skysight-inc/HackerNews huggingface dataset:
The author shows a complete lack of knowledge on IPv6. Yes, you do get a SLAAC address which basically contains you MAC, but if your OS supports it, you will also get a anonymized address which does not leak your MAC on the internet. Windows, Android, Linux, iOS all support MAC address anonymization, so as long as you are using a recent OS you should be fine. Very weird suggestion...
Nbxmpp 3.1.1 out (Python-nbxmpp) – used by Gajim XMPP client
I Dont know if Tomato publishes CVEs. But you could check the release notes for OpenWrt for CVEs over the last couple of years.

I would trust OpenWrt more, especially their continued support for old devices, one accesspoint of mine is 11 years old, supported in the 2022 release and still going strong (128MB RAM, 32MB flash)
Security vulnerabilities are regularly found in many softwares (both online and offline), so that's one reason to upgrade.
> I've noticed some new routers (e.g. the Eero from our ISP) can only be controlled via an app. Does that mean they can be controlled remotely?

Probably.

On top of this a lot of routers will use TR-069 that allows for remote management of your router by your ISP. So even without a app its likely it can be controlled remotely.

https://en.wikipedia.org/wiki/TR-069
Yeah, you're right. I apologise. It looks beautiful, and I'm sure there's an audience. Just not me.
I read this to find out if my Ubiquiti edge router 4 was secure or not and only saw one statement: "Ubiquiti is not recommended. More on why below." Only Ubiquiti isn't mentioned anywhere else that I can find. Kinda frustrating.
Crypto Preachers vs. Crypto Skeptics
Yes, a cooperative, or even a tech-savvy intentional community. That is the kind of thing I'm really going for with "Linux on the Web".

Something like a new hippie age must start arising as the post-peak-oil era continues to take its toll on the global economy*. It's now up to the younger Millenials and older Zoomers to start leading the way with innovative, sustainable, future-forward ways of living.

*https://www.theguardian.com/environment/2021/jul/25/gaya-her...
This used to be the case.

Photoshop, for instance. I don't need it to have new features; there are certain things I need it to do for me, and that's it. I don't need constant new features. But I do expect security updates.

Same model we have with cars (that BMW is trying hard to upend): it has the features I need, and if there's a systemic defect that poses a safety risk across those models sold, they're expected to fix it.

I agree that subscriptions have become toxic in their prevalence.
Where does it end? I'm liable for my client's laziness in not upgrading to a patched version?
If we had "trillions of people" living on earth we'd have a whole new set of problems, all of which would be much more urgent and important than solving the mystery of why my hair abandoned me at age 28.
It is far away from transparent. Devices behind the router can't know that a change in Public IP happened and won't reconnect active connections.

One example is Apple's APNS and Android's GCM. In IPv4 multiwan network, after the change they won't receive notifications at all for up to 30 minutes. In IPv6, the router can invalidate the old prefix, and publish a new one immediately.
Operating systems are starting to make that impossible.

I used to use an old version of Quicken for Mac (this was back in the MacOS 10.2 days). It was "finished" in that it did absolutely everything I needed and there were no bugs that affected me. As time marched on, Apple switched from PowerPC to Intel which was fine because they had technology (Rosetta) which allowed me to run PowerPC applications. Then they dropped Rosetta, so now I had to choose whether to upgrade MacOS or continue to use Quicken.

I now use software called Banktivity to replace Quicken. Much like Quicken, Banktivity is "finished" as far as my requirements go. The version I have is Intel-only and Apple is switching to Arm processors. How long will Rosetta 2 last before it's pulled and I'm forced to choose between upgrading my OS and using this software?

I think there are similar things in the mobile world too. I think Google requires apps to use a minimum API version to maintain a listing in Google Play. I believe Apple does something similar with the App Store too. So short of regularly recompiling, testing, and publishing your app, everything in the stores has a finite lifetime.
Why can't software like a music player or playing podcast function perfectly fine w9thout updates for 10 years. We had same audio formats for 10 years, and same OS audio API.
Actually it is the opposite, the less devout, the more political the christian. Progressive/liberal christians are the most political
> Pi is wrong, and you know it, it's just that you (likely) feel that it is too late to change it, so why fight against history?

