skysight-inc/HackerNews huggingface dataset:
If painters are paid for their paintings and not for songs they sing in discordant voices at exhibitions, builders - for buildings and not for juggling steel beams while wearing clown suits, medics - for healing and not for trying to pitch home-baked heart-shaped cookies to their patients, why on Earth programmers must make their direct product free and invent schemes to make their work profitable?

Well, because "ethics"!
As a sibling comment pointed out, deciding to write OSS is part of a broader philosophy on software freedoms, which also relates to monetization and business models. It means putting the freedom of your users above growing a corporation that can compete in financial terms with companies that don't ascribe to that philosophy. It also means having to be creative with how you monetize your product/service, and generally treating your users better than just as participants in a business transaction.

If you don't agree with that philosophy then writing OSS is not for you, and that's OK. Most users unfortunately won't mind using software that doesn't give them these freedoms, and the internet at large is evidence of that. Some of us will choose not to use proprietary software, but if your main goal is to grow a business, you likely won't notice a small portion of these potential missing sales.
Is this even legal? In the country where i live you need to first register a business and can't make up funny names out of your mind directly into DoorDash
I found a surprisingly effective way of detecting honeypots some time ago, while working at an email marketing company.
I moved from letsencrypt over to AWS ACM, but the letsencrypt emails don't have an Unsubscribe :(
Ask HN: What experiences do you have with arc42?
I have recently heard several times good things about https://arc42.org/ , which is an open-source tool to document architectures.

What experiences do you have with it? How well does it support teams which do not have experience with formal architecture descriptions? How much additional tools does one has to learn to use it? As it claims that it supports iterative development processes, how can it be integrated with version control?

Would it work for organizations which do not have architecture documentation as an explicit goal which they do not set time aside for?
It's great to send encrypted raw FS, but beware of the bugs that I mentioned above. Depending on your distro's packages, you may run an affected version for some time.
It depends on your audience and regions you're most interested in. But if you're aiming for the EU, gcore labs may be interesting. Akamai is not bad, but a bit enterprisey - I don't think they even had an official api the last time I used them?
The Jamaica NIDS digital identification program: a cautionary tale
> A man going nowhere at maximum speed, really more of an absence than a man.

Dude, that's a beautiful summary not only of the video but of the entire productivity cult.
I think it might be because Fahrenheit is the one unit in the US customary system which is not particularly arbitrary compared to the metric equivalent and it actually has some advantages in day to day use since it maps pretty well to human temperatures

It probably has an element of catharsis for people on the receiving end of "metric is superior" whining to point out celsius is not particularly rational
Putting everything 'behind Cloudflare' isn't a panacea. By merely living outside the West, I'm getting Geo blocked from 'normal' news sites and constantly having to solve hCAPTCHAs to solve riddles for some AI algo without compensation. It's such a burden and I find myself giving up pretty often. GeoIP blocking is what prevented me from getting my voter information out of my last domicile. Running everything through Cloudflare or similar also contributes to the concept of letting the internet be centralized around a few choke points that can hurt free speech (both the good and bad kind) and when they go out (which did recently) a large swath of the internet comes with it.
Celsius and Kelvin are the same scale with just different starting points for 0. So I wouldn't say it's on the same league as Fahrenheit for scientific purposes, you just need to sum/subtract -273.15 to convert. F to C or K is a much more cumbersome conversion comparatively.
To replace Notion&Miro, we build a next-gen open-source knowledge base
Check out at:https://github.com/toeverything/AFFiNE#stay-up-to-date
We built an open-source, privacy first Notion/Miro alternative! We call it Affine, and we built it with Typescript/React/Rust. We know that there have been so called notion or airtable "open source alternative"s, but we want to make something even more easier to bring planning, sorting of knowledge and creating of content together.
It is not only a block docs, but also a visual learning/collaboration tool merged together. In short, it is a next-gen semantic knowledge base.
We prepared a intro at: https://blog.affine.pro/posts/affine-the-next-gen-knowledge-base-to-notion-and-miro

If you like this open source project, please help us by clicking GitHub star, which is crucial for the future development of AFFiNE. As we have just open-sourced it, it would be greatly appreciated if you could provide us with some review or feedback.
I had a flatmate who I played games with before moving in with him. After we moved in, sure I saw him here and there around meals, but in some cases if we were on slightly different schedules we could literally go a few days without seeing eachother, while still talking over a game of Valorant or Overwatch every night, just like before
Indian government withdraws Personal Data Protection Bill
There is quite a difference between a newspaper owned by a wealthy trust (that doesn't have owners extracting profit from it) and one owned by a wealthy company (that has one or more people whose goal is to make as much money as possible).

