skysight-inc/HackerNews huggingface dataset:
Regulation doesn’t make unprofitable businesses exist. If the business model is unviable with support those businesses will simply not exist or cost an amount of money that is unappealing.
Having a cable that's the same on both ends and also in both orientations is kind of nice. Having a standard with decent power delivery is even nicer. I no longer have to pack special power adapters and cables for multiple devices, and worry about those devices becoming unusable if I lose either. I can just pack a generic charger and know that it will work well enough for everything I have. I might pack two kinds of cables (micro and C) but I can also get those just about anywhere so that's not a worry. Definitely an improvement there.

OTOH, the fact that different identical-looking cables will support different charging rates, data rates, and even functionality is insane. USB-IF really messed up by not requiring clear standardized labeling of these things on every cable and adapter. Besides the fact that the ambiguity is inconvenient, it enables outright fraud. The market is full of cables which don't actually do what the one that came with your device did, which might even claim to do it, but you never know until you actually open the package and try to use it ... which is too late.

Also, not USB-IF's fault, but why are there so damn few chargers with more than one USB-C port? I understand that it would be unreasonable to expect much power through more than one, but it's also annoying that I need to have A-to-C cables because I have more C devices than I have ports.
But you don't have to do any of that to actually drink that milk, get nutricients and be fine. Two of these are basically matter of preference. And "people deep in the past", whatever what it means, would want to eat fat with all its calories and all that.

And pasteurization makes it safer, but is not necessary strictly speaking. I can even still buy unpasteurized milk - but it is more expensive due to higher hygiene requirements currently. But in the past, they would just drink it (and get sick occasionally).
We had 56 just before we posted on HN, we actually got blown away by the community interest
To connect back on my rant -- isn't it amazing the disparity of thoughts around security best practices? How does someone who knows next to nothing become a reliable security professional if even the security professionals disagree on fundamentals?
Agreed 100%. Windows 1.0 was way before my time, and I have no idea where I would even start if I wanted to sift through those binaries or patch them like this person did.

I hope all of this information about legacy systems is documented somewhere on the internet, but I'm a afraid a lot of it might not be, and is lost as these older devs who made and worked with these systems get older and pass away.
Putting out some simple numbers:

Let’s say you have a million users and once a month, 1% of them need to speak with a human for 15 minutes. That’s 30k hours of support per year, so like 15 full time employees just to be on the phone.
All your points tell you haven't a clue of how modern java works. No need to mess with the JRE, just bundle whatever you need in your executable and it behaves just like any other application. And it's not heavyweight, at least not compared to Electron and friends, which are thriving. So I don't see why that should be a concern.
> What you’re supposed to do is verify the key fingerprint out-of-band by asking an administrator or consulting a database or something. But no one does that.

Actually they do where I work, pretty much every time, and I didn't ask them to. Eyebrows will raise even higher if I forget to notify everyone I replaced a server at a domain causing a new signature (resulting in the scary "possible MITM attack" message). This is a good thing, but I should probably make it more efficient by publishing the fingerprints.

Although the article does point out this specific disadvantage of domain reuse with known_hosts. I can see why this solution could make things easier at larger scales.
> And in fact for a proportion of the population it is in fact free or nearly so because they have never paid any income tax or the cost was so high that the taxes they did pay plus the proceeds of selling very possession they had and selling their children into servitude still wasn't enough to pay for it.

Okay, so if the person receiving the service doesn’t pay taxes, then they do not pay for the service. And for everyone else that does pay taxes, it is a cost with no attendant service.

> we all understand the point of taxation and redistribution (at least in Europe we do)

What is the point?

> what exactly was the point you were repeatedly failing to make clear?

I don’t have some huge point. I’m just confused by this usage of “free”. There are other usages that I find confusing as well.

A child tells his friends that everything on Amazon is free, meanwhile his parents silently pay for his purchases.

Someone steals a car and tells her friends that she has a new free car.
Last year I joined a support group on Facebook for people who believed they were suffering from long COVID.

I was shocked at the sheer number of people who believed they had COVID between December 2019 and April 2020.
Funny pretty much half of the lightning cables I see are completely falling apart, let's not even talk about the fact that leaving contacts exposed to where they can be touched by fatty fingers is generally a terrible idea. I guess that's also why we haven't seen lightning being upgraded to speeds beyond USB2 speeds.
While I am personally disgusted with what transpired with node-ipc and am also completely gutted and outraged at Russias violent invasion of Ukraine - I don’t like the idea of us trying to “tone police” open source projects. If some idiot maintainer wants to pull a stupid stunt like that they should have the right to do so. In my view it’s the software equivalent of “hate speech” which, while vile, should be protected.

