skysight-inc/HackerNews huggingface dataset:
My biggest problem in this area is the extremely annoying delay/animation when switching desktops/spaces in macOS or switching between full screen apps. The only way I’ve been able to solve this is buying TotalSpaces but it also has problems.
> This is obviously a huge threat to CloudFlare’s entire business model

I disagree. There are plenty of ways to hide your origin server, for example:

1. IPv6 only, since there are too many addresses to scan

2. Accepting connections only from cloudflare IPs (probably not enough on its own, since features like workers might allow an attacker to trigger requests from a cloudflare server)

3. Mutual TLS authentication

4. Authentication headers (since mTLS might be difficult to integrate in your application)

5. Responding only if the right host is requested, which could even be different from the public domain (not enough on its own, but prevents untargeted scans)

6. Using tunnels (as frizlab pointed out)

I think cloudflare already supports all of these out of the box. They just need to push their customers to apply such mitigations via documentation, displaying warnings if the origin server can be accessed directly, etc. So I consider this an inconvenience for cloudflare, but not a huge threat.
Both for mining and exploration, I would think gas planets are not very interesting. Although, diamonds raining on Neptune is very interesting.
if YJIT is successful, ruby will be faster, which is good™. The rationale for the rust rewrite is that rust may be better suited for writing a JIT than C is.
Exploiting, detecting, and correcting IAM security misconfigurations
Yeast extract is packed with umami. It compares in taste to that amazing reaction that heat has on vegetables or meat when it browns. The stuff is also quite salty packing a generous amount of flavour in such a small spread.
> Disclaimer: I am neither a planetary scientist nor a biologist.

I think asking the question is fine, especially if you aren’t these things. Further, you don’t have to be either of those to understand a subject. Kind of silly to assume a biologist would have better insight to your question anyway, most biologists aren’t going to specialize in that area.
The said ruling: https://arstechnica.com/tech-policy/2021/10/cloudflare-doesn...

In practice however, when you peel off Cloudflare you'll be stumped anyways as the DMCA request will be plainly ignored by those "bulletproof" hosts, so I don't think that knowing the real IP would change your chances, and if you're formally filing a case why just not subpoena Cloudflare?
Technology Taught Us to Never Wait
How are these comments stored? Can it scale up to storing comments for 3 billion pages?

q.v. https://www.worldwidewebsize.com/
As an aside, there's Refined Hacker News[0] which seems like it would be a great option for this to be built into. It has lots of great features while keeping things minimal.

[0] https://github.com/plibither8/refined-hacker-news
Big fan of megablock living in east Asia. Radiant City plan wouldn't have fared well in real life, but I imagine project if built, would be remediated into nice high density mix use neighbourhoods over time. Infill some street level retail, updated cladding over time. Could have worked, and probably better quality units for more people than constantly modernizing Haussmann blocks.
It’s unclear. In other reporting on this it’s been reported that several of the cases where in children who had recently tested positive for Covid, so there could be a link there, but there were just as many who didn’t test positive so it could be coincidental. Even more of them tested positive for an adenovirus, though it’s unclear if it’s a new adenovirus or variant. There’s also speculation that perhaps that due to Covid preventative measures, there are more children whose immune systems haven’t been primed the way they normally would and it’s manifesting itself this way in response to viruses that aren’t novel.

But at this point it all seems to be speculation and there doesn’t seem to be any thing like a definitive answer.
South African here. Wash you mouth out with soap then eat some tasty Marmite with margarine on toast.
> x is better than the alternative y. I don't know what y is.

They didn't propose replacing democracy.
This modification works for me: https://greasyfork.org/en/scripts/443687-hn-favicons. It uses GM.addElement to bypass CSP restrictions.
It also sends it all basically unencrypted at that point, too. (Not that iMessage is much better, as its end-to-end crypto has been backdoored by Apple and kept insecure so that the US feds can read it.)
From someone who's never had it, I imagine the taste is similar to some heavy stout beers, with more salt. Would that be accurate?
400mb for a single basic webpage

programming gone wrong
When do you expect these computers will become coreboot compatible?
I use iMessage and WhatsApp with my contacts, but if everyone has iMessage, then we use that so pictures and videos are sent in full quality. But the iMessage groups are usually 4 to 6 people at most.