I'm also a mathematician, and pi is just fine.

> 1. Pedagogical: I never "got" radians, or had a really firm grasp on trigonometry until I had heard of tau-vs-pi.

The way I remember it, I learned trigonometry via triangles, whose internal angles sum to tau/2. This is absurd! Why don't they sum to a whole thing instead of a half thing?

> 3. Boundary pushing:

By the time one gets to the cutting-edge, of all the things that are holding one back a missing or extra factor of two is certainly not one of them.
I can think of many specialized applications where the versatility is superfluous while the size of the model prohibit inference on the edge.

Do you know if there is available methods for shrinking a fine-tuned derivative of such big models?

Beside generating a specialized corpora using the big model and then train a smaller model on it, is there a more direct way to reduce the matrices dimensions while optimizing for a more specific inference problem? How far can we scale down before the need of a different network topology?
I've had mixed results depending on devices -- my Apple devices tend to hop between bands and APs quite excellently.

On the other end, I've got a Nintendo Switch which stubbornly sticks to the first AP / band (I'm running a few APs with the same SSID/PSK) combination it grabbed onto during network setup. Even if I move completely out of range of the AP/band it grabbed onto it'll refuse to acknowledge other APs/bands until you run network setup again.

Everything else I deal with tends to be much closer to the former than the latter, thankfully. I don't use non-standard stuff like UniFi band steering, as it is known to cause issues due to non-standard behaviour.
Unfortunately, I think Wayland really botched things. That's a shame because it would have been a great improvement. Wayland and friends have taken far too long to build and the tradeoffs to me, an end user, are not convincing.

I tried to use Sway for a few months (as a regular user of i3) and I ran into too many frustrating issues to want to keep with it.

The greatest problem with the Wayland protocol is how much work a compositor has to do. Requiring every window manager to also have to take on tasks like processing keyboard and mouse input is a massive tradeoff for what Wayland offers.

IMO, we needed something not far off what X11 does. Really, X11 was fine but could use some rearchitecture for modern times and a purge of all the 80s drawing cruft nobody uses anymore. And address the input security stuff.
you are liable for producing shit in the first place. If chairs killed people, ikea would not get away with 'well, they didnt pay us subscribrion to get a new safe version'

If spftware industry is a joke and can't sort out it's own mess, its on us, not the consumer
And that is not dead either, in fact it is better because you can just self-host https://nodered.org/
There's a baldness research team at the institute I work at. The head of the lab looks like a talk show host from the 1980s, and his work is derided by other labs. But he brings in more external funding than any other group, I don't think of him as a lonely crusader.
What is the breakdown of your software maintenance costs?

One of my ideas is that we should package manage solutions to problems at a level higher than just code and subscribe to them. We all depend on BSD sockets due to history. BSD sockets Just Works™ and people don't really evolve the BSD socket API over time. If only the rest of the software stack was as feature complete as BSD sockets.

Imagine a labour market that was also a package manager.

When library "xyz" upgrades from version 1.2.0 to 1.3.0 there's an interface change that breaks everybody. If there's 1,000 dependents of "xyz" and it takes 1 hour to upgrade and 1 hour to pass all QA tests and get into production, then that upgrade takes 1,000 man hours + 1,000 hours automated testing.

If we don't depend on library "xyz" throughout our codebase, we reduce the number of callsites to change. If we use a facade, they're all in one place. If we use a Service Provider Interface, we isolate ourselves even more and add flexibility of implementation.

