skysight-inc/HackerNews huggingface dataset:
lol what

Edit:

pro·lif·ic (adj)
marked by abundant inventiveness or productivity

It's just a fun title for his article about programmatically creating millions of remixes, thus becoming a very prolific DJ. That's the entire joke. It doesn't seem equivalent to "typing the N word in all caps." I'm sorry that your sense of humor is simply too refined to understand us uneducated peasants' jokes.

Also you really just made a throwaway to insult someone's article?
My two cents. Why does this have to be a regulated force-fit? Companies can choose to offer a basic support tier (eg: kb forums, email) and a higher paid support tier or could bundle this as part of their pricing tiers. I don't see why this needs to be a customer right to be able to speak to a human when a customer has explicitly exercised the choice of a low touch support option at the point of purchase. Forcing this just makes it more expensive for everyone.
> Using laptops the last decade, charging was such a pain: it’s a special charger in the first place, you can’t just borrow another brand’s cable lying around.

it's exactly the same now though. I have a dozen of USB-C cables and exactly one that can charge my higher-power devices reliably
cough that’s DE-9 you’re talking about; the B shell is large and the E shell much smaller.
I was thinking of a black hole that would be large enough to do any sort of science with. I personally wouldn't be concerned with it consuming the world, I would be more concerned with it evaporating!

Because the smaller the blackhole is the faster it evaporates, below a certain energy the blackhole would turn all the energy/mass that was put into it into energy close to instantly, i.e. it basically turns into a bomb.
Ever don't the math on the amount of time spent entering passwords?
I have. Stopped using passwords for personal stuff.

I multiplied by cost per min for downtime in professional support and the cost of typing passwords was more than my yearly wage.
Using certificates does not provide anything useful for a small private network, with a single administrator, or where all the users are trusted.

On the other hand, they are useful for large organizations, with needs for differentiated access rights and management rights.

The centralized control over the certification authority allows the delegation of restricted rights to other levels of network administration.
Setup Hashicorp Vault. Almost easy but actyally hard to do right. Policies are easy to make too open and possibly insecure.
People cost money, yes. But when you're distributing that cost across thousands (or tens of thousands) of customers every year, those costs are a pittance. Single digit dollars per year on the outside.

Not exactly a bank breaker for a vast majority of businesses.
Agreed. Rephrase this “rights are never anything someone should be forced to provide”.

Rights are naturally given and cannot be taken away.

You have the right to life and education and defense. no one can take those things from, but no one else to provide them either. because that would be infringing on their rights.

Do I think it would be nice for companies to provide human assistance? Yes of course. But I could never support any policy that forced the company to do that. much less would I ever call it a “right”.
Steam has reaped the rewards of the first-mover advantage, but I feel like they deserves a bit of respect for it, since the problems they were solving were still 'new', and solutions allowed people to actually do new things/have a better experience, instead of sitting back and extracting rent. SteamOS is something I'm going to be incredibly thankful for in the future, since I plan to transition from Windows-first to Linux-first, and can now take more of my games along with me.

I don't think Netflix would have had such an easy (as in straightforward or simple) time of things. Different audiences, different histories, different use cases and existing structure, etc. I like their product, but I don't know how much wiggle room they had when dealing with 'Big Film', who would have likely been heavy and in a deep trench.

Steam was 100% digital from the start, and their customers were almost guaranteed to have an internet connection on their PC, which let them make assumptions about how to move forward. Their main competition was boxed software being sold in stores. Like you say, they added value in making it more attractive for developers to put themselves on the platform, while making it more attractive for a user to be there as well.

Netflix was physical-first, and (imo) didn't really disrupt anything, but just made certain 'workflows' easier(Don't bother driving to the video store, but still pick out the movies, and just put them back in the mail) to achieve. It could have been implemented with a physical catalog and some postcards, if the web weren't as developed as it was.

