skysight-inc/HackerNews huggingface dataset:
> Speaking of which, it'd be nice to make the TLS end-to-end: from the user through a proxy that doesn't decrypt all the way to the application server. But I'm not sure what the state of the art there is. It used to be possible to dispatch based on the SNI traffic and then proxy at the TCP level, but I know TLS 1.3 added encrypted SNI. Not sure if the proxy can force clients fall back to non-encrypted SNI. I could imagine the spec authors making a point of not allowing this so a man-in-the-middle can't find the intended host. Maybe the two legs just have to be encrypted separately now.

My boringproxy[0] project has a mode for doing SNI routing at the reverse proxy, and tunneling it all the way back to a local client machine which handles the actual TLS termination. The client also gets certs automatically from Let's Encrypt. So you end up with automated end-to-end encryption where the boringproxy server/VPS can't decrypt any of the traffic.

Early versions of boringproxy acted as a more traditional reverse proxy, terminating the TLS at the server then making a new HTTP request upstream. Eventually I added the ability to move the HTTP proxy into the client to enable e2ee. Most recently I implemented raw TLS all the way. There are tradeoffs:

Pros:

* End-to-end encryption.

* Simplicity. You just need to peek at the SNI and look up what TCP tunnel to pipe into.

* Things like WebSockets and other hop-by-hop requests don't need to be implemented by the proxy.

Cons:

* You lose the ability to do compression/caching/CDN/etc at the server.

* You can't support new protocols like HTTP/2, HTTP/3, etc at your server because it only understands TCP wrapped in TLS.

In practice, I think these tradeoffs are totally worth it for self-hosting. I've found performance to be great for my purposes.

As for encrypted SNI (ESNI, now wrapped into encrypted client hello, ECH), I'm pretty sure it will be implemented in a tiered approach like you surmise. So in my case the boringproxy server will have the keys to decrypt the client hello, but the origin servers will still control the actual TLS decryption.

[0]: https://boringproxy.io
ClickHouse, Inc spun out of Yandex last year and is now a private company HQ in the bay area, although their funding is partially from participation by Yandex. No idea if this moved any portion of their development. Would be curious to see if this has any impact, or if they're going to get lucky and evade Yandex's current problems.
> Dutch doctors want politicians and human rights groups to speak out and discourage the practice of male circumcision in the Netherlands because they say it is a “painful and harmful ritual,” and a violation of children’s rights.

> Between 10,000 and 15,000 boys are circumcised in the Netherlands each year, mostly for religious reasons and not always with an anesthetic, according to the Royal Dutch Medical Association (KNMG) which represents surgeons, pediatricians, general practitioners and urologists.

https://www.reuters.com/article/us-dutch-circumcision-health...

You can find similar views expressed by many medical associations around the world (https://www.thelocal.dk/20161205/danish-doctors-come-out-aga... https://www.thelocal.se/20090725/20900/ https://yle.fi/uutiset/3-5142149) I believe the American Pediatrics Association is the only major one that has come out in favor of circumcision. Their statement is along the lines of "the benefits slightly outweigh the risks". Americans may be cool with genital cutting but in the rest of the world the procedure is very controversial.
This is true, but it is a huge proxy for investment and survivability. In the beginning, it was hard to tell how much Amazon would invest in OpenSearch, but it appears now (based on activity) that Amazon is committed to OpenSearch.
Bidets. Or higienic showers. Or Japanese-style toilets. Toilet paper is not enough, folks.
I disagree. The suffering of Russian people is very avoidable. For example if the US and Germany had the political and economic will to stop buying oil from Russia and thereby directly funding Putin’s war.

Instead they chose broad indiscriminate sanctions that, while politically convenient are absolutely devastating to everyday Russian plebs. The Ruble has collapsed leading to hyperinflation on everyday goods the people need to survive.

Many innocent Russians will die directly because of the actions of the west. Their blood will be on our hands.
> Around 2012 mass protests in Russia was supressed and a lot of people landed in prison. Some opposition leaders were killed.