If our facade or SPI is in escrow on a labour market, someone can fix it for us for a cost of their time. Ideally the software maintainer fixes it so they don't break so many people.
You can still edit both comments.
Mandatory link to https://arewewaylandyet.com

Now that distributions mostly default to wayland and pipewire I feel that the linux desktop is in a solid place.
I'd like to see your math on that.
It is tricky because you also have indirect lighting.
You're perfectly welcome to keep your computer and its software running in isolation until the end of time or until the hardware fails. You just shouldn't expect to be able to connect to networks that change over time or to run software on new operating systems that address newly discovered security vulnerabilities or that otherwise get updated.
Nice read. I look forward to your post specific to developer tools.
For technical learning material do you prefer a SAAS model where you pay $10-20 / month for all-in access to short isolated videos in a related subject (potentially ~4 new videos a month) or dropping $50-150 one time for a course that could be anywhere from 3-15 hours long?

It's kind of comparing apples to oranges but as someone who has made courses for a while I've always thought about the idea of doing weekly screencasts instead. HN is one of the best places to ask this sort of question.
> Clojure brings all the XML pain of Java dependencies

You don't have to use pom.xml for Clojure projects. The default, included-with-the-clojure-cli support to define your dependencies in deps.edn makes dependency management extremely simple

;deps.edn
{:deps {org.postgresql/postgresql {:mvn/version "42.4.0"}}}
I wonder what can this be used for?
I don’t really see how any of the threats presented here differ from other technologies we use…
I didn't make those admittances. There's nothing wrong with acknowledging privilege around race and gender.

I think that 'privilege' is _sometimes_ used in accusatory bad faith, but I don't think this is the majority.

I think in good faith it's a useful framework.
And MacOS supports them finally since High Sierra
>The greatest problem with the Wayland protocol is how much work a compositor has to do. Requiring every window manager to also have to take on tasks like processing keyboard and mouse input is a massive tradeoff for what Wayland offers.

No, not really. Everything that Wayland does is stuff that X11 compositors were already doing. With those the compositor is already taking on all processing of input, and the X11 server is only creating an additional unnecessary step by passing all the input through. Thus why that extra step was removed in Wayland.
You would? That seems like an outsized reaction to a broken chair.
> I think this is perhaps the strongest pro-tau argument. How many intuitive insights may have been missed or delayed, because a 2 was factored out of 2pi?

About as many as were missed or delayed because a 1/2 was lost from 1/2tau.
Many browsers support ctrl + g to open the "find" input.
Did you write this? If so, why did you add the "{}" at the end? Also, can't you use newlines in bookmarklets?
I write a lot about Clojure, but I haven't written about this specifically.

I'll start today.
Those same pay-once video games also sell season passes, MTX content, expansion packs, and in-game currency.
I've found out-of-box Asus to be pretty good, and they sometimes even incorporate features from third-party firmware (see "first debuted"):

* https://www.asuswrt-merlin.net/features
Right. But isn't it so that each device gets its own IPv6 public address? So that PC1 and PC2 connected through the same modem are identifiable by different IPs, while you can still see that they're from the same modem/household? If that's the case, it can be a privacy concern.
One of my favorite explanations of some of these concepts is Wait-but-why's explanation of Grahm's Number [0]. It breaks this concept down in a way that's very accessible to people like me who have a pretty limited grasp of many of these mathematical concepts.

[0] https://waitbutwhy.com/2014/11/1000000-grahams-number.html
It's something that I've done in two hours, but you are definitely right. I could have done better.
> Do you honestly claim that you know when deallocations happen in any codebase full of conditionals depending on outside effects (user input, network, etc)?

Yes. C programs have been doing this for over 40 years now. A leak free C program has an equivalent free for every malloc, which means they know exactly when everything gets allocated and freed.
I had Gurobi struggled with it for over a week. Do you have job id & password or the solution file?
So we have factories and gigafactories. Where are the kilofactories and megafactories ?
Classify their feelings as deep, unassuageable guilt and it all begins to make sense. In their minds, we're all sinners, and there is no penance except to suffer.
FreshTomato I think uses old kernel versions (2.6.xx) where security fixes are not backported. OpenWRT uses modern kernels (5.10) and mainline or external open source drivers but doesn't work on Broadcom devices.
I just saw someone request that the creator of a photo sharing site disable right-clicks for the same reason last month on reddit. I think I talked them out of it.

