skysight-inc/HackerNews huggingface dataset:
Hi Paul, thanks for your explanation - you should add that to the documentation, e.g. in a chapter "Why not K8S?".

Also you should give some advice about how to deploy when the default for deploying apps in an organization is K8S, what might be not too exotic nowadays.
Will Plane need it´s own cluster? Does it run on top of K8S? How is the relation to K8S in general for a deployment scenario?

THANKS!
Solana DeFi Trading Platform Mango Markets Loses $100M in Hack
Digital License Plates
Years and years ago I worked at an organisation where I was expected to role play Dungeons and Dragons (polystyrene swords and all). When I refused it got tense.

The tipping point happened when I found a bug in the CTO's database code and it would run out of memory (not closing JDBC ResultSets). Then I started finding coins on the floor, I'd just pick them up and hand them in, I knew what was going on.

I didn't last long, glad I was ejected when I was.
Yeah, televised election debates weren't a thing in the UK until 2010.
If it syncs your keys, it has full access.

All I'm saying is that authentication is literally the keys to the castle, and inviting third party control of authentication has some scary implications in terms of privacy, monopoly control, and security.

We should at least be discussing this, but I don't really see that much discussion. People are just blindly adopting this stuff because it's convenient and not even thinking about what's under the hood or whether there is a way to back out or change provider.
I appreciate your perspective and the thought that went into it. I just wish beginners wouldn't feel like they need to grok GCBVs to be productive in Django. Thanks again for writing all these tips down - I definitely picked up a few things!
You could split his shares amongst the current team and best them immediately. The ones who work hard will be glad he’s gone.
John Hawthorn from GitHub is a ruby core committer.
The bridge and the home server are separate things.

So if you run the home server somewhere untrusted, but the bridge in your home with E2EE enabled, the decryption AFAIK happens in the bridge, and the home server doesn't see anything.
Many things are similar. What differences bother a particular user will vary. In many cases, zsh's approach is better so the value of crippling it is questionable. A common example is not splitting variables at spaces which is much better if you might have filenames with spaces in but it helps if you bother to learn to use arrays. Another example is the behaviour when wildcards don't match any files. Bash leaves the word unchanged with the wildcards in place which is less robust and fairly nasty but if you're inclined to be lazy can save on quoting.

So don't try to make zsh mimic bash, use it as-is and whenever something bothers you, try to understand both how the behaviour can be changed and consider the actual merit of the options.
Very awesome, this should unlock some pretty cool usecases.
Very good demonstration [for me] of current state Linux-Is-Ready-For-Desktop thing - even those with technical background, who _have_ idea on dev libraries (which I think really are headers with somelib-dev packages), strace/truss (is not truss a BSD thing?), not plain mere mortal person have issues on realizing how it works under the hood and how to make it work in desirable way.

Microsoft and Windows are totally safe for now+15 years.
I am 100% not a fan of the LibTory years, but LabTory would have been a minority government. At the very least this would have been difficult to pull off.
Y2mate
I was let go from a small startup exactly one day before vesting, on specious grounds. A lawyer I consulted stated that I had strong grounds to sue on legal grounds of bad faith, with probable triple damages. I pretty quickly decided to let it go because the company founder was a dishonest creep and the company was going nowhere. Ask yourself whether pursuing any such claim is actually worth the hassle and time and money.
Tor Browser (Bundle) – 11.5.4 (All Platforms) Change Log (Text) → (October 12, 2022) :
https://gitweb.torproject.org/builders/tor-browser-build.git...

Tor Project – Tor Status : https://status.torproject.org

Tor Project – Tor Metrics : https://metrics.torproject.org

Tor Project – Check Tor Connection : https://check.torproject.org

Tor Support – FAQ : https://support.torproject.org

Tor User Support Forum : https://forum.torproject.net

Tor Community : https://community.torproject.org

Tor Download : https://www.torproject.org/download/

Tor Distribution Directory : https://www.torproject.org/dist/torbrowser/11.5.4/

---

Gus - @0xggus -- Community Team lead @torproject

>Tor Relay Operator meetup will happen next week, on October 22, @19:00UTC.