I don't have hard evidence, but I think that part of their model relied on not selling, in order to keep licensing costs down. Since blank DVDs can be had cheap as dirt, why else would they charge a fee for unreturned discs? It's a way for them to show that people aren't actually buying something, which may mean that they don't need to pay as much back to the content owners.

> Netflix should build tools ...

Film studios cater to those who are creating something to be sold in some form, and don't necessarily care about the consumer at the end(imo). They're B2B, where Steam is B2B + B2C. Netflix is mostly B2C, but may still have some innovation left if they take what they're learning with Originals to build a stronger/more valuable B2B.
Yeah it dramatically improves at 3-4 months. Then it’s the odd regression weeks but I get 10 hours of sleep now. The problem is I basically work, sleep and entertain/feed in an endless cycle until he’s old enough to go to daycare or we get a nanny.

I hear two kids is pretty brutal until they’re both 3+ years old.
My pleasure! If you try out Unreal don't let the configuration overwhelm you. It has evolved over a long period of time. One can find example configurations of live servers and they have a forum.
Does anyone know of a decent search engine that searches and shows results of only vintage type sites - you know, the ones built with the old school HTML tables or frontpage kind of stuff? Often, these are the most valuable in content, with less promotional bullshit like a random popup asking to signup for a newsletter or perhaps some dubious GDPR notice with all personal data collection toggles set to "off".
I prefer TTS with 1.5x speed coupled with highlighting the current words, and restyling the text to have 160% line height. There's something about having both the sound and visual at the same time that allows deeper concentration.
> Kind of crappy whataboutism there don't you think? What if I'm a VPN user and my hard drive was wiped?

Yeah it obviously sucks to be a victim of this behaviour, but the developer is being roundly condemned by everybody. I thought you were worried about this type of behaviour being encouraged by progressives?

> What does this have to do with conservatives?

Just a guess, it's usually conservatives that hand-wring this much about "woke" people.
AA barely works, though.
Bro you almost made me spit out my latte.
> they could put pressure to stop

In case you haven't checked, both targeted countries are authoritarian regimes where any kind of civil protest is ignored at best or actively suppressed at worst. And violent regime changes (aka revolutions) coming from the people don't work, at least not without the support of part of the governing elites (which aren't impacted by that kind of actions)
That is obviously not true, and even if it were, the country in question is Russia, an autocracy. What is our poor hypothetical node developer expected to do, march down to the Kremlin and beat Putin with his MacBook?
The fundamentals are that you need to exceed O(2^N) > 80 bits roughly in complexity of your keys. Adding some padding to that is a good idea because some algorithms can be simplified in theory (for instance AES-128 is actually simplified down to like ~118 already through known math).

This is for symmetric encryption, and for asymmetric the equivalent is ~1024-bits, so padding it up to 2048-bits is generally the "minimum" for RSA, and some of that math is advancing too so bumping it to 4096-bits isn't a bad idea. If you want to be quantum proof, RSA will be broken so moving to something else like EC is nice. AES would be halved O(sqrt(N)), so AES-128 becomes the equivalent of AES-64, so if you want to be quantum proof there you need to jump up to AES-256 (unless you are using XTS/tweak mode, in which case AES-512). Keep in mind quantum also is not exactly short term practical to accomplish at the moment.

You can use whatever technology to accomplish that complexity, be it passwords, SSH keys, or SSH certs. Anything else is just technology architecture noise. Passwords absolutely can clear the O(2^N) > 80 bit threshold. It's just about bytes, and how you store them.

Nobody is going to be brute forcing a sufficiently complex password over the network anytime soon unless it isn't actually random but some default password that looks random.

Just look at the title of this post: "If you're not using SSH certificates you're doing SSH wrong". It's just completely devoid of environment issues, user issues, datacenter issues, and reeks of elitism. There is no "one true way" despite people's insistence that they are the arbiters of truth. I keep reading here about "you should just use serial over network instead of SSH!" but fail to read about how those serial over network connections are usually less secure than SSH itself.