Obviously that doesn't remove all biases, it doesn't remove all the ways people in the non-profit might still be motivated by agendas either related to wanting to be paid more by the non-profit or to make more money in their other business interests, and it of course doesn't mean they've done the impossible and become a perfect, infallible news organisation.

But it's still a hell of an improvement over the way nearly all other major newspapers are owned.
I agree and will say I have tried to unwind more. I've also taken a few days off just doing (essentially) nothing.

I guess, because I don't vacate much I would like something out of it so i don't have any regrets.
False. You can very much implement the n-th root. Details depend on the number format chosen (fixed vs floating point emulation).
The most obvious method is binary search. You calculate the n-th power for some number and see if it is larger or smaller then then the number you want the root from and narrow it down.

Equivalents of the doom trick using integer division and instead of >>1 (which is ÷2) of the exponents + a few newton iterations would also do the trick in floating point format
Track and target: FAQ on Myanmar CCTV cameras and facial recognition
> How does that work without becoming a SPOF for taking down the website ? Can't a user/botnet with more CPU power than the server simply send more captchas than can be processed ?

Glad you asked! This is theoretically possible, but the adversary will have to be highly motivated with considerable resources to choke mCaptcha.

For instance, to generate Proof of Work(PoW), the client will have to generate 50k hashes(can be configured for higher difficulty) whereas the mCaptcha server will only have to generate 1 hash to validate the PoW. So a really powerful adversary can overwhelm mCaptcha, but at that point there's very little any service can do :D

> In addition, using sha256 for this is IMHO a mistake, calling for ASIC abuse.

Good point! Codeberg raised the same issue before they decided to try mCaptcha. There are protections against ASIC abuse: each captcha challenge has a lifetime and also, variable difficulty scaling implemented which increases difficulty when abuse is detected.

That said, the project is in alpha, I'm willing to wait and see if ASIC abuse is prevalent before moving to more resource-intensive hashing algorithms like Scrypt. Any algorithm that we choose will also impact legitimate visitors so it'll have to be done with care. :)
This might be giving away some secret of sorts but here we go:
Sarasota is a unique place.
Goodwill maintains dedicated bookstores - selling books at $2 each. Needless to say the stores are always well visited. There are always new amazing books streaming through. I once met a young bookseller lady from Houston who drove all the way to fill her truck with books from here.
And, as the article hinted at, the area itself acts twofold: as a magnet and a filter. Being an artsy famous cultured beach town it attracts the often rich and successful retirees who, after having spent a life of collecting books but then because of age and many moves having to narrow down their collection end up with the best of the best books on any topic thus singled out and neatly brought to Sarasota. When these fine folks pass away they leave the treasures for the rest of us (unless their children have any idea what they are just about to give away). So, very often, you would bump into a new book, look at the artful ‘Ex libris’ sticker left on the first page and realize another collection of someone interesting just arrived. To honor those I usually try to pick up all their treasures and add them to my own collection which the kids have been instructed to keep together and hand down over the centuries…
It's spam from a server owner's point of view in the broader sense, in that it is "junk requests" instead of legitimate requests, they can be sent as a flood at no cost or consequence to the senders, and it's up to you as the recipient to find a way to filter it all to separate the wheat from the chaff.

It's certainly not denial of service, that means something far more specific.

One could call it "scraping", but I'd argue the meaning / emphasis is different (it'd be like describing trolling as 'typing').

And "botting" is not a word. :)
Yes all the issues should be resolved by now.

But given that the bugs exist, anyone using encryption should test and verify all the functionality before using it in production.

The worst thing about this bug is that it doesn't manifest on the local machine but in a situation where things seem ok.
Definitely - thankfully living with family who are from here, I have that included in the experience.
So basically KVM for Mac then? So like on Linux you have QEMU+KVM, on Mac you instead have QEMU+HVF?
Did you read the article or are you commenting because crypto bad? I felt that it made some really good points and would enjoy hearing a counter to them if you have one.
which uses passport verification as Sybil resistance where the threat model is individual actors. Still vulnerable to nation states.
is there a backend in particular you've found to work?

I've looked periodically for something in this vein, but the only one I can see right now is https://pypi.org/project/matplotlib-terminal/ which I haven't had much luck getting running.
I found that my netlify site attracts a lot of spam specifically from the same spammer/group. The messages always start with some variation of “Hi my name is Eric”.

Netlify seem to not really care after reporting it on their support forum. The spammer disables JS so no client side protection works. I’ve recently decided to (unfortunately) break the ability for JS disabled browsers to be able to submit the contact form. The form elements attributes are all wrong meaning the form won’t submit correctly. Instead, some JS on page load sets the attributes to the correct values. I will wait a while and see if this solves it.

While netlify does correctly mark all this as spam the fact is that legitimate messages sometimes can slip past these with false positives. So I have to check the vast amount of spam often.
For discovery github is only marginally better. Even sites like HN or reddit are better for discovering projects that are on github/gitlab than the sites themselves.

