skysight-inc/HackerNews huggingface dataset:
There was a fundamental shift about 15 years ago where webpages ceased to be markup documents (perhaps with some active elements for convenience) and became javascript applications that ran in your web browser.

To use your book analogy - the web is no longer a bunch of books on a shelf, it's an AR device that shoots lasers into your eye. The net effect may be the same in many use-cases, but not necessarily, and malicious actors now have far more flexibility and power because we've all become accustomed to running random code we download off the internet with a single click.

I am, obviously, not a huge fan of this shift and think a large majority of sites could operate perfectly well under the "markup document" model without needing actual code-execution privileges, or more than a minimal set of code-execution privileges for those actual simple document-related use-cases. Go back to being mostly just a book, basically.

Almost all of the use-cases that javascript gets used for in a document context could really be replaced by navigation between sets of linked, static pages (perhaps embedded where needed) - boy, what an idea. If you delivered a site "as a gzip" then there should barely be any noticeable size difference from that anyway, especially compared to downloading mountains of JS embeds.

The amount of things that truly, truly need interactivity is pretty low - things like chat clients come to mind, but does your bank need to be running javascript on your end? Probably not.
In the late 90s and early 2000s every second bank round these parts decided to do their entire website in Flash. Not just some animations and videos, but I mean the actual entire content of the site was Flash, no HTML. As well as being basically unusable search engines wouldn't index it either so you couldn't find anything.
No longer needed. From https://webkit.org/blog/7367/new-interaction-behaviors-in-io...

1. There must be a meta tag of type viewport
2. The viewport must be defined to have width=device-width
3. The content must be at a scale of 1
>The first topic he raised, "why Python is slow", is somewhat divisive

What dynamic, interpreted, single threaded language is fast?
Science can't answer 'why', only 'how'. I think a science-only-based culture (i.e. post-Enlightenment) respects only how some questions can be answered, those answers that can be known. But science disrespects the importance of questions that can't be answered, that which can't be known.

Religion (a formal model for belief in and worship of what can't be known) can't fill this void, nor can science. But forms of spirituality that adopt less formal organizing principles might -- such as respecting the constructive power of myths and memes that seek to further humane principles, like justice or kindness, to shape a better world.

Deism of the kinds that Ben Franklin or Thomas Jefferson (or Spinoza?) adopted venture into this space somewhat, in presuming a creator god who serves as a guide for humans to make a better world. But because such models of 'worship' are seldom systematic nor do they specify the regulations people crave to assure compliance (and their final reward), they tend not to attract acolytes, and so are hard to sustain as a ongoing social movement. But such models of belief (and respect) may be needed nonetheless.
Mild autism can mean different things. It shouldn't be an absolute prevention of success, but I'm sure it could make it harder (life is already hard).

I haven't been diagnosed, but a lot of the articles on this resonate (I scored a 6/10 on the screening and I don't even know how I can answer one of the remaining questions). I absolutely hate my job. I used to like it when I didn't have to worry about politics, policies, etc. Now it's absolute torture to go into work because I know I have to play politics, other people don't see things the way I do, I'm being told I have to change my opinions/insights/personality to match others, and the company violates their policies or says they don't mean what they literally say. If I have mild autism, then it's absolutely exhausting with no reward or end in sight. But maybe that's how it is for everyone?
I really enjoy how he makes a point to dig through the actual code and show it off to viewers, often with maps made specifically to demonstrate situations. Some of his videos would probably make a good companion to the Doom Black Book
I doubt any normal hosts will enumerate a USB device without the USB 2 data lines. PD will definitely not work. You might be able to get an alt mode running.
I've had this happen on iOS Safari. It happens everywhere.
Is this actually needed? Looks like the online part of this is just WebAuthn, which could be supported by the same tools we use for TOTP. You would "enroll" a visible master secret that you could then back up and optionally store in a hardware security key. The device itself wouldn't need to allow for extracting the secret again, because you backed it up at enrollment.
Uh, Munich has incredibly expensive house prices. It's over 1M Euros to buy for anything of a reasonable size. Developer salaries are around 65k. You can get a little cheaper by going to a neighbouring towns, but the stupidly high prices continue for many km. The main problem is the very low interest rates leading to crazy inflation.

