skysight-inc/HackerNews huggingface dataset:
use a network snitch[1] on desktop and mobile. the original slogan says it all: makes the invisible visible. i’d love to use a filesystem snitch too, but none exist yet afaik.

it’s interesting to observe firefox or any other legitimate app i’m using make many unsolicited requests to weird domains. it feels good to interactively deny those connections.

make sure that cloud[2], which includes git hosts[3], are untrusted. unencrypted data should never hit remote. keys should never leave local.

consider the tradeoffs with online interactions. engaging with other humans in public on github and hackernews is likely worth. engaging in impassioned op-ed debate with bots on engagement monetization platforms like twitter or youtube is likely not.

pay for things like kagi search. trading money for a product or service that improves your life is a good deal. no free lunch.

cover unused cameras with black stickers. ios faceid still works without a forward facing camera.

1. https://github.com/nathants/mighty-snitch

2. https://cryptomator.org/

3. https://github.com/nathants/git-remote-aws
>Utilities refuse to let home users take part in the minute by minute pricing - instead the best available is dynamic pricing set half hourly a day in advance.

That seems reasonable considering what happened with griddy in texas.
~ % which man-preview

man-preview not found
Agree on all points.

I'd like to add that it just tends to not punch you in the balls. I originally picked it up trying to solve a simple web hook integration problem. I had a Python Flask app running which received a webhook, did some data transformation and did a POST to an API. After spending a whole morning pissing around trying to get uWSGI, systemd via ansible etc working I went for lunch. Came back, learned enough Go and had it working in a single binary with systemd unit before the end of the day without any 3rd party packages, server mechanisms, dependency management, futzing. It just worked. The same code has been moved into docker, then into kubernetes over the last few years with no change, no bugs and no headaches.
WhatsApp Web for Android – a reasonable compromise?
Nice writeup! Interesting comparison of OCaml (fast tooling but not connected to running program and data).

Lisp REPLs are something I use every day, but I also enjoy REPL development that is connected to look I've program and data with Python with Emacs, Ruby (when I used to use it), Haskel,and Julia.

The REPL is a way of life.
> The privacy angle lives in the minds of Europeans

without data, it’s hard to make this argument. what we know for sure is that bureaucrats fully support the privacy angle. but from my anecdotal real life experience almost no one cares (another argument that without data cannot be generalised).
> bad because of stop-the-world pauses

Have you actually experienced this to be a problem in the last half decade with Go? GC pauses in modern Go programs are short enough to be negligible in almost any practical program.
My life as a dog

https://youtu.be/xsIef9QqE30?t=2m00s
Using strictly vim for years, I'm still mind blown by the sheer amount of "don't knows" within the tool that I miss like this.

Thank you!
Why use Emacs? Why use Org mode?

For the first, because some of us like that we don't have to change applications just to do different tasks. Yeah, kind of a silly reason, but there you go, why Emacs has packages for almost anything you can think of.

Why Org mode? Because it's good and it's already here, and like Emacs itself, it covers everything. Once you've used it for a while, every other way of organizing information looks like half-baked attempts to provide maybe a third to half of what Org already does.

Also, I'm primarily asking the question because it's something that always comes up whenever these kinds of productivity tools get posted on HN. It's essentially a meme. Foam does look pretty interesting, although porting everything in Org over to it would be somewhat frustrating...
The fraction was pulled out my behind as a "Yes, there are edits that - even if completely pointless to make - are made nonetheless and nobody will ever know about it without being told it has been edited and anyone claiming otherwise is a liar."

I'm not sure the point of the Tone Deafness test - I scored a 31/32 but on many of the questions if one tone had been replaced with the lower/higher tone I'd never know it had been replaced despite my ability to tell them apart from one another. My point wasn't that you couldn't tell A from a very similar B (you can!) but that if A had been replaced by that similar B in the first place you'd never have known (because you couldn't!). You'd need to have been privy to the editing process to actually know if it had been edited at all.