This could quickly devolve into a nasty slippery slope where people who simply disagree with a direction of an open source project try to strip it of its licenses or eject it from various package managers.
There's a term for that type of thinking: "crab mentality". It's named after the behavior of crabs when they are placed in a bucket. When a crab tries to escape, the other crabs notice and begin pulling the escaping crab back into the bucket.

For us humans, when we manage to climb out of a bucket we land in a larger bucket that contains the one we climbed out of. Eventually we get our bearings and begin to see the new walls that surround us. Unhappy with the walls, we start climbing again. And so goes the story of Sysiphus.

https://en.wikipedia.org/wiki/Sisyphus

I think the solution is to be happy with what you have. Not an easy task though.
> In theory the same things could happen for PIP, Maven, Gradle, their Rust and Go counterpart and any such package manager. Any data on this?

Supply chain attacks, such as these, can definitely happen to any language. NPM seems to be a nice target simply because the volume of deps your avg 'simple' node project has (I mean, 'npm generate'ing a simple strapi-backed static site for us and there's ~300mb of node_modules...).

There's not really a cure. You can peg your deps to a version, but with that much code in there, you're never going to really know if that version is compromised.

If you can come up with a solution, there's money to be made..

Edit: The best we really have atm is just scanning for known vulns with stuff like xray/lifecycle/dependabot. Better than nothing, but for sure there are malicious packages out there yet to be discovered.
According to the [homepage](https://www.naps2.com/doc-getting-started.html#system-requir...) it is also available for Linux.
Thermal Printing
American here. The way I read that argument was Java on the desktop for UIs, not "no Java anywhere." Java has been a core part of every company I've worked for since finishing school, it's just kept on the backend in the service of APIs and the like. But other than Android UIs, mentioned in a different reply, Java isn't the driver of desktop applications, and probably won't be in the presence of Electron apps and more movement to mobile anyway.
I have no need for a sump pump but I kinda want to give money to this company. If you wouldn't mind sharing the company name I'd love to have it. They may well make something else I do need and I'd love to reward a company who is such a good job.
Actually I would, because there are much cheaper alternatives to deal with 3D graphics programming.

Macs are fine as long as I get them from the job, I am not paying for them privately.
Show HN: Kestra - Open-Source Airflow Alternative
Hey HN, I'm really proud to share with you my new open source project: Kestra https://github.com/kestra-io/kestra

I created a few years ago a successful open source AKHQ project: https://github.com/tchiotludo/akhq (renamed from KafkaHQ) which has been adopted by big companies like Best Buy, Pipedrive, BMW, Decathlon and many more. 2300 stars, 120 contributors, 10M docker downloads, much more than I expected.

Now let's talk about Kestra, an infinitely scalable orchestration and scheduling platform for creating, running, scheduling and monitoring millions of complex pipelines.

I started the project 30 months ago and I'm even more proud of this project that required a lot of investment and time to build the future of data pipelines (I hope). The result is now ready to be presented and I hope to get some feedback from you, HN community.

To have a fully scalable solution, we choose Kafka as our database (of course, I love Kafka if you didn't know) as well as ElasticSearch, Micronaut, ... and can be deployed on Kubernetes, VM or on premise.

You may think there are many alternatives in this area, but we decided to take a different road by using a descriptive approach (low code) to build your pipelines allowing to edit directly from the web interface and deploy to production with terraform directly. We paid a lot of attention to the scalability and performance part which allows us to have already a big production at a big French retailer: Leroy Merlin

Since Kestra core is plugin based, many are available from the core team, but you can create one easily.

More information:
- on the official website: https://kestra.io/
- on the medium post: https://medium.com/@kestra-io/introducing-kestra-infinitely-...
- check out the project: https://github.com/kestra-io/kestra

Your comments are more than welcome, thank you!
Google appealed and won, apparently. Frustratingly there appears to be no rationale for the reversal.

https://www.huffpost.com/entry/why-google-bothered-to-ap_b_2...
The linked video wasn't rendered in real time.
> What money is the US spending in order to worsen it's own citizens basic needs?

Here's one that bugs me occasionally:

Gatekeeping who is allowed to benefit from societal help. Welfare, specifically. There's so much bureaucracy around identifying who gets welfare and who does not (not to mention the identification and enforcement of the "no" people who find ways to get the money regardless) that it takes a legion of employees to manage.
You do it if you're using a language where there's a rule that there are only functions. For example there's no concept of doing one thing followed by another. The only way you can arrange that is to have two functions and compose them: g(f(x)). So now you know that the code in g is executed after the code in f. Monadic composition is basically about doing that while having code that looks like it would in a regular language that has statements and sequential execution. There are a few other reasons, such as you can create your own control flow as-code, lifting, etc. But the primary driver is: because you can't write useful programs in a pure functional language without this trick.
Your $1000/hr bill is really covering 5 other indigent hospital patients who can't financially cover the care the hospital is legally required to give. Rather than design a medical system that works for everyone no matter their finances we'd rather stick it to the middle class (the rich go to very different hospitals) since they have the most to lose and are the weakest to negotiate.

