skysight-inc/HackerNews huggingface dataset:
This also points to a weird but true situation: Many blue states would be financially better off (or at least neutral) to eliminate federal programs and replace them with state programs, because the smaller the federal budget, the smaller the net outflow from blue cities.

But then they weirdly push for the opposite to the financial detriment of their own constituents, including the lower income ones who could have higher state benefits than existing federal benefits if the feds weren't taking so much of their state's money.

Best guess for why this happens is that the blue team is more captured by government sector lobbyists at the federal level, who don't want to lose jobs to state level government workers.
Re the last 3% of ketchup, just cut the bottle in half and scrape the rest out with a spoon.
Nobody seriously expects that any form of sanctions will result on a popular uprising in Russia.

Sanctions, and presumably non-government actions like this are entirely fair moves in order to punish Russia for their war of aggression, in order to discourage Russia and others from starting wars in Europe ever again.

It’s sort of like putting a murderer in prison, nobody expects that to directly fix anything.

> Start intentionally breaking open source software to try to hurt some group and that group will start doing the exact same thing to you.

This sounds a lot like a veiled argument against providing any support for Ukraine. Because open source software isn’t special, why wouldn’t the same logic apply to literally everything else?
Even if you do 'install' and 'first run' tracking without the unique identifier you need to have consent for EU citizens before sending the tracking request to Mozilla. As the IP is transmitted you would already be sending what the regulations call 'personal data'.

The ID is just additional data that would probably be classified as PD (personal data) as well.

So even basic install tracking is a no go. I also just don't understand why this would be necessary. This wasn't the case for software for how many decades? It didn't necessarily transmit such information. If it was commercial you probably had something like license server stuff in the later days (before just a number that was checked for validation).

It probably became a thing when the mobile phone with app model rose. There the vendors (mostly Apple/Google) knew the downloads from the app stores and marketing wanted more. Especially when the pushed advertisements for apps.

So companies like Adjust rose to fame for tracking ad clicks to installs, first run and usage stats.

This probably led to others thinking it to be a great idea for general software as well.
It really is the superior product/project. I switched to Zotero from Mendeley this year. The thing that was keeping me back before was the lack of internal PDF reader and annotator. I'm not sure when that came into Zotero, but now it is... /chefkiss
Compiler and linker are 186,865 lines of code. My `hcs` branch which adds hot code swapping support for Linux (a companion PoC to the author of the OP) is 328 additions and 18 deletions [1]. And about 200 lines of those are adding ptrace constants to the std lib and a simple socket server to the compiler just as a method of issuing commands while the stdio is locked up in the running application.

Crazy right?

This is because incremental compilation & linking is actually the same problem as hot code swapping! This was just a natural fallout of the design of the compiler.

Same deal with Jakub's hot code swapping branch. It's 257 additions and 9 deletions and has the same ~150 lines of adding the socket server [2].

So in answer to your question, the PoC adds about 150 lines to an 186,865 line codebase.

[1]: https://github.com/ziglang/zig/compare/hcs

[2]: https://github.com/ziglang/zig/compare/hcs-macos
You can try it for yourself. I've tried killing fire ants before with sticky poison and they intentionally "clog" it up, just like in the gif.
People own their own property and they can decide what to do with it. That’s what property means. They can leave a company to whoever they want, just like they can leave Aunt Gertrude’s silverware.

Companies are property and people can make extremely foolish decisions with them if they want because they are their property. I can buy an original Hiroshige print and use it to light a fire if I want. By the same token you can leave your billion dollar company to your feckless coke snorting, whore frequenting grandson if you want. That’s what owning something means.
This is a better option in quality, but seems more difficult to handle at any significant scale. Having a wide availability of highly trained, on premise professionals in every single location looks unrealistic to me.

What would be your middle-ground proposition for the large swath of doctor cabinets and hospitals who won't win/can't afford enough of the on-staff interpreters lottery and still get patients that need support in different languages ?
>A simplified copy of the code provided by researchers shows that for users based in Russia or Belarus, the code will rewrite the contents of all files present on a system with a heart emoji—effectively deleting all data on a system.

>Additionally, because 'node-ipc' versions 9.2.2, 11.0.0, and those greater than 11.0.0 bundle the peacenotwar module within themselves, affected users saw 'WITH-LOVE-FROM-AMERICA.txt' files popping up on their Desktop with "peace" messages:
> (The admin interface listens on all network interfaces, including all WAN interfaces. However the default firewall rules black-hole all incoming traffic on the WAN interfaces.)

Also, at least in OPNsense, for some reason, not all interfaces get an IP in the DNS. So if you want to access the admin interface via a name with a certificate, it may not always work if you selectively enable the listening interfaces.

