skysight-inc/HackerNews huggingface dataset:
Ask HN: How do you protect your emergency fund from inflation?
So far inflation in Europe has risen to 5%, and many think that it will raise even more. Naturally, the question comes on how to protect any savings that are not being intended for investing, but rather for a rainy day, from inflation. Banks (at least in EU) offer a much smaller interest rate for locking funds for a predetermined amount of time. What are the alternatives?
TIL! This'll be handy so damn often for me.
Ask HN: I love TUI too but usually they're designed to run inside a console. Is there a "console" I can embed in my own application so that my program doesn't need a terminal to be run ?

Of course I could use a simple GUI text widget with fixed size font, but I doubt it'd be fast...

Maybe notcurses ?
Feel free to look over: https://news.ycombinator.com/newsguidelines.html

In particular: Please don't post insinuations about astroturfing, shilling, bots, brigading, foreign agents and the like. It degrades discussion and is usually mistaken.

It's a post about an IDL, a fairly technical domain, for an open source project that's run by Google, sure, but also an incredibly ambitious technical projet.

It's literally a post about binary formats. What's there to defend or attack? Oh, just a bunch of side comments not about binary formats or IPC? Downvote and move on.

Disclosure: Never worked for Google
I tried to negotiate stock options as part of a compensation with an employer. They seriously considered it and almost gave in. After actually doing the research I realized, they would be worth nearly zero (there was some dodgy stuff on the financial records too). Then I decided to quit because it would be a waste of time and effort working there.

Anyway, the moral I took from that was to seriously reconsider working at a place where the stock options are worth nothing. Probably consider consulting for them or something else more cash heavy.
In broad strokes I agree, and I'm pretty sure social media is here to stay.

But I do very much think the current implementations are net-losses, probably primarily due to advertising having horrifically perverse incentives for human behavior. And they are all advertising platforms first and foremost at the moment.

Easier communication brings out a lot of higher highs and lower lows, I think that's unavoidable. But I do think it can be substantially better than it is now.
I've wasted countless hours justifying every significant step during pair/mentoring sessions. I loathe theological arguments where things just are, so I try to give it my best.

Sometimes it pays off but I've had young know-it-alls fighting on every step in the process of fixing their shit. Ego is what makes or brakes a man/woman
That’s the price you pay for not owning your data.
I am starting to believe that software has a shelf life. Some of its fresh fruit and milk and some of it is canned beans that will survive for a long time. An answer to technical debt is throw out software
in Firefox?
expected age
-34.0 years left

Hmm
SecureDrop - Journalists and Whistleblower Secure Submission System - https://securedrop.org
This is a great example of making a tech stack more complicated for almost no real value.

Developers joining the team now must understand nix, scripting and a lot of other things just to build a simple docker image.

Just stop.
' deflationary currency ... leads to hoarding of assets '.

Someone owns every asset. By making it impractical to save using the fiat money, savings goes to non-fiat items like land, stocks, energy, and BTC. This harms the poor who are rarely able to escape into those non-money items.
Well, unscrupulous sellers find a way even around embargoes...

https://disclose.ngo/en/article/war-in-ukraine-how-france-de...

(An order of magnitude larger helicarrier contract was cancelled eventually.)
From https://tailscale.com/blog/how-nat-traversal-works/

“First, the protocol should be based on UDP. You can do NAT traversal with TCP, but it adds another layer of complexity to an already quite complex problem, and may even require kernel customizations depending on how deep you want to go. We’re going to focus on UDP for the rest of this article. If you’re reaching for TCP because you want a stream-oriented connection when the NAT traversal is done, consider using QUIC instead. It builds on top of UDP, so we can focus on UDP for NAT traversal and still have a nice stream protocol at the end.”

That article is the best article I have ever read on the nitty gritty of how NAT traversal works.
There are two straightforward answers to this.

The first is that other Western countries could pick up the slack instead of having it fall disproportionately on the US. It only got the way it is because the others were mostly bombed out after WWII and that's no longer the case.

The second is that if the US spent less and did less military interventionism, adversarial countries might not feel the need to spend as much either, and then the balance of power stays the same while everyone spends less money on bombs and warships.

The US is the only one who can initiate this because they're the only ones who can reduce military spending without being threatened even if others don't.
From the book

> Fearing it's use in shoddy printing and undesirable subject matter [Cobden-Sanderson] took the entire fund to Hammersmith Bridge and threw it in the Thames.