Best practices guides have gone off the rails. They are generally good guidelines, but you have to make sure you are taking into account your own environment and user needs and take them with a grain of salt. Learn for yourself, and read raw facts from real cryptographers and people in the field. Don't take best practices guides as absolute truth, but learn from them.

How does one become a security professional? Maybe not with one of those "become a security professional in 30 minutes" packages then start a blog about how everyone isn't conforming to their tiny worldview. No matter what it'll take >10 years with actual experience, just like any profession. One has to start from the bottom and make their way up. Most environments are too complicated for any "one size fits all" solution:

https://xkcd.com/927/

EDIT: Further discussion on this here is interesting. The top comments go all in on SSH certificates, then down the line people start questioning why passwords are bad in the same ways. A lot of the "SSL certificate" push theorized here from their perspective seems to come from VPN providers that need it from lesser skilled clients/users (think, people who bought VPNs off YouTube video recommendations):

https://arstechnica.com/information-technology/2022/02/after...
After spending my career working in higher level languages, I'm always impressed by what people can do with languages like C. It's not just for drivers anymore.
The Netherlands So Far
Quorum publishing would help a lot, and is doable. It would guard against supply chain attacks where the identity of a publisher is taken over by an attacker, by multiplying the difficulty and requiring multiple takeovers. However, it would not fully guard against a conspiracy by people willing to burn their reputations, as in the "peacenotwar" attack.

Per-dependency sandboxing and permissions might mitigate things to a degree, just as it has on iOS etc with apps. But it would require a different software module architecture than we have today for common languages.
Ah fair enough.

Nice point about being British. Apparently, I only have that when I'm skiing :P
Plus without a patent it would be very easy to capitalize on this without compensating the guy for all the research and tuning his put into it. I think patents are ideal for new ideas that are super easy to steal/copy, right? Sure Academics working at the bleeding edge should patent for example but they're likely to have a little advantage by being the expert and actually knowing how to do the thing. But in this case the result may look simple but took ingenuity and time to produce just the same.
Yeah I was in the wrong for sure, I am not qualified to be a customer support rep and I was a web dev at that job who picked up the slack for an infilled position. I was just trying trying to explain that dehumanization goes both ways and that is why CS is such a crappy field in almost every aspect.

As frustrated as we get with these systems we have to remember there’s a human on the other side and no one wants to be engaging with each other + most companies don’t have CS to actually help anyone they do so to check of a box and prevent any potential legal issues from popping up. In a lot of places, especially commerce related, those you speak to don’t even have many/any tools to resolve your complaint. The job is quite literally being a punching bag, if you manage to help someone that’s little more than a nice to have.
> I am currently plugged into my monitor which is providing power + USB. I didn't have to try three times to plug it in.

Unrelated to the plug orientation, occasionally my laptop fails to properly connect to my monitor over USB C (providing both data and power) until I have plugged it in several times. The issue could be either the monitor, laptop, or cable. This is just anecdata, but it shows how USB C alone hasn't solved the problem where it doesn't just work the first time.
I use Linux (baremetal on a System76 machine, and WSL) and Windows daily. I can’t stand OSX. As in literally want to trash it and the device it’s installed on within 10m. It’s a beautiful OS, but as a windows manager, it’s literally unusable; at least with a QWERTY keyboard. Like what genius put cmd+q right beside cmd+a, with cmd+q not even prompting the user? I could rant for days… so I’m just going to stop.
You don't have the right to tell others how to run their business. You do have the right to take your business elsewhere.

In a free market people vote with their wallet and there's plenty out there that accept the zero support model with a lower price, whether they understand what they are getting or not. That's assuming they even bother to ask about support options up front.
I couldn't disagree more - I've had FAR more problems with HDMI than with USB C/Thunderbolt. Sticking with quality cables and not the bargain basement specials off of Amazon (or hell, anything remotely related to electronics on Amazon) is probably the single greatest critical success factor here.

