skysight-inc/HackerNews huggingface dataset:
Well, it depends. I just said it to not make it more complicated. Depends on the version of UUID and some versions according to specification have fixed bits at some points. This can be dangerous for a key to have. Their generation could also not be as random as required for a key. In practice many now do not recommend just using UUID anymore because that could mean one could deduce some parts of the key.

If so, you should use version 4 of an UUID, not 3, not 5, just 4. Because by specification that is the purely random one. Version 3 and 5 use MD5 or SH1 from an input to generate the ID as far as I know. In the vast majority of cases this also doesn't matter, but better to be sure. Perhaps I used too much caps for the NOT. If you use a solid random generator you should be safe. Just don't rely on a ready-to-use UUID-generator for cryptographic purposes.
The "complications" are exactly what's being examined here.
Cloudflare: "Cloudflare has a long track record of investing in user privacy, which we will continue with Turnstile."

Also Cloudflare: Tracks and fingerprints everyone, and blocks anyone who hardens their browser ("First we run a series of small non-interactive JavaScript challenges gathering more signals about the visitor/browser environment. Those challenges include proof-of-work, proof-of-space, probing for web APIs, and various other challenges for detecting browser-quirks and human behavior. As a result, we can fine-tune the difficulty of the challenge to the specific request.").
Prometheus Exporter for VSCode Metrics
> When the Push Button Was New, People Were Freaked

So that's why they dissapeared from "Modern" GUIs, UIs and UXs. /s
I mean most of my projects are not massive, they cater to up to ~10K or so people. Running EC2 or dedicated server somewhere else would be a lot for me, a single developer, to take on myself. However using Lambda, API Gateway, CloudFront, SQS, DynamoDB, S3, and more (sometimes also with PlanetScale for my DB) is a really nice stack and the costs are tiny (I'm talking <$30mo in my busy months and <$10 in my slower months, I write event-based software so it's very burst-y).

To run an equivalent stack myself would require significant effort (upfront and ongoing) and I'm not sure I could get the costs that low. Another great aspect of my stack is it's all scales on it's own without any intervention on my part.

What you are comfortable using is a sliding scale with some people thinking if you aren't hosting it in your own datacenter then you are crazy all the way up to "let's just use Firebase" (or similar). For me I've found that buying in fully can be very enjoyable and the risk is rather low (for me).
Just wanted to say that I love your blog!!!
I expect to see a great deal more of the "cheap and cheerful" AWS migration stories in the future. With the tanking of the market and (apparent) limits to growth being in the forefront, reducing expenses will become more important.

Before, it was easy to justify almost any expense with the "we just need to get 1% of this $100 billion market" and now it is "hunker down and do everything you can to be ramen-profitable, in order to survive and thrive".
$10/mo is a really hard sell for something I can get for free, but if it's actually useful I would be very tempted
On a trivial level I agree, but only on a trivial level. Most developers will not set up a server in the most secure, maintainable manner. They're going to miss important things:

- Disable password-based auth for ssh (require key-based auth)
- Enable fail2ban or similar to slow down brute-force login attempts
- Configure firewall
- Install monitoring tools, antivirus, possibly backup daemons, etc
- Setup a sane swapfile for your use case, and configure monitoring tools to alert when memory pressure gets too high
- Setup disk mounts, configure monitoring tools to alert when disk space is low, and consider a cron job to automatically clean up tempfiles
- Either set up automated updates (typically excluding kernel upgrades), or have a standard schedule for manually applying updates

...and probably other things that I'm forgetting because I'm a developer, and it has been years since I've been a sysadmin.
There's no porn in that repo. Anime girls holding programming books is a common meme/trend/style that's been around for over a decade by now.
Funny how the article says Ken Thompson popularized the attack. There's good reason to say he invented it.
I hide all website footers by default, you wouldn't be surprised to know useless they usually are

#footer, .footer { display: none !important; }

Userstyle to remove the image from this site:

@-moz-document domain("niconiconi.neocities.org") {
body {
background-image: none !important;
}
#footer {
display: none !important;
}
}
It may take time, and it may take more money than people want to spend, but I don't see how it can cost much more than half a trillion dollars, since you could just buy TSMC for less than that.
cheating has been part of school life since the invention of school
> The whole idea that since they have economies of scale, they must pass those savings on to you is a misunderstanding of how companies work.

You're responding to someone who said "can," not "must."

What they said was "there's no requirement that cloud costs more than traditional hosting. Their scale allows them lower fundamental costs. They could outcompete traditional hosting on cost if they wanted to."