If after 100 years it is now for sale it feels a bit sad. I hope it is used well.
Sure. In IPC, you can have shared resources such as memory. In RPC, you need to assume all parties may be on separate systems. In IPC, you may be able to make guarantees about message ordering that are more challenging with RPC. For instance, packets may be dropped over a network link and packets may arrive out of order. In IPC, you can express backpressure without the need for packet dropping, and therefore can avoid overhead of things like TCP. With IPC, links are trusted, so you can avoid encrypting messages, but that is not something you can safely assume with RPC. Because of these sorts of things, the cost of sending a message is relatively low (measured in us) compared to RPC (measured in hundreds of us), and so the cost of serialization may be of greater concern as it may start to dominate cost. As a result, you may optimize your serialization format differently. Beyond that, an IPC system may allow for advanced usage of the shared kernel which is not possible across different systems each with a separate kernel.
Weird that nodejs.org doesn't say so, but that's usually written `"^1.5.2"` and is by far the most common way dependencies are specified in my experience. Cargo even makes the ^ implicit, and you can just write "1.5.2".
>The amount of people trying to assign social media companies the role of "publisher", responsible for everything that happens on their platform, is absurd.

It’s simple. Either users have absolute control over the content that they see, or the social media companies are publishers.

Go to YouTube. Log out. What do you see? It’s not nothing. They’ve decided what to show you.

Tech and social media companies are algorithmically dictating what you see and hiding behind the fact that it’s not “their content.” Why is this considered different from a news site which exclusively hosts opinion pieces from independent journalists?

This is before we even get into editorializing, which is now common on every major social media platform. Not only are social media platforms dictating what you see but also they are editorializing that content before you see. And yet somehow they aren’t publishers, because reasons.
I have a friend who, as an early employee, attempted to buy his options and the record of him ever having a vesting schedule was "lost".

He would have to fight a legal battle to get the option to purchase his options.
> This module will add a message of peace on your users desktops

Looks like normal advertising to me.
Literally the same in FF and every other remotely recent non-cli browser out there.
The distinction is that cities are blue and non-cities aren't, as a rule. "Blue states" are just states where the majority of the population lives in cities.
> I wonder if there could be a way to just turn off issues and only accept PRs

That would create the problem, that people won't able to ask if a feature is desired by the maintainer. New contributors would spend time on a PR and then learn that the original developer considers that feature to be out of scope and therefore the development effort would be wasted.

I understand your wish for removing the issue tab. But there is a downside to it.
> [...] just because something may be monetized (probably tastefully) at some point in the future doesn't take away from the fact that a cool and fun thing was created

Just because something may be monetized at some point in the future doesn't mean tracking your users without their consent.
I made a similar site for calculating your probability of living to a certain age and also likely causes of death - https://deathcalculator.app/
DeepWell plans to make video games to treat health conditions
Same, Persist Logs is available via cog menu.
Sans-ISC – StormCast – March-17-2022
> I don't want to sound purposefully ignorant here but is your advice basically that, if you find a vulnerability, the only way to remain a white hat hacker, assuming you were not hired to check for vulnerabilities, to not report the security flaw?

I think the important point is: if you don't want to risk a world of legal trouble, don't look for vulnerabilities in other people's systems in the first place, unless and until you have a contract with them. At the very least, make sure they have a bug bounty program or some other public indication that they are interested in getting vulnerability reports.

Again, the most important point is that you do this before even checking for the vulnerability you think you may have found.
I agree with you that reverse engineering does not extend to anything one pleases on the internet.

I also don't see game-modders or game cheaters regularly going to prison even though gaming is an enormous industry.

So clearly there is some tolerance as connectivity being ubiquitous blurs the line a bit though. An app I reverse engineer on my device, may as a side-effect make some communications with a third party asset, though primarily it is all my stuff. The same applies to a cars and other items, surely.

That being said financial account creation is definitely NOT the place to take risks. Same with government systems. Pretty quick many other laws and regulations ij the book come into play. They can be very broad too.
'tptacek is 100% correct here. Anyone reading this: please listen to these words of wisdom, because not doing so is how you get seriously hurt in the eyes of the law.

Hack, but hack carefully, at least until there are laws that protect you. Today, there aren't.
USA federalized State debts a long time ago.

I could see Illinois imploding due to retiree obligations and pieces of Illinois being absorbed by neighbor States. More likely for federal government to take over State pensions because federal government can emit unbacked money.
> A nice side benefit is that I'm not participating in the global people-tracking business and I'm not subjecting my users/customers to that.

^^^ This !

If its free, then you are the product.

I'm sure all that analytics data is a veritable goldmine for Google.

I pulled Google off all our web properties three years ago (it was originally put there by the web designers) and no amount of blog hype will ever convince me to put it back.
I didn't, but I'm admittedly not the typical user. I right-clicked and saved the Wordle page some weeks ago and have enjoyed my ad-free and non-tracked Wordle with original word lists ever since.

It's unusual that it is made this simple, and that's exactly because Wordle was conceived as a whimsical playful thing with viral potential (the creator had viral hits before), not as a money-making machine.