Imagine an A/B test where A has been removed entirely and you've been asked which edits B has made to A. It's a very different test from an A/B test where you can compare A with B. While a trained ear may be able to hear obvious edits there are literally hundreds of non-obvious edits made to songs during production that you couldn't possibly know about without hearing the original recording to compare against.
Is Bankman-Fried a flight risk the way Do Kwon has proven to be?
Fast, Declarative, Reproducible, and Composable Developer Environments
My Experience Wednesday in SF
Sure, I'm not sure what industry/professional IOT really means, because it's too vague.

I agree the BLE/WIFI in the industrial space is a hilariosu mess, but Arduino is actually much worse at both - libraries like wifimulti_generic exist because there is no true standardized API that is useful enough, and wifi itself is fairly unreliable on lots of arduino devices - it's very easy to get them to crash just using the standard APIs.

I assume this is just arduino-in-din-rail format with other words on top.
I would not say anything about "industry IOT" if i was them, nobody is going to use it in the industrial space.
Russian Hackers Are Publishing Stolen Abortion Records on the Dark Web
This has been understood for years and years.

I remember there being a writeup about paint.net and what they had to do to keep performance. They were worrying a lot about memory and how to manipulate .net to manage it.

If you want performance, you don't get to ignore memory no matter the language, but some languages/platforms make it easier and some get in the way.
Thanks for the explanation, but I'm not sure how it relates to my comment. It sounds like you're saying regulations help because they force banks to keep reserves. I think this helps in the short term, but in the long run creates incentives to deceptively package assets into AAA ratings (as in 2008), and that things like FDIC also just create incentives to get too big to fail. So I stand by my statement.
Then by your logic, shouldn’t banks not want customer deposits? Isn’t it just burdensome overhead?

Trust me, I get that people aren’t Fedexing cash envelopes between banks, but that doesn’t mean money is fake and banks can invent it out of think air (they can only multiply it)

And to be clear, again, you can very easily follow physical dollars at banks (otherwise imagine the fraud that could happen!), it’s just circular so multipliers get applied.

Like I get it’s complicated, but my deposit goes into a mortgage that then goes into another account, etc etc etc. that’s called the “credit multiplier” and we can definitely track it.
Yes, you're right. If Shopify were an American company, it wouldn't even matter if they sent data to the CDNs are not - it would be illegal in any case.
I was laid off from a company with unions. As 20 members of said union. Sure, maybe the company cannot lay off 50% of staff in one day, maybe you get a nice pay out for being laid off. But ultimately, when the company wants to remove you, it’s done, in almost all cases nobody will be there to help you.
GitHub launches channel to ease vulnerability disclosure process for OSS
> At first glance it looks a lot like Go

But, this is not at all how go looks:

fn add(a: i32, b: i32) => i32 {
return a+b
}

It looks heavily inspired from the syntax used in rust or zig tho. (fn keyword, variable type syntax, return value)

> what are the differences or use case vs just using Go?

- go has a different syntax, different keywords, different ecosystem and so on.

- go is a general purpose programming language, while wa is explicit in targeting wasm.

I don't see any special similarities more than they are c-style family languages.
And who started this practice? Media companies like Bloomberg
https://www.mozilla.org/en-US/firefox/features/translate/

never tried, but seems promising
i’ve been on safari for the past 3 years. nothing will change. ad blockers will still work.
Apple limits AirDrop on iPhones in China
Ouch. That list looks onerous. Thank you for the link.
GDPR applies to individuals as well as companies if they provide services to customers within the EU/EEA[0], as long as they are either a data controller or data processor, which are explained better than I can in the source below[1].

If the business is based in the US, things get a bit more complicated due to the CLOUD Act[2].

[0]: https://ec.europa.eu/info/law/law-topic/data-protection/refo...

[1]: https://ec.europa.eu/info/law/law-topic/data-protection/refo...

[2]: https://complior.se/cloud-act-and-how-the-new-american-law-c...
There is a great deal more to learning a language than its alphabet, and English is probably one of the worst languages to learn that use the Latin alphabet, with many inconsistencies and exceptions in grammar and pronunciation. The reason so many people learn it is because they have to, not because it's easy to learn or use.