I've had this happened a week ago, where the DNS name wouldn't resolve to the internal interface's IP for some reason... I would only get the WAN interface and some other restricted one I have.
Yes, the cause should be identified, in ideal conditions.

But saying that they're not doing their job because they struggle to identify the specific user that caused a bug is a bit of a stretch.
I, too, abstract away drama in my dismissive summary so I can claim there's no drama.
In job applications, and in interviews, I have been asked if I have a Github profile. I also know of people who have a project on Github that company's might like - if they are a React programmer, it might be a React project with modern best practices, maybe some common third-party libraries, testing etc. Kind of a work sample.

When I signed on Github, I followed the old free software mantra of putting up any code someone might find useful, even if it was kludgey (as long as it was labeled so). This does not jibe with the concept of a model work sample though.
> I am still busy forking webkit into retrokit and it's a shitload of work to remove these tracking features.

Why not fork Firefox? Or just disable the tracking?
Bonus is that your sliced finger blood won't mess up the look of the remaining ketchup.
As I have understood it from a lawyer: US laws require a company to hand over the data wherever the data is located. EU, Japan, whatever. You are a US company, so hand it over.

EU law states: EU data shall not leave the EU.

Those two bite each other, and the result is that a company can _never_ bow to both laws.

So, if EU data must be kept in the EU, choose a (hosting) company with no ties to the US. Vice versa is no problem, the EU law _does_ respect data locality.

It is the reason why we had to move away from Hetzner, when they opened a US office/branch.

(https://docs.hetzner.com/general/general-terms-and-condition...

If you require a web hosting company that has absolutely no connections to the USA, then unfortunately, we may no longer be the best choice for you)
Hasn't there been enough coverage for this already? The M1 chip is ahead in the performance/wattage, which makes them a significant upgrade to most other laptops - as these are always constrained by power and cooling.

Though Intel has since improved their mobile chips and the difference is likely to be much less with the new laptops this year.
I think the scenario isn't people hitting it through internet, but some attack chain involving, for instance a clickjacking, XSRF, XSS,etc in another website that try to access the UI in case the admin is authenticated in the firewall, visits the malicious website.
Just be careful applying the same technique to squeeze mayonnaise bottles…
Does anyone know which hosts are contacted to send that information? Then those could easily be blocked in the network.
But that’s strictly not true, bordering on delusional. Geo-targeted malware that only runs on specific computers is not attacking the whole world.
s/.*/What was it all for?/s
Not just any example: Ghacks is owned by Softonic.
Which mayonnaise bottle? It was ketchup I swear!
> Mediocre programmers use APIs, while good programmers know what's behind the curtain and can debug them. I suspect this will stay the same, no matter how many layers of abstraction we add.

The skill of both such categories (API developers and developers who use API's) is defined by the ability to know the _least_ amount of complexity needed for a given set of requirements. You may be appealing to some "deeper" sense of what it means to be a programmer, but in terms of what companies are willing to pay - if you get the same job done in a way that is easier to do in the future, you should be rewarded for that, because it saves your own time and the time of anyone who will need to work on that program in the future.

I think this is (only mildly) lacking in nuance. The ability to use AI for this task is surely limited at the moment - and people who know more about programming are certainly more capable of using these systems. As we go forward though, it's important to be able to admit that if an AI can produce a solution faster (and you have easy access to said AI, not a given), then you may be wasting time trying to "roll your own" in pursuit of being a good programmer.

On the other hand, until this AI-assisted experience is democratized, you're correct that it is a good idea to have engineers around who know this stuff from first principles. For now, I'm not terribly concerned that those folks will go away.
Why is open source special?

Or are you against all the economic sanctions on Russia also? Do you oppose businesses pulling out of Russia despite not being legally required to do so?

> They hurt innocent people. You cannot booby trap your house. All this does is destroys confidence in the ecosystem.

You could say this regarding all the economic sanctions on Russia too, but it’s a very weak criticism.
I'm not a marine or ocean expert, but won't pumping large amounts of surface water to benthic depths have a huge impact on the marine life, currents and so on?
It kinda does… root can write to places that the user cannot. Like Boot partitions, or entire device nodes, or load kernel modules that the user cannot see. That xkcd is a funny historical joke, but the root/user distinction is still a critical part of operating system security today.
It's been dropping for the last five or six years.
I switched to AdGuard after Safari stopped supporting uBlock Origin.
That is true, but JITs nevertheless perform on-stack replacement for optimization purposes.
IMO this feature destroys the history the developer of the PR should have crafted carefully in the first place. With a squash merge you basically say "I don't give a f..." and remove all traceability from the PR, giving future developers potentially a big headache if they have to figure out why something was done.
That's why I think squash merge should _never_ be used and is one of the very big anti-features of github. Commit history has to be crafted like code, by the developer who wrote that code and in a way that other developers can see the steps that were taken to craft that code. Squashing PR commits just removes all of that, resulting in a SVN-style repo with "checkin 2020-01-01" like commits. Yes, there might be more in the commit message, but its value is lost because it is not for a small, possibly atomic change.
Please use Opnsense now, or something else entirely (Vyos is great but CLI based).