Join us if you're running relays, snowflake proxies for #Iran, or just want to hang out!

Check out the Agenda : https://forum.torproject.net/t/tor-relays-invitation-join-us...
> Lots of time off, low effort at work, minimal hours. Felt like squeezing water out of a stone to get a result from them.

From my experience this was always due to low pay and to a lesser extent bad management. When workers couldn't find anything better they focused on side gigs to top up their wages or giving a shot at their own projects hoping to launch their own business, so they were not fully focused on anything.
You could try Mailmate (https://freron.com), I think it ticks all your boxes. The stable is old, the beta is located at https://updates.mailmate-app.com/2.0/archives/
Even their website uses frames. https://framework.com/
> Surprising nth order effects of city planning, the more car-centric your culture is, the less time the average person has for books

Perhaps this could be a selling point here in the UK. Yes your very late train has once again been cancelled and you now have to get a place on the replacement bus service, but at least you've had some time to read!

The stance I'd have is the less travel-centric your life is, the more time you have for reading (or anything else). Big tech making more remote work feasible has opened this up a lot more than city planning can.
Wow, the tutorial seems a breeze in its initial parts, written in a really approachable tone. Also, the amount of new weird characters to learn does not feel overwhelming - at least with how they're introduced. That said, I stumbled upon somewhere around the Each modifier (IIRC); I'll maybe try to consider asking the author if they wouldn't mind editing this part to slow it down a bit and explain in simpler steps.
Nick Clegg,a Meta Executives 'Inadvertently' Identified in OnlyFans Bribery Suit
Manual rule that never gets defined for good sounds like a trouble waiting to happen. It will cause many support tickets asking for every edge cases and some will be angry for not being approved.

If you're really trying to win VS Code users, such a flexible rule may scare them away.
I don't have a dog in this fight.

> apparently George Osborne told him to vote against

Ha, the Conservative coaching the Lib Dem how to be a Lib Dem. That's a good friend.

As others have commented, opposition parties have to oppose.

Further, #1 job of party leader is to build the party. Especially for an upstart. That playbook includes symbolic defeats. To show everyone what you stand for.
there has been a time not so far away when swift core team had proeminent members working at google.

I guess that left a longlasting impression swift wasn't just about apple, but had a life of its own.
I'm not against operas existing, I'm only against them being funded by people against their will. There are many alternative models available - funding via donations from rich people (how it's done in the US), or de-profesionalization of opera (having volunteers with day jobs sing in it, if the ticket sales are not enough to pay their salaries).
And they might've taken a salary sacrifice in exchange for that equity; in my mind that makes it unethical to withhold any "earned" equity/options.

(I also think the typical cliff of a year is too high, I know the point is to keep cap tables from getting out of hand, but 6 months seems more reasonable given current average tenures).
I wrote a blog post https://blog.poleprediction.com/clr-purescript-elm about this kind of thing. The main sentence of relevance is "All libraries written for Elm, assume that the consumer is writing their application using TEA."

It is semi-regularly noted in the Elm community that Purescript is a good counter-factual for Elm. Many requests for greater flexibility, such as access to kernel code for non-annointed libraries, have the pretty decent answer "well if you want that, go try Purescript".

Purescript, though, is just a sort of closest-cousin here. I'd say most languages have a philosophy closer to "we're all adults here, anything goes, the more we let innovators innovate, the more productive we'll ultimately be". That's not to say the Elm approach is 'better' in any sense, but it does mean that it's a worthwhile experiment. It's different from most other languages in that it's way more restrictive.

Those that ask for changes in Elm's approach, obviously have some other reason for wishing to use Elm, otherwise they wouldn't wish for Elm to change, they would just use something else. But those must acknowledge that whatever it is about Elm that is attracting them, may be as a result of Elm's unusual approach.
Yeah, it would have been nice to explain what it was in the same comment. You can't assume everyone is familiar with it.