I have nothing but thanks and high praise for Mr. Wardle.
it all worked out in the end, but when I left I had a few thousand options that were just barely in the money. Maybe $2k total. Unfortunately, they neglected to report the cost basis and the IRS sent me a $900k tax bill! It was certainly a heart-stopping letter to read.
I am building exactly this TUI, the main menu.. It will take me a while longer but I'll post here when it is ready.
What's worse. C and C++ are the de facto standard languages for safety critical embedded systems. Aerospace/defense laid the ground work for something better with Ada/SPARK, but the rest of the safety critical industries don't seem to care.

At least now the AUTOSAR committee is taking a look at Rust, which gives me some hope for some sanity in the future here.
> What are you using for quantitative behavioral data at your B2B SaaS?

Properly instrumented code allows this as a side-benefit.

The main benefit of properly instrumented code being that it makes debugging a breeze.
AI-Made Ubuntu Mascot Artworks Are Incredible
These stories are good but I personally always feel that very few outliers really make this kind of money. Much like art, media etc. Most people cannot create a similar brand around their own work and it is possible the market cannot even support plenty of niche producers per se.
Awareness of mortality does seem to galvanize some people to action.
Haskell internship and full time backend roles available at ompranav97 @ gmail.com. Feel free to email with subject 'HN Haskell' and we will follow up with you. We are in consumer fintech and raised some seed funding. Currently have a small backend team.
And there’s BeyondCorp Zero Trust by Google. https://cloud.google.com/beyondcorp
Netflix tests a new feature that will raise prices for account sharing
to the sibling comment, since replies are turned off: yes, US law. I doubt either 'tptacek or I know any detail of significance around non-US computer fraud / security law.
I'd be fascinated if you'd like to elaborate on the Scheme part of that!
It's a surprisingly readable doc, check it out [0].

Compared to protobufs, it's much more concerned with being more fixed width, word aligned, efficient copy-free in-memory accessable. Proto3 spends a lot of effort compressing ints on one hand but remaining flexible and allowing fields to be optional on the other.

On top of all that, there's a good deal that's specific to it's kernel, Zircon, it's permission/capabilities model, and how these messages interact with their syscalls.

I'd imagine these kinda details are going to matter a lot for a microkernel.

I don't know it as deeply but I'd say it's much closer to cap'n proto. Not sure who uses that though!

[0]: https://fuchsia.dev/fuchsia-src/reference/fidl/language/wire...
If IntelliJ was as fast as vim, as lightweight as vim, preinstalled on every machine that I use, fully accessible over ssh, as scriptable as vim (or had perfect vim emulation as a plugin), free, I could install all of my preferences with just some dotfiles, and I need an IDE for the project, then I suppose it would just make sense to use IntelliJ at that point. Sometimes you just need a text editor though.
The ruble would fall if there enough people who ① have rubles that they ② legally may sell and ③ a need to sell them soonish even at bad rates. All three conditions are necessary.

People with rubles are either in Russia or outside it. My guess is those in Russia may not legally sell, and that few of those outside are in a hurry to sell.
You mean those grandparents who had childhood filled with debilitating diseases without vaccines and who were using asbestos in their young adult life? Pretty sure @maury91 going to live over 90 as he/she expects it. Genetics is still king in life expectancy.
...and report it, apologizing for going too far in the first place but explaining how you got there and that you want to cooperate in any way to help them fix it.

And please, don't tell them you'll give them the bug if they pay you or give you a t-shirt - this is blackmail, most likely (IANAL), and sure to get you in trouble. (but it happens)
Clockwork raises $21M to keep server clocks in sync
This person just joined last month! ;)
>Especially for dev focused products, a $0.01/month charge is such a barrier compared to a free solution.

Sometimes it can be a useful filter. There are a lot of time wasters at the bottom end of the market. There could also be people who are willing to pay but the free tier is good enough for their requirements.
In the first Iraq war, "surgical strike" was euphemism for undiscriminate carpet bombing. Was the second Iraq war any different ?
There is also a Facebook request that encodes your data (I used fake data here):

https://www.facebook.com/tr/?id=1249359911880793&ev=PageView...
Right, almost as if this community of thousands of people has multiple personality disorder.
Which is a much better approach.

Having driver APIs is a good thing. Drivers belong in userspace, where they can get the benefits of compartmentalization.
The new version GA4 is definitely not on the easier side. New words, new mental model, new report flow, etc.

