skysight-inc/HackerNews huggingface dataset:
It's about security. It keeps intermediate hops from hijacking your query and providing their own response.

Unfortunately, it offers no privacy. DNS is usually the precursor to a tls connection, and the domain name is sent in cleartext during the tls handshake. So the same people who would hijack your DNS queries are still privy to them if you use DoH (routers, ISPs, governments, etc).
Definitely that they didn't hire the right person. Do you mean to say that this company doesn't employ the right people to build robots?
I disagree in terms of my own actual usage, after the initial excitement, but that is a real danger. That said, the most beneficial usage of my notes system has been the flat "tech notes" directory of tagged files on how to do various twiddly computer things (steps and commands to "get X to work"). I used Obsidian briefly but find abandoned it for just the markdown, vim, and a helper python script to search tags.
Someone else posted a link to the source for this quote: https://www.zerohedge.com/user/105370.

The writer pretty clearly has an axe to grind with the city, the sanctions, the war, and a lot more (read some of his other comments). His conclusions might turn out to be true, but I don't think he cares if they are or not.
I have no ideas what that means, but the time period for legal discovery is usually around 7 years.
This freedom of speech thing is going swimmingly.
Movie: Repo Men

https://en.wikipedia.org/wiki/Repo_Men
DNSSEC is not the same thing as DoH or DoT or DNSCrypt
With DDG, you can switch the location slider on, and it seems to use your IP then.
I agree with you. I take a hell lot of notes and I still don't fully understand what the OP's post is really about. I don't understand the second brain philosophy at all.
Sounds like you didn't add "accounturi=https://some/lets-encrypt/account-id", which is what your quoted excerpt is probably referring to.
Coding is everywhere. Lean into your business skills and get a business analytics job. I feel with a good portfolio and story with a lot of studying, that would be a good path.
>(This isn't a particularly idle concern. Amazingly Microsoft once got a court to let it take operational control of the domain no-ip.org — that is, to actually hijack the domain — a dynamic DNS service used by countless people — simply because one user was apparently using it for malware-related purposes.)

What a dishonest take. Microsoft didn't wasn't granted this court order because there was one bad no-ip user, Microsoft was granted the court order because there was a bad no-ip user that no-ip wouldn't take action against.

Oh, and it wasn't one bad user. It was 22000 different hostnames.
I prefer when people engage with philosophy seriously. Trying to couch philosophical ideas in this sort of frivolous language falsely implies that you can understand them without dedicated effort. The language of philosophy isn't the hard part if your doing it right.
JFC this is an embarrassing reply.
His critique resonates with my expectations from large enterprises, and your perception also resonates from what I expect of large enterprises workers. So I'm guessing he's probably not wrong and your experience was probably an example of him hitting social/political roadblocks. In my arguably limited human sized experience, the vast majority of people at Meta-sized companies prefer the safety and comfort of things going slowly and being discussed at length, and being careful to respect all the hoops that need jumping through. And not having their caged shaken too much. This leads to 5% GPU utilization.
"It sounds like thousands of Californians are experiencing unnecessary and extended end of life suffering."

Why is that your take? Why isn't it "Thousands of Canadians are being killed too soon in an effort to save the government money"? or some other take? We already have stories of Canada asking Veterans to join "MAID" instead of getting a wheelchair...
This is setting the bar far too low. The system should push people in the other direction, and it should not just be a gentle push. Doctors should push hard to keep patients alive because that's what the patient (or taxpayer) pays them for. I feel like I shouldn't have to say that.
Yes, I had a reading comprehension fail. I thought it was implying that the browser would be using the CAA record to validate the cert's issuing account, but it's the CA that uses it to validate new issuance requests.
She explains at https://taylorlorenz.substack.com/p/elon-musk-banned-me-from...
In this context, I think "requires DNSSEC" is an opinion at best. "Requires" is probably the wrong word.

You are welcome to use CAA accounturi without DNSSEC and it will be effective.

Your zone may be vulnerable to an active man-in-the-middle DNS attack (which is hard to pull off), but it will still be protected against somebody figuring out how to upload an /.well-known/acme-challenge/ file on your domain and issue an unauthorized certificate from a foreign ACME account. This attack is much easier - I did it against a popular mail provider a few years ago.
In fairness, the PM was the kind of guy who has no technical experience, but was arrogant enough to pretend like he did, and most of the devs were pretty junior.

It was the first time for me having to even argue about this.
DoT/DoH only stops one hop of the DNS resolution process from hijacking requests, so it isn't as good as DNSSEC for security.

There is encrypted TLS handshaking for hiding the TLS domain name indicator.

https://datatracker.ietf.org/doc/draft-ietf-tls-esni/
Elon Musk banned me from Twitter
Depriving people of desperate bets is arguably worse than letting them take it. Sure it might not work but you’re not the one who has to live with the consequences either way.
There is one market where I see a need for this, and it's OSS where transparency is important for building trust.

However, what's holding any company back from releasing a read-only connection to their live financial systems?
Sorry. Most people here can tell that you simply make money by selling a reading and highlight management service. Unfortunately it gets tiring to repeatedly reply to things with "we understand what you are doing, carry on," so we're a silent majority. Obviously the other user that replied to you has no intention of buying your product, no matter what your privacy policy says.

Congratulations on the launch; the reader app looks ambitious and I hope you will keep building on it and improving it. Thanks for posting it here.
Neurotechnology is one of the most interesting fields in this century, to think of the fact that our mind is more powerful than computers, and we don't know everything about it.

Except for the fact that it costs millions to create technology for our brains, it's such a big gamble. And neurotechnology failure happens in most cases since we don't have enough data to make predictable guesses.
Okay, the decoder is less than a kilobyte. But where is that an advantage over a 50KB PNG decoder, when the compression ratio suffers so much?
That's certainly workable but, if the intention is to get a representative sample of Internet users, it'd be very biased.
To summarize: a CAA record might point to Let’s Encrypt, but anybody could sign up at Let’s Encrypt, so this does not protect anyone. But if the CAA record points at a specific account name at Let’s Encrypt (which it can now do), this closes that hole.

This is similar to the lame delegation problem; i.e. where some old forgotten subdomain has a CNAME record pointing to some big hosting provider; although the site does not work anymore, the CNAME record is still there, and an attacker could get an account at that same big hosting provider and sign up with the same subdomain name, since the CNAME record is still valid. This way, they would get access to providing connectivity (web content, incoming e-mail) for a domain name they should not have.
It's not genuine concern, in this case. If someone were interested in privacy, they would be better at understanding when a paid SaaS has boilerplate in their privacy policy and why they might use analytics.
I don't think this video sells that though. It comes off as a pivoting non answer to me.
I did too, but the first line of the thread: “winter is coming (freezing emoji)” primes you to think about temperature. I’m not sure it would have been nearly as obvious if after a few months in the field I suddenly got a few bug reports.
I think this might be a case of confirmation bias that people experienced when reading the article since the author tells you the solution in the first sentence.
That last point is the point a lot of people miss. RISC-V is permissively licensed. The example of, "it is free like Ethernet" is not a great example. The best example is, "it is free like FreeBSD/NetBSd/OpenBSD." People can choose to use the open aspects of it. Or people/companies can choose to use that as a base then do whatever they please on top of it. Much like Sony can take FreeBSD, make an operating system for the console and not share any part of it except by giving a mention that they used FreeBSD somewhere in their stack.
I like the GNU Name