skysight-inc/HackerNews huggingface dataset:
> Since we are fairly spread out it’s actually possible and cheap to own a car. City planners actually make sure parking exists.

I’m not sure if I’ve ever heard someone write this with a positive spin. One of the benefits of a city is its walkability. What you described is suburbia and all its problems that sound very unappealing to someone seeking city life.
Exposure coins
Wait, what Amazon org is doing 4 day work weeks? Not that I have a particularly rough schedule, but it could always get nicer...
This is a Moscow designed structure and the tallest structure in all of Ukraine (and was the tallest in the world until 2012).

There's more cultural significance to this object than there is practical military value. The broadcasts are being filmed on other buildings inside the city. The actual tower itself is a big landmark.
There's a zillion of them, right? crt.sh is maybe the best known, but if you Google you'll find a bunch (for instance Facebook runs one).
How many people here do any sort of regular review of CT logs, and do you really think an attacker couldn't get away with whatever their attack was by the time you found out?
Yeah, flaky dashboard, unable to get proper visuals on apps, can't restart apps.
Good point. I use Photoprism to manage my pictures.

https://photoprism.app/
If you watch carefully, you will notice that the strike lands near the tower, leaving it intact.

If you watch more carefully, you'll see a giant movie-like explosion which indicates that there was something very flammable in this area. Storage of gas? Some ammunition?
It would be nice to learn about great google tool by a another way than the news they are discontinued.
Good luck automating the part where you convince people it's worth something.
Propaganda, presumably. Same reason Bill killed 30 employees of a Serbian TV channel and then patted himself on the back.
tailwind ui had a Goldilocks pricing imho .. you could always offer discounts case by case if prospect can fill out a form.
Some altarnatives:

* https://crt.sh/

* https://developers.facebook.com/tools/ct

* https://ui.ctsearch.entrust.com/ui/ctsearchui
Tell HN: AWS's login flow is a pain
Sessions are short and logging back in is a pain: email/password, captcha, MFA, captcha... if you make a mistake at any step you have to repeat the whole thing. AWS is really great but please improve your auth flow...
I didn't even know Google had a CT search. The search results are better presented/more accessible on crt.sh from my one minute of testing.
Madeleine Albright, first female US secretary of state, has died of cancer
I think you can learn all skills off the internet. What you cant learn off videos is coping with adrenaline rush. There is this great Mike Tyson quote:

"Everyone Has a Plan Until They Get Punched in the Mouth"

This was very apparent when I did martial arts. Many people with colorful belts from limited contact (for example karate) schools crumpled after receiving a couple painful hits/kicks.
Fast brownout detection into reset is a hard problem. Especially as process nodes shrink. So the answer is difficult and it's a fairly high effort "can't you just..."

Here's some fun literature to read:

http://nice.kaist.ac.kr/files/attach/filebox/711/003/Interna...

http://hajim.rochester.edu/ece/sites/kose/files/conferences/...
True, I mean I can't become a millionaire and quit my job.
Well, unix is another really bad OS compared to it's historical predecessors: at first they decide for a bad programming language to need less hw horsepower and separate that cheap language from the user language (C for the system, for "complex" things, shell scripts for the end user), for equal reasons they decide that's no need for GUIs, while far before unix we have had GUIs, touch monitor, even the world first video-conference with screen sharing in LAN (the so called Mother of all the Demos, in 1968 [1] then they realize that's was not that good and graphic systems start to appear on Unix, far limited, complex, that completely violate unix principles since for GUIs there were no IPCs, classic PostScript GUIs do support some user-programming but not really something like classic systems, CDE support a certain integration but again nothing like classic systems.

Since them all "modern" systems keep rediscovering in limited, limited and bug ridden ways what historical systems have done far better decades before...

I think many should just see classic advertisement like https://youtu.be/M0zgj2p7Ww4 than see it's date and where we are today...

It's not only security it's the overall design. In the past hw resources was limited an so hacks and slowness were common, hw itself being "in a pioneering phase" was full of hacks and ugliness but evolving those systems would have led us too the moon while we are still in the middle age...