As for the charging - as others point out I put that as more a software problem. That devices don't more clearly and prominently display this kind of information is definitely an issue - but once again, make sure the physical layer (your chargers and cables) are high quality and just about everything you complain about is a non-issue. I can't wait for non-USB C stuff to slowly die out. Will be nice to finally have one physical connection (that doesn't suck!) for pretty much everything I need to do.
Own experience. I think 2-3 vanced versions ago, Google added ad videos into the search results and I could not get rid of them till vanced updated.
> As far as I know, the only kind of software that routinely does that is games

This actually took some time to become the norm, with some really notorious incidents of companies that refused to let developers be credited in game. The Castlevania games, for eg, had fake horror movie-ish names in their credits. The developer credit in Adventure was an easter egg as well. Even Nintendo games had credits that were often full of pseudonyms.
Is this available in the US?
How do you define truth, and objective reality? With your argument, it means we can't ever experience the true reality -- or ever know if it even exists!
> men are still statistically more likely to be violent criminals

I think your meant criminals are more likely to be men.
>The “weaponization of open source” as Gerald Benischke calls it in his March 16 blog post is indiscriminate, and the collateral damage it causes damages the work of developers and operators solely because they have a Russia-assigned IP address. It harms peacemakers as much as the warmongers—even ethical hackers using a VPN to work against the invasion might become collateral damage.

I think this is a weirdly bad argument. All the sanctions against Russia harm pretty much all Russians because they're in Russia even if they're peacemakers. That's just the price of using sanctions. You can absolutely apply that to open source - block all Russian IPs and say "Sorry, but we endorse the sanctions that our government has put on Russia, and we're going to boycott your country for that reason" - just the same way that hundreds of western countries have pulled their businesses out of China.

Now they also make the argument that it's ineffective - that you're ruining your own codebase to try and make Russia suffer, but at the end of the day that's a judgement for the developer of the repo.

It's also naive to think posting "anti-propaganda" in commit logs is in any way an effective way of circumventing censorship, at best you're just hoping that your obscurity prevents you being censored, but that's basically just playing by the censors rules.
A huge fraction of the folks I know (senior+ eng) at Google left for Snowflake recently. They are paying better than Google (full comp).
> you’re doing SSH wrong

I understand the theoretical superiority to keys, but do we have some data per practically how many times key security actually failed someone?
We aren’t talking about law, we are talking about spirit. It’s perfectly legal for you to ask Google to take it down and for them to take it down. The point is, that goes against the spirit of this culture, which is that you really can’t and shouldn’t silence someone in general.

Again, I ask, are they lying or do they have accurate points? This is best taken as a learning experience because treating it as a battle is going to get you nowhere.
That's worse because now you have to find the innermost function and then walk back outwards. It gets especially ugly when the calls require other parameters

let x = anotherThing(
somethingElse(
something(
x, y, z
), 1, 2, 3
), "a", "b", "c"
);

Or maybe this looks cleaner?

let x = anotherThing(
somethingElse(
something(x, y, z),
1, 2, 3
),
"a", "b", "c"
);

Neither is easy to follow.
Pretty sure it was a combination of factors, not just this vid, and he just needed a break.
Ask HN: Why aren't devs making desktop apps any more?
I was wonder why aren't devs making desktop apps any more, especially since everyone is buying laptops and desktops again? With all the tooling out there for cross platform, a native experience, and better privacy/security than a webapp.

For example, Here are just two frameworks/tool kits that are easy to use and to build desktop apps with.

React Native for Windows and MacOS: https://microsoft.github.io/react-native-windows/

Avalonia UI:
http://avaloniaui.net/

Also, If they do use frameworks like the ones mentioned above they will still only release the app for mobile and then rebuild the code for a webapp which is slower and does not have the functionality.