Rents are a bit better, but compared to developer salaries it's much more expensive than the US. It's also extremely hard to find places to rent, and landlords are very picky about who they will let to.
Yubikey recommends a backup key for that very reason. Most providers allow you to register multiple keys.
My channel from the early 2010s was taken down for 'hate speech' over a private video of a friend singing. I have no idea how it possibly could have been marked as such, but there is basically nothing that you can do. Appealing the ban will most likely automatically be denied.
I suppose this is the inevitable evolution of a large tech firm. At some point the only way to drive further growth is with fundamental research, but fundamental research has a mixed track record when it comes to value capture.

Part of my concern is that it's not clear that we even have enough tech to sensibly spend money on. Is the money going to go into BCI interfaces? Haptics? VR? Software? All of the above? Or just big marketing campaigns promising the metaverse?
> Are there any FIDO security keys that explicitly support backing up and restoring their master secrets?

Why would you need that ? On most services that I use that support FIDO, you can register as many keys as you like.

Seems to me that is a much more secure option than to provide a potentially exploitable option of allowing key extraction.
As jarring as Bambi was as a child, as an adult, the opening to Pixar's "Up" is far more heart wrenching.
Super sweet. I love Shop app. Tracking shipments is a nice way to get app installs... and you can backdoor a shopping experience as you roll out new versions. Well played!
> a laptop alone is 4500MJ, or about 4 tanks of petrol

Doesnt matter, make it 10. My laptop is 5 years old. So, how it even close to the amount tou spend on transport or heating in 3 months. You claim is preposterous! They are small objects, they don't add up to much!

"how do you justify the mineral extraction techniques that are necessary for all of the nice shiny things we own?"

The younger generatuon owns less stuff than the generstion before. Car ownership is down, home ownership is down, tb owneship, fancy camera owneship. How many hundreds of smartphones do you think it takes to make up the resources consumed by one car?
When building new commercial buildings (in the US,) accessibility is a non-negotiable requirement. And for good reason. If an accessible version wasn’t feasible in software, then it’s likely the project should have been scrapped just as a commercial building would never be built without accessibility as part of the core design. There shouldn’t be an “accessible version,” accessibility should be the default. Accessibility should be integral to everything built — especially software.
> I don't want one account that apple/google/whoever can revoke and ruin my online life

What are you even going on about?

As long as you have access to your FIDO authenticator, you'll still be able to use it regardless of what they do with your account.
Those planes also have to be designed to survive EMP, they have special communication equipment to be used talk to the military, I think they might have the ability to have a really long and antenna they have a special low frequency communication system for submarines under the water, hey can do something like put a long wire out behind the airplane. They have some way to eject the president and an emergency ;-) they have anti-missile systems.
Sometimes this is true, and the parent's criticism is certainly unhelpful. That said, I've definitely seen people try to optimize with numpy and end up with something that's even slower (Numpy isn't a substitute for mechanical sympathy, but it's often treated as magic dust by the Python community). Basically Python performance is just a hot mess all around. :(
Do you really consider it buried?

The entire article barely scratches 250 words. I don't think anything can be considered 'buried' in what is basically a medium-sized paragraph.
> Through lawsuits and reporting, I learned that my childhood Boy Scout Troop and church was infested with pedophiles.

It's really sad to see things like this. Boy Scouts was one of the best parts of my childhood. Both my parents were heavily involved - dad was the Scout Master, mom was the merit badge counselor for backpacking and other woodland activities, my younger sisters came on many of the trips.

