it up with high precision.
You supported Putin and his regime by paying taxes, buying russian products, which means even more taxes. You supported it silently by not going to the streets and protesting.

(I was born in Russia, but never worked there. We left the year Putin came to power.)
Amounts to appeasement and assumes they would stop at Ukraine, risks Russia becoming more powerful after annexation of Ukraines economic wealth.

FWIW I don’t think your post should be flagged dead, it is a contrarian opinion but doesn’t break any rules.
Except less coffin like in construction. That was his criticism of pods, and frankly I share it.
people were arrested even for protesting with empty sheets of paper
The ole, "the science is unsettled argument" a classic. Repurposed for propaganda very fresh, Tasteful even
This is ethnic genocide. Just look at Ukrainians in Crimea, Donbas, or RF: they are extinct. Ukrainian language and literature are forbidden in RF. Crimes against ethnic minorities are not prosecuted. IMHO, Ukraine should just nuke few millions of Russians to protect millions of Ukrainians. Pooking is crazy.
Would you say the same of Israel?
The protocol, spec (MSC3401) and underlying client heavy lifting (matrix-js-sdk) are all Matrix; contributed by a mix of Element employees (Robert, me, Dave) and community contribs (Simon B). The app skin itself on top is Element, given most of the work and the original idea is from Element folks - same reason that Element itself is a product from Element-the-company even though 95% of the code is underlying Matrix projects. The Matrix Foundation itself is a non-profit to look after all the Matrix protocol and reference implementations but doesn’t ship user-facing products, just as W3C and Linux Foundation don’t.
And some trace the history of Grand Theft Auto and Lemmings back to this factory and the local boom in computers it produced, with one of the Rockstar North founders working in the Timex factory before creating his first game:
https://www.nostalgianerd.com/from-dma-to-gta-the-story-of-d...
I 2nd this
Your entire argument is predicated on building an SPA; if you don't need an SPA then you de facto do not need a frontend framework (which is what the OP is implicitly saying, do as much as possible server-side).

Now, saying that, there is something to be said for separating UI from the backend. Yes, it adds (
a great deal of) complexity compared to server-side applications, but the reactive programming model is quite powerful, and useful even if you could build the application entirely on the server.

And obviously if you do need an SPA (e.g. wrapping WebView for iOS/Android) then you don't have a choice, or if you do you'll be reinventing the wheel, poorly.
Right? "Don't depend on anything fakeable."
please wait until we’re out of beta! :)
>But reading that article, its main foreign assumption is that the desires of the individual Ukrainians for freedom is irrelevant. Not temporarily ignored out of pragmatism. Not disappointingly accepted due to force majeure. But rather rendered irrelevant by the desire of Russia to rule over them as subjects.

That's not what Mearsheimer said in the article:

>One also hears the claim that Ukraine has the right to determine whom it wants to ally with and the Russians have no right to prevent Kiev from joining the West. This is a dangerous way for Ukraine to think about its foreign policy choices. The sad truth is that might often makes right when great-power politics are at play. Abstract rights such as self-determination are largely meaningless when powerful states get into brawls with weaker states. Did Cuba have the right to form a military alliance with the Soviet Union during the Cold War? The United States certainly did not think so, and the Russians think the same way about Ukraine joining the West. It is in Ukraine’s interest to understand these facts of life and tread carefully when dealing with its more powerful neighbor.
Correction: It was released 2016, that's 6 years ago.

The point still stands though. But 6 instead of 8 years.
"Air Serbia Doubles Moscow Frequencies To Meet Demand"

https://simpleflying.com/air-serbia-doubles-moscow-frequenci...
None of those quotes are very subtle.
There is nothing to fix, as you can see from the comments here most of NH thinks Wikipedia is neutral and objective and what not. This is the actual problem. People haven't figured out yet how bad it is because there is simply nothing that comes even close to an alternative to Wikipedia.
What was there to discuss about the original article? It was a series of very short instructions on how to access the BBC in English, Russian, and Ukrainian.

Maybe you can be the change you want to see in the world and start one yourself.
No, they aren't. The explanations are based on different estimates of cashflows. As a concrete example - people didn't miss GOOG when it went public because of "valuation methods". People missed it because they didn't imagine that in 2022 a search engine company would be doing $75 bill a qtr of high margin revenue. People didn't miss AAPL in the late 90s because of "valuation methods", they missed it because they didn't see AAPL doing $90 bill a qtr of pretty high margin revenue.

Understanding the future cashflows of a business is really difficult stuff. Playing with numbers in a spreadsheet is really easy stuff.
> I know TLS 1.3 added encrypted SNI. Not sure if the proxy can force clients fall back to non-encrypted SNI.

