skysight-inc/HackerNews huggingface dataset:
Do you have a source that this kind of mild hypoxia is harmful to the brain, or is that just your conjecture? You may be right, but I’m skeptical. Starvation isn’t great for us, but there are many health benefits associated with fasting.
Doing so requires writing a server and library that everyone can agree on, which probably will not happen and is probably one of the main reasons they did not do it in the first place.
This is my favourite model. Say you are an illustrator, you purchase photoshop once for 900$ and you update again when the features are compelling. Maybe every 5 years?

These are not industries where people make programmer wages. Combining all of the required software costs is very expensive. Subscriptions more closely match the model/needs of the producer, but they are often quite bad the consumer.
The issue with KV is the write propagation delays across nodes can be up to 10s, so for a back and forth like this that needs to happen quickly it doesn’t work. My original version supported KV but I dropped it because it often failed to connect due to these delays.
One of my friends got offered 8 million for an extension a few years ago. The new owners put malware in it. Meanwhile, he’s still sailing around the Mediterranean on his yacht with his family…

This is exactly the kind of thing people are worried about.
I'm not GP but I'm not sure what you'd need examples for. One meaning of security is similar to that of protection. Protection is directional, so to speak.

A company, an organization or an individual can have security guards, security procedures, etc. Security can protect the organization from objectively malicious threats, but security can also mean protection from any real or perceived threat to someone's interests.

Security can also protect an organization from the leakage of embarrassing or potentially incriminating information. An authoritarian regime has security to prevent it from being challenged. Security guards at an industry might stop activists from getting to the grounds to gather evidence of harm to the environment or people. Indeed, security staff would stop unauthorized people regardless of those people's intentions.

All of those are examples of security even if other people's legitimate interests were in conflict with it.

Security is for someone, and from someone or something.
Fair, my Java experience recently has been on a code base with jdk8/10 semantics. Super pumped for loom though.
Fair point. I was including Slashdot in the Digg lineage, but it does not have social voting/ranking so I probably should have left it off.
You live in a fancy apartment building that has a lobby with a concierge. The building isn't going to give the concierge $100,000 and tell them, okay keep coming back for the rest of your life.

If the lobby of your building has a fancy chair in it, the furniture company isn't going to expect $10 a month forever to keep using it, and on the flip side, if the furniture turns out to be accidentally made of asbestos, it's the furniture company's responsibility to do something about that, regardless of the fact that you're not paying them every month.

Is there a version of the concierge that's a one time purchase? Probably not a good one? The fee your paying is for 1. continued incentive to continue doing a good job and 2. Training and improvements to the staff.

Is there a version of the chair that should be a recurring fee? Maybe if the chair company comes and swaps out the chair every month, but then you're not paying for the chair, you're paying for the chair service. Should the apartment building have the expectation that under a flat fee the fabric in the chair is going to get upgraded to fit new styles and tastes? No, that's never a expectation when you buy furniture. The only case where the manufacturer would be beholden to you would be if there is some gross defect in the product or if there was some negligence on their part that could lead to injury.

Realistically there's not going to be an issue where a chair lets robbers in, but if you bought a door lock for example, and the lock failed when someone tapped it, you're not SOL because your not paying a subscription to the lock maker, they're liable for their defective product.

There's absolutely cases where software should be a subscription model and there's absolutely cases where it shouldn't be.

I don't need any features that have been added to Adobe Premiere since 2013. I don't want or need updates--my copy of CS6 still works. I'm not getting a CC subscription.

If I needed software to help with accessibility compliance, I would absolutely be willing to pay a monthly fee because the standards change and information becomes out of date quickly. It would be an unreasonable expectation that a lump sum I paid in 2013 would still have my websites up to code today.