For the bigger groups, or groups with older people, we use WhatsApp since there might be an Android user or less risk of having to exclude someone because they switched to Android.
Why not build more Baths next to the old one instead?
Or sites that are just SEO/GPT spam made for ad revenue. Say I want to know if a side effect my pet is experiencing is normal for a medicine the vet gave them. I search DuckDuckGo for "cat {medicine} side effects", and half the results are pages where you have headlines like:

What is a(n) {issue}? (what you went to the vet for)
Should you worry about {issue}?
What to do if you see {issue}
Is {medicine} safe for your cat?
Is {medicine} appropriate for {issue}?
...and more

Only after a half dozen or so stupid sections (with ads littered between them) do you get to the actual list: "What are the side effects of {medicine}?" Why don't search engines have a way to report spam sites?
> I send requests to other machines and ask them for stuff and whether they respond or not is on them.

So by this logic, SQL injection is perfectly fine? RCE is perfectly acceptable too? After all, my machine is just asking for stuff and the other machine is responding in a way its code tells it to.

The open door analogy fits pretty well here, really. Just because you see an opening doesn’t mean you’re allowed in.
It's this kind of response that motivates me to post on HN about topics like this! I use Rectangle[0] for tiling, and I'm quite happy with it, but have not explored SKHD yet. Will give it a try now, thank you!

[0]: https://rectangleapp.com/
You should take the first step and kill yourself. Then we can talk about what others should do.
Show HN: Higgs AI – Become your own ML engineer. Instantly, no-code
That's a bit of a ridiculous argument. Xcode is not only closed source, it is required for publishing to the App Store. You can't modify the hardware or the software. It's a virtual prison.
Black people on average are better than basketball. Probably a combination of genes and a culture where they're more likely to practice.

You know, the same way that white guys are, on average, more likely to pick up and practice programming
out of interest than, say, females of any race.
If folks are really concerned about getting exposed they can firewall off everyone except cloudflare.

https://www.cloudflare.com/ips/
One of the ideas I have, but will not have time to do, it's to make a site or browser extension to allow users to send extra content, reactions, memes, pictures, etc on Hacker News submissions and comments without having fear of the downvotes.

There's many many times that I wanted to post a funny reply but I'm certain that I'd get many downvotes from it.
In my opinion (and experience, this architecture is great as a way to scale teams, having a clear interface between them.

As soon as you have to work on both sides of the API, it is not and advantage anymore.

I think separating the backend from the frontend is a way to increase the amount of work required in order to gain a saner way to split it into chunks for different teams.

As a single person, or a small team, doing an SPA and an API only backend, if not done for learning purposes then it is just either madness or CV padding, or something else....makes no sense at all to me.
Bootstrapping a new cryptocurrency where 90% of the coins go to relatively few early adopters is the worst possible way to fix financial inequality.

The crypto holders would love if the world switched to using the cryptocurrency they’re invested in because it would make them extraordinarily wealthy relative to the average person buying in late.

I don’t understand how anyone can honestly suggest that a gradual changeover to a specific cryptocurrency would be anything other than disastrous for financial inequality.
For some pretty thorough reverse engineering, there's a Matrix bridge for iMessage [1] that's being used in production by Beeper [2].

[1] https://github.com/tulir/mautrix-imessage

[2] https://beeper.com/
If the origin server only responds with the relevant content if the correct host is requested, this scan becomes much more expensive, since you need to scan all IPs for each domain you're interested in, instead of once total.
You're absolutely right, and I personally find 'modern' art unappealing and a scam (banan on wall 30k plz), but this is because it is being used a commodity in a rotten, oligarchic financial system where we bail out corrupt bankers at the cost of the people.

