skysight-inc/HackerNews huggingface dataset:
Show HN: A URL shortener which splits traffic betweeen URLs – No login required
Contabo introduces a new cheap Object Storage
It is impossible to load compromised firmware on a Yubikey after it has been manufactured. You can't say that for OnlyKey.

One laptop contains more e-waste than dozens (hundreds?) of Yubikeys, so there's much lower hanging fruit on that tree.
i think i remebered an arstechnica article (was it that? i dont remember) that explained in simple terms how jobs does keynote better. they explained stuff like "just write in as few words as possible your topic and speak. if you wrote a paragraph on screen, why would anyone hear you repeat that?"
and other stuff like using a plain background instead of fancy things.

i would love to revisit that but sadly i have been unable to find it
How can Walmart defend itself from foreign government's attack, with cameras, guards, and most importantly locked windows and doors?

Defending internet infrastructure from foreign government's attack is not "basic security".
I would love if you the docs in IndexedDB incase I don't want to host a server or put it on someone else's server. And occasionally export all my data

Would love to able to add other code files types like github. ``` in md isn't the solution

But awesome work :)
Err.. daily trespassing airspace to measure their response time.
Ukraine firm warns of risk after power is cut at Chernobyl
It makes perfect sense from a user perspective but I suspect the company isn't interested in making mere users aware of ongoing issues via the service itself.
I work as a sysadmin and only write the odd program/script (Python, Perl, Bash). In the past, I’ve run into the problem of not being able to write to a log file (disk full or insufficient permissions) so I now check for these situations when opening or writing to a file.

A while ago, I started learning C in my personal time and am curious about this issue. If `close()` fails, I’m guessing there’s not much else the program can do – other than print a message to inform the user (as in the highlighted git code). Also, I would have thought that calling `fsync()` on a file descriptor would also return an error status if the filesystem/block device is full.
White House launches comprehensive plan for cryptocurrency regulation
Storage footprint is not and has never been my issue. Little knowledge of and no control over what bullshit an app may or may not be doing in the background is.
Ally Invest has no commissions and an API. I manage my portfolio in python an Jupyter lab.
I used to be an inexperienced manager as I expect many managers are these days and my 1:1s were a waste of time. I didn't really know what to do, constructive criticism and suggestions are really hard to do - I found it really hard to say what I really thought. However as an employee you should be asking about how to stand out in the team and "make a difference".
If you are building an app just for yourself, or a small team. you can leverage our product MagicBell (https://www.magicbell.com), and get in-app, push, text, and Slack notifications in one API call.
Hi HN. I've built Splitmat which is a simple tool to run AB/Tests.
It's a URL shortener which splits the traffic between multiple pages.
It also appends to each page a specific UTM_ID parameter. We then use that to sync metrics from Google Analytics. It's free and requires no signup.
Getting from zero to paying one's living expenses is probably the most difficult growth phase of any start-up. In my personal experience, this phase is best funded by technical debt. I suspect this is an unpopular opinion because cleaning up technical debt is no fun. None-the-less, I've seen it over and over -- a quasi-technical founder knows someone willing pay for XYZ, then that person makes it just well enough to work. A company is born, the rent gets paid, and perhaps an acquiring company cleans-up the tech stack.
The US government does do quite a bit to protect their citizens from electronic attacks. There are organizations like CISA and NIST that do a lot of work to help prevent attacks, and the FBI and DOJ do a lot of investigate and enforcement work after the fact.

For example:

https://www.fbi.gov/investigate/cyber/partnerships

https://www.cisa.gov/stopransomware/ransomware-guide
Canonical had a $20 million operating profit in 2020.
You're missing one thing though: North Korea doesn't rob Walmarts. Expecting private entities to be able to stand up to the kind of attack a hostile nation state can muster is unrealistic, and, quite frankly, probably a drag on the economy.

