skysight-inc/HackerNews huggingface dataset:
you left out the meteor-data-center-strike problem. Most $5 VPS don't do realtime snapshotting to an out-of-region data center with live failover.
Right, fair enough, but if there were trees regularly everywhere, there would be no huge tree-less (but powerline-ful) area, and between a weird chair-powerline and a nice chair-tree, I guess the choice is easy for a bird.

I mean, if there were _neither_ any power lines, the starlings would certainly sit a bit further, but there _are_ powerlines (i.e. chairs), so here they are.

(did you notice, I'm trying to think bird)
I think Mega also works on all platforms, but yes, amongst the major competitors (OneDrive and Google Drive), Dropbox is clearly the best.
> ublock origin's default list

Youtube's endcards are not blocked by default in uBO, and I can't find a list in the set of stock lists which blocks them.
Fair point, I didn't even know about SIP (new Mac user). As long as it behaves like a nice little thin client I'm happy.
Sportsnet has the same blackout policy to not infringe on whoever owns the rights in Quebec.
> The real showstopper would be if "SecureBoot" would be enforced. I hope it never actually happens for personal computers. Everything else in the consumer electronics business is pretty much a lost cause already.

This is the end game. Widespread hardware and software support with default off, then default on, then always on. All to protect users from themselves of course.
Group aiming to defund disinformation tries to drain Fox News of online adverts
TLDR, the federal government:

* will provide funding to states to build out a national network of 500,000 EV chargers, and

* will propose national standards to make charging work for all EVs from all manufacturers.

This is great news for everyone except Tesla, who stands to lose its relative lead in charging infrastructure over other EV manufacturers.

People who own Tesla EVs, however, will benefit as much as everyone else from more charging infrastructure.
The main idea is that instead of a session cookie you are usually exchanging signed information in this scheme. Your app server or an intermediate proxy validates that the signing was authentic, and then receives some information (Often called “claims”) — such as “This account is an admin role user”, or “This account has user id 1234”.

With those pieces of information, you can do all your application lookups securely. With a bit of middleware to handle the incoming signed data (Often JWT), it probably looks about the same as your session-based authentication. The only difference is that you’ve split out and centralized your authentication (And possibly authorization via claims)!
IIRC, you want one per AZ, or you'll get billed for extra cross-AZ traffic when instances in zone B's private subnet use the NAT gateway in zone A.
> To sum up my take on Web3, there’s a lot of smoke, but there’s some fire. As they say, the devil is in the details, and I can’t possibly provide all of those here.

There is no need to provide all of those, provide a few best examples. If there is so many innovation and it has been happening for the last 20 years, surely there are some impressive results (which are not related to financial speculation)?

In my experience, if someone gives a link to a "collection of 215 projects" and says "do your own research", they have nothing to show.
> The iOS music ecosystem is fantastic and affordable.

I've been having good experiences recently with Flip for some quick fun jams.

Any suggestions of the "fantastic" kind ?
I'm curious how old you are and where you grew up.

In the 90s I would have considered $56,000 per year as rich. In the 2000s it would have been upper-middle class, or "senior white collar professional". In the 2010s probably down to "office job" or "good blue-collar job".

There's something funny about seeing people point to a salary that I grew up thinking was a best-case scenario dream as being insufficient. Maybe if our policies focused more on quality of life rather than nominal wages, we could help people instead of just having decades of inflation.
That paper is about historical costs, which is not informative for current costs.

Saying 60 years is "more accurate" is kind of putting one's thumb on the scale, as is putting an overnight cost at $3000/kW. These sorts of overly rosy and unrealistically optimistic assumptions are how we get into such terrible estimates for nuclear.

Even though MIT has been one of the sources of inaccurate nuclear optimism in the past, I think that this is perhaps the best assessment of how to make nuclear competitive again:

https://energy.mit.edu/research/future-nuclear-power/

I still thinks it's somewhat overly optimistic, but it at least tried to address the real and deep issues within the industry instead of hand waving them away.