Also, socialism.
> in this case it has something to do with who is billed by the service provider.

What else could it even be? You started your gotcha with the truism that it's not free, so, yeah, nothing is free, and the whole discussion is meaningless. You're arguing in bad faith, but that just makes your argument meaningless.

> no current Earth society comes close to that criteria. For example, if someone has a currently untreatable disease

Your counterargument is that there exist diseases that cannot be treated anywhere?

Let me give you an example of something treatable: Endemic (flea-borne_) typhus. In Europe, the given example is "British POWs in Germany at the end of World War I when they described conditions in Germany." [1] In the US, instead Typhus shows up in the reports of the LA Medical Association as a regular occurence (among homeless, mostly). [2]

[1] https://en.wikipedia.org/wiki/Epidemic_typhus
[2] https://www.ladocs.org/news-events/news/lac-dph-health-alert...
You can say the same thing about air. You can connect any two devices with a compatible radio interface over just air.
Excellent. A system like this barely beats if at all simple rule based approach, which are easier to implement, easier to explain.

When use case demands it, domain relevant feature engineering is where the value is. A generic approach is unlikely to add any value
I actually have a cable somewhere where the USB-A side is reversible; it has a plastic tab in the center that can shift up or down so it'll always plug in.

I mean I don't know if it has any data connections or anything, I think it came with either a JBL speaker or a power bank, but it's pretty clever.
Because it's not suitable for everyone in all circumstances.
Where Apple got to trillion dollar capitalization the first time, the joke was that it have done it due to savings on shitty lightning cables.
It's because it's the cash price. Medicare and Medicaid reimbursements are significantly less, so in order to make budgets make any sense, the bills that can be increased, increase enough to cover all of the others.

Even employer sponsored insurance will get significant discounts on that price.
It’s the instruction offset from a function entry point.
I've seen "but you can hover your mouse" as an excuse by CorcleCI, for example. And it doesn't fly. It's an extra interaction that is cumbersome and non-persistent.
Sorry for this as I am trying first time this thing so I don't know what exactly should available on homepage.

As many people say Ship Fast and Iterate I'm doing the same.

Thanks for your feedback I add all pages ASAP.
TIL shitexpress.com exists as a service.
I think the OP is right.

A feature of COVID is that it can be caught by mostly young people who have no idea they had it.

So there's the false belief that you had it but also the false belief that you didn't. You're more likely to have the latter false belief if you had a super mild case.

So the correlation can be affected by people with mild cases not realising they had it and not having long COVID (or milder long COVID).
The Mini-Manual for the Urban Defender [pdf]
Hi HN,

I made this little game where you have to guess the missing words in the titles of Hacker News stories. Hope you find it as fun as I do :) Cheers
A curious inverse of this headline from last year:

> Code in huge ransomware attack written to avoid computers that use Russian, says new report

Edit, a better reference than the NBC article: https://krebsonsecurity.com/2021/05/try-this-one-weird-trick...
Android's "native" UI library has hard dependencies on key components of the Android OS that go far beyond what can be provided by any random Java JVM/JRE (i.e. you can't simply use Android's UI .jars almost anywhere like we can with AWT and Swing).

Saying "Android's UI is Java" is like saying "Apple's macOS Cocoa is x86" - technically true, but belies the sheer volume of transitive dependencies.
> harms peacemakers as much as the warmongers—even ethical hackers using a VPN to work against the invasion might become collateral damage

This line of criticism could be blunted by targeting government IP blocks. Would that make it okay? (I don’t think so. But it’s less black and white.)
In the middle means that you have a large number of small centralized services that are interoperable. That way you get most of the benefits of centralization e.g. someone else manages the technical details, you benefit from the network effects of the service, the service can provide things at scale that you can't on your own and you get most of the benefits of decentralization e.g. you get to choose a service that is more in alignment with your principles, has the bucket of features you prefer, has the community you want to interact with, you can switch to a new service whenever you like. You also have to lose something in exchange, you can't fully customize everything the way you like and not everyone in the world will have exactly the same features available to them. It's a compromise. The key to making it work is having a common protocol and everyone agreeing to at least speak to each other rather than building their own walled garden Utopia™.
I don't find this surprising personally, the psyche is an underrated aspect of one's immunity. Thoughts govern the body more than mere commands or receiving sensory "data". If one feels unwell "in his head" then that means he is actually unwell or eventually the body will "adjust" to his perception: feeling unwell, or at least not optimal. Similarly the opposite is probably true: having a clear mind probably helps more than not.
> It's one reason why I'm in favor of nationalizing things or keeping things nationalized

I have a business in NJ where the state unemployment department has made an error. After hundreds of phone calls and multiple physical letters, we have received no response in over 16 months. The issue is still outstanding. Governments are no better than businesses in this matter.