I am not sure if I like it or if I hate it.
Wow. That’s a missing link for me. Had never thought of mentorship so clearly.
QNX makes no distinction between IPC and RPC. In fact, a program won't be able to tell if the other end of a message port was on the same CPU, same computer, or network (well, maybe by timing results). You didn't even need to recompile code to get that either. It just works right out of the box.
I work in banking and when probing (internal) api’s of partners/clients you accidentally find stuff; they are all very broken and it is normal to find bugs and holes while just probing the use of the api; not trying to find issues. Not sure how to prevent that and no I don’t know how far I can go; I know I cannot do my integration work if I do not do it. Not sure how others can. I would never report bugs to them though; I am old and cynical; software is very broken (especially since the Big Move to modern tech; I see more and more ‘out facing’ (still internal) APIs in banks written in js (not blaming the language but blaming the vast amount of cheap and untrained coders in that language niche); we used to write those apis against the real ‘basement’ backends, now they do (usually hiring an external consultancy corp like cap Gemini for big $$$ who then has it done by their offshore teams) and it is a freakin’ horror show; same for insurers); I assume going in I can somehow query all creditcard numbers in there, so no need to tell them that.
How are you going to pay your debt?
This is an important caveat; the issue at hand is looking for vulnerabilities on other people's machines, not in other people's software. If it is running on your machine (read: not SaaS), reverse away.

Releasing the exploit, on the other hand, is a different story (don't do that)
Slowing down is really being able to say "no" to features for awhile while you re-architect the codebase - so you're delivering stuff at the same pace, but that stuff is not product-facing.

I've been through this slog - sometimes it requires fixing what's there and other times, a rewrite. People hate rewrites, but it really is the best way forward in a lot of cases if done correctly.
"Child" is defined as under 18 here, not 13.

It's a way to retroactively punish social media companies with 100s of billions in civil liability. Really nothing else, there's an absurdly easy way given to avoid future liability.

"Social media company" is also defined so broadly that SMS has to be specifically exempted, iMessage and Roblox probably fall under the law.
Supreme Court orders re-vote after iVote crash in NSW local government elections
City folk aren't real muricans
this will be costly for them
"It was the best of times, it was the worst of times, it was the age of wisdom, it was the age of foolishness, it was the epoch of belief, it was the epoch of incredulity, it was the season of light, it was the season of darkness, it was the spring of hope, it was the winter of despair."
(With the exception of firing you for protected reasons/classes, like race, gender, sexuality, etc.)
By your logic, someone that successfully guesses a weak password and ssh's into someone else's server and takes all of the data they can find there is doing nothing wrong, as they are "merely observing what their own computer was doing and making some TCP requests".

Obviously, this is not how the law sees it.
Yeah, kinda doubt it. Remember the number and then press refresh. You'll see it's just a pretty animation, not a live one. Also I am sure at least a few tens of million kids are not officially declared, especially in China, so I would say we are over 8 billions already.
We're probably talking past each other. I don't think the Government was fully aware of the consequence of their actions.

The point of the Government's sanctions is to cause problems and distress for Russia economy. But sanctions are a two-edged sword and end up with you causing problems and distress for your own economy too.

Many US investment companies expect regular interest payments from Russia. Actually, most them are dependent on those payments of interest to maintain their cash flows. If their cash flows get affected, they are at risk of collapsing themselves. Some of those investment companies are supposedly "too big to fail" and will require being bailed out by the taxpayer if they are near collapse. That causes fear, uncertainty and doubt in the financial circles, and that is definitely not wanted in an industry that requires plenty of investor confidence.

Now, if the Government blocks the use of Russia's cash reserves such that payments can not be made to and from those accounts, Russia is prevented also from paying those interest payments to the US investment companies that are relying on those interest payments to maintain their own cash flows.

I can't believe that the Government would have put sanctions on Russia's cash reserves without previously talking to those financial companies whose livelihood depends on free access to international transfers.

If the Government did talk to the banks/investment companies and went ahead with the sanctions anyway, they are guilty of putting their own economy at risk. That's sheer stupidity: You can't prevent Russia from paying interest by blocking their cash reserves and then complain that your economy is at risk.

If the Government did not talk to the banks/investment companies (those are the same thing really after the repeal of the Glass-Steagall Act), they are again guilty of putting their own economy at greatly risk. Something is incredibly broken if the Government just barges ahead and makes stupid decisions without looking at the financial disasters that follow for the financial industry in the US's top-heavy FIRE economy as a direct consequence of their economic warfare on Russia.

I would not be at all surprised if the blocking of Russia's cash reserves leads directly to end of the USD as the World's Reserve Currency, and quite soon.

Hopefully, I was a bit clearer for you this time. At the cost of being rather long-winded about it. :)
>.. libc is the way to interact with the kernel..

On UNIX clones, written in C.

Win32 isn't libc, nor the mainframes ones are (language environments), or Android (Java)/ChromeOS(Brower APIs).
It was a tax cut bill with tax increases targeted at political enemies. There are many other loopholes that could have been closed but Trump was all about attacking political enemies. The anger wasn't at the tax increases it was about the abuse of power.
Why not link directly

https://www.behance.net/gallery/340016/ART-DIRECTION-INSTRUM...