English is the JavaScript of human languages.
Sequoia already deleted the fluff piece they put out about SBF so they’re clearly embarrassed / afraid of legal fall out. And sequoia being embarrassed doesn’t seem interesting to you? And this is just one of the VCs putting crazy money into a scam. This plus the Bahamas coed dorm and the political ties is already enough for a 2 season Netflix series.
Millions starved to death in collectivization, even more millions displaced from their homes and sent to gulags. Intelligentsia eradicated as a class. The biggest and potentially richest country in the world collapsed due to planned economy.
And that’s just my layman knowledge typing on a phone, I’m sure many historians can decimate your comment even harder.
Ask HN: Who was the best person you've ever worked with? What made them great?
The easy solution here is to just drop the paid verification plan, I'm not sure why they're so insistent on it. Outside of the bump from joke impersonations, was there a large number of people signing up for the check mark? I somehow doubt it.
It would likely depend on the purpose and scope of the offering:

https://gdpr.eu/recital-18-not-applicable-to-personal-or-hou...
It is ridiculous that data protection officials focus on CDNs, third party resources and cookies. And at the same time it is totally legal for Google to collect advertizing data from some random websites so they can create a profile that follows you around. All that sites have to do is to put up obnoxious cookie banners that nobody reads.

If they were really concerned about my privacy, they would ban creating cross-product profiles for advertizing purposes. I don't care at all that some CDN gets my IP, or that some website uses cookies to count users.

Also I don't care if somebody stores my data on Google Docs or Office365. If Google or MS go rouge and employees there so shenenigans with my data, we have bigger problems. They control the OS anyway. It makes more sense to regulate the "happy path" assuming they are law abiding, and just say you can't do targeted ads for European users.
It is illegal according to many recent court verdicts, there are some examples with Google Fonts, too. Now, of course in practice you won't be sued if you only run a small business (or you might, if you get unlucky like this guy in the article).
Scientists Identify Neurons Needed to Walk After Paralysis
JOE [1] has worked this way as long as I remember (which is close to 20 years).

[1] https://joe-editor.sourceforge.io/
There should have been a commission formed about the p0wn goal that was EternalBlue. Microsoft charging for security patches should get the execs thrown in jail. The NSA should be disclosing big RCEs like this to the vendor and figuring out how to ensure that everyone is patched.

https://en.wikipedia.org/wiki/EternalBlue#Responsibility
Yes, trying to guess the appropriate version of "wasd" based on either the locale or the actual keyboard layout is a design decision.

But, again, if you're going to say "you can use the left part of the keyboard for directions", then you have different options, it's just probably safer to use wasd for QWERTY, qsdz for AZERTY, etc... rather than anything else.
No, Ctrl-Z Ctrl-Z still undoes the last two edits.

Basically Ctrl-Z is now "rewind" and Ctrl-Y is now "fast forward". Instead of a stack you have an append-only list. Even Ctrl-Z appends to the list. (I'm eliding the optimizations he mentions.) So if you Ctrl-Z then edit, you can still get back to the state before your Ctrl-Z.
That list of languages gave you the choice between dependence on Microsoft, Google, Apple, and Oracle. So maybe they just added Ruby in there to have a neutral option?
Game Helpin' Squad: Time Travel Understander

https://www.youtube.com/watch?v=1fABGyVzVwI

[Braid parody tutorial]
So where does the value come from? The service has an additional value to convert my crypto to fiat quickly, but as transaction fees goes it's marginal.
Exactly, it wouldn't matter if Shopify signed those.
Had no idea plausible.io existed. Thanks for posting the link for this. Just what I need for a project :)
That still doesn't mean they're using the term properly, at least in regards to kind of scam you were describing in your comment, or what that comment's parent was referring to.

"SBF/Matt Levine said it" does not automatically make it true.
US DOE announces funding for HALEU demonstration
So you wouldn't "know", you just assume that they'd be open about it and told you. But if they weren't (for a multitude of reasons), you'd make assumptions about their needs.