"Maximum penalties were fines of several thousand rubles or imposed labor of up to 200 hours" https://en.wikipedia.org/wiki/2011%E2%80%932013_Russian_prot...

That's how it works, but can he incarcerate millions of people?

We have good examples of non-violent protests that won against such regimes:

We did in GDR. We went to te streets. The machine guns were mounted on the top of every single train station. We went to the streets anyway. Not with stones, but candle lights.

We have examples as in https://en.wikipedia.org/wiki/Otpor#Strategy_and_tactics

We have literature about it https://www.nonviolent-conflict.org/wp-content/uploads/2017/...

We have as well examples of violent protests through the History that worked (I don't support it, but we cannot deny their efficiency) https://www.newyorker.com/news/q-and-a/how-violent-protests-...
Governments have far more money than most private businesses.

I never said they fired a single type of missile. US missile defense systems are frankly not cutting edge and lag behind Russia and China, and will for multiple years.

Missile defense systems have significantly more existing infrastructure than exist for rocket launches. The question in wartime is ‘what capabilities are you getting rid of, and for how long?’ In the case of starlink, the question is complicated both by reaction to the creation of so much space trash and the piggybacked approach SpaceX has taken to get the satellites up there.

This is feasible. Again, I doubt it is the right satellite attack strategy, but it is not absurd.
> I have no idea what the solution is

Refuse to have any oven and hire someone else to install one afterwards.
The advice (from years ago) was that the Tor network is bandwidth-aware but not very latency aware.

It requires bridges, relays and exit nodes to build a circuit and communicate.

The client does not know what latency exists between the chosen nodes when builds a circuit.

If the nodes are located in large datacenters in good locations you'll have acceptable latency relatively often. If they are on residential ISPs it might not be the case.

Perhaps things have improved in the meantime. https://community.torproject.org/relay/relays-requirements/ does not mention latency.
> Amount of money I have seen lost because people were using different versions of excel sheets that were not up to date is staggering.

Isn't that a processual problem? An organizational and structural problem?

I have seen the same with Google Sheets as with Excel. I know Excel isn't liked in a lot of tech circles but I personally think MS came a long way with it.

But yes - it can't solve organisational problems.
Even among developers not everyone is footloose. People have parents to take care of, they get married, they have dogs. Or they just care about their country even if they hate its government. Remember Leipzig in 1989? The first slogan was Wir wollen raus. But then it changed to Wir bleiben hier.
Is there a way to disable XSLT in Firefox?
I use a framework even when it’s not 100% necessary because it’s easier to collaborate with other developers. The framework documentation and best practices helps a lot. What’s more, 5 years ago I started a simple app that didn’t require a framework. Then it grew and grew and grew. Today I would need to rewrite it in a framework but it would be a huge job.
it would increase latency badly (the turn server for the call.element.io instance is in the UK, so all traffic would bounce through it, often unnecessarily), and it would cost us loads on bandwidth as a result. It also means that the turn server sees all the IPs and metadata of who is calling who, which may not be an improvement if you trust your caller more than your server admins!

For instance, two users on the same LAN calling each other would end up bounced via the UK, which is a bit unfortunate if they are in Australia.

The solution is really to switch to using SFUs everywhere, which then solves both firewall traversal, scalability and privacy (assuming you’re happy for your SFU to know your IP - but if you’re happy for your TURN to know it, then it’s probably fine).
This is not true. Even just the opposition party leader Navalny is good enough. Good people exist in Russia. Putin just needs to be removed from the helm.
That is literally what the site is about.
Again, sanctions are not just "not doing trade". They are a legal framework of consequences for doing trade that apply not just to the state doing the sanctions, but also other states, and private actors in other states who do business with the sanctioning state as well. It is not a boycott. It is a punishment with real tangible negative consequences for the target country and anyone caught in the middle.

In the US' case, sanctions often also come with things like "withholding the target country's reserves held with the US central bank", which do material harm to the target country's economy.