Encrypted SNI is not the default. You've got to do a fair bit of work to do it. You'd probably want your proxy to be able to decode it to direct the traffic anyway.
Katyn Massacre
They have guns, the two parties warred before. In fact, there was never a formal peace agreement so the war is technically still going on.

The asymmetry is in the economics. Taiwan can realistically be strangled by China. This has seemed like the plan from Beijing. Once politically weak, you can take over with sock puppets.
I suppose their lawyers figured out that people would just recycle them and stop paying.

If so, I suggest installing a water softener with an anti-backflow device but not installing a bladder pressure relief tank between it and the water heater. Also buy a whole house leak detector / shutoff valve.

If the resulting water heater tank rupture doesn't lead them to breach the maintenance side of the contract, look into over-softening the water so the sacrificial anode fails every 6-12 months.

(Edit: In case it wasn't clear, this is a great way to do unbounded amounts of damage to your house, so don't actually do this.)
That could be a lot of fun. Someone did a "guess the word based on people's tweets a while back: https://news.ycombinator.com/item?id=30101456

Throwing in those extra hints about the players make it feel more like a zebra puzzle, but that's not a bad thing, especially if you want mere humans to solve it. I can't easily process a thousand tweets, so giving more compact data is key.
I didn't say that this specific link made me think Firefox is less secure. Advisories are great and everyone should do them.

But as someone in the security community (not browsers), I've heard Chrome is a much harder target.

Would love for someone actually aware of the browser security scene to let me know if otherwise.
They are lifting restrictions because deaths and hospitalizations are coming down [1].

[1] http://91-divoc.com/pages/covid-visualization/?chart=states-...
I like the peaceful approach, but the scary thing here is that the dictator in power can be a straight up psychopath with no empathy. Putin doesn't seem to have any qualms with getting his perceived enemies murdered... So even to lead a peaceful movement like that, the identity of the leaders has to somehow remain a secret?
Did the Universe Inflate?
FWIW I'm not arguing we should, I just find it hypocritical to say Europeans (which I'll extrapolate to the rest of us in the West) are taking responsibility as opposed to Russians when we are doing so from the comfort of our intact living rooms.
>I think Timex's main projection was that the Sinclair machines would be affordable over the long term. But I guess in the USA, the competition became cheaper much faster than they expected.

The competition became cheaper much faster than anyone expected.

The Timex Sinclair 1000's introduction in the US in 1982 caused the US home computer industry to believe that they had to enter the sub-$100 market. Tandy introduced the MC-10 (<https://en.wikipedia.org/wiki/TRS-80_MC-10>) as a cut-down version of its Color Computer, and TI designed the 99/2 as a cut-down version of its 99/4A. Two unexpected things happened:

* Americans, more wealthy than Britons or Europeans, viewed $99 computers as toys.

* Commodore's Jack Tramiel began a massive price war that drove the retail price of existing, more capable home computers down to $99. In 1983 the Commodore VIC-20 and TI 99/4A reached the $99 price point. TI thus never introduced the 99/2 despite having it ready for production.

The VIC-20 and 99/4A received substantial third-party support; the Timex Sinclair 1000 and MC-10 did not, and quickly disappeared from the market.
> What we need is some way to get left-leaning people to move to platforms without excessive censorship, which would both keep the balance and deter the incumbents from continuing to be heavy handed.

There's no shortage of people trying to make these platforms but the problem is free-speech oriented sites get deplatformed. "Build your own hosting company!", "Build your own mobile operating system!", "Build your own payment processor!", etc, etc. A small handful of tech and payment companies can veto any website or app.

It's like the old days of broadcast television where if your show was too controversial for ABC, CBS, or NBC it didn't get on TV, period.
According to my tour guide at the Bodleian Library at Oxford University, preservation of books back in the olden days was all about reducing humidity. And the best way to achieve this before proper isolation were invented was to bring them up as high as possible. Rich people who collected books therefore always kept their books upstairs.

Also the curators of such collections are also often scholars. Old men, going up stairs to read their old books.

An hypothesis on my part of course, but to me I can se how this over generations gets morphed into "wizards in towers".
https://matrix.to/#/!XBsViwGeTelMcIVWGE:matrix.org?via=matri...
I don't understand why you are getting downvoted. This statement that the market is usually correct is basically right. Maybe a better explanation is: something like 90% of the time 90% of companies are priced within 10% of the "true" valuation.
Thank you. I love discovering things like this on Hacker News.