It seems like it's not the needs that matter, it's your assumptions about them.
This blog post is incomplete with respect to Breyer. An IP address is always personal data to an ISP. It's also personal data to anyone who can ask/request/compel the ISP to identify someone based on the IP address. And one of the main conclusions of Breyer is that only happens in an obscure edge-case scenario, that's enough for IP addresses to be considered personal data all the time.

The case specifically was that in the local jurisdiction, there's a law that if a company gets DDOSed they can request the local regulator to ask the ISP to identify a user. This law only gets triggered in very exceptional circumstances, but its existence means that IP addresses are always personal data in that jurisdiction. While that law only covers one part of Germany, the analysis applies to any similar law, of which it is safe to assume there are many.
No, in fact, I do not think Sequoia disavowing an investment is especially cinematic.
I could just as well ask how much more would have been achieved if people had been treated better, including working from home when possible.
World War II love letters help a daughter find her missing father
Pretty likely that he has money on the side or some sort of assets that are worth a fair amount. Likely not Billions, but certainly in the Millions.

Hopefully the US Gov goes after him and forces him to pay it back to creditors/customers, similar to Trevor Milton/Nikola
Modern containers don't use chroot
So for "normal" financial institutions (eg banks, mutual funds, brokerages) you are legally required to shield custodian assets. They rea typically held in trust. Due to various scandals there's a lot of regulation. There's even government protection (to a point) for individual customers (eg FDIC insurance for bank depositors).

All of this is necessary to stop situations like FTX/Alameda. A bank can't take your money and bet it on blackjack but there seems to be no such protection for these crypto exchanges. All of this is necessary to maintain confidence in the financial system (yet another reason to roll one's eyes at libertarians).

I mention this because it's just another case of crypto lacking protections the non-crypto financial system has and ignoring lessons learned over the last 5000 years of finance.

I saw a comment on HN yesterday where someone in the Navy said that when they get a new CO it'll be one of two types: the first will work out how things work and then incrementally improve things. The second will immediately reshape everything in their image without figuring out why things are the way they are.

I see that trend in management too. But it seems to be a problem with the entire crypto space. Otherwise smart people completely ignorance of the financial systeem just reshaping crypto with no regard for history.

As for SBF, this is a fraud on a massive scale, like Madoff scale. I really wonder what will happen here because what should probably happen is he'd spend the rest of his life in prison.
It's not legal for EU companies to use Google Analytics, because of the same legal reasons.
I haven't seen `set undofile` mentioned yet- vim supports persistent undo. You can close a buffer, restart etc and when you reopen, you can still undo. I'm a huge fan.
Now: Estimated wait time: 9 hours, 49 minutes...

The hug is getting tighter ;-)
Where there is fraud there is embezzlement
Lifestreams was based on the same core idea of keeping all past versions of a thing. Only with Lifestreams you keep all past versions of everything. I constantly find myself thinking back on these ideas from the 90s, there's a lot in Eric Freeman and David Gelernter's work that is worth revisiting now that storage is so cheap.
Today, I filed FTX, and Alameda for voluntary Chapter 11 proceedings in the US
They actually address this:

> Even with a memory safe language, memory management is not entirely memory safe. [...] Memory safe languages can also use libraries written in non-memory safe languages and thus can contain unsafe memory functionality. Although these ways of including memory unsafe mechanisms subvert the inherent memory safety, they help to localize where memory problems could exist, allowing for extra scrutiny on those sections of code.

Which I suppose is a reasonable way to put it. It's been said elsewhere, but my read of this document is that this is not a _definitive_ list of languages you should use, but rather a list of languages that make it much more difficult for programmers to introduce memory-safety bugs.
> Second of all, there's no need to include "window shopping" in our recorded history; this is when you undo a ways, take a look around, then skedaddle out of there back to "the present" without changing anything. This is just a matter of moving information back and forth from undo-stack to redo-stack.