It served as a healthy foil to my absolute infatuation with learning about technology.
> Because transferring tags back and forth is insanely wasteful

You are full of superlatives but short on arguments.

As the number of pages you load tends to infinity, this might be true. In practice, loading a couple of 3KB pages is much better than loading a couple of 1KB data blobs plus a 500KB JavaScript app bundle. It is also more memory-friendly, more compatible, and better for SEO.

As for wasteful of bandwidth... how big can HTML get? Is the bulk of your bandwidth cost really taken by HTML?
Try not to delete stuff with Bash.

This is the most reliable way. Bash has a few niceties for error handling, but if you are using them, you would probably fare better in another language.

If you do insist on Bash, quote everything, and use the "${var}" syntax instead of "$var". Also, make sure you handle every single possible error.
> - so what happens if you don't have your phone at time of login?

You can’t login. Same as it is with any 2FA system where you don’t have access to the second factor.

> - if I enroll on iPhone, is my identity forever tied to Apple or can it be migrated to Android if I ever wanted to change platforms?

At a minimum services should support multiple authentication devices/tokens. So you can enrol both an iOS device and Android device, or any other FIDO device E.g. YubiKey.

This is already the standard approach for FIDO tokens, and basically a requirement for existing services, because we don’t currently have FIDO token syncing.

I would hope that these syncing services will also allow you to export your private key. But that’s a slightly scary prospect because it would allow the holder of that key to authenticate as you anywhere.

> - Can Apple/Google/Microsoft ever block/ban my account, preventing me from logging into my bank, etc that use FIDO login?

Services will still need a credential recovery process. People lose phone etc everyday. I imagine your bank will happy reset your credentials if you turned up in-person holding government identification.
Arguably TV was actually bad for kids. (And adults too, considering what kind of brain poisoning seems to accompany overconsumption of cable news).
I've built some of the same sort of primitives, albeit with different syntax. Rui's `state` function will give you a state handle allowing you to mutate state similarly to how @State works in SwiftUI. rui also has a notion of bindings, just like SwiftUI, and even environment. This is all great for defining state that's local to a widget, which I've seen some other reactive/declarative libraries struggle with actually. Rui doesn't have an equivalent of @ObservedObject, and it's not clear to me that it needs one because state values can be accessed by reference.
https://github.com/monicahq/monica of course.
Except for the part where components are locked to an iOS/macOS version. Still have to support iOS 13 ? Have fun basically doing everything with only VStacks.

Compose at least makes it only a library bump away.
Pascal is unsafe by default: it allows null pointers, and stale pointers.
It's the opposite I'm afraid. You're the one spreading misinformation, though it's not really your fault. The idea journalists simply made up the whole thing is what modern scientists like to say, but it's not true. The reason the media "speculated" about a new ice age is because scientists were telling them it was going to happen. Do you really believe US TV would make up an entire episode about non-existent scientific beliefs?

Maybe you do. Then please explain how the following can be squared with Wikipedia's explanation. Scientists believed global cooling so much they held international conferences to debate it and even told the US President to prepare America for the new ice age:

"Dear Mr President, aware of your deep concern with the future of the world, we feel obliged to inform you on the results of a scientific conference held here recently. The conference dealt with the past and future changes of climate and was attended for 42 top American and European investigators ... the main conclusion is that a global deterioration of climate, by an order of magnitude larger than any hithero experienced by mankind, is a very real possibility and may indeed be due very soon. The cooling has a natural cause and falls within the rank of processes which produced the last ice age. This is a surprising result based largely on studies of recent deep sea sediment.

...

With the efficient help of the world leaders, the research could be effectively organized and could possibly find answers to this menace ... it seems reasonable to prepare the agriculture and industry for possible alternatives and to form reserves.

With best regards, George L Kukla, Lamont-Doherty Geological Observatory & R. K. Matthew, Chairman, Department of Geological Sciences (Brown University)"

https://www.cpc.ncep.noaa.gov/products/outreach/CDPW40/CD&PW...