People keep trying to frame this as "just not buying gas/oil" but the funniest thing about that is that for the most part, the sanctioning countries are still buying gas from russia. That is literally the one thing not included in these sanctions. The sanctions would probably work better if they did stop buying natural resources, but the backsplash from doing that would be immense.

Anyways, it's awfully convenient that the tools America is uniquely positioned to use to cause harm to other countries (economic sanctions, targeted drone strikes, etc) are never "cause for war."

And again, this is completely independent of whether or not it's the right thing to do. If you can't get over your cognitive dissonance long enough to recognize that sometimes the right thing to do can cause immense harm, I don't know what to tell you. You should still recognize that sanctions are not neutral acts, and they do kill people as surely as a gun does. Thinking otherwise means you're somehow still stuck in the 19th century's idea of war (and even they would probably consider a trade blockade an act of war).
This has been superseded by: https://news.ycombinator.com/item?id=30570053
Absent evidence to the contrary, my take on Putin's actions are that he wishes to reestablish the buffer region Russia has historically maintained around itself to absorb invaders. He controls every state near him except Ukraine, so I would let him have it and then he will have his buffer and hopefully be happy. He has nowhere else to go after that except actually attack NATO, after which there is world war, so the appeasement that is possible in this case is rather limited, it really can't go further than this.

Anyway, I get the argument that you should stand up to the bully, but this guy gives me the vibe that he's actually all-in and will (literally) lose his head if he loses this war. I think if this continues and he gets into a losing spot, he will gamble that his nuclear forces will win. I don't see any other option for him actually.
The temp said 20° (which is impossible in my climate). Good thing I didn’t crank the heat up.
IDK, my TV went out 3 days before the Super Bowl and I bought a perfectly fine Sceptre (not Spectre) TV from Amazon and got it the morning of the game. As a dumb TV it does exactly what it's supposed to.

side note: I've previously stated that I refuse to buy from Amazon but in this case I had to bite the bullet and take them up on their free month of Prime so that I'd get it by the Super Bowl. They also had other brands with various levels of dumbness.
> they had decades to make this move

But friends, family and loved ones where they live
For now. It's absolutely possible to keep a territory under your control by force if you look at the historical record.

You can't extrapolate such a far fetched conclusion from one data point on how string the Ukraunian resistance seems in the first weeks of a war.
Fixating on TSMC is for myopic tech geeks. Yes, it's important, but not nearly as important in the grand scheme of things as:

- A thriving Chinese democracy showing the mainland that no, they are not intrinsically incompatible with freedom.

- The credibility of the US as an ally to other Asian countries.

- Taiwan's strategic location.
Depending on the country you immigrate in, there might be a language barrier, general mistrust and many other issues like finding a place to live (flat, house, etc.). Some qualifications differ, but of course in IT the definitions of roles is a bit vague, so it is less of an impact. Generally Russian IT people have the a stereotype going for them, to be very capable, at least where I am from. Losing friends and contacts is also something that will take time to build up again.
Except they're not fine with that. In Southern California it's basically solid humanity from the ocean to the deserts in the east. The existing freeways can't be expanded, there's nowhere for them to expand into. Businesses and houses butt right up against all of the freeways.

This is the same problem with rail lines there. There's nowhere to build new rail lines. People live and work anywhere you might want to lay track.

Trying to build tracks or roads is complicated by geography. There's tons of hills that are impractical to tunnel through and there's a fairly steep grade from the coast to inland areas. The train tracks exist where tracks are most practical.
So, more trade with Tawain from the west, and give them more guns.
I'd say so, yes. I know American Sign Language and don't consider that to be foreign either. Perhaps 'official' isn't the right cut: indigenous languages aren't official in Canada nor the US and I certainly wouldn't call those foreign either (unless somebody lives in Portugal and speaks Lakota, of course.