--

Forgive typos, on my phone.
In theory but not necessarily in practice (see the 40k hr SSD firmware bug that recently took out HN)
Am I reading this correctly that this is gonna fall over lots of populated areas?
Re: KV https://news.ycombinator.com/item?id=32286800

Durable Objects + Websockets are way, way more expensive. (At least, that’s how it looked.)
Surely this is showing correlation, but not necessarily causation. There are probably many fields where improvements in X have happened, along with greater compute power. How much the improvement in X is attributable to greater computing power is surely very hard to quantify. Or am I missing something?
Go is my language of choice, not just for performance (it probably won't beat C) but because the simplicity of the process.

One code base, one language, cross compilation, native binaries, static linking.
That's a pretty sad state of affairs. For what, prestige?
breathing is vital to life at the minute-to-minute level; breathing 'exercises' of any kind are potentially dangerous; using basic techniques to "get high" are inherently dangerous. Please do not do try breathing exercises alone; find reliable sources of information and practice.
Despite the whining of anti-systemd people, it worked for systemd.

I fail to see why it would not have worked for Wayland.
Congrats on the launch! I’m interested in using this app as I’ve also been looking for something like this and your implementation is very sleek. Regarding the subscription, do you have plans for future pro-only features?
idk, there are APIs for this now. https://www.postgrid.com/pricing-print-mail/#perunit
It explicitly links them.

Here’s one of the academics from the papers I linked above explaining his “pet” theory: https://mobile.twitter.com/matthew_d_green/status/1433476266... The papers explain more in detail, and the ACM publication seems reasonable to characterize as peer reviewed for some value of that depending on your impression of ACM.

You asked for “any evidence” and those papers explain the how, while Wired explains the what and reporting on the Project BULLRUN clearly lays out the why. It is undeniable that U.S. government sabotage to benefit NSA surveillance is involved in deployed Juniper devices. It is also widely discussed that those sabotaged devices were used by OPM. It is understood by many reasonable people in the know that OPM was hacked by Chinese intelligence and that they likely did this by compromising at least one Juniper device. See https://www.bloomberg.com/news/features/2021-09-02/juniper-m... for the Chinese link, for one example.

Bloomberg says:
“The NSA introduces an algorithm called Dual Elliptic Curve...”

“...which it urges the National Institute of Standards and Technology to approve.”

“The Pentagon—NSA’s parent agency—insists that Juniper Networks use the algorithm as a condition for some contracts. Juniper adds it to NetScreen’s ScreenOS software.”

“This introduces an alleged backdoor that could be used to spy on select NetScreen customers, which include telecommunications providers and government agencies.
Juniper includes two tweaks that it says neutralize the vulnerability.”

There are other sources which investigated this topic.

You don’t have to connect the dots, or believe the reprint from several reputable journalists or academics but I would appreciate you acknowledging that it’s not something that I made up. Many reasonable people have concluded that the NSA sabotage played some role in the OPM hack as a result of the link to Juniper.

The attack against OPM leveraged juniper bugs, which clearly exceeds your claims. I acknowledged that your claim is at least the bare minimum possible. However there is ample evidence that is goes much much further. At the time this happened, people pushed back that it was even plausible, and the paper represents a better investigation than I will be able to provide on a message board.

What I hope we can also agree on is that a complete lack of transparency means we cannot fairly adjudicate this in public to completion. Juniper, the FBI and the NSA, and indeed NIST, have not provided a full analysis to the public or even to the relevant IG as far as I understand things.

See also https://en.wikipedia.org/wiki/Office_of_Personnel_Management... for many other sources, as well as https://fcw.com/security/2021/01/lawmakers-press-nsa-for-ans... and this gem of a FOIA: https://www.muckrock.com/foi/united-states-of-america-10/inf...

So since your stated request was any evidence, I think I have shown that I didn’t make this up out of the thin air.
There is no entitlement.

There was a question on a topic, and someone shared their opinion on this topic. It was cleanly focused on what it would take for them to adopt Wayland, and answering the question from a personal point of view.

This is what generally happens on discussion boards like HN. This will happen a lot here.