https://www.reddit.com/r/AnalogCommunity/comments/uw9fne/spe...
your shortcuts makes sense and I loved "dis" one, definitely going to use it :D
Allocating resources where they solve the most important problems
This wasn't caused by the automatic moderation of Reddit, the official Reddit Help Center says that "site-wide suspensions can only be applied to accounts by employees of Reddit and are done so after review of the actions and the context in which it took place". Maybe a bot flagged my comment, but a human had to review it.
In English, "give or take".
> the supposed reflectivity of the foil doesn't really add much to the insulation properties anyway

Can you elaborate on that? Seems hard to believe. There are many kinds of insulation without foil, and the foil backed variants tend to be more expensive. It's hard to imagine that we'd be making the stuff like that without a good reason.
Question for people who came into computer science later in their career
Just block the entire feed and go directly to the profile pages of users you want updates from.
There's a catch 22 in optimizing happiness. The people who are most effortfully, consciously aiming towards happiness never seem in the happiest 10% of people.

The happiest 10% of people are appreciating nature, or spiritual and trying to glorify God, or on a mission to save the world.

It's like trying really really hard to fall asleep. The act of conscious aiming makes you sad every time things are less than optimal. Happiness itself is also a raw goal: you could be really happy hooked up to heroine, aiming for that gets you to a place that is ironically very depressing.
> you don't have to keep paying me forever to keep using it.

Your analogy is flawed. Rather, you will never indefinitely get the latest quality chair for free after buying it. Nor if tomorrow plastics are banned, they won't replace your chair with wood or metal for free either. And if the fabric wears, they won't replace it for free either.

So, why should software updates be free in a dynamic computing world?
And what's this Wifi 6 business? Am still upgrading devices to 5! Is there a new 802.11x standard? If service is (barely) 1 gig, and most end users dont notice degrading, why bother?

Everyone also recommends the eero wifi mesh. But I'm hesitant. There's probably a hack to turn a jetson nano or rpi4 into a repeater ;)
I really liked the old way it used to work. You bought a license for software and got only bugfixes and security patches. Every second year there was a new version released with 50-75% upgrade price for current users.

I totally understand subscriptions for online services that run on provider servers/storage etc. (like Evernote) or content services where you get access to a vast database of always growing content, that you would never afford to buy at once. But stuff like Bear notes, Autodesk Fusion 360, etc. These I don’t understand. If you cannot justify a new version users want to pay for, then don’t make it. I think most users would gladly pay for new features and improvements. Just don’t make them cash cows driving your business model on fear of loss.
What Makes a Power Great – The Real Drivers of Rise and Fall
Ah. Yea that's true. But some from excluded groups have always fought hard to be included. Doesn't seem to be very new.
> Like I never understood why most of these basic tools morph into 100+ people companies.

Simple answer: They've signed a deal with the devil (VC funding) and now need to grow to make a > 1 billion dollar exit.
Only the first article mentions both Dual_EC_DRBG and the OPM hack, and doesn’t link them. They’re just in the same list of “big hacks.”
> The author shows a complete lack of knowledge on IPv6.[…] you will also get a anonymized address which does not leak your MAC on the internet.

No, they do not lack knowledge. See the sibling comments: the issue is not a concern of what various computer and mobile OSes do, but rather with some CPE firmware still using EUI-64-based IPv6 addresses.

This allows attackers on the Internet to send out probes, find the router's Wifi interface, map it to the BSSID/SSID, and look up the SSID in geolocation database:

* https://www.blackhat.com/us-21/briefings/schedule/#ipvseeyou...

Ideally what they should be doing is contacting vendors to fix their firmware (and also creating CVEs for 'public shaming'), and not telling people to disable IPv6.

Disabling IPv6 does not solve the problem: it is still lurking there for folks that haven't read this site/advice.
Well, most software can run perfectly without updates, for example: You can still have a PC running on Windows XP.