With crypto, the pollution is built into the system. It's not only being used by the corruption, it is itself rotten. And neither does some of it look nice on walls.
This is probably an unpopular view, but I kind of use laptops as if they were terminals. If you want to spend $2k, I'd invest $1600 of that in a great desktop machine, and spend the other $400 on a cheap chromebook and tablets / keyboards / gizmos to log into it remotely.
My 2017 MacBookPro laptop swings from 12GB free to 600MB free back to 12GB for no apparent reason, while giving me warning notifications of low disk space that I can't turn off. The only reason I have 12 GB free instead of 3-4 is that I uninstalled a whole bunch of stuff so that I could actually do a Time Machine backup. Yes, I had to uninstall stuff in order to do a backup. Seems backwards.

These annoyances from the company that supposedly is obsessive about user experience make one feel helpless and frustrated.

Overall, Mac feels less janky from a GUI/visual point of view than Linux, but frankly I'm spending more and more time on Linux because it's just more predictable. Also lots of Raspberry Pi tinkering.

A rogue Windows update bricked my machine the day before an important deadline. This is just so unbelievably unacceptable that I can't believe we collectively put up with this nonsense.

Yes, default macOS is more aesthetically pleasing than default Linux, but the helplessness when something goes wrong ...
Technically speaking, GitHub took the repo down. This is an important distinction, because voluntary takedowns and legally compelled takedowns are two entirely different things, and it’s not necessarily correct to assume the latter.
Using Webiny Headless CMS with Our New Starter Kits for Gatsby and NextJS
Does the soap hide the taste of the Marmite? Or is it the other way around?
Regular ASICs with machine guns? ASICs used for mining I suppose.
There's a BIOS setting you have to change in a lot of laptops nowadays. The default, power hungry sleep mode is usually labeled "S1" or "Windows modern standby". True sleep mode is often labeled "S3" or "Linux", confusingly enough.
> On the other hand, what would the world look like without democratic governments

Nobody here is advocating against democracy. People are just pointing out that blind trust in state institutions is equally as illogical as blind trust in the EVM. States have a track record of serving the powerful first, and sometimes exclusively. Trusting apparatus with a track record like this masks a sort of flawed optimism, just like putting your hopes of change in the blockchain.
Ditch Your To-Do List and Use These Docs to Make More Impact
I've been using these old T series thinkpads for awhile. What I get is dim 16:9 screens, whisper quiet tinny speakers, battery life reliant on the extended batteries that ended with T480, these old units are half as fast at least as a contemporary laptop. The antiglare is mostly necessary because the stock screen can't handle more than 250nit in an HDR world. I can't advise a better machine for around 500, but on a 2 grand budget I think it's worth getting more.

Yet I almost see a fetishism around these machines I don't truly understand. 1080p, 60hz, 250nit, 16:9, 54% sRGB is the most common config you'll see and I really think on a 2 grand budget you shouldn't put up with it when purchasing new. This is also just a Lenovo thing, the Elitebook from the same year was 630nit 88% sRGB and the funny thing is that Lenovo probably only saved 10 or 20 bucks stocking this crap based on the price of replacement parts. On a 2 grand budget I'd spoil yourself with something better.
Java 15 introduced a cryptographic vulnerability
It turns out there are actually things that lawmakers don't really have the power to effectively ban, drugs and prostitution and gambling and cash transactions principally among them.

A lot of people don't seem to integrate this fact. The practical power of a lawmaking body is not unlimited. There are certain things they simply cannot stop, no matter how many laws are passed.

It won't "end" for either group, really. The latter will pass some laws, and the former will mostly ignore them, same as happened with hookers and blow.

The people who inhabit both groups (the subset of lawmakers that like being able to pay for their hookers and blow with unreported bitcoin) will laugh at the absurdity of the whole thing.
Say you're travelling back from 2099 and your comment still applies :-)
Probably talking about libav. https://en.wikipedia.org/wiki/Libav has some pointers.
They have tunnels now. The source does not have to be open to the public at all anymore (the tunnel is a kind of VPN between the source and Cloudflare; all the source has to do is install a single binary)
The best thing to happen to South Africa was that booze ban. This is the primary cause of assaults and murders in this country.
I was once a crypto advocate, but thanks to Molly White and a few lost shirts, I unequivocally can say cryptocurrencies are just a bunch of scams.
AI restored film of San Francisco almost 120 years ago
> it doesn't ever crash and it sleeps and wakes correctly.