There's no misunderstanding of how comapnies work in what parent poster said; in reality they are 100% correct, and this is the path that CloudFlare is beginning to follow with services like workers and R2.
Fantastic usability if you can get a good story around syncing your passwords in place. Most people use Dropbox or some other cloud storage as the location for their password vault and it sync's everywhere for you automatically.
I think the main thing holding crypto back is the instability and the ability of centralized entities to control the additon of "currency" (average people can't mine after a certain point).
Hosting providers are a pain. My server was down for full day because the provider was being DDoSed. AWS has DDoS protection by default. If I was on AWS, my server would not go down due to network DDoS attacks. That is just one of many things AWS does for you that many hosting providers don't.
There's 3 inches of dust on those deep fried bad boys, welcome.
That's just not how this works.

Dell can bulk order parts and has a strong negotiating stance, which makes the hardware __CHEAPER FOR THEM__.

It says nothing about how much the market can bear for Dell. And in fact, companies use Dell because of the _guarantees_, not the cost. At any point in time, Dell will replace hardware with no questions asked. They can do this because of the margins between what it costs them and what it costs you.

There are benefits to cloud, cost aint one of them.
I see, you are talking about remote contracts, here you need to upload a scan (or photo) of the actual document + (not all but many will) have a video call where you must show yourself holding the same document you already uploaded.

AFAIK the "other party" has no way to check that the ID is not fake, nor a way to verify that the document number corresponds to you, so - in theory - you could print a fake id with a random number and it would work the same.

Little by little they are introducing a form of digital ID (SPID, provided by authorized third parties) that while not yet ubuquitous is starting to get traction (it is already needed to deal with most government offices remotely) also in private sectors.
'Toxic culture' of abuse at mental health hospital: undercover investigation
Isn’t prostitution essentially porn without the cameras? Why ostracize legal prostitution? If porn is allowed, prostitution should be too.

Yes, there are issues of exploitation and licensing. They are at both places - maybe less for porn because it’s not as much in the shadows. Bring sex work out of the shadows. Just normalize it.
Opinions vary. Certainly many people, not just conservatives would think that sex work is immoral. I don't believe I've ever met someone that believes sex workers are subhuman, that reeks of hyperbole. The perception of sex work as a threat to community is probably wider spread still, in its current form it certainly isn't conducive to safety for anyone involved.

Overall, you're simply setting up a strawman that poorly characterizes your opponents. There are many reasons why someone would oppose sex work, including concern over the safety of the sex workers. Even if it were fully legalized and regulated there would still be significant risk when you have two people who don't know each other well in a room alone together and questions of sex and money are money are involved. Especially if it is a physically stronger man with a woman. The more cogent arguments take that into consideration along with the other effects such as sex workers becoming trapped in the occupation, the poor prospects for aging workers to earn an income or be able to retire, the second order effects on the community which are poorly understood but could be far reaching, economic effects of making the occupation more available to the working age population who might otherwise pursue other careers, etc. All of that generally lines up with the conservative take on any change which is to ask "Are you sure you have considered all of the consequences?" and "Do the benefits outweigh the costs both short term and long term?".
What does your product offer over what Sovereign Cloud Stack (See https://scs.community/) already offers?

(And before anyone falsely claims no commercial offers for this exist yet:

https://www.plusserver.com/en/products/pluscloud-open [no affiliation])
> It means “projection” in the sense of ”bit that sticks out,”

And it also means that in English.
> It is the same story as with SQL. Trying to use frameworks to keep your app DBMS-agnostic but then nobody ever migrates their apps to another DBMS.

A small nit, I think this is partly because we've been burned before. Same idea as backups, if you don't restore from backups, you don't know if you have good backups. Similarly, if you don't use certain code paths, you can't tell if those code paths are sufficiently bug free.

I am thinking of Drupal. Pretty much everyone who uses Drupal uses MySQL/MariaDB as far as I know. I think Drupal supports Postgresql but nobody I know uses it because nobody they know uses Drupal with Postgresql. I don't know anyone who uses drupal with sqlite on production either.
Marx is a modernist philosopher by definition. It seems to me you don't really understand what modernism and postmodernism is.
Just because you have money, doesn't mean you can magic resources organisation and training out of nowhere.

This sounds like the same neoliberal fantasy that trapped Europe into an energy crisis.
Kagi is great! I have to use Google for only about 5% of searches with Kagi, vs about 40% with DDG. I was genuinely surprised
Heh, as far back as then Ken T. already knew the score:

) writing to news just causes more

) misunderstandings in the future. there

) is no way to win.

Pretty amazing insight!
Taiwan's government would never allow TSMC to be acquired, it's key to their national security
> Notice that an anime girl holding a programming book is in itself a (mild) subversion of gender roles. The stereotypical programmer is male, and the stereotypical programmer is not cute.

I don't think that is going on here, you have to consider that the anime girl is holding the book towards the viewer, my guess is that the implication is supposed to be "Will you explain it to me".
> There's a libertarian ethos that says anything between two consenting adults is the their business.