There used to be freshmeat.net back in the day that was quite nice for discovering weird new things.
Please don't make blocking VPNs plan A. Between snooping ISPs and public wifi networks that have indiscriminate content filters, I'm on a VPN about half the time. Many other legitimate users are as well.
I know, but if I get twice as much done, its like living twice as long ;)

I know its nonsense, but it makes an intuitive sense in the absence of a better way to deal with existential anxiety.
It looks great, as a suggestion: Instead of an easy mode and advanced one I would use a single mode with a calculator, that way it is more transparent to the user and it would make the process of learning the advance mode and concepts easier.

Also, here: https://mcaptcha.org/, under the "Defend like Castles" section, I think you meant "expensive", not "experience".

Keep up the good work!
It respects a global dark mode setting in the browser and looks fine. I'm using Bromite with dark mode. I see a sort of Halloween theme. Black background, white text, orange banner.
I'd love to do something useful with the PoW result but like you say, the PoW should be able to work in browsers, so they are intentionally small.

The maximum advisable delay is ~10s but even then it might not be enough for it to be useful.
> On the contrary. [..] Yeah, the CPU doesn't do any of that bit-blit stuff anymore. But the GPU does that constantly every frame, over-and-over again to compose modern windows.

I was referring to the CPU side obviously since the operation you described in the message i replied to was done on the CPU at the time.

Also that plane i refer to is drawn at a later stage to composition - in fact it is used by older Windows versions (before 8) when DWM was disabled (or didn't exist, in WinXP) for the cursor, while the rest of the system did the region-based clipping approach.

FWIW it is also used by Xorg nowadays for the exact same reason - and like with Windows without DWM, Xorg without a compositor still uses a region-based clipping approach to drawing but the dedicated plane for mouse cursors to display the cursor.
I think plenty of people "drop out of Ivy league college" simply because they got in and shouldn't have, and find it too difficult. You can apply that to any college level, actually. Add in people's refusal to admit failure and blame some other motivation instead, and well.. there you go.

That said, I don't buy it because of the breadth of experiences the author claims to have. I could see one or two of those things definitely making one rich, but the kind of person chasing that many things isn't suddenly relaxing on a boat.
It's unbelievable. You're selling flowers; why do you have to bring up politics?

I feel like a lot of people would do well to revisit the old adage not to discuss politics, sex, or religion, particularly with strangers - or worse, potential customers.
The illusion of being together when being virtual probably is the single largest reason for isolation. not to mention, when your friends/partners/siblings are texting other people while next to you - you're not even getting their 100%, as they could have.
I don't see how the change rate matters.

If one line of code produces $1M of impact, should it be considered inferior or superior to a developer who produced a 100k line codebase with a couple thousand commits?

But measuring direct impact to the bottom line for a developer is just confusing the roles of the business development team / sales team and the devs. As a manager, do you choose who works on which feature? If so, doesn't that make your subjective choice (on who gets to make the $$$ feature) the only metric that matters?
> So I'm in favor of native ZFS encryption due to its usability.

Another reason to favour it is because if you do ZFS Send/Recieve to do incremental backups (like with rsync.net), you can backup your encrypted datasets to an off-site location without shipping the encryption keys.

That means you don't have to be afraid of your backups somehow resulting in breaking your confidentiality.

So you can still retain your incremental ZFS based backup-flow, and you don't have to change any tooling to use it. With LUKS you will either have to store your backups unencrypted, or you lose the ability to do incremental ZFS-based backups.
yup see rincebrain's first reply where nearly every word in the sentence is a url to a different encryption issue

> [I recommend](https://github.com/openzfs/zfs/issues/11679) [not using](https://github.com/openzfs/zfs/issues/12014) [native encryption](https://www.illumos.org/issues/14003) [until it gets](https://github.com/openzfs/zfs/issues/12270) [a fair bit](https://github.com/openzfs/zfs/issues/12439) [more polish](https://github.com/openzfs/zfs/issues/12418) [in the future](https://github.com/openzfs/zfs/issues/11983) ([I'm only so hopeful](https://openzfs.topicbox.com/groups/developer/T86620b1082ed9...)).

Unfortunately this knowledge isn't wide-spread, and as far as I see the zfs devs seem to NOT recommend using encryption right now without accepting the risks of dataloss
Easy, I'll just ask my colleague to come up with impractical, expensive ideas and I'll reject them all for great profit!
It's nice to be family with your neighbors. But it's best to be neighbors with your family.

The family bond really supercedes anything else (in most cases)
Maybe they could let me prove that I'm not the guy who used to live at my address. I could prove that really easily, they just don't care.
Interesting choice of word. Condescending implies talking down,
whereas I am in fact talking up.