From a different perspective, English and French are both foreign languages, brought to the land by colonizers.
Mickey is in a tower it seems based on the stairs the buckets are being carried up. But maybe it’s just visually some stairs.
>We're the only western neighbour of Russia that is not in NATO and has not been attacked by them after the fall of Soviet Union. We're basically next

Moldova?
Feminists arm women
Not the person you're replying to, but I just wanted to point out:

andrewmcwatters.com boasts a $1400/day rate. That's not billions, but is still quite a respectable rate for their services. I assume they're well respected and trusted by their clients.

Hoever, in your comment here, you've mistaken some napkin math for a hard and fast assertion on their part and I think it's a little unfair. There's far more to a company's existence than DCF, all the poster did was point that out. It's obviously not that easy to run a hedge fund, but that's no excuse for sloppy facts here, or anywhere else for that matter.
I have the same exact problem and my way of dealing with it is an extreme elimination diet. It's hard, but I can sleep, and I'd rather sleep than pig out on food. Gluten, sugar, spices and a myriad of vegetables and grains are triggers for me.

Also daily saline nasal rinses and I can breathe better than ever, though diet is what does the most work.

My pet theory is years of junk food precipitating into IBS and leaky gut, so only the food that cause fewer reactions are ok. In a healthy body some "toxins" are tolerated and don't cause issues, but when your gut is fucked you need to start from scratch.
Taiwan cannot be strangled as long as the rest of the world is willing to trade with them. A naval blockade of Taiwan would not be tolerated by the west, and the first US-flagged ship that gets sunk would start real war.
> An irrefutable cryptographic timestamp is just that, irrefutable.

In math, sure, but he specifically asked about a court of law. Irrefutable in math doesn't mean admissible in court. Then there's the 1, 6, 12, or however many random people that decide the case; they likely need the math explained to them, and two sides get turns convincing them the other is wrong.
It worked like it did for airlines: lower prices and generally worse service unless you want to pay for it (and most people don't).
This reminds me of a joke about a magician and a very expensive watch.

I wonder if they managed to put it back together again.
> Is that correct?

Nope! I think Putin only cares about having a buffer zone from NATO, much like Afghanistan is (or was intended to be) for the US against China. I'm simply providing examples to your question upthread:

> Are they holding political office or have strong influence on the politics of Ukraine?

All 3 examples hold political office and 2 are upper-level administrative positions.
Did you manage to re-assemble it and did it work?
Presumably by agreeing to the terms of the treaty and by being accepted by existing members. It's the North Atlantic Treaty organization, not the North Atlantic Organization
He’s not talking about self host as in CDN vs self host. It’s about not linking to third party assets. You link to yoursite.com/static/bootstrap.js, not someoneelse.com/shared/bootstrap.js.

You can (should, as he says at the end) have this be through a CDN. Just use the same CDN you use for other stuff.
> I think the real connection is that programming truly is a generalizable tool. A wizard can apply magic to all kinds of general situations. Similarly, a programmer can apply computation generally. A musician can make magical, mind-blowing music but they can’t use music to make a dishwasher.

In Alan Dean Foster's Spellsinger series the protagonist is able to conjure up (on separate occasions) a Jeep and a boat using music magic. A dishwasher wouldn't have been much of a challenge (other than their usual difficulty in getting the result they were aiming for and the fact that there wouldn't be electricity or plumbing to hook it up to).
How much of this is due to Apple's shift away from Intel chips?
Solid take. We should offer visas with moving bonus for every stem master / phd
2000 deaths a day in the U.S. from Covid. They're having more deaths nowadays in the US than MOST of the rest of the pandemic.

And New York and California are still lifting covid restrictions.

State's are realizing that Florida and Texas were right from the beginning and copying them.
Good point. When I think of Turkey, the first thing that comes to my mind is "North Atlantic", same as you apparently.
Not a bad idea! There’s been plenty of friends and colleagues that have asked me to look over their work emails in order come across as professional or least likely to generate conflict.

Might be nice to lazily respond to people and the program autogenerates professional boilerplate for you
I feel like people severely over-estimate the level of abstraction some frontend tools give you.