[1] https://youtu.be/yJDv-zdhzMY
What self hosting stories don't seem to focus enough on is backup and encryption, as these are the main issues with server-in-your-house hosting. Even disregarding fire/water damage it's not uncommon to have hard drives die outright, which is a problem if you didn't think to (or had the money to) set up zfs for data redundancy purposes.
This is an important call to action, in a world where your user experience of an application is determined by a Product Manager who may be stat-maxxing a graph, I hope that we can see a resurgence of self-hosted apps.

Selfishly speaking, I work at Railway and our community maintains a list of self-hosted apps (we call them starters) that people can deploy to our platform. You can checkout the list of apps here: https://railway.app/starters and we even accept submissions via our GitHub repo: https://github.com/railwayapp/starters (Just reply to me here and we can get it reviewed for ya.)
It certainly looks like they're trying to flatten cities and kill civilians: https://twitter.com/Polk_Azov/status/1506585227069689861 - it's certainly not targeted on the military
I just read a medium article about that, and in short:
the inventor? of brew got a child, saw NFTs and realized open source does not pay your bills > maybe web3/crypto will
>The restaurant I went to yesterday had it's menu only available by QR code.

If I went to a restaurant like this I'd leave. I've been to places that had QR codes, but they also had menus available. This is fine.

>You cannot book an Uber.

But you can still call a taxi.

>You cannot date on Tinder.

But you can still date.

>You cannot buy food on too good to go.

But you can still buy food regularly.

>You cannot even find some podcasts because they stopped running an RSS feed.

But you can still listen to the overwhelming majority of podcasts.

Nothing you mentioned seems hard to live without. In fact, I already live completely without anything you mentioned.
Certspotter is basically just crawling for matches, it doesn't retain them.
"Pipline" -> "Pipeline"
No thank you.

I'll have to take care of backups, security, availability, updates, etc. I prefer to use a managed solution.

If you don't want to lose data on being banned, just do your own backups, which are by themselves much less time consuming to handle than full-blown self-hosting.

I'm fine with the occasional service being axed, I'll just migrate to another one. Often, somebody writes a migration script and open sources it, making that even easier.

It is good though to promote and vote with your wallet for services that give you good and dependable support.
Ask HN: Information on common commercial “encrypted email” systems?
The short story: my broker keeps sending me email with the subject beginning with "Encrypt:" and assuring me that the contents are encrypted. They aren't. Anyone who has any clue can clearly look at the raw message and see that the contents are not encrypted. This has happened to me from various parties for many, many years, and I've always assumed they have some sort of internal encrypted email concept where the client can encrypt/decrypt transparently, but that when it exits the company, it's necessarily sent in the clear (they don't know what kind of mail system is on the receiving end).

I'm well-versed in security. I know fundamental truths like that I can't possibly be reading an encrypted email without having access to a decryption key, and that systems to manage such keys are Hard Problems that simply have no widespread implementation that would feasibly work between my broker and my gmail. And further, I know how to look at the raw contents of an email and see that it's clearly just a base64-encoded PDF that I can open and view without any kind of shared secret.

What I don't know is .. what are these various email systems that claim to encrypt and send "secure" email actually doing? I'm looking for references that give the technical details of how various types of encrypted email systems actually work. I want to eliminate the magic and be able to have a conversation that doesn't stop at the other person saying, "I don't know, IT says it's encrypted."
Because the Tigress paints inside the line and follows all the rules. Where Oogway specifically chooses Po because he is a self learner and innovates and does things in an unconventional way. Which is why he is the one who beats Tai Lung.
Certificates generated via Lets Encrypt already end up in the Certificate Transparency log. You can check this yourself via https://crt.sh
Depends on which implementations you're talking about.

But even fast Smalltalks weren't very fast relative to C, just relative to most other dynamic languages. And, of course, the people who made Smalltalk fast ended up making Java even faster.
> but it makes that infrastructure a legitimate target

It’s an illegal armed conflict, thus all use of force is illegal, even use of force on legitimate military targets is illegal.