July 1970, New York Times: "The United States and the Soviet Union are mounting large-scale investigations to determine why the Arctic climate is becoming more frigid, why parts of the Arctic sea ice have recently become ominously thicker and whether the extent of that ice cover contributes to the onset of ice ages. The projects, which involve nuclear submarines, earth satellites, aircraft and numerous manned and unmanned stations on the drifting ice, are being pressed with special urgency in view of recent discoveries of important resources in the Soviet and the American Arctic."

https://www.nytimes.com/1970/07/18/archives/us-and-soviet-pr...

Again, do you believe that these reports are false, that these large-scale investigations never happened? That this was all made up by the press even as the poor scientists were saying the opposite? There are many more documents like these. They make it very clear that back then global cooling was treated in exactly the same way global warming is today. Scientists were quite clear about what they believed back then.
Show HN: Dead easy configuration of apps in Go
This package that makes it easy to enable configuration of an app in one line of code.
All you need is to declare the struct that will hold values of your config and call Read method https://github.com/num30/config .
Then you can configure an app using ENV vars, File, or command line arg.
This project was born inside my current company where we have plenty of micro services that we want to be configured in different ways whether they run in K8s cluster or locally.
I'd love to hear your feedback!
I both agree and disagree here. My qualification is 3 teenage boys.

1. My kids have slack in their schedule. No, they aren't going to Ivy League schools. That's OK. They will survive somehow.

2. This is certainly true, but it's a complete joke to my kids. They aren't confused. They just wonder why all the adults are. Teenagers already think adults are incompetent.

3. This isn't true at my school. My kids have made egregious errors and the school takes it in stride. They know they are kids. They understand kids make mistakes. It's OK. We work through it and move on. The cops are not called and nothing is escalated. At most, the send us an email and we talk to our kids and that's the end of it.

3. I have no idea on this one.

My children don't have social media accounts and never will on my watch. Even as teenagers they don't because they are not allowed. They could, yes, but they don't. However, I have boys, not girls. Perhaps that would be a non-starter if I had daughters.
Looking forward to the walkthrough for the sequel: The Appeals Process.
Thanks for including at the bottom of the article how to force your browser to enable zoom. Didn't know you could do this!
I wonder how feasible it would be to keep cold assets on Backblaze B2 and automatically move them to R2 if they get hot enough.

Better yet, seeing as how you get free transfers between Backblaze and Cloudflare, I wonder if the 10ms cpu limit on free workers (or 50ms paid) would be enough to do the entire process on CF's servers.
whats a good episode to start on?
upvote for recommending an auditory resource.
I want a common language I can work with. Right now, Python is the only tool which fits the bill.

A critical thing is Python does numerics very, very well. With machine learning data science, and analytics being what they are, there aren't many alternatives. R, Matlab, and Stata won't do web servers. That's not to mention wonderful integrations with OpenCV, torch, etc.

Python is also competent at dev-ops, with tools like ansible, fabric, and similar.

It does lots of niches well. For example, it talks to hardware. If you've got a quadcopter or some embedded thing, Python is often a go-to.

All of these things need to integrate. A system with Ruby+R+Java will be much worse than one which just uses Python. From there, it's network effects. Python isn't the ideal server language, but it beats a language which _just_ does servers.

As a footnote, Python does package management much better than alternatives.

pip+virtualenv >> npm + (some subset of require.js / rollup.js / ES2015 modules / AMD / CommonJS / etc.)

JavaScript has finally gone from a horrible, no-good, bad language to a somewhat competent one with ES2015, but it has at least another 5-10 years before it can start to compete with Python for numerics or hardware. It's a sane choice if you're front-end heavy, or mobile-heavy. If you're back-end heavy (e.g. an ML system) or hardware-heavy (e.g. something which talks to a dozen cameras), Python often is the only sane choice.
As I see it, Python is good for glue code and small scripts where performance usually doesn't matter. Even if it would be more performant, it would be a nightmare for large code bases since it's dynamically typed.