> "Wayland devs" absolutely don't care if you switch or not

Citation please showing that "Wayland devs" do not care about why people aren't using Wayland and do not find people posting issues with their pains in adopting Wayland helpful in any way.
> Switching to Wayland today means replacing most of the apps you're used to already.

If you mean things like xdotool or a screenshotter, then sure. Otherwise, I can't imagine why you'd do this — at least I didn't have to replace anything (besides a couple of low-level things mentioned above). Old stuff continues to work via xwayland and I only ever notice it because I added a special marker to xwayland windows (to remove xwayland from my system when I notice that it's not used anymore by anything).

> requiring every single program to support

Wayland compositors do not require "every" application to support them. Most old applications continue to work fine through xwayland (for me it's mostly JetBrains' IDEs — you don't notice it's not a fully "native" application unless you look for it), and everything using toolkits like Qt should just work.
If I interpret it properly, most of the path is over the ocean. Debris might still hit Indonesia though.
Sounds like VCs are going to have to either live with lower returns or get much, much better at picking winners.
You can force that now: https://wiki.archlinux.org/title/Zoom_Meetings#Wayland_scree...

Much easier than before where you had to change environment variables for that to work.
> "Telling a programmer there's already a library to do X is like telling a songwriter there's already a song about love." -- Pete Cordell

You may be right, but a serverless resolver ain't anything I've seen before! Awesome project, and I'm glad to see that it all comw together-- not all projects do!
Are there any estimates when these will be generally available? Are any US companies planning to make these? I have a legitimate need for high efficiency panels as I am in a low sunlight area.
When it works with Zoom screen sharing
The author hates subscription services, but the author doesn’t fit the ideal customer profile.

Someone who only pays for something once isn’t a customer that any company should want to attract in the first place, especially when you consider marketing costs.

The author would pay the LTV or even more, but the author is in the minority. Most people would pay some small amount of money once and then happily never pay another dime. They don’t drop hundreds of dollars on their LTV.

The author used Adobe as an example, and that’s where I should point out that it was one of the most pirated pieces of software on the market. SaaS basically eliminates that issue entirely.

Also, most consumers budget on a monthly basis. Ten bucks a month is easier to swallow than $150 all at once for a permanent copy of something like Microsoft Office.

For businesses, they were buying support contracts anyway, SaaS makes even more sense for them.

So, yes, that’s why everyone is SaaS. These businesses that operate on the model know it’s successful and more lucrative than one-time sales.

You might hate it, but the balance sheet doesn’t.
As Inventory Piles Up, Liquidation Warehouses Are Busy
2 obvious questions (because I can't penetrate this stuff)

Is this feminizing our population?

Does this affect the way we think?
I've watched this happen too many times. Good companies destroyed.
Personally, I think the state being able to deanonymize users is an antifeature. A bug that needs fixing.
> And the same thing can be done with in the IPv4 world by trying to overflow a switch's ARP table. I think switch manufacturers have figured that out.

Not really though, because in Ipv4, a DHCP server can be authoritative, and switches can ignore IPs which are not assigned by the DHCP server. That's how it's usually figured out for Ipv4.

> Except that NAT re-writes both the IP and port and thus you have to use state tracking for replies and port mapping with IPv4 NAT. Whereas NPTv6 is stateless.

Yes, I didn't meant to state anything contrarily to that, but you still break applications which assumes that the local IP is the same than what is visible from a remote server on the internet.

For the captive portals, I stand corrected, and wasn't aware that you can now embed DNS directly in RAs, but stayed with the original implementation which delegates the DNS part to DHCP.

I probably have an outdated understanding of Ipv6, but to be fair it's quite a challenging exactly because of all the amendments that you linked. These are only some of the problems I encountered personally, and as you showed, each individual problem has a different RFC to solve it. You never know how stable they are and if they are properly implemented. And most of the time the safe default is to only work with the initial standard.
Sure, but in some products that's really a non-issue.

Like, take photoshop for an example. If you're a photographer that only ever edits your own photos, the odds of a needing a security update for photoshop are really minimal.