Besides, what ever happened to "provid[ing] for the common defense?"
The correct equivalency would be the roads leading to the Walmart. If a Walmart were blocked by people pointlessly driving on the road to make the Walmart effectively unreachable, police would intervene and clear the road of the noise.
Seems like you need RPA to automate the UI. You can use tools that record your actions and script the desktop (UiPath for example).
You shouldn’t have to read the code to understand what a program does, from an external POV at least.
Author here. I was inspired to make this by thinking about how Wordle, a game where a word is slowly unraveled by guessing letters, could apply to images (and specifically album art).

Perhaps clone is a poor word here and inspiration would be more accurate.
I imagine the minuscule vibrations of a shutter make it a natural fit to the already existing image stacking pipeline, correct?
Let's get started! [1][2] You wanna take the odd numbered IP's and I take the even? Just kidding I am way too lazy for this

[1] - https://www.shodan.io/search?query=mitel

[2] - https://www.shodan.io/search?query=mivoice
Suanpan
15 Resources to Help You Learn Haskell in 2022
I read similar on HN sometime back, this is call Taco Bell Programming - http://widgetsandshit.com/teddziuba/2010/10/taco-bell-progra...
> It's very frustrating to watch desktop Linux head down this path, and it's started to severely limit the amount of software I can comfortably use on my desktop.

I agree. At the heart of it, this is what has led to me begin to shift away from Linux and to BSD.
How else am I supposed to manage it? I go to that site maybe 5 times a year. There are no servers on-premises, just a switch and Wi-Fi APs. It's connected to the mothership via fiber.

It's on a management VLAN that has no direct internet access.
"... would like a word with you" is hardly high quality discourse, but OK:

Kashmir is really an example of what I mean about the likelihood that the BJP will have trouble achieving things on the kind of timescale that Trump was working to. It's an awful, very-long-term conflict in disputed territory, is it not? Things move forward and backwards.

It does not surprise me that I was instantly downvoted for alluding to Trump when defending against the idea that India is going to become an enemy of the free world.

I guess it's because some readers think I am "politicising" it. But you surely shouldn't automatically get to other a democratic nation of 1.4 billion people without reference to the elephant in the room -- that the USA was very recently (perhaps even still is) only one presidential term away from becoming an enemy of the "international rules-based order".

You only have to look at how Trump proposed to deal with Tiktok, or how he mysteriously abruptly exempted ZTE from some sanctions, to understand what I mean -- let alone the even bigger elephant in the room, that he successfully downgraded GOP 2016 platform language about the defence of Ukraine and literally coerced Ukraine's leadership with the threatened withholding of congressionally-approved support.

The reality is that this discussion about potential threats to the free world or rules-based international order simply can't be one-sided like this. It's an absurdity.
Studio was announced yesterday. Presumably they have a first batch of both models ready to go on day 1.

When they launched the M1 Mac mini on day one I was able to walk into an Apple store and pick one up but only the base model.
It seems similar to me. They sometimes intervene, but often don't.
Indeed. One of the things you notice when writing say, Advent of Code solutions in Rust is that you're writing unwrap() a lot e.g. something like

let geese = usize::from_str_radix(line.strip_prefix("and also ").unwrap().strip_suffix(" geese.").unwrap(), 10).unwrap();

All these functions, usize::from_str_radix, str::strip_prefix, str::strip_suffix are Options which could be None, and we need to decide what to do with that option, Option::unwrap() says I promise this is Some(thing) and I want that thing. If you're wrong and the Option was None, Rust will panic.

Sure enough sometimes while rushing to solve an AoC problem you may get told your program panicked because you tried to unwrap None. Oops, I wrote "geese" above and thus didn't handle the scenario where it might say "goose" in the input when there was only one of them... need to handle that properly.

In a C program taking the same approach it's easy to skip that unwrap() step. After all we're sure it's fine... aren't we? And in the absence of any error reporting now all you know is AoC says the answer you got was wrong and you've got no idea what the problem is.
this sounds very complicated lol
I haven't visited /. in ages. I didn't know how far it had fallen and am shocked it still gets traffic, given this back button behavior. It is indeed a good reason to never post direct links.
Lunduke is a self described conservative, and Danielle is a self described "transgender lesbian communist".