Maybe I have been unlucky, but I have experienced many panics across several different machines running recent MacOS releases. 2 of those being corporate machines, so I can blame the "security" software that gets deployed. My home Mac mini, does not have any crapware deployed, and it still managed to crash once or twice.

In contrast, my ancient desktop running Windows 10 has not had a single BSOD in the years since I built that Ivy Bridge machine. And this included running much more intensive workloads than the terminal/docker/text editor workloads on my Macs.
You sell it for dollars and buy energy with it
The first step is to practice a little self-restraint with the baby-making, obviously.
Now that's not related to google, or maybe indirectly, but I used to search with qwant for at least a year, roundabout. I read on HN about github clones, riddled with ads, and in the end directing to github, with adding an referer. I never saw one of those myself though.

A few weeks ago I decided to switch to search.brave.com, because I read they build there own index. This is what I ultimately want from an alternative search engine, not relying on googles/bings results.

It then turned out, that at least their image search is not an own index at all, because the first site of results was 100% similar to googles image search.

Also it turned out, when searching with brave, all of a sudden I get to see these github clones in my results.

I am not sure about the reasons for all this, but I went back to qwant.
1. Looking forward to seeing that. With the current UI for Monte Carlo simulations, I think it'll be great!

3. I haven't seen that, wow! It can do a lot.

4. Makes sense. Just switching between plans works, anything more is nice to have, not must have.

5. I can see a Yearly Contribution Limit, that rocks! It's exactly that.

7. Good luck with that! I read you got couple ideas and remarks on here, I'm sure there is some solution ticking most boxes.

I'll probably be a customer very soon! Good luck and again: well done.
I agree 100% about the shorter time limit being preferable but only as long as that limit is significantly shorter than the life of the copyright holder and can't be extended. With things as they are today, the real benefit of denying corporations the ability to own copyrights would be in that humans actually die.

I don't see much of an issue with multiple individuals having equal share of a copyright though. We already pretty much have that now as it is. For a single recording of a song you're already dealing with a large number of rights that may not all be owned by the same people covering things like the composition, the performance/recording, synchronization, and distribution which could itself include separate licenses for different mediums (radio, physical media, streaming) or markets (domestic vs international), but somehow we manage to work it all out most of the time.

The important thing is that the problem of perpetual copyright goes away and people can start accessing and building on their own culture without fear of being sued for massive damages.
Very cool. This type of thinking and combining next-gen tools in the genome editing space will be time well spent.

Hopefully there is a future state where pesticides can ultimately be reduced because of this tech. Obviously engineering pests of agriculture/horticulture crops would be a high-value target, so curious if this research helps jumpstart those ideas and startups.
yes i agree
Agreed, also anything that defeats a password manager is a red flag for me.
I've seen sites that break a password manager's autofill AND disallow pasting a password. It's like they want me to use a bad password.
Good idea. I'll make a video and upload it to the page.

Unfortunately, the first version will not support spaces. I tried to add that functionality as part of the MVP but as it turns out, working with OSX's private functions for spaces is not straightforward. However, I do appreciate that you (and probably other people too) use spaces, so I'll add it in at some point in the near future.
Here's my $PROFILE:

Import-Module PSReadLine
Set-PSReadLineOption -EditMode Emacs
Set-PSReadLineOption -HistorySearchCursorMovesToEnd
Set-PSReadLineKeyHandler -Key UpArrow -Function HistorySearchBackward
Set-PSReadLineKeyHandler -Key DownArrow -Function HistorySearchForward
Set-PSReadLineKeyHandler -Key Tab -Function Complete

Import-Module posh-git
Import-Module oh-my-posh
Set-PoshPrompt -Theme material

function e { emacs -nw $args }
function gs { git status $args }
del alias:gc -Force
function gc { git commit $args }
del alias:gp -Force
function gp { git push -u origin $(git branch --show-current) }
function python { python3 $args }
The exact same arguments were made by CAD people insisting on 64-bit maths for OpenGL. They were wrong. They too were working on projects worth billions of dollars, over decades, where mistakes were very costly.