I was a big pfSense fan, telling myself that the odd stuff Netgate did was normal/justified.

Until the attack on Wireguard's Jason A. Donenfeld. Then I realised - it's all true. They are bordering on insane in that organisation. I regret suggesting my old workmate purchase some of their hardware now.

Opnsense is a great replacement. I'm sure it's not perfect, but they're open, friendly, responsive and don't make you question every comment you write on their forum for fear of being banned.
AMD also recovered because they couldn't be killed, as Intel was never going to be allowed becoming a single source for x86. I.e. the US military said: We need more than one company doing the processors we need. Not sure if the same is true for Intel today. There are multiple providers for sufficiently powerful processors and from an enduser perspective the actual architecture doesn't matter much. I.e. it's far simpler to repurpose any other source today than it was 20 years ago.
HP used to make amazing monochrome laser printers. I can't really speak to other brands, but I maintained dozens of LaserJet 4000, 4050, and 4100 printers.
https://en.wikipedia.org/wiki/HP_LaserJet_4000_series

Those things are tanks. Perform a maintenance kit on one of those, and it's good for another 150k pages no problem. The main thing that needs attention is the rubber feet that pick up the paper get dry. Some rubber rejuvenator on a q-tip goes a long way.

I have a 4050 for home, and I have no reason to doubt its future longevity. :-)

The firmware, though, is ancient (telnet, and a web interface that requires IE 5 IIRC). Now if there was open source firmware for these things...
The renders of the packaging look terrible, like they were made by some amateur in 5 minutes.
> I wonder why I would land on a dubious website, and why I would want to log in on it.

Random phishing attacks via e-mail? Someone posing as a colleague or whatever, telling people to use this new thing for whatever reason, like a dubious OneDrive link.

Bonus credibility points: it uses login with MS, so it must be legit, since we're all using Office365!

Plus, random-non-tech-literate person won't be tipped off by MS requiring another login, especially since they've been trained by IT to log in very often thanks to ridiculously short session durations.
OneSignal (YC S11) Is Hiring Engineers to Democratize Mobile Customer Engagement
I recently switched to Ubiquiti’s Unifi line and am extremely happy, mostly for moral reasons, compared to how I felt being a pfSense user these last few years.
Building an Afrikan media startup with global ambitions
Would Russia Have Invaded Ukraine If They Had Nuclear Weapons?
> - No merge commits. Only rebase onto latest main. Which means force-pushing PR branches and, thus, rewriting history (other devs working on same branch need to be aware that history has changed).

How does that even scale? I would imagine that in a team of 10, you would be rebasing 90% of your day and only 10% doing actual work?
Instagram, TikTok etc.
Or… Wordpress and 2 plugins: Advanced Custom Fields Pro + Custom Post Type UI.
Not if you do it "streaming", just flipping until you get either pattern. (Suppose T is very rare. Then you'll always start with HHH..., so you'll always get HT.) You have to "chunk" them, considering exactly two flips at a time and using each flip exactly once, to get biases to cancel out.
All the actions here were decisions made by a private company.

At the present time the legal system is not involved beyond anything other than the terms of employment in the employee's contract.

Just because a company may have the right to fire a person at will does not prove that the employee did anything wrong. (morally or legally)
everybody mentions the azov batallion.
e.g just yesterday Russian blamed them for bombing the Mariupol theatre.
Sorry for the late reply. Evening with my SO and sleep. :-)

Personally I like Snowplow. But I am a tech loving nerd. If you have the capacity to build and maintain the tracker, servers and (for reporting/visualizing) necessary ETL infrastructure you can build the perfect fit in terms of what data to collect in what way and how to use it for your org).

The cost for building and maintaining it (with redundancy, stability and everything else) on the other hand probably would be in the same ballpark as solutions like parts of the Adobe Experience Cloud. Especially the new 'Customer Journey Analytics' offering is very intriguing. Having watched the summit I was a little bit blown away by the new capabilities for reporting they just announced.

I have to admit that I actually like working with Adobe Analytics (and CJA) and the development of the solution over the last few years has been great to watch). Still it has its problems. For example using Audience Manager creates a tracking call with an unique identifier being sent to their data center in Virginia. Even if all your data resides in the European data centers this is happening. This currently is a problem for clients of mine as the explicitly choose Adobe over Google because sales told them their users' data would not leave Europe under normal circumstances.