Until nuclear proponents both acknowledge the full reality of construction, in the 2020s, and the errors of the past, they will never be able to get to $10k/kW or even $5k/kW. A future at $3k/kW in the US is not worth even contemplating until we could reliably even hit $5k/kW, and a world with $5k/kW is currently not worth contemplating because we are so far away from that.
this is one reason I don't reveal such tricks online. if only GOOG engineers would play cool and let us enjoy nice things.

PS: Same thing with YouTube and tricks that bring back the dislike count. Don't reveal them...
No, they were tried for conspiracy to commit espionage (50 U.S.C. § 32). Although espionage is a morally treasonous act, treason was not the legal crime for which they were prosecuted.

https://en.wikipedia.org/wiki/Julius_and_Ethel_Rosenberg#Ros...
Just to clarify, as not everyone is familiar with service based architecture: When the application server is air-gapped from the identity provider, it is meant that your frontend application will have user information embedded in the requests it makes.

For example by setting a JWT in the headers or in a cookie when it's a web application.

Even the responsibility of validating that information can be extracted from the application server by doing that in the application gateway (also known as the ingress, for example nginx) which can be configured to read the JWT (or whatever format you choose) and reject unauthenticated/tampered requests.
fans of bittorrent and fans of services with auto content moderation share at least one common factor: they are free to use. Many people are not motivated much further than keeping their hard earned cash.
I think that internet (that opposed drm) and this one are very different. The anti drm movement was more of a popular movement and this one is a reaction by large corporations to new legal regulations (or threats of more regulations). It’s hard to even think of those as the same “culture”
Land cover data just got real-time
I do have Play Store services enabled and updated. I do "system" app updates (Carrier Services, Android System WebView, Play Services, etc) through the Play Store's update mechanism (which is still available even though I'm not signed in to a Google account). I do "user" app installs (Schwab, Amex, Fastmail, Element, etc) from Aurora and F-Droid.
Auras are a great conceptual name for this! It intuitively clicks, describes itself.

Wild that there's essentially no parallel tech elsewhere in computong, of sharing openly around you. Google's Eddystone was a very very low bandwdith example of some kind of "aura" but wow did it fail to get used. Still think it's a fun idea. One use case, it'd be near to be able to see what people are reading, or listening to around you (and they want to share).
Shotcut is a free, open-source, cross-platform video editor
And I bet doing that would also avoid what happened here -- account suspension for some unknown reason, but likely content related. If your content is encrypted, they can't drop you over it.

Of course at that point you're not using all of dropbox's features, and some other rsync-style solution may well be cheaper.
Obviously they said so in TOS, but it's pretty rare to get terminated due to copyrighted material alone.

At least not until you mass-share (maybe the case here?) them.
discord /s

every specialized sub-group now holds small portion of the web by/for themselves and only needs to interact with those of same mindset — no need to keep every single word in public forever.

but what you really missing is people of the same~ish age-group having enough time and topics to argue about
How do you feel about Dan Carlin, accuracy-wise? (2021)
> secret TOS violation

This is unfortunately a legal issue and no company big enough to have good lawyers will ever want to tell a customer why they're being banned as it exposes them to too much legal risk.

If there's a solution to this, it's probably to give companies some sort of protection from legal action resulting from incorrect application of their TOS. That's far from ideal itself, but it would at least remove some of the downside to honesty from companies on this sort of issue.

I can't blame Dropbox (or any other company who does this) given the potential downsides they face.
Not sure why, but I'd expect someone as smart as Roiland to know better. Convenience isn't worth the unknowns, it never was.
That's a "burning" PR!
This is a very good question.

The number of nines actually go up with increasing timescale windows because Polaris checks anomalies at write-time/invalidation-time.