Your link to a "DRC set" doesn't mean much to me out of context. I see some basic looking code with small-ish numeric constants in it. So what? This is not that different to the input to a simple physics simulation or a computer game.
I too like having Australia just a short jump away halfway around the world.
For sure, but even a lot of those sites maintain a favicon.ico to support legacy crawlers/systems - then for those that don't (i.e. trigger onError), falling back to DDG's icon is an easy way to skip all that parsing.
Serif Fonts for Coding
The Chinese did that. They ended up with still-overcrowded megacities and completely empty "new towns", which often featured fake, "beautifully" old architecture. It turns out that people don't just want affordable housing or nice surroundings, they also want pre-existing culture, something banlieus often lack.

See https://en.wikipedia.org/wiki/Under-occupied_developments_in...
"the problem with corruption, inefficiency and stupidity in government is corruption, inefficienty and stupidity, not government"
> society won't be worse off in the end.

That is most definitely a political question.

I think the article has a strange reasoning about crypto trying to "save the world".

For me it's pretty clear: individuals can now store and transfer value on the internet using a consensus algorithm. Plenty of you claim that it's enough to have a democracy that controls a central bank. That way you also have some kind of consensus on your value storing and trading. Problem is that this democracy/central bank is not stable in every country. So crypto provides real "internet money", with all benefits and drawbacks.

Whether that improves or worsens society, is purely a political question. But it's clear that cryptocurrencies try to live outside of governmental control, which is of course where most of the benefit comes from.
> It's not only being used by the corruption, it is itself rotten. And neither does some of it look nice on walls.

So is the contemporary art world. The contemporary art world is vastly polluting as well. How much GHG do you think is generated to run a museum, or warehouse, transport aircraft, ect, filled with bad contemporary art?
> Are you serious? There is nothing comparable to strace on MacOS?

There's dtruss, but the information and options are nowhere near as useful as strace, and for some system calls it prints errors instead. read() and write() print access errors so you can't see what's read and written, same with stat/fstat, you just get an address, no file information.

Perhaps strace could be ported to MacOS but it's not. "brew install strace" says "strace: Linux is required for this software." :-)
If you don't jump the hoops you're just left with a machine that only runs windows.

The choice is literally between the non free firmware or your wifi and ethernet cards will not work.
One minor note: Uranus was the father of Cronos/Cronus/Kronos the Titan (an old agricultural deity), father of Zeus; not the father of Chronos, the personification of time.
Thats the correct way of handling it, problem is not that many sites actually do that, or atleast they didn't used to.

Back in the day before teespring had a public API I was scraping order counts from product listings, prob was the main domain was behind CF so the "sold count" was always cached and I wanted the live number. I actually used "CrimeFlare" back then to get the real IP of the origin server and queried that instead. And thats TeeSpring.

Twitch also until recently had their origin server open to all (allthough it would often bounce you back to www.)
In my experience, the relative meaning, popularity, and aptness of words like "toxic" are generational and geographic.

When I hang out with people 10 years younger than me, "toxic" means things as mild as "buzzkill" or "wet blanket" and "gaslighting" is whenever someone says something you doubt.

Those word carried very weighty and serious connotations when they started becoming commonplace vocabulary years and years ago. These days they're meaningless, and we just have to adapt that new reality.
It's mind boggling some people don't know you can render plain html on the server, or even submit forms without javascript.

Such a basic building block seems to be fading away nowadays, even some times presented as a "novel" thing or a "feature" (eg: remix)
Is it possible that the mrna vaccines are impacting the liver in some way?
While I agree we shouldn’t lionize individuals, I think we should also acknowledge there is great value in being the one to start something.