If you regularly edit photos from clients, maybe it's worth considering.
It just screams "we view our users as cows who must not be allowed to escape the milking apparatus".
Are computers ready to solve this notoriously unwieldy math problem?
I also am a teacher and I also find that exact thing is true.

I think it at least party accounts for second book syndrome, where someone asks the Internet, "Hey, I'm having trouble with Calc I, can someone recommend a good text?" and people in all seriousness suggest Spivak, or Rudin. "I also didn't understand it until I did Rudin" they'll say, having overlooked your point that headspace changes over time.
There's no buildup of CO2 with these breathing techniques. Quite the opposite.
> Which means that anybody on the internet gets to know your mac address.

Pretty sure all reasonable devices utilise privacy extensions.

> ISPs got it wrong ! I'm in Germany, tried 3 different providers, they all assign to my router a /64 subnet instead of /60 or /56 (as recommended by ARIN).

If it's wrong is subjective. If it's not a goal to upsell a business connection there might be technical limitations.

> No support for multi-homing. Example: You have two connections, a slow reliable one, and a fast unreliable one. With IPv4 you can easily setup multiwan in any proper L3 router.

Bit of a niche use-case and still very doable with NAT66.

> Captive portals: SLAAC does not directly support assigning DNS servers.

I haven't seen a captive portal that wasn't able to intercept DNS or that couldn't MITM all connections to display that page. It's a non-issue.

> So it's very easy for malicious devices to flood routing tables of switches by telling them that they own all IPv6 for the whole /64

IPv4 devices can conduct ARP spoofing, no biggie. If it's "very easy" to do either it's just poor switch software.
Having worked with TLS client certificates before, I like them, but I wouldn't inflict them on anyone else.
It was a fine idea in Motif days when X was drawing lines and rectangles. These days it receives ready and extremely heavy bitmaps from applications, so anything besides writing to shared memory gets pretty slow. I wonder why you'd want to send this over network without efficient video compression like screen-sharing tools do.
>no forethought given to apps that need global keybinds

Please see this pull request for a description of some of the current challenges with getting global shortcuts to work: https://github.com/flatpak/xdg-desktop-portal/pull/711

>no forethought to screen capture

The plan for a while has been to put screen capture in Pipewire, this is already working for apps that support it.

In any case, X11 also does not have any forethought in relation to hotkeys or screen capture. Technically it has no API for either of those, it has APIs that allow all applications to intercept all keys, and to allow all applications to read the contents of any window. Those APIs can be used to do hotkeys and screen capture in a rudimentary and somewhat broken way but they are not ideal. Just copying those (or an API that looks like those) into Wayland would be an unwise idea.
^This + drunk PowerPoint game!
Yeah sure, although upgrading was optional. My point is the incentive is on the developer to make it worth while to pay for an upgrade, they can't just phone it in.
Wouldn't genetic screening make quick work of identifying the people that might have the condition?
Well, one of the few plausibly-valuable additions to the world offered by blockchains are globally-distributed databases not owned/controlled/bound to any single organization. Why not make use of them for something other than scams, pump & dumps, etc.?
> very small quantities that would be in a fusion reactor

Fusion reactors would involve much more tritium than in a fission reactor. In the latter, especially LWRs, tritium comes from rare ternary fission events. In a DT fusion reactor, T is a primary fuel. A 1 GWe fusion plant will burn about 150 kg of tritium a year. To illustrate how much that is: that quantity of tritium would be enough to raise 2 months worth of the average flow of the Mississippi River above the legal limit for drinking water.
I wouldn't say python takes C++ interop seriously, it's more like the pybind11 people are amazing at what they do and found a way to slice the problem neatly. But yes, it's night and day, pybind11 is a godsend.
Only if we pay for it.
HN: GraphQL Security
We did and do. Also, git push works with PHP as well. So does rsync. Just put some files on a server with whichever protocol you choose. Easy peasy.
Laravel is awesome, and "laravel in js" sounds good.