It's intentional.

The sad thing is I'm pretty sure he's had her on his YouTube channel before.
From what I read - he did not disclose his ties to Chinese researcher when applying for grant from NASA as he supposed to. He did it on bad advice from his university, but that came out later, during the investigation.

It seems his employer, the University, owes him something. In US government owes you nothing when they make an honest mistake. Even worse, government has disincentive to exonerate wrongly accused because, as some argue, need for finality of the judgement[0]

[1]https://www.youtube.com/watch?v=kpYYdCzTpps
But then you can argue that RedHat made also money with Openshift no?

>EnterpriseDB mainly makes it money from paid hosting

Not sure if that's true.
To me, ad tech isn't inherently bad, although some uses of it definitely are... the main problem with it is, it makes way too much money. From this standpoint, taking these companies' excess cash and putting it to better use seems like the best possible thing an individual could do, if they have the skills.
No, it wasn’t. There are plenty of people online who both a) can’t spell, and b) are unhinged enough to make genuine threats against a stranger’s life.
Credit Determinations Committees – The Russian Federation
Did you consider buying one in the US (or wherever you are/online) and then mailing it to them?

I recently was going to mail a new Mac M1 to a university student in a foreign country. I found services that specialized in it that would do it for $99, FWIW
Storage usage / download size and data usage are more important to the average user than many developers think.

I tried reducing all this to a minimum for my app and it helped getting more downloads and less churn. Now at 10MB download size, 40MB storage usage (10MB cache, 10MB data) and 5MB data usage. All this for a heavy user (myself).
Skipping reddit link, the playlist: https://www.youtube.com/playlist?list=PLnmLOQIDmUvUgbvY-Jq0t...

I'll throw this resource too: http://wab.com. Wab has some cool javascript demo's as well.
But in this case Slack was not down. Parts of the service were frustratingly lagging, like uploading a picture or using reactions. Circle CI does have this sort of warning on their sidebar. There's so many parts to a big software product that it would definitely useful to know if some part of it was having issues.
It explains exactly how it will work. They generate a tiny placeholder app package to replace the application itself on-device.

This way it frees up the space used by the application data, without removing it altogether, so that the associated user data can still remain with it.

It’s the same concept as iOS’ feature to offload unused apps, but this appears to be implemented in a way that is backwards compatible with older devices since the Play Store is able to manage the process of replacing and restoring the app package and not the core OS.
The article talks about reducing binary size, not the user data. I think the idea is that the Archival APK acts as a placeholder for the application, so the application is not actually uninstalled, and thus app-specific user data has a place to live.
Thanks, that's a useful hint!
Documenting on a webpage allows a historical record of the incident long after the incident is over. I agree that an in-app notification would also be a nice feature.
Ever since this started, been seeing 100% failure on webhooks for Event subscriptions.
That was the first thought. The second one was how hard would it be to gain unauthorised access :^)

That said, home automation is pretty neat.
Indeed. We definitely need laws to hold companies accountable for their IT-related activity.

For one, we need to hold commercial vendors accountable - that means especially to refuse to provide security updates for the reasonably expected life time of a piece of software or hardware.

But especially, we need the companies using IT systems to be held accountable. The magic word is "defense in depth" - the scenario of the post we're talking about is a piece of equipment that was not supposed to be reachable from the Internet and despite that knowledge it was made accessible to the Internet. Seriously, anyone caught exposing dangerous stuff to Shodan should be fined to hell and back. Or to continue using your military comparison: most governments have laws that call for harsh punishment for "aid to the enemy" or similar. Time to update the law to the new digital world.
> the certificates themselves will not necessarily be "less secure" - which the layman typically interprets as "cryptographically weaker"

We don't just need _cryptographic_ strength to deliver security, otherwise we'd all be using self-signed certificates...
It was "unlikely" when Ukraine had the nukes it handed over. Now nothing is unlikely.
I rule out startups because I'm not at a point in life where high risk makes sense - I have 3 teenagers in my family, so our home and life needs stability, not risk. Startups have some merit if you are young and ambitious and looking for your work to drive your life forward. But not everyone is at that stage of life.
Storage footprint is an issue on my current corp-issued phone.