> Do you really think Russia doesn't have the capability to just bomb central Kiev out of existence?

Capability? Maybe. The will? Absolutely not. Putin is no doubt a war criminal and despot, but: 1) he rightly fears potentially military response from the international community; 2) he has very practical considerations due to the close ties of the Russian and Ukrainian people, which goes directly to Putin’s propaganda that this isn’t war but a special military operation against a Nazi regime, he must at least try to balance his acts with his propaganda or lose support of his people and possibly his troops.
Not much more data in the Google Groups archive. https://groups.google.com/g/certificate-transparency/
There is absolutely a market for this kind of product. If it saves someone a few days of work, the ROI is clear.

However, in my experience (have a similar product geared towards API backends: https://apibakery.com), many developers will stop at "boilerplate", think "cookiecutter", and balk away.

The most vocal complaints for me were:

- it's just boilerplate, therefore how dare you charge

- I can do that in an hour (all devs are optimists :)

- why should I pay a recurring fee for a one-off use (valid, and made me rethink my pricing strategy)

Ultimately, I suspect your users will mainly be founders who just want to get the ball rolling as quickly as possible. If you haven't already, engage with communities such as IndieHackers and r/SaaS.

Good luck!
Most of the country never (in recent times) had a housing shortage before now. So it might be a political issue for the people who live in a handful of coastal cities, but this isn't a political issue in most states.

I have years worth of zillow pricing emails in my inbox, if I go back to '18, YoY price increases were like <1% in most zip codes and 2-3% in the nicer ones. Recent emails have prices going up 20%+ all over town.
crt.sh came up but I was getting 5xx errors. Looks like it might be overloaded now, or I picked "expensive" queries.

But thanks for the recommendation, I'll try it some time later.

Edit: Regarding the facebook one: "Log into Facebook to use this tool." Yeah no thanks.
> Log into Facebook to use this tool.

Not sure I'd even list that as a reasonable alternative.
Yeah, Render is great. I’ve run a company blog on a Django/Wagtail setup there for almost 2 years now with very few hiccups.

I do sometimes worry that one day they’ll shut down and I’ll be stuck moving to a crappier service…
Even better do you really need "self hosting" many people will be good enough with external drive.

You can also setup something like Synology which is good enough for layman and if you keep it in your local network it is basically easier than configuring some old PC.
This is also excellent. https://github.com/mingrammer/diagrams
Please explain the Ukrainian propaganda to me that was deserving of this strike.

Capt. America punching Hitler is propaganda. I happen to agree with it. You'll need to be specific with me. Not all propaganda is bad, and it takes particularly bad propaganda before I think that military action is required. Would you support say, hypothetical German Bombers attacking Marvel Comics over their depiction of Capt. America?
Didn’t even know about it. I’ll check it out.

Thanks!
Isn't the extra complexity needed for 6dof what makes headsets so expensive? Is it even worth it for 1 or 2cm?
I think this makes sense. Ideas:

- Showcase your reciprocal contributions you make back to django community packages (e.g. Jazzband packages).

- Release a permissively licensed django package (with no catches) under your GH's org and brand name and have it take off. (e.g. django-forge-admin)

- The holy grail would be contributions to django itself. Example: Adding more CSS variables in django admin to font-size and font-family. Add rem, %, calc, flex, etc.

- Early startups funding: $5,000 for MVPs up into 6 figures. Your price point could be a bit higher. Email early founders and see what their reaction is. Use that feedback to tailor a business-friendly license to address the concerns of people with decision making powers. Commenters opinions matter, but they're not necessarily your clientele.

- Strike custom deals to make the sale.

- Add on custom development hours and add a clause to incorporate the work back into your product for reuse.

- Expect to be reaching out to founders often, using cold email introductions, both for advice, but also to show you're flexible. Be willing to hop on a zoom, demo it, etc.