Reminds me of : "Excuse me, sir. Seeing as how the VP is such a VIP, shouldn't we keep the PC on the QT? 'Cause if it leaks to the VC he could end up MIA, and then we'd all be put on KP" (a quote from Good Morning Vietnam)
Spring nowadays supports the JDK-native annotations where the exist, and they have a lot of Spring-agnostic libraries under their umbrella.

But I'm inclined to agree on the case of Spring Boot... It's meant to be a "convention over configuration" kind of thing, so I guess by nature it ties you in pretty hard.
> You can simply reject this nonsense

No, you can't. Not without becoming ostracised in many cases. My younger self made the poor decision to commit himself to a creative field. I cannot reject the nonsense or I will more-or-less be blackballed socially and professionally.
The bigger question is how much equity do give up for 5mm when you have nothing but an idea?

I don't get it..
It could be that his ethics have been compromised by his wife. She was part of the Acciona scandal in Spain (https://www.theolivepress.es/spain-news/2014/10/18/uk-deputy...)
Ah, thanks. Wasn't bait, I'm just a bit too old in the tooth to be involved in modern-day interview culture. (The interviews I conduct are far more relaxed, personal, and practical.)
The thing you're looking for is called remote attestation.
That means there is a direct channel from the hardware to the user that attests the confidentiality and integrity of the VM.
Such attestation statement is signed by a key burned into the CPU at production time. The remaining attack vector is leaking that key from the hardware itself. There is academic research on this topic. In essence, while technically possible, it is considered not practical, especially not at scale.
Good idea on both counts. Documentation will be one of my priorities over the coming months and it’s great to have feedback on what’s missing.

Re. the “Why not k8s” question, you might enjoy this post from a couple months back; although it only touches on Plane briefly, it shows the framework we used to make the decision. https://driftingin.space/posts/complexity-kubernetes
Comparison table: https://github.com/brillout/vite-plugin-ssr/issues/158#issue...
Is it really the motor that is the limiting factor at this point? I would guess it is far more about getting the force onto the road. So tires, spoilers, etc.
Good to know! Hopefully this kills off unnecessary use of attestation.
> you can get round trip latency down to about 15ms

(...if everyone is within about 1000 miles).
Yeah try to find someone internally who can give you a referral
This is interesting as free/cheap and abundant doesn’t mean unlimited. I think we’d have to work out systems where no one has to pay for an electricity bill and we have replicators but we don’t have enough energy to replicate a barrel of chlorine gas.
Is there any chance of the Standard Ebooks catalog being available at Library Thing?
> Counter - Strike

> Dota

> Portal 1

> Gaming on Linux through Wine

These were all invented outside of Valve.
What you're saying, however, is that the government owns the land in perpetuity, and only lets you live there. That sounds familiar and oddly like serfdom.

The USA has 1.9 billion acres. Developed urban areas account for only 3.5% of this area. If you count other, non-urban areas with more than 30 people per square mile, then the occupation of habitable land constitutes less than 6%.

Accounting for mountains and bodies of water, Earth has 24,642,757 square miles or 15.77 billion acres (43%) of habitable land. Humanity is only 1/100th of the total biomass on this planet.

Less than 15% of earth is either an urban area or occupied for agricultural use. And 95% of the world’s population is concentrated in just 10% of the land.

Land is generally affordable. Land in areas not yet fully developed is actually quite inexpensive. You can pick up 40 acres of land in Montana for $20,000 USD, and they'll even throw in some livestock and feed.

Property in developed population centers increase in price because of scarcity and market conditions. That's the product of living in an area that has recursive development, amenities, limited supply, and practically unlimited demand.

This leads to an inevitable conclusion. We have plenty of land and plenty of resources. Anyone who says otherwise is trying to sell something. With this in mind, you could double the population of the planet and still not use a third of the habitable land. As it turns out, Earth is really, really big.
Haha yeah I'm curious what Spring will become now that the big ones like IBM are milking the cloud-native cow with Quarkus instead of Spring...
Google Search Quality Rater Guidelines [pdf]
> At the end of the vacation my good friend said flat out (jokingly, but still with a point) "Dammit hn_throwaway_99, just get an iPhone".