But back to Snowplow. You need some Form of visualizing and reporting infrastructure on top. So something like Apache Superset. Works well. But another thing to build, maintain and develop further.

I like both. And I like to be able to fully own the data pipeline. Especially in cases where you are in a regulated industry or have potentially sensitive data. I know of at least on bank using Snowplow to not only track the website and online banking, but ATM usage, call center calls and visits to your personal consultant/teller. They build a real time dashboard from that data so that when you visit your bank the employee there can see in real time your last touch points and interactions. Also they build product recommendations on top of that data that in the cases known to me actually are beneficial to the customer. Like telling you when your behavior with getting money from ATMs of different banks could warrant an add on so that you would save on fees. Because they value the customer happiness as a way to generate less churn and additional WOM marketing (word of mouth).

So it totally depends on your needs and the business in my book.
> (Vyos is great but CLI based)

The best firewalls/routers i've ever used have been Vyos (or Vyatta) based.

Point & Click has it's charms, but its a crutch. With Vyos you can "replay" you entire configuration over a serial port, as well as make changes to it in a regular text editor.

It does have a learning curve though :)

I'm also on the UniFi line of things for now, but i really wish somebody would make a decent Vyos based appliance (low powered ARM device) like the Ubiquiti Edgerouters of old.
Ask HN: How can I determine the quality of an image file
I'm building a software to extract text in image.
But some uploaded images are blur, and hard to process.
So, I need to build a function to determine if an image is low or high quality.
How can I do it?

PS: Sorry for my bad english.
It says astro natively supports every popular framework, but does it really?
Does anyone know when this takes effect? Thankfully I already have a pro account, but the announcement never stated an effective date. Not everyone pops onto Flickr daily, so thousands are unaware of this at the moment. Simply curious...
At my company I've been a heavy promoter of Backstage and so far it's been a wonderful journey. The main thing to realize is that you can't just "deploy Backstage" and be done with it. Rather, you use it as a base and then customize it to fit your organisation. This is fundamentally different from other tooling in the same space, that requires you to change the way your organisation works to fit the tool.

Congratulations on reaching 1.0!
Tor supports many kinds of bridges to serve as unlisted "inproxies" to enter the Tor network in an environment that blocks Tor.
> Until the attack on Wireguard's Jason A. Donenfeld. Then I realised - it's all true. They are bordering on insane in that organisation. I regret suggesting my old workmate purchase some of their hardware now.

This sounds fun. do you know where I can read more?

edit: think i found a good start https://www.reddit.com/r/networking/comments/m6zjie/wireguar...
> You also earn closer to US salaries.

Indeed. It doesn't mean either the US or the Swiss aren't getting gouged when it comes to health prices (and prices in general in CH).

But yes, AFAIK, there is no minimum wage in CH but the defacto minimum wage hovers around 50--60k CHF a year and 20 or 25 days PTO. On the other hand, health insurance alone with a 2500 CHF deductible and 10% copay afterwards costs 300--400 CHF a month no problem.
Sure but at some point when the company gets to be that big and employ that many people, there is a public interest to see it continue to exist. Also as a public company they have a fiduciary duty to the shareholders to keep it running well.

There's some pretty good arguments to be made that when a major shareholder of a public company dies, their shares should be distributed by the board and not their will.
> Why not fork Firefox?

> Why not fork Electron/Chromium/nwjs?

Tried it and gave up. It's impossible. Repotools, manifests and submodule fatigue and other things make it close to impossible to host all the code yourself and build it, because many parts of the build toolchain and codebase contain includes via git/https URLs these days.

That's why I went with WebKit, because there I clone a single repo, install the dependencies/libraries, build it and have a running Browser. Without having to have internet all the time, without dozens of repos that are out of my control.
> Strange because x2go performs better than anything else

If you mean better than anything else available on Linux, you're probably right.

The problem is that it's still an order or magnitude behind Windows-to-Windows RDP, which is my benchmark.

But thanks for reminding me, I'll give it another whirl.
Connectivity Standards Alliance Matter Update
> There is no clunky CMS to configure and manage, no big web framework to deal with and update

Idk, the setup feels pretty clunky to me!
There is some bad bad shit in that kit.

The APs are good and the switches too in my experience. However the UDM-P is a troubled device. It’s buggy, things break or stop working and it loses its config every so often.
The form factor is very compelling and the concept is great.

I’d pay more if the software quality were better.
I switched before the WireGuard fiasco, when they announced they were EOLing the CE line, but weasel-worded to avoid having to use the phrase "EOL".

https://news.ycombinator.com/item?id=27775408

https://news.ycombinator.com/item?id=26479725