- Find early startups to use your framework for testimonials and social proofing.

- I've personally set these up before many times in django at previous places. It takes weeks of effort to bootstrap, especially if you factor in billing. No it's not 8 hours. It's weeks of effort.

My only doubt is, I think you may ultimately make more money striking big deals to do development work. What's more efficient, a $100-$150k deal with one customer or being on the hook for 100 customers?
Yeah and they absolutely do torture civilians, journalists even, e.g. read this testimony: https://rsf.org/en/news/chilling-account-radio-france-fixer-...
We might be talking at cross purposes. I'm thinking of e.g. a Rmarkdown notebook, which is indeed a script not (necessarily) an interactive notebook like Jupyter. And it can be automatically compiled, via a makefile or something similar, and put into version control.

The point is that it makes sense to mix english prose + code to e.g. produce tables or graphs, even if most of the heavy lifting is done separately in code files.
For Django there is also SaaS Pegasus(https://www.saaspegasus.com/) which has a pricing structure more in-line with Jumpstart Rails.
> for one million ops

Okay, but they said millions.

> It's still below 99% for 4 million ops.

I find this misleading, because it's... 98%.

Which completely undermines your argument. If something happens 98% of days, it's fine to call that "every day".
I would claim that I'm quite familiar with the TLS and certificate ecosystem, and up until this news item I didn't know Google runs a CT search engine.

Everyone uses either crt.sh or to a lesser extend Censys. I think this space is covered well and there's just no need for a Google-operated CT search engine nobody knows about.
I used to work for a company that used on-prem BitBucket. And even there, "Stash is down" caused development to grind to a halt. Yeah, sure, our outages weren't synchronized with the rest of the world's outages, but the end result is the same: productivity depends on the uptime of our authoritative repo. That all the developers have clones of that repo on our own boxes is irrelevant... nobody's going to bother pointing our remotes at each other's workstations or reconfiguring Jenkins.
Instagram brings back option for chronological feed
According to https://groups.google.com/g/certificate-transparency/c/iU6SH..., there is no easy direct download. But you can just use the get-entries endpoint repeatedly and/or in parallel to download however many you want.
A lot of the closed source boot Roms look to be SOC vendor code: they'd buy a subsystem ip from someone and have to redistribute the code for that thing but don't have the source licensed.

Unlikely that will ever be cleared up since the IP vendors are very precious about their stuff
The risk is less about losing commits, since those tend to live on every devs machines too. It's about losing all of the other data like the issue tracker, comments, etc.
Self hosting also implies building (or using) your own self hosted product. That's a significant requirement, particularly if you want social features.

I'm going through this dilemma with books. Goodreads lost my account of nine years. I've managed to recover most of the data from a backup and set up my own blog. I'm self hosting! But my blog is very spare and is not backed by a database of books, book covers, etc. Also it has no social features, no easy way to see other people's reviews or find related books or... I could imagine building all those things but that's like building a whole product! I could also imagine some self hosted book product I could just use (analagous to Picasa in the story) but it doesn't happen to exist.

Meanwhile there's a pretty great product for books in Goodreads, other than the crippling disaster of losing a user's account. Also some good cloud competitors like The StoryGraph. So maybe I should just use their product and hope my data is safe.

PS: I was at Google when Picasa was acquired. My memory is that the plan was always to focus on the hosted version. Maintaining a desktop standalone product was very much not in the Google business model.
> What if I band together millions of people and determine that 99x12345678 which I own is actually the OG Bored Ape. How can you stop me?

I mean, that's exactly how decentralization works. I can't stop you by design. Simply put (and for better or worse), it's tyranny of the masses. If you can do that (get everyone to treat another contract as the real Bored Ape contract), then you've effectively "forked" -- this has happened a couple of times in BTC and ETH.
> Should someone interested in self-hosting do it from a literal PC in your basement, configured as a server?

It's a good place to start/test. But don't open your firewall: do all of your testing on your internal network. You really don't want to open your network to the kind of problems that can occur while you're learning.