Usually the whole reason I might undo for a while is to get back part of something I was working on and merge it into other changes I’ve made since then. I’m curious why the author dismisses this, personally cherry picking old history is my primary workflow with undo. In editors that support the undo history they’re advocating here, like emacs, I’m usually undoing a long way so that I can put something in the clipboard, then redo all the way back and cut-and-paste the previous partial state.

It is nice in emacs that typing after undo doesn’t lose my undone edits, that is handy and is a nice little safety net, but it doesn’t actually solve the problem I normally want to solve.
I think it's good that the EU is forcing the US to get their privacy laws in order.
doubt it. Most people read books for entertainment (which is fine!) then implement none of the recommended strategies in their life/business.

If you pick any book that is reasonably well regarded and actually implement some appropriate form of the strategy you will probably experience a benefit or even significant benefit... still, very few people do this. They read 20 books and implement nothing. Read one book and implement half of the recommendations and you will be far ahead.
Being the nice girl is a superpower (oh, and stop saying “sorry”)
Services do require monetization, or you have to subsidize them through some other revenue stream, yeah?

Advertising is probably the simplest way to monetize search. Certainly other strategies could be tried, but that one at least is well understood, and nigh-ubiquitous.
Go has almost everything going for it. I only wish it was a bit more C-like and you had the ability to run it without a garbage collector, and that it was more suitable for systems and embedded programming.

Perhaps one day someone will come up with an implementation of Go that doesn’t use a GC.

It’s just such an incredible language, and it deserves the type of Rust fanaticism that Rust has, but I suspect Go users are just a different type of person and we really are fanatics, we just don’t publicize it.[1]

[1]: https://survey.stackoverflow.co/2022/#most-popular-technolog...
Well, it’s more like if XP had never died and was seeing continuous ongoing development. The kernel isn’t patched often, but the layers above are very very actively maintained by Congress, State Legislatures, Governor’s Mansions, the White House and a diffuse network of courts from SCOTUS to the lowliest traffic court in the little towns that can’t really afford them but charge obscene fines to maintain their traffic courts.

If you’re only interested in XP’s kernel rather than the rest of it, you’re going to have a bad time.
Much of German business is in B2B, engineering and manufacturing.

Many cloud offerings are not required if your product is physical and/or not directed at consumers. For others there are home grown alternative.

But it'll suck for a few businesses until GDPR compliment products are available.

The big one is Office 365 but, I think Microsoft is setting up licensing agreements where a European company (which is not a subsidiary of MS) is running the stack and Microsoft has no direct access.

Other large US companies are probably planing sth similar
Great article!

You can also use std::flush to get this behavior by default in the program.
Does he still hold on to the billion dollar worth Robinhood shares?
> You're just incorrect here.

I was expecting you to show where I'm incorrect.

And yet, it's the same emotionally-charged "omg moat, large companies, impossible to run a business".

Which doesn't disprove what I say, but further supports my case: the bullshit narrative around GDPR persists even if it has literally no basis in reality.

> A small online shop using a CDN is who is actually hurt with GDPR.

Most CDNs have GDPR-compliant services in the EU. Those listed in the article literally have separate pages specifically addressing compliance with GDPR.

There are banks in the EU handling sensitive customer data which use the very same CDNs and services under significantly stricter laws than GDPR.

But sure. Tell me how it's impossible to legitimately run a small business that operates under significantly fewer obligations, and retains significantly less customer data.
At least if you're US-based and not accepting money, I have one bit of advice: just don't care. Even if they complain, don't care. The Internet is global; if they really have an issue, they can block your site, or they can just put up with it.

If you're gonna sell a product or service, then worry about figuring stuff out.
Yet most countries have far stricter voter ID requirements.

Weird!
Recently, the CDC added this vax to the "approved" list of vaxxes for kiddys. Many don't realize that once this EUA (emergency use approved) vaxx was placed on the kiddy list, Phizer is now off the hook for law suits/any liability. Now since many states will REQUIRE this vax for kids to go to Public Schools etc... hey we can jack the price up.... Reminds me of the TV series The Wire...... sad