I guess the behavior of what you are describing is cache inconsistencies at read-time. E.g. if I introduced an inconsistent cache entry at time T, it can be exposed to many subsequent reads (hence the "building up over time" as you mentioned). This is an important metric as well – we actually measure it as well.

The key difference between read-time cache consistency measurement and write-time cache consistency measurement is about "purpose". Write-time cache consistency measurement is more actionable, as it captures the moment (or very close) of when cache becomes inconsistent. If one wants to debug something, you want to get close to when the anomaly happens. Read-time cache consistency measurement is more about measuring the negative impact of cache inconsistencies (which are client facing).
Hugo: The world’s fastest framework for building websites
I think you can find the same vibe in Reddit, some forums and some mailing lists.

Also, HN not being subject focused works for me because I am interested in more than one subject.

One idea is if HN would introduce some tags, or categories so someone can filter if he's only interested in one subject.
Goedels incompleteness seems to me to disprove such omni, and if you are stuck thinking by our best models of thinking, its annoying exponential. Basically, to think about a universe enough to predict outcomes, you have to simulate it. To figure out which universe leads to a desired outcone, it seems like you would have to simulate most of the ones that do not as well. So if we presuppose the existance of a creator, maybe we are one of the failed universe thought experiments as she tries to make her intended universe?
Or anything in the alt or rec hierarchies really.
As always the issue with privatized social services is that the goal is to make money, not to provide a service so the incentives are fundamentally misaligned. For-profit care providers make money when the fail to provide care. When they fail to cover procedures. When they can substitute lower-quality or less effective goods and services. When they can sell you catastrophic cover with deductibles and co-pays too high for you to actually afford to use it - the way a gym membership makes money selling subscriptions they know you won't use.

This is by definition an improvement over what America has, so I welcome it. That doesn't change the fact it's an umbrella in a hurricane, so it's really not that interesting.

Socializing the whole thing is significantly better. Remember America already has socialized medicine for 40% of the population. It is long past time to up that to 100%.
Exactly. Like if somebody had a modern collection of Greek texts and called it "A Collection of Greek Texts" in English people wouldn't think it that strange that the title wasn't in Greek.
Usenet is still there, I download TV shows from it all the time. The discussion forums are still there, too, but are completely overridden with spam. Most of the public unix [0][1][2] servers have a Usenet server that federates with some other tilde servers, though not the wider usenet. I stumbled across a group called ALTEXXANET [3] that claims to have one, though I've not checked to see if it's still there.

What were some of the newsgroups you were interested in? When and why did you stop checking them?

[0] http://sdf.org/
[1] https://tildeverse.org/
[2] https://tilde.club/wiki/usenet-news.html
[3] http://www.altexxanet.org/usenet.html
Yep. For premium cable TV channels in the US, the decoders were known as "black boxes" (because they were, literally, black boxes) and everyone knew about them.
I'm at that age where my prostate is misbehaving. I tried nofap for a month and when I did have an ejaculation it was the most painful thing I'd ever experienced.
HackerNews seems a viable alternative with a daily delivery of interesting topics, excellent moderators and often highly interesting comments from a diverse crowd of users -> check it out ;-)
And when that service is abused for piracy, CP, and other illegal files; it will start the ball rolling that inevitably drags it down legally to the level that DropBox is at.
But alloys don't behave like the individual elements, so Beryllium being brittle doesn't mean that the alloy also is. Just like Carbon has multiple crystallization forms with wildly different mechanical properties (graphite vs diamond)
This is entirely ignoring the point of what I am saying.

I have my username and password. The recovery email is bound to a defunct email provider. It is non-standard. I am able to recall both the name of the email and and defunct email provider. I am entering a correct password.

I am not trying to recover an account. I am logging in with a correct username and password then being prompted for recovery autonomously.

To say there is a fixed process without exception handling is not being secure. It is being lazy. There is no security concern with looking into a case like this, having a process for exceptional circumstances, and providing an avenue to move forward.