IMHO, that's one of the libertarian oversimplifications that can make it a supremely seductive ideology. It's basically: throw out all the hard stuff and admire a toy model where all the pieces fit perfectly.
You don't need to understand the history of monotonicity to understand and effectively use the concept.

Will it make you better? yes, of course, but that isn't what's being discussed here.
In what way are any of the those companies a monopoly? Maybe I could see an argument about Apple in the USA but I don't see it for those 3.
Yes, case systems are an example of this. Most Indo-European languages use some combination of fixed word-order, noun classes (aka gender), and case systems to compensate for errors in communication.

English for example has a relatively strict word order.

Keep in mind that linguistic drift was a much stronger force in the past than it is today and being able to infer meaning through some incomprehensible input was a very important feature for languages to have.

>I guess the extensive case system for example, which allows to omit agent noun since the information is contained in the verb, but in reality is rarely omitted.

Is this just in the written form or also when spoken? Spoken language is much more susceptible to comprehension errors.
Fundamentally, pensions are a FUTURE liability on CURRENT assets. So the primary goal of the fund managers at these pension funds is to ensure that size and mix of current assets can meet future liabilities. One of the biggest risks to this objective is inflation which will eat away at the value of current assets. To hedge against this risk, a fund may purchase inflation/interest rate risk protection (usually complex swap products from derivatives desks at big banks) and pay for this protection with some combination of cash or collateral.

Now it looks like while these products work in a low interest rate - low inflation environment, in this environment this "protection" is pretty worthless at best and actually harmful even.

That's why the current UK gov is under fire, because their tax-cut proposal has been perceived to have precipitated this crisis.
I imagine you'll kick yourself for not figuring this one out.

It means homepage (constructed from hejmo = home, and pago = page)
Maybe this will make VPS providers less aggressive in closing new accounts.

Hetzner for example has a reputation for closing new accounts without any warnings.
There’s no way it’s that simple between Apple and TSMC.

Apple also has something TSMC desperately needs too: the ability to pay upfront and guaranteed volume.

Turning these lines on and off is basically impossible so guaranteed volume is a way to smooth out demand and is needed for planning.

These factories are tremendously expensive and getting cash upfront is basically a zero interest loan in a time of high interest rates.
> That repo and the programming sock screenshot are both from 2017.

(I'm kinda repeating myself in this thread a bit, sorry but...) I can guarantee you that the anime girls holding programming books has been a thing for at least a decade, so the 2017 creation of that repository doesn't really mean much. Not sure about the programming sock meme but I think it's a bit more recent. However I do think it generates from certain "battlestation threads" on /g/ where people used to post photos of themselves sitting at their PC with those knee-high socks on and the meme kinda spread from there. Way before that screenshot itself.
How to nudge freemium users to buy
Might not be so obvious when summing all the cost (apex, opex). Not mentioning the difficulty to find experienced people to maintain it. Unless you are really big of course
You could get a full time assistant for less than $12k/year.[1] Not sure if they work with individuals, but I've used them for my startup.

I'm sure you'd be able to use this.

Not sure if it's dishonesty rather than just wise resource planning?

[1] https://wingassistant.com/
A state tourism site complying with GDPR shoudn't be that challenging:

The UK GDPR sets out seven key principles:
- Lawfulness, fairness and transparency.
- Purpose limitation.
- Data minimisation.
- Accuracy.
- Storage limitation.
- Integrity and confidentiality (security)
- Accountability.

Dont keep track of any user info and you should be OK?

Many of the blocked countries dont have GDPR regulations, so there is that.

There is also the vast majority of US government sites which are not geoblocked.

https://kentucky.gov/Pages/home.aspx - works just fine from Canada?
Having worked at a company that got an Apple deal... It usually isn't a level bargaining table... And it isn't unusual for no profit to be made whatsoever on the Apple deal, because merely the rumour that Apple has signed a deal with your company has so many other benefits.

TSMC is in a stronger position than most suppliers, because they have really strong demand for their product and don't need the prestige that an Apple deal offers.
Deleting f-words from a movie (post-production editing):

https://www.breitbart.com/entertainment/2022/08/12/lionsgate...
Can we be sure Apple hasn't been quietly building a fab or at least fab expertise somewhere in the bowels of Cupertino? Do we have enough insight into ASML to be sure they haven't purchased even older fab equipment?
Square Officially Launches Support for Tap to Pay on iPhone
1-3 are predicated on an "official" declaration of war, which obviously hasn't happened yet. USA hasn't technically "invaded" Syria either, even though it is currently occupying parts of it. Russia is framing their military operation in a way consistent with Washington, which hasn't formally declared war on anyone since like 2003.