Out of boredom once I went through the redux tutorial, and coded an alternate version with vanilla JS. My vanilla code was actually shorter, including the code needed to implement something like the observer pattern.

JS in 2022 is a really powerful language, and the DOM APIs have improved tremendously. Now people will hit back with "well you'll just end up re-inventing a framework" - but do you really? You just write an app against the abstraction of the DOM, instead of the parallel abstraction of the react VDOM.

I'm sure at a certain scale it makes a lot of sense to standardised on a framework so you can easily replace people who burn out after spending half their time updating libraries. But for smaller projects - I'm just not seeing it.
This is true across a frighteningly large swath of “quasi industrial home control” stuff - all the vulnerabilities of industrial controls with zero of the attention paid to it.
Their weapons can reach any country in the world, including the US. I don’t think anyone in any intelligence community would refute that.
I think it's only a matter of time until the US and Germany stop buying gas from Russia. It's going to cause a lot of pain, especially for us in Germany where nearly a third of gas is imported from Russia. But that's the point, there are no more easy ways to put pressure on Putin. We are all going to feel a lot of pain before things get better.

What is happening to the Russian people is tragic, but it pales in comparison to what the average Ukrainian is experiencing (shortages of food, medicine, water and basic shelter, psychological terror, maimings, deaths).

We have no other means to put pressure on Putin save arming Ukraine or attacking Russia.
Actually, it is currently impossible for US citizens to renounce their citizenship for all practical purposes.

Technically it should be possible but in reality renouncing requires an exit interview and the US State Department has refused to schedule exit interviews for more than a year.
War with China is worse than sanctioning China, but likewise, war with Russia is worse than sanctioning Russia. There's a reason why NATO is content to stand by and do nothing.

I can't tell you what will happen if Taiwan is invaded tomorrow, next year, or twenty years from now, but I can tell you that the US will think long and hard about whether or not it will want to get involved. And it might well choose not to.
This is an interesting point. As more users get pigeonholed into sharing the same IPv4 addresses, IP-based rate limiting will essentially become useless. I wonder if this will help drive IPv6 adoption.

> The biggest offenders are internet of things backends for registered devices I "own" and streaming services I'm paying for.

Wait those are the services that are rate-limiting you? They're not smart enough to rate-limit based on your account credentials?
Anecdotally, yes. Would be great to get information on the contrary.
> The Pentagon spends some $4 billion a year to sway public opinion already, and it was recently revealed by USA Today the DoD spent $202 million on information operations in Iraq and Afghanistan last year.

> In an apparent retaliation to the USA Today investigation, the two reporters working on the story appear to have been targeted* by Pentagon contractors, who created fake Facebook pages and Twitter accounts in an attempt to discredit them.

* https://web.archive.org/web/20120615051057/http://www.usatod...
That's pretty much how I see it, which is why I think the responsible choice would be to just refuse to show up for work. Eventually that will cripple the country to the point where everything stops working and it will be much harder to get past that compared to a concentrated protest.
I think a part of the problem though is that "control" is not always well defined. I've seen headers used that were "controlled" because a proxy sat in front and did filtering. But then the app got moved behind a different proxy, and what they controlled was no longer such.

But, if you don't trust any headers at all, it's tough to do much with HTTP.
They have a larger and better funded security team, but Chrome is also a large target and gets exploited all the time as a result.
That's not how ADSB works.. FlightRadar/FlightAware do not have an "FAA Radar feed", they have a network of rtlSDRs listening for ADSB traffic. They offer the removal of the public display of flights, you can still purchase a commercial account to view them..

https://flightaware.com/adsb/flightfeeder/
Height restriction? Approval process? Community reviews? Environmental impact studies!?
It's not cowardly to avoid wearing controversial shirts. There are nuts everywhere just look for reasons to be set off.
Turning "special operations" into a meme is a great idea. Use it jokingly in every day life. If everyone start using it you have won your first battle.
To me, not having an integrated translator in android Firefox is a deal-breaker