My friend groups mostly communicate on WhatsApp (a lot of them are either international, or Americans with significant overseas travel). This is the first time I have ever been glad to be a WhatsApp user. Oh, and messages, photos, and emoji reaction show up just fine cross-platform.

Asking a friend to get a $xxxx device because the company you use is unwilling to make their silly messaging application cross-platform is extremely out of date.
It doesn’t sound to me like they’ve put in the work to earn the ownership share. I think it’s unfair to yourself and remaining team to keep them around.
I suggest reading up about endowments. [1]

Money generates money. To fund something in perpetuity you need enough that the returns from investing it (taking into account tax, costs, inflation, etc) exceed the annual payment needed. This is not an infinite amount.

I haven't checked the figures but the article claims the foundation has $400 million cash and Wikipedia costs under $2 million per annum. There's no easy way of calculating the maximum annual sum that can be taken out in perpetuity from a well managed endowment but it's certainly a lot more than 0.5%.

[1] https://en.m.wikipedia.org/wiki/Financial_endowment
I did look at nix, but was less than enthusiastic about how complex[1] the software is. If I could, I would probably prefer gnu guix - but AFAIK it is unlikely to ever support running on macos - and is similarly complex (build daemon needed to run in background).

I'm also sad that pkgsrc seems to be abandoned wrt binary builds for macos - I could at least not find correct gpg keys for verifying the archives listed at: https://pkgsrc.joyent.com/install-on-macos/

Perhaps it's workable as a build-from-source package manager.

For now, it seems that macports have most of what I need - with less complexity than nix, and a better handling of upgrades than brew.

Does appear that brew moves faster, eg: https://trac.macports.org/ticket/65922 (i briefly tried a local build, but ran into dependency problems with libvterm that I didn't manage to resolve - there's a 0.3 [2] tarball, but the build system for neovim wasn't happy and kept finding 0.1.4 after it was uninstalled in favour of 0.3).

[1] https://nixos.org/manual/nix/stable/installation/installing-...

[2] https://www.leonerd.org.uk/code/libvterm/
I had sent couple of mails on that email address, but never heard back. So not sure if this email address is working.
Its ok to say no (even bluntly)
For another take on the "computer science" approach to QM, check out Chapter 9 in my book on linear algebra:
https://minireference.com/static/tmp/quantum_chapter_excerpt...

I think it's important to understand linear algebra before doing matrix quantum mechanics, this way you can focus on learning the new quantum concepts and understand we are just using vectors and matrices as representations for them.

- quantum state = vector
- quantum gate = unitary matrix
- quantum measurement = set of projection matrices that add to the identity

My book only covers very basic QM—not a full course by any means. For anyone interested in getting into quantum computing, I recommend Thomas G. Wong's book Introduction to Classical and Quantum Computing which you can find here https://www.thomaswong.net/#textbook or Nielsen and Chuang which is a classic.
I would accept not being able to abolish tuition fees, but having a three-line whip imposed to vote to increase them after making a "personal pledge"? No, that was definitely wrong. The Lib Dem party should have revolted at that point and fees should have been left at their level.

Agreeing to a referendum on the voting system without securing agreement that the Tories would not campaign against it was also incredibly tactically stupid.

The coalition negotiations were far too quick and cheap. It should have been over a few weeks rather than a couple of days. Anyway, the public punished the Lib Dems by re-relegating them to minor party status.
I think the satire is being lost on people.
> So you're telling me that we should allow people to own pieces of the planet earth forever?

Which country allows this? All "land-owners" pay land taxes, and if you stop paying "your" land will be confiscated.

> just because his great granddad came to an empty country and got land basically for free which now make his grandchildren millionaire landlords even though they didn't contribute to society in any way to earn what they have

And now we're back to the argument "to each according to his need". Until/unless you are willing to ruthlessly enforce that nobody gets anything unless they, personally, earn it, there will be large numbers of people who will have stuff that they did not earn.

Arguments along the lines of "to each according to his need" are broken, almost by design.

> We need a new system that resets the monopoly board fairly instead of waiting for social uprisings to boil due to increased wealth inequality.