Poorer nations spend much more time per capita on cooking. India
averages 13 hours per week. The average American male spends two and a
half hours per week (20 mins per day) in "food preparation". We all
have equally "busy" lives, yet our labour is distributed in different
ways.

The 'first world' problems I am poking fun at (in a light way so
please don't take it so much to heart) is known as "Time Poverty" [1].

My serious point is that western "oh so terribly busy" people allocate
labour that preferences sitting in traffic en route a job sitting at a
desk over cooking food. Cooking feels beneath us, because our time
feels so valuable, in turn because we are robbed of it trying to be
"productive". That is really unhealthy, mentally and biologically. It
is a symptom of "affluenza" [2].

So rather than being "condescending" I am politely inviting you to
descend amongst those of us with dirty hands from chopping vegetables
(those weird shaped plants you mum used to ruin supper with :)

[1] https://en.wikipedia.org/wiki/Money-rich%2C_time-poor

[2] https://en.wikipedia.org/wiki/Affluenza
One option is to raise your kids in Asia
A lot of stories on Reddit have a distinct style even. That makes me wonder if in the future some academics will recognise creative writing following that style as some kind of literary genre of its own, similar to how for example in design there is a particular design style that is recognised as “Bauhaus style” due to its ties to a German art school by the same name, which was operational for a decade in the early 1920s-1930s.
"The rest are forced to build web services with no interactivity, or seek shelter behind something like Cloudflare, which discriminates against specific browser configurations and uses IP reputation to selectively filter traffic."

Interactivity is not a must-have. The world's first general purpose computer, ENIAC, was not built for "interactivity". It was built to calculate ballistic trajectories, which were otherwise calculated manually. Computers exist to allow automation, to reduce manual labour.^1 "Tech" companies need interactivity to support collection of data about www users and paid services related to programmatic online advertising. Generally, users do not need interactivity. Generally, users do not need to spend excessive quantities of time "interacting" with networked computers.

As a user, I want _non-interactive_ www services, whether it is data/information retrieval or e-commerce. I want to use more automation, not less. Automation is not reserved for those providing "services". It also should be available to those using them.

Provide bulk data access. Let others mirror it. Take advantage of "open datasets" hosting if necessary. For example, Common Crawl is hosted for free with Amazon. Upload the data to internet Archive.

"The API gateway is another stab at this, you get to choose from either a public API with a common rate limit, or revealing your identity with an API key (and sacrificing anonymity)."

Publish the rate limit for the public API. Do not make users guess. Do not require "sign-in" to use an API to retrieve public data.

1. Some folks consider having to "interact" with a computer as labour, not fun.
I think what OP meant is that if you have an organisation with 100 votes or 100 organisations with 1 vote there's no difference in linear, but there's a huge difference in quadratic.
The World Factbook
My guess is that The Guardian mostly does not believe themselves to be an authoritative source...but they understand that many of their readers - especially those with simplistic worldviews, or worldviews held on the basis of meeting the reader's own emotional needs - see things differently.

As a semi-regular reader of The Guardian, I mostly regard them as "nice, family-friendly fluff". There are very few angry rants, scantily-clad women, or lurid tales. Their lack of citations & references, sometimes disjointed writing, and generally complete lack of any meta-level perspective (let alone analysis) are pretty clear signals that they have no interest in actually being an authoritative source on any subject whatever.
Couldn't have said it better myself. Within an hour of reading the mail we began moving our infrastructure to Cloudflare Pages.

Crying shame because I would have been willing to pay Netlify 20-30e per month. But going from 0 to 120e+ per month is just too steep to justify given the alternatives available.
I was just being sarcastic but yeah that’s basically what happened in some of my old teams too.
Right, that's the comment I linked to.
There's also the part about the boat in the Caribbean.
> In 2019, the Colorado State House of Representatives used quadratic voting as a way to determine which appropriations bills to prioritize funding first.

I think this is the best use case for this voting structure: given a set of options to choose from at the same time, you're able to rank these democratically in a way that embodies all the benefits described in the article
> the colours are unreliable

And as I asked in my followup, in which terminals ?

In any case, my point was that once you checked them, it looks like Rich can handle the configuration, and you can set up a theme to use, and textualize will let you pass in a Rich configuration.
Partially revived pig organs could force a rethink of critical-care processes
Twitch complained that my password longer than 16 characters exceeded the 40 character limit.

But the worst I've seen was a registration form that truncates long passwords to the (hidden) maximum length of ~10 without telling you, so anyone choosing a safe password cannot login and won't know why.
The solution is obvious. A cron job that auto commits to all projects.

But for real if github had this feature many of my completed projects would get deleted. I'm so glad that I selfhost my git repos on my server.
It is indeed impressive, since filtering spam needs both: precision and recall