I really enjoy Nim which is "slick as Python, fast as C".
Sun, Moon, and Talia (Italian: Sole, Luna, e Talia) is an Italian literary fairy tale written by Giambattista Basile in his 1634

Guy was high on some drugs when he wrote this sh%t. Talk about messed up.
Do you have any interesting assessments you can share? The pro cons, or what you like/dislike about the mentioned selection?
I mean... assuming that the number of tenured positions is constant over time, each professor will supervise on average exactly one student who will get tenure themselves. The only difference from that comes from the growth/shrinkage of tenured positions.

So yeah, nearly all of the students a professor supervises will not end up tenured.
But you can't use Gmail with a custom domain for free. I bet that's a decision point
My family has two rabbits (mini lops) in a large divided hutch on our pack patio. They each get a fist-sized portion of greens every day - parsley, cilantro, kale, etc. depending on what's on sale at the grocery store or about to be thrown out.

There's also a "treat" hidden in there somewhere. Sometimes that's a small baby carrot, sometimes it's a blackberry or raspberry, sometimes a piece of watermelon.

In addition to the above, they always have access to pellets, timothy hay, and water. If it's not wet out, we put them out in ~6' circular mesh pens to play for at least an hour each day.

They seem pretty happy with their lives, and are neither gaining nor losing weight. It's a far cry from the wire cages in an outbuilding where they spent the first couple of years of their lives for sure.
Awesome. How do you source your merchants? I ran two searches for specific merchants I buy from and didn't find them.
White House wants nation to prepare for cryptography-breaking quantum computers
Quite on the contrary, life may make you pay a very horrific cost for learning that lesson on your own instead of from the mistakes of others.
I still use the client, I think if they do shut it down they’ll provide a generous timeline etc.
Which is why nobody competes heavily with Texas Instruments over their absurdly priced calculators—sure, you could come out with a better product, at a lower price, and still make a healthy product. But TI's prices are only so high because they can be, and they're very able to drop their prices if need be to price you out of the market.
> It doesn't require a CS degree to know that fitting job requirements and other factors like the team expertise, speed, budget, etc, are more important than fitting a theoretical sense of "right jobs for the tool".

It requires experience.

A lot of those lessons only come after you've seen how much more expensive it is to maintain a system than to develop one, and how much harder people issues are than technical issues.

A CS degree, or even a junior developer, won't have that.
I put in this work as well. It's not about "burden" but cost. Clearly there is a cost here (your time). I don't mind spending the time, but that doesn't mean it costs nothing.

Now multiply this times every web app in existence and the cost is quite large. A lot of this could be avoided with a better platform.
Maybe it's because i saw it first hand; my younger brother graduated high school in 2020 and my partner worked in education until mid 2021. I heard first hand accounts of just how horrific the pandemic was for school age kids.
I wonder if would it be possible for something like εxodus to detect this when they scan an app. I'd love to see a SafetyNet flag in their scan reports.
Ask HN: How did Meta's Reality Labs lose $5B in 2022?
It's just constant. I know I am an oddball but I use firefox, which at this point is basically unsupported online. Pages just _dont_ work right. Of course my 600 extensions, from tridactyl(vim kb) to no script tend to break even more.

But it frustrates me to no end that a browser is no longer a "User" Agent and is now just seen as a... virtual machine for apps?
you get to set your own federation rules, and perform your own moderation.
Excellent article that helped me decide to use the overpriced Studio Display over any other displays.

Also: those blog posts without the date in the url :-(
- make it illegal to gather data/track/serve ads in apps for users -18

- make it illegal to offer microtransactions in apps for users -18

there, you fix half of the problems, no longer companies will make their app addictive to teens

then up to the parents to regulate screen time for their kids
Any Ereader with Linux?
It seems only Android or propuetary ereaders available. I'm missing something?