Perhaps you can point out issues or improvements which could be possible by leveraging these strengths if javascript?
Definitely - that's basically what cloud platforms do. AWS doesn't charge you for S3 unless you're using it, and every feature has its own pricing
I had the same reaction.

I went as far as calculating it. If you’re a leasee, the heated seat subscription saves you money over your 3 years of ownership.

BMW being a luxury brand, a large chunk of owners are going to lease.

Plus, BMW had an option to opt-out and buy lifetime.
Google even has a geolocation API [1] where you can send the BSSID and signal strength of the access points in your range and it calculates your position.

[1]: https://developers.google.com/maps/documentation/geolocation...
Ask HN: I have tens of thousands of subscribers – how do I send a newsletter?
A few months ago, I put a "Sign up for my newsletter" form on my website. When someone entered their email, I simply stored the mail, sent a "Thanks for signing up" email via PHP's built-in mailer and did nothing else.

Now there are tens of thousands of subscribers. I got some opt-outs which I manually deleted. And a few hundred bounces, which are still in my inbox.

What is the best way to send out a newsletter now? I think I will need some service that I can:

1: Import the mails

2: Import the bounces so they get analyzed and removed from the list.

What is a good service for that? Or should I use some open source software that I host myself?
Science and prestige probably.

Don't forget that China is still catching up. In the 80s, when it started developing, China was poorer than any African country.

The Soviets and Americans also did a lot of borderline and dangerous stuff when doing prestige and science.

Times changes here in the WeSt where safety is first. It will also be in China one day, too.
Yes, we have previous experience with products from the former USSR. Good product with basically no docs other than a 10 page PDF, just ask Andrey if you have any questions. We're integrators. One could reasonably expect to sell low volumes in Africa, because any European customer would basically laugh in your face.
>> I don't need constant new features. But I do expect security updates.

Isn't updates to software in response to emerging security issues a "feature"?
Same here. I have an AMD 5500xt that has no issues with Wayland or X11. I upgraded to a 3080FE and Wayland is unusable and X11 is buggy as hell. It's so bad I'm tempted to ditch the 3080 and switch back to an AMD card once the next gen cards are available this fall. I fully blame Nvidia for this situation.
I've been in the Clojure world for over 10 years but I don't really recognise the problem you're calling out here. There will always be libraries in an ecosystem that lack maintainers, particularly if they did not see the hoped adoption or an alternative de facto solution has emerged.

Many Clojure libraries are conceptually simple and solve one problem well, so it's common for them to reach 'feature completeness' and not see much activity after that. clj-commons has also ensures the active future of many libraries.

A friend and I adopted a library we felt was stagnating and still had lots of useful features to add. I don't see this more in Clojure than anywhere else though.

Any more examples that need engineers? Onyx always seemed to be entering a crowded space.
They're mostly glass and aluminium which can be and are widely recycled.

Oh no, does that involve thermal steps? It probably involves those suspicious sounding "metallurgical" steps too, what even is that, it sounds positively diabolical.

Wait, chemicals? No one told me they had chemicals in them. I never touch anything with chemicals in it. Totally banned them from my life. They are well known to cause cancer apparently.
> In May 2020, two villages in Ivory Coast were hit by objects – including a 12-metre section of pipe – that appeared to have come from a Chinese Long March 5B expected to land that day

> [Dr Shane] Walsh [International Centre for Radio Astronomy Research: ]«They claim to have learned from the last two launches and added some method of control, but the EU tracking network showed this unit is tumbling, which means it’s not controlled»

> The US and the EU have embedded risk assessments and will not launch if there is a greater than one in 10,000 chance of causing injury. China appears to have a much lower bar

(From The Guardian: https://www.theguardian.com/world/2022/jul/29/as-more-space-... )

Some would have though from at least last episode in May 2021 that it finally appeared as clear that fatalist and jus-formalist orientations and behaviours are largely frowned upon.
firefox is still full of nasty rendering bugs (menus) which I believe are happening only on wayland, though i'm too lazy to check