John
I have made a few friends via Twitter, I think you social medias do a great job regarding to that as you can filter by communities and interests.
yeah it's kind of ironic to call for "no politics" in a movement that is essentially based in digital anarchism.
What's the thing where you have to license your patent? Like when it's used in a standard or something?
Cool. What, about $5 a year? Totally worth it.
Any recommendations to learn to build cross-platform games like this?

I work on frontend projects day-to-day. I'd love to build a simple cross-platform game in C/Zig/C++ for some variety and to learn lower-level programming.

I've looked at Handmade Hero in the past but its specific to Windows at the moment.
So get more higher quality cables and throw the other ones out?

How is your lack of the proper cable when all you need to do is buy more of the right cables equivalent to a failure of the standard?!?
I get why the OSI published this post. They have a vested interest in the conversation and I agree with their points.

But the battle for the narrative has already been lost when people consider this to be a problem with 'open source'. Rather, it's a problem with software that's being given away for reputation brownie points. Here, the author showed exceedingly poor judgment towards users of their software, and this should result in the loss of goodwill and respect towards the author and the forking of their works if the license allows.

Open Source didn't enable this behavior. The author's poor judgement and the author's lack of need to care for the users of one's software is what didn't dissuade this behavior. In this case, it was giveaway software causing harm. In other cases, it's commercial software pushing hamfisted changes users don't want, because the users aren't empowered enough to fight it. The reason commercial software would avoid this particular type of stunt is because it's poor business sense to harm one's direct customers.

So what of Open Source? Open Source allows anyone to review or modify the software that engages in this behavior. So the community can salvage the author's good contributions and better custodians can carry the software forward.

Open Source also allows anyone to discover these cases proactively. Of course, almost nobody does this, because we as an "industry" have gotten used to four troubling trends, and ridicule those who aren't on this "bleeding edge":

* thinking that software that costs $0 to obtain incurs no additional costs

* not auditing our dependencies

* being unconcerned about the sheer quantity of dependencies

* blindly updating dependencies

It's a sad but predictable development that the field of Open Source software has basically merged with the community of authors actively looking to give away software for $0 (for fame or to upsell advanced features). Basically, the Open Source movement was too successful (in its advocacy and in raising the demands of the customers of software), and it has largely subsumed and supplanted the formerly-separate fields of shareware and trialware software.

This development is what truly hurts Open Source: so much software but too little emphasis on (or even demand for) curation, massive imbalance of contributors to users, the decreasing influence programming-language-specific spaces, and increasing dominance of the "move-fast-and-break-things" culture.

The way forward is to achieve stronger curation, more focused maker spaces, tighter (as opposed to larger) communities, and an outreach effort to re-establish the philosophical distinctions between Open Source and freeware.
Eventually, sure, but I think this would have to become very widespread before that happened - they've only just blocked Google News today.

The instructions above do encourage self-hosting the script though, for both avoiding-block & security reasons.
Yes, although I was more of a Wood elf player in WHFB.
https://www.businessinsider.com/e-hailing-taxis-curb-increas...

> Because of cabs' lower prices, Gross said the platform also benefited from its inclusion in Transit, a New York City transportation app that compares prices between ride-hailing, taxis, and other forms of transportation.
A bunch of companies are developing molten salt reactors commercially, including Terrestrial Energy, Moltex, Elysium, Seaborg, Thorcon, and Terrapower.
Feels like we always come back to this xkcd comic.

https://xkcd.com/2347/
I had better comprehension on the Bionic text right off the bat, personally.
OOF! Thanks.
Copper Modding Helps Cool A Toasty GPU:

the writeup is here if youd rather not youtube.

https://hackaday.com/2022/03/24/copper-modding-helps-cool-a-...
Max is not involved with Homebrew in any capacity, and hasn’t been for almost a decade.
How does GitLab compare in terms of it's CI/CD reliability?