Maybe your hobby horse is different to other people's hobby horse, but that doesn't mean that other people's hobby horses aren't important.

This issue probably affects lower income people disproportionately, too.
>Works fine for us.

Because proxmox makes phenomenal products.
Something I’ve noticed that I didn’t expect is that people are able to guess a lot of albums in only one or two squares. Some of this is luck and image layout paradigms being surprisingly consistent (titles at the top!), but we also may have better context-based image memory than we think. There’s an obscure setting to increase the difficulty, which makes the squares smaller (or larger) to combat this.

Interesting idea about the reveal! I’ll consider adding that (or some cheap version of placing the image in the success modal at least).
Well that's pretty far from what I asked for, more appealing to authority and unpublished internal analyses (presumably run by marketing departments). I used to work for an ecommerce A/B testing company, and have seen first hand how untrue it can be. Google doesn't make money because it's damn effective, they make money because people believe it. There is published research that that show that it doesn't work as well as Google or internal marketing teams want people to believe it does (did you read the article, or just count how many words it was?)
>I'm sure I'll be violently opposed here, but it seems like an awfully poor heuristic that creations are statically split at mint-time, as opposed to - say - the amount of labor put down over time, at least for a founding team.

That sounds reasonable. The problem is when people don't do the leg work to set up a framework to handle more complex share splits. Sans such a framework, the default is to split at mint time because that's how stakes have historically worked and the legal system should, in theory, minimize funny business possible when someone doesn't have a contract specifying any specific details.

The general outcome here is that the 'no contract' way of splitting shares is pretty bad, which seems in line with the no contract way of doing anything other transaction or business dealing. That way of doing business only works for small time transactions, say in the 2 or 3 digit range.
been seeing 100% failures on webhook event subscriptions too. that's only reason I noticed right away.
It seems safe to say prices right now are not the norm due to, you know, that whole war thing going on that is impacting one of the EU's primary power supplies. The 2021 EU average was otherwise $0.22/kWh.
War in Ukraine: Russia soon unable to pay its debts, warns agency
Add their status to one of your channels (https://slack.com/apps/A0F81R7U7-rss)

/feed subscribe https://status.slack.com/feed/rss
I mean, do we know what the head of the CP thinks of the war?

Officially they critizice it, but stand by russia anyway. Internally they might be cheering, or really frowning.
I'm not sure what you mean. Mechanical shutters have no upsides I'm aware of :). Astro cameras use electronic shutters.
EDIT: The dithering, or offsetting, is done by moving the telescope slightly between exposures. During exposures you want it to track the object you're photographing as accurately as possible. I imagine vibrations are a detriment even in the Pixel phone processing. It would be better if the phone could move instantly in slightly different directions and take steady raw photos in each.
Docker’s Response to the Invasion of Ukraine
There's a ppa which works fine with Ubuntu 20.04:

https://pipewire-debian.github.io/pipewire-debian/
Absolutely true. And survived (and restored democracy after) a coup while doing so.
Sure it certainly could be. Whether the account is shilling or shit posting doesn’t really matter though. Either one isn’t a good faith interaction.
Welcome, welcome to city Emscripten.
Having switched from elementaryOS to Fedora 35 I am much happier with the latter. I think elementaryOS did some interesting things and made it clear some things needed to be better supported by gnome - one to one gestures, accent hinted buttons, light/dark theme standardization - but once these things got adopted into stock Gnome there aren't many reasons left to run elementaryOS. App Center is atrocious in so many ways whereas Gnome Software just works now and Flathub works very well and I don't see what value any of the elementaryOS stuff brings any more.
Quite a story and the kicker is the most amazing part.
UTF-8 strings with Go: len(s) isn't enough
That is literally bloat. Why does Android deviate from UNIX and reinvent the wheel into a wobbly ellipse all the time?