This avenue can be programmatic. Give I have a username and password along with the recovery email address, that is enough evidence for some kind of autonomous privileged escalation with an AI that has access to my emails. We already know that gmail is scanned and indexed, and used for advertising. Why can’t that be used for identification?

More to the point: when I set up a recovery email, I thought it was for recovery. I still thought that to this day, up until this point. I had no idea they were used as 2fa. This is not something that was told to me. If I was aware of that, I would have made a greater effort to keep that up to date on emails.

Unfortunately, life and bad mental health have a way of making time pass. The passage of time is not a reason to lock someone out when they accurately recall their authentication method. At a minimum after such a duration, it should allow login and then prompt to review recovery options. After reviewing the options, a new consent should be issued informing this information should be kept up to date, or you may be locked out of the account.

This consent was never provided to me on initialization of the account. Terms were changed and access autonomously denied. What if terms change again and they add an esoteric security key for all accounts automatically? Your password and recovery email is invalid for security reasons and unless you use a security key, you will be locked out. And you have a month to do it.

That is how this is, but the timescale is just longer. I don’t think it’s defensible.
I've been using this extension for several years now. It works very well. The only time it doesn't work is when a site contains code specifically written to defeat it.
WebTransport
Copyright is automatic, most things that most people create are copyrighted media content.

The problem is that we've ended up with a situation where copyright is automatically:

1. Assumed to be owned by media-corporations

2. Assumed to be wilfully violated by users

3. Assumed to be that deletion is the correct resolution

4. Assumed the USA to be the jurisdiction of the copyright holder and user

All of these assumptions should be challenged. This isn't a technical challenge, it's a legal one.

Special treatment for VIPs isn't the answer.
Developed by MDP Group in 2020, the “Employee Suggestion System” is a solution that provides the monitoring and management of all suggestion processes over the system by acting as a bridge between the management of companies and employees. The recommendation system solution ensures that all recommendation processes are managed in the most effective way, thanks to artificial intelligence and machine learning technologies.
> loquacious sesquipedalian treatise

This sounds like a species of fish.

I went fishing for marlin but we accidentally caught an endangered _loquacious sesquipedalian treatise_ and had to throw it back before the fish and game officer saw it
On the topic of "HTTP is just text," I was amazed the first time I made a raw request by hand with netcat. It's not surprising if you're familiar with HTTP/1.1, but at the time, it felt like magic to be able to write out the request by hand.

Just install netcat, run an HTTP server, write

nc localhost 80
GET / HTTP/1.1
Host: localhost

and hit enter twice.

With the transition to HTTP/2, we gained a lot, but binary frames and TLS take away that eureka moment when you see a wireshark trace and suddenly understand more of what your computer is doing.
I order a steroid cream and its significantly less than Walgreens for the exact same thing. Just my 1 data point.
I'm a little confused as to how audio book services have been evolving over the past few years. Audible, owned by Amazon, was doing an acceptable job providing a lot of titles and subscription services. They even let you return digital titles. Recently they're dipping into exclusive titles. So, they went the Netflix route.

While this makes sense, I never saw the quality of the originals as being as good as the books I was already listening to anyway. I suppose more dramatic readings might be nice. The graphical integration on audio books, well, that isn't there really. You can't look at the pictures while driving anyway though. Otherwise I think it's a solution in search of a problem. So I'm not sure how Spotify will compete on this.
What I find surprising is:

> Others, like 409 Conflict have such a narrow use-case that I’ve never seen it used in practice.

Very interesting. Almost every API I worked with uses it. The most obvious example: S3.
Not really. It’s unacceptable for Dropbox to know/inspect what content you’re storing, scan it for anything without you actively requesting they do so, and certainly to delete it.

This behaviour and any terms of service that allow it should be illegal. The fact that it goes on constantly is a scandal.
This book was written by a scientific fraudster https://medium.com/@nicole.prause/gary-wilson-was-a-known-sc...
Not to be that guy, but isn't BSD and it's derivatives still Unix derived so parent's comment still holds? (Though to the parent comment I'd argue that OSX isn't really a sold OS either because I can't buy just it)
There's actually a long tradition of writing lisps in lisp. The language really lends itself to explorations into experimental language features.