Do you have any examples that don't require clear technical misinterpretations?
That's possible obviously, and a reasonable avenue to pursue. Other possible causes (possibly in conjunction with spike, and/or other things) are the various viral vectors or lipid nanoparticles (a powerful adjuvent, even if it's not described like that by the manufacturers), as well as some less common ingredients for vaccines like polyethylene glycol.
> What I don't understand is why anyone would spend, precious and expensive engineering resources on coding to a proprietary API owned by one of the largest companies on the planet to whom you are nothing.

> Ok so you save money on the monthly bill...

Sounds like you do understand it.
Going from Alooma (pre-Google acquire) to DMS saved us thousands. I was shocked when I read that the only thing that DMS cost was running a small EC2 instance. It's a fairly good service - it mostly just runs. AWS has so many offerings like that. They really want to make sure you stick with their ecosystem, and it pays to do so.
Because no one's throwing around "your father is a prostitute" as an insult.
The UK Pension Problem That Threatened to Wreck the Gilt Market
"Remote Attestation" is the tech for this.

and trust me, this technology is not in the interest of the user, especially if the user wants free (as in freedom) and open internet.
> which makes it very hard to respond to this

It's possible that they are not interested in a response. They are saying what worked for them, whether or not others want to agree.
Not sure if this is what's going on here, but I've noticed sometimes isolated communities don't want too much attention and front load these types of things as scarecrows to keep the general public away.
I now no longer believe it's a primary driver -- rather a reflection-slash-convenient reason for some underlying social force of repression.

Point is, repression can still exist and manifest without it. See e.g. "thirst traps."
Interesting that the apparent base64 encoding doesnt decode to anything sensible. Sort of thing you'd see on a CTF challenge ...

What's the encoding and/or content all about?
> I just wonder how these people have no sense of embarrassment.

What exactly is embarrassing about this?
New Outlook for Windows Available to All Office Insiders
Don't get discouraged by HN's negativity. The product may be a little rough around the edges but it's starting to look great, congrats on being on beta and good luck with the rest of the path.
Reading between the lines, this is actually one of the side-goals of the zombie Online Safety Bill. Require all apps with user-created content to use a UK-approved 'identity provider' for age verification, and only issue approval to a handful of home-grown companies. Et voila, a whole thriving tech /sector/ where the UK can legitimately claim to be world-leading, even if they did invent the whole thing out of whole cloth and pointlessness.
Look for an iron with a ceramic heating element as well - they come up to temperature much more quickly and it makes a big difference. I also recommend Hakko.
I can't find the quote, but I think it was Joel Spolsky on an old stackoverflow podcast with Jeff Atwood. They were discussing why stackoverflow built their own servers and did not use cloud or other hosting. He said something like companies should fully own and control their product and any direct dependencies thereof. If you think of it as a concentric set of rings you at least want to have full control over your ring and the ring below it. In the terms of a web app it meant the code for your application and the hardware it runs on. To me that seems reasonable.
You can use the Home key to skip cutscenes. Click on "show help" for more alternate controls
> that the implication is supposed to be "Will you explain it to me".

This is not correct. It's hard to explain if you've never seen them in context but rather than "will you explain it to me" they are actually saying "won't you read this?" or "will you learn this language for me?" kinda note. They used to be commonly posted as OP image in programming threads on /g/ with lines like "have you read sicp today /g/?" or similar. There's also another very common variation of this meme for gamedev communities on 4chan with the girl from the anime New Game (see this[0] clip, I couldn't find the meme itself) with a similar vibe.

[0] https://www.youtube.com/watch?v=oyZDulr8msg
In general, last time I looked at AWS it made sense from 2TB to 30TB a month, and under 400k connections a day. If either range was exceeded, than the service ceased to be the economical choice when compared with CDN providers, and colo/self-managed unlimited-traffic options.

For example, if you primarily serve large media or many tiny files to clients that don't support http Multipart Types, than AWS can cost a lot more than the alternatives. However, AWS is generally an economical cloud provider, and a good option for those who outsourced most of their IT infrastructure.

The article would be better if it cited where the variable costs arose.
You missed the reason that payment processers set these terms. It is not because they want to.

It is because there is a minority who think sex is dirty and only should be done in the family and they will take anyone who is even slightly helping sex workers to court. The only protection public companies would have is there was a law stopping these court actions but no lawmaker is going to do this as the same minority would attack them and the majority would see the company as helping sleaze and what that minority see as sin.

Note that any new payment processor would be hit in the same way.

The issue is that a minority can persuade the majority of things even if they are untrue or destructive.
In the sense that it is chuck full of NATO military naval bases and must be monitored extensively.

I had the same thought regarding passengers as you when posting that item, so your point is well taken. It was in the sense of it doesn't have to be state property: anything that ultimately is deemed a malicious act directed at a nation.
giantg2 is a swell person, I wrongly maligned them in this comment thinking the quote they posted was their own words in a flippant context.

I wholeheartedly apologize to giantg2. However for the record, other guy above can beat it.