IIRC, the last time I checked, the countries with the least wealth inequality were those with the strongest private ownership laws.

If it's wealth inequality you're targetting, then strong economies help. Countries with restrictions on ownership mostly, with some outliers, fare poorly on wealth inequality.
How boring should your team's codebases be
I'd propose a different dichotomy: those that have good experience using and developing complex systems, and those that don't. The former are more likely to fit with your dichotomy, while the latter are more likely to do what's best for their project.

Though nobody can predict the future and what seems like the right choice initially might not be later on.
It's not off-line, not feature-complete, and has support only up to 2026 (no extended support).
Actually in this case async is the only way to get sane performance and both drivers deliver excellent performance thanks to async. I've been using Scylla Rust driver in my C* benchmarking project and it is an order of magnitude faster than the tools which use threads.

https://github.com/pkolaczk/latte
That’s essentially how things work in the US with property tax. If a landowner fails to pay property tax for some extended period, eventually the government will seize the property and auction it off to fulfill the tax debt.
Second Realm Ideas – Anarkio
>If your team looks like that, your team is horrible too, no matter how much you tell yourself it's not.

This is clear racial prejudice.
Bash Is in Beta Release (1989)
So Zillow should be banned? Informal drawings of property lines are useful and "good enough", and giving a monopoly on that to surveyors would be silly.
It is time for a new anonymity network. Source routed. https://github.com/Indra-Labs/indra

Tor and i2p are literally 2 decades old.

We need modern tech to stop surveillance.
If the typescript compiler included hygienic macros then you could implement something like Rust's serde crate. Once you have that, then you can write normal looking typescript interfaces paired with a macro that implements runtime parsing of an unknown value. For example:

import macro { Deserialize } from 'ts-serde'; // I made up "import macro" syntax
import { parse } from 'ts-serde';

#[Deserialize] // I borrowed this syntax from Rust
interface Foo {
bar: string;
baz: number;
qux: Record<string, string | null>;
}

Now I can do something like:

const response = await fetch('https://www.example.com');
const foo = parse<Foo>(await response.json());

This is a much nicer typescript world to live in. I can use vanilla interfaces (or even types). I do not have to learn a separate syntax for runtime checks (such as zod, io-ts, runtypes, etc). If I want to switch from one macro implementation, my scope of changes is the annotation on the interface and the "parse" function. That is much, much easier than switching from io-ts to zod.
A few things I've learned:

1. SAFEs are convenient if everyone is amenable, but be careful about having SAFEs sitting around too long or with different terms. They're like the Mogwai in the Gremlins films. They're kind and cuddly unless you feed them after midnight or get them wet.

2. Stay in touch with your angels even if they don't initiate. It'll help in tons of ways and they can interpret lack of contact as a sign that you're dying and that they shouldn't think about you anymore. This isn't good.

3. Be careful about any terms (e.g. in side letters) that might allow someone to stand in the way of a priced round in the future. Even if someone doesn't use them to play hardball for terms (they can), it might make things inconvenient and add dangerous delays.

4. Have a lawyer look things over BEFORE you get into priced round negotiations with VCs or you might end up dragging the process out and risking losing the deal because the lawyers find a problem that needs fixing.

5. If you use standard/canned documents, check (3).

Generally all this boils down to: keep terms simple and universal as much as possible, be communicative, and don't let things sit too long.

It's possible to do a priced round without a lead if you have SAFEs/notes sitting around too long. You can use standard documents to minimize legal. It may be necessary to clean up your cap table.
Ask HN: Is anyone discouraged from using Auth0 after the Okta breach
At my company, we need to decide if we are going to replace Keycloak with a potentially managed IAM solution, and Auth0 fits our needs nicely. However, given that Auth0 is owned by Okta, I am very hesitant to go with them after the disastrous (in my opinion) handling of the Okta breach.
Was anyone in a similar situation? What did you decide to go with?

For reference, this was (one of) the HN discussion about the breach and its handling
https://news.ycombinator.com/item?id=30819368
U.S. FCC set to ban all U.S. sales of Huawei and ZTE equipment