Why you might need updates:
1. New functionality (if you need a particular feature that was not available before)
2. Security issues
An accentuated Emacs experiment (à la macOS)
I think we're talking about a different issue here. MultiWAN does break consumers which do not support reconnecting from a different source IP. But the issue is the same with IPV6, if the prefix changes, the client has to reconnect anyway.

Also, I'm personally not aware of any reliable way of invalidating IPV6 prefixes except waiting for the timeout. (And if it's republishing a RA, devices don't have to listen to it, and the packet might even be lost with an unreliable wifi for example). If I'm wrong here, I'd love to know about it.
https://archive.ph/8ZxSl

"In order for this recipe [of ingredients of national success] to produce competitive success, a society must have a public-spirited elite class. Nations gain tremendous competitive advantage from an active, public-minded elite that is representative of the broader society and connected to it via avenues of social mobility. But when a nation’s elite, or much of it, becomes corrupt or engages in rent-seeking behavior, that nation’s vibrancy, resilience, and competitive edge will erode. Crucially, the quality of a nation’s elite plays a vital role in determining the legitimacy of its governing institutions. Where elites are seen as corrupt and self-interested rather than devoted to the public good, societies and the institutions that govern them often atrophy or break down."
Yeah. I've just started on a couple things, and it's slow going because I have contract work and burgeoning Clojure blog. However, I'm working on a stripe API library that is up to date, and a syslog server library.

It's these API-wrapping and protocol-handling type libraries that either are way out of date, or just don't exist.
I would go so far as to say javascript hurts the web. If hacker news was written like facebook the user numbers wouldn't be the same. Endless transitions, spas, waiting for loading, glitches, popups with fades, all that is a waste of time - the user just wants to read text. I want clean loading, just simple clean html, fast rendering, nothing processed after i get the html rendered. What would be rad is a facebook.clean where you can just HN style rendering, clean tables, the browser keeps track of what you clicked, super fast interactions etc.
I saw a slide somewhere recently that showed that although compute per individual CPU/GPU is reaching an upper bound, the compute per dollar is still growing exponentially.

Gave me some hope that we'll still be able to do cool things in the coming decades even without some giant leap like quantum computers etc (although it's not as cool to have the compute in the cloud vs on your local machine, but it's something).
When I had a gig at a start up, I remember the owner couldn't stop banging about subscriptions. It was the main priority, how to get people to subscribe and anything else was an afterthought.
The main idea was that even if people stop using the product, a good % will forget to unsubscribe.
I remember something like 30% of users were people who subscribed, used the product for a month or so and then never unsubscribed.
Ahh, I knew it was one of the x-tools that did this, but I didn't know the exact one, thanks! Might as well map ctrl+b to `xdotool type (xsel -b)`.
GemStone is a common one, but object databases are not very common due to the maturity, efficiency, and predictability of relational databases. The deep pipelining and caching models of CPUs are a better match for RDBMs than object ones.

https://en.wikipedia.org/wiki/Gemstone_(database)
Yes. We did.
> The greatest problem with the Wayland protocol is how much work a compositor has to do.

Sounds not like a very modular/orthogonalized approach, and also limiting the choice of the user.
As required with any neutron star story on HN, recommendation for “Dragon’s Egg” by Robert Forward. Science fiction novel which takes the surface of a neutron star as its setting.
We'll definitely see 'Apps with Live Activities' section on App Store when it is public
Security vulnerabilities should be fixed by patches/security fixes w/o forcing users to go up the ladder to "za niu anz shaini version" + "our new and enhanced x$/mo"
I don’t see what’s SAAS about a content subscription but yes, I prefer that.

Reason being that I’m often unsure how deep I want to go in a subject, so putting up say $20/mo gives me the option of only spending $20 if during the first month I decide it’s not what I want.

If you want to see a very good (IMO) implementation of this model, check out Ray Wenderlich. Lots of free stuff to show you the style. Then $20/mo or $40/mo for “pro.”