Already, swiping an app away in the task manager awkwardly keeps it open in the background instead of closing. Now we awkwardly keep zombie apps.

Please stop predicting what users want, give them reality. You have 20 background apps, you see 20 apps in the task manager. You install 100 apps, you have to sort and group 100 icons. You either have a usable app, or no app at all.
Then, the user can say "damn, this bloat sucks. Please make things lean and simple, Mr. Corp."
Doing satire is hard, when reality is way ahead with all the bad things that can happen.
It would take me over 1.5 hours just to figure out what parts I need to buy.
> Can't you just

Usually such conclusions are a good time to Google and better educate yourself on the problem domain and solution space.
https://www.wired.com/story/opinion-the-world-loses-under-bi...

https://www.vanityfair.com/style/2022/03/melinda-gates-jeffr...

https://www.thenation.com/article/society/bill-gates-foundat...
I’ve done it sporadically to help someone out of a tight spot, or for interactive deep dives on a code base as a teaching tool. I have found it helpful in short bursts for teaching a junior engineer how to work on a code base.
Reading people's experiences in their companies makes me feel a) sad that there's so many people that have to endure this kind of work environment, b) so fortunate that I can't identify myself with any of this.

If I text someone and they reply within a day, that's fine to me, and it's fine to any of my colleagues. If it takes more than a day, I'll ping them again, and everyone can still chill.
Try "The Worst Journey in the World" [1], there are eBook links from the wiki page.

[1] https://en.wikipedia.org/wiki/The_Worst_Journey_in_the_World
OT but what's you app? you don't say it nor have a link/site on your bio.
I'm really concerned that DDOS attacks are going to lead to the death of the open Internet and its balkanization and isolation behind walled gardens. If you look at where Cloudflare and some of the big clouds are going with their private networks, private backplanes, and "secure your traffic by putting it all over our network" zero trust plans it seems to be going that way.

If open peering and the open Internet are to survive I think serious work needs to be done to fight DDOS attacks. It needs to be an effort analogous to the "war on spam" in the late 1990s / early 2000s. Unfortunately that war was sort of lost; e-mail is in practice barely an open protocol anymore and almost all e-mail is handled by a few giant companies that can leverage big data to filter spam. If you try to DIY a mail server you'll be simultaneously hit by spam and have to constantly fight mistaken filtration by larger e-mail providers who tend to distrust small mail servers by default.

If the open Internet succumbs to DDOS "spam," we will lose something really huge and important. It would be the ultimate casualty of what so far has been almost a law (with very few exceptions): all open systems are destroyed by abuse if they become sufficiently popular.

We also can't just leave it to the free market because the only solution the market will likely come up with is walled gardens. It's the easiest to engineer solution and the easiest to monetize.
Why do you want to send everything in one second?
Well, a government could start by mandating that internet peers authenticate their packages, and cutting the access of bad actors.

People can't do that, and it's a very basic defense.
Seems to be common practice here in Ecuador as well.

Ordering stuff online from anywhere outside of Ecuador is kind of a last resort, because of very high import duties for many items (and a small but real risk of your items getting "lost" by customs).

However if you are bringing that stuff back on a flight, that's exempt from import duties if you stick to the 2-item limit (e.g. don't come back with a suitcase full of iPhones, but if you're traveling back with your existing old phone and a new phone for yourself, that is allowed).

If you're rich enough to afford an iPhone here, you're not buying locally. You plan a shopping trip to Miami once or twice a year, the ticket cost is basically evened out by the savings of all the stuff you're buying in the USA and many people have family there as well they can visit (which is an extra reason to travel, and you're not staying in a hotel).
To be fair, they don't violate Taiwanese airspace. They enter Taiwan's Air Defense Identification Zone, and Taiwan scrambles jets in preperation to intercept if they violate airspace. But they have periodically threatened to do a flyover to assert their claims.