You can call them the minute the offices open for a month straight, and get the same “high call volume, call back next business day” message.

The solution is to get a state politician’s ear who back channels their way into getting a government employee to take up the problem. But that is the same as getting a post to top of twitter/Reddit/hacker news and hoping a google employee decides to act.
> In theory the same things could happen for PIP, Maven, Gradle, their Rust and Go counterpart and any such package manager. Any data on this?

Rust employs version locking for it's builds, so you'll only be able to propagate malware with it if:

0. The developer's cargo definition auto-grabs the latest dependencies (trust me, very few do this)

1. The developer has deliberately updated the version of their dependency

2. The developer doesn't notice any significant changes when debugging/staging the new release

3. The package passed through testing without identifying any malware or malicious changes

In theory, it's possible to distribute malware with Rust's dependency system, but doing so would be pretty difficult. I'd say there's some pretty good roadblocks in place to prevent it from happening.
I wonder how does this JS trick perform. So you have your server, and translations are stored on some other server? Text is there, and images are on your server?
Yeah, as are some of the most popular and modernized desktop apps. I'm always astounded by these posts.

Java has two modern UI frameworks. Swing and JFX. They blow Microsoft's offerings out of the water--while being proven cross-platform.
I fully understand what you're saying, but it's somewhat skew to the point I'm trying to make. The people I'm talking about are the ones who have already baked health effects of their habits into their calculus and claim to acknowledge them. For someone who has already bought into the idea that their smoking or drinking will shorten their lives, an elevated BP reading, finding themselves having trouble taking more than one flight of stairs, or even having some chest or leg pain when they're walking around are unlikely to be major wake-up calls. My point is that people may know the end result, but they generally don't have a sense of what the path to that result looks like and underestimate its effects.
Ah the memories. I loved them. My NSW high school used them (early to late 80s at least) and my friend's dad had one and we got into programming on them. When I wanted my own computer about 1986 that was the obvious and only choice. Experts could do amazing things with BASIC by embedding machine code routines into REM comment lines with POKE statements. I wrote mainly in BASIC, Turbo Pascal, Z80 assembler. I remember trying out Lisp and drawing a Mandelbrot set image on it. They were CP/M. I remember it said "Gary Kildall" on screen as it started up. I was programming on it until 2000! - I never had a computer with a mouse until then.

It was so different pre-internet - I never laid eyes on a book or manual on Turbo Pascal or Z80 assembler. I think I picked up crumbs from computer magazines in libraries.
>Arguments like this are similar to the BLM protest that try to equate property with human lives.

Yeah, but the problem with this is that, taken to its logical conclusion, you end up with a nihilistic view that's basically "do you support The Cause? if yes then any protest action is acceptable, if no then any minor transgression should be cracked down by law enforcement". This works especially well when The Cause is something that could plausibly affect tens of millions of people, so you can excuse quite a lot of damage.
> Trump, COVID, Russia have erased years of investment gains.

I really, really, really hate to defend Mr. Trump, but on his first day of office the Vanguard total stock market index closed at $116.91; on his last day of office it closed at $198.86, a 70.01% increase (14.19% annualised). There are numerous reasons to criticise the former president, but the performance of the stock market during his tenure does not appear to be one of them.
The state monitors you actively not just passively:

https://en.wikipedia.org/wiki/Mass_surveillance_in_the_Unite...
In MacOS or Linux, you can use openssl on the CLI easily.

$ echo -n "private-message" | openssl enc -e -aes-256-cbc -a -salt
enter aes-256-cbc encryption password:
Verifying - enter aes-256-cbc encryption password:

Then to decrypt
echo 'U2Fsxxxxxxxxxx' | openssl aes-256-cbc -a -d -salt
In the US you have this right. It’s called small claims court. You need to write the corporation a demand letter. If they don’t respond to your demands within the deadline you can begin legal proceedings. You don’t even need a lawyer. You just need to research the relevant laws in your jurisdiction and the procedures of your local small claims court.
Charitably, it creates a new friction for Russian business in deploying open-source software. That drag further diminishes Russia’s economy, and thus, its warmaking ability.
What about butler/concierge services that you pay to act as an intermediary to handle the small problems ? Or maybe even some personal assistant if you have more money (or Siri if you are poor).

Companies often have solutions in search for problems, wouldn't it be a great way for them to get high-quality input to provide new services while filtering the miscommunications.

Adding this intermediary could help reduce the friction to switch from an actor that refuses to do customer support or refuse to play the game, and would help shift the balance of power back to the consumer.

Otherwise there is also the open-source/diy solution and reducing your dependencies on other, but until they have enough funding to be able to provide any services, there will always be some missing services.