Of Course, C's tend to be written in C too, so there's that..
Yes, those two sets of people are one and the same.
> I'm glad that HTTP was so pragmatic about this compared to purist e-mail with its base64.

The issue with e-mail is that it's store-and-forward, and the server which receives your message might have to forward it to another server which understands only 7-bit characters (using the 8th bit for parity). This worry might not make much sense nowadays, but remember that e-mail is old, back from before "all bytes are 8 bits" won over all other variants. As for HTTP, it was specified over TCP, which has always used 8-bit bytes, so it doesn't have to worry about systems which mangle or reject data with a high bit set.
Show HN: Open-Source Data Workspace Powered by Dbt and Airbyte
I find this value in this one https://www.wakingup.com/ from Sam Harris
MacOS is a certified Unix. See [1] [2].

[1] https://www.opengroup.org/openbrand/register/brand3673.htm

[2] https://www.opengroup.org/openbrand/register/brand3678.htm
Nope, no longer. Some large advertising companies like Taboola have abused caches to store unique identifiers. I won't be shocked if Google and Facebook have also used this, so Safari (from 2013, https://bugs.webkit.org/show_bug.cgi?id=110269), Firefox (depending on settings from 2018 and widely deployed in 2020, https://developer.mozilla.org/en-US/docs/Web/Privacy/State_P...) and Chrome (from 2020, https://developer.chrome.com/blog/http-cache-partitioning/) now separate caches.
That's why I bought a NAS and now have a 3-2-1 backup solution.
First figure out why the goal was that in the first place. Did you grow tired of it because your goal was to learn a new framework and you kinda did that but now you have to write a bunch of docker/monitoring stuff? In that case it is a signal that you should stop, park the project and move on.

Or is it some project that you are doing because this is something you think you should/aught to be doing? In this case, this is your mind warning you again.

If, and only if, you still want the outcome of the goal should you continue with it.

I have found my main problem is getting started, not so much continuing. I will spent way too much time procrastinating getting started on even things I find pleasurable. Others are different.

For me, on the projects I care about, Beeminder works well.
Assuming this is copyright related... probably not. The only way this could be done in practice would be for Justin Roiland/Williams Street/Rick & Morty LLC/Cartoon Network/Warner Bros. to legally indemnify Dropbox - as in, agree to pay all of Dropbox's legal fees and damages if they get sued for copyright infringement outside of their DMCA 512 safe harbor. This is entirely impractical for an individual to pull off, and Dropbox might not even have a copyright indemnity policy for corporate clients.

Also, if anyone actually has a bone to pick with Dropbox over shared links, this is probably a very bad idea, because it would just be opening WB's far larger pockets to whoever Justin is pirating content from. There is no actual legal provision for "creators" to get away with copyright infringement that we cannot.

And let me be perfectly clear: It is not legal to copy media over any kind of file share, even privately within an organization, unless you have a copyright license, which they clearly don't. Censorship[0] on-demand in exchange for liability limitation is the world that all these media companies chose to live in. They screamed their heads off about the harms of noncommercial piracy over the Internet while also, apparently, pirating enough content internally that Dropbox needed to shut off their account. If they want their account back, then either pay for a license to every video file on that share or publicly lobby Congress to legalize file sharing.

Or this could have nothing to do with copyright and some internal spam filter just shat the bed very badly. The original linked tweet didn't clarify anything and Justin might just not even have anything to clarify with. I really hate how modern tech companies are allowed to do summary executions of accounts like this with no explanation.

[0] I am willing to accept the "copyright infringement is not speech" argument, which SCOTUS also does, but DMCA 512 still allows censorship of novel speech because the counternotice procedure is laughably inadequate.