When you're ready to really host things then you should rent a cheap shared instance, or maybe a low-priced dedicated server. You can pick up something decent for $10/mo. That's not much if you're skilled enough (eg, employable enough) to learn how to self-host.

For your internal network you can use a pi-hole to set up all of your DNS entries so you can even visit "http://example.com" and have it point to an IP on your LAN.
Using blockchain ontop of IPFS is to provide incentives. I don't know what is "questionable" about Filecoin, it seems fine to me. I used IPFS before blockchain but mostly just to play around with, never for any serious projects. Filecoin is simply a way to get more people to use IPFS. NFT.storage is the same, they see a market they would be a perfect fit for and try to get more and more people using IPFS.
Bit more than 6 billion.

And yes, it's quite challenging. It would be a nice service to the community if someone would host downloadable dumps of CT logs.
If you need mail, you need VPS with good reputation. Otherwise hosting from your basement is an option if you've got accessible IP address.
For some things your local network is enough, like personal pictures and other private files. E-Mails I would suggest to host in a datacenter. Not necessarily in AWS but a local company offering hosting.

For those who feel unable top securely self host I'd suggest looking into smaller providers of hosted E-Mail solutions. A large number of federated services is better than everyone being on Google Workspace or MS360.
Since they changed the desktop UI (UX?) Gnome has felt somewhat alien and even cringy to me. Nonetheless I have been using it for years just because in Debian it happens to be the default; after my recent switch to Slackware which doesn't include it, I started using KDE, and now I feel right at home.
How would you translate the original quote into modern English?

Surely any major human language can accurately capture a translation from any other major human language, even if it requires more words than the original to convey the meaning.
Agh, thanks for pointing that out. My email sending service just decided to stop working. Should have it fixed soon.

Edit: should be working now.
it is, I especially like its offline desktop version(for all OSes). I don't think Lucidchart has a desktop version.

and of course, it's totally free unless you want its paid Apps+cloud version, which in my case I don't.
Nor for the US
We're not quite publicly launched yet, but I've been working on making self-hosting easier for several years now. People often ask "why would I self-host?" and it's hard to pin down one answer - instead the answer depends on your values - but there is an answer. This post is excellent because it's not "do it for security" or "do it to see fewer ads" or "do it to fight big tech" or "don't give photos of your infant to Facebook". It's all of those reasons, but it's also more broadly (and deeper in the kool-aid), because it helps fix the internet itself.

> This engineering talent is supposed to be solving world’s problems but instead they are ensuring how everyone wastes their time

Agreed! If software was sold for its utility instead of its addictive properties - this might start to change. Self-hosted / open-source software does need plenty of "hosted" accoutrements though: backups, remote access, etc. Shameless self-promo: we're trying to solve this over at https://kubesail.com
On the topic of the camera, I've been considering buying a disposable camera to keep on me for those "gotta have it" moments. For one, even my iPhone 12 takes a few seconds before the camera is ready, but more importantly, I have kids, and if I take a picture of them doing something, the moment immediately ends, because they want to see it. They know they can see it now, so they stop whatever their doing to come look. I always tell them they don't need to see it because they're living it, and the picture is for later, but they always ask anyway.
I think about Rejection Therapy [0] a lot. Being impervious to rejection has to be some sort of superpower.

[0] https://en.wikipedia.org/wiki/Rejection_Therapy
Hmm, I'm 100% with you, but the end of it:

"You have to... wait for it... have more debt to show that you're good at managaging debt."

Suddenly made sense, despite being intended as sarcasm / surrealism. Everything else in life, I get better at by practicing. Debt may be similar; getting that first credit card, regardless of age, CAN be alluring temptation to max out. Some history of on-ramped, well managed debt, makes sense would be a prime proof that "one can manage debt" :-/
I have encountered people who use Qubes as a daily-driver while the same is not true of Genode. That might say more about my circle of friends or the popularity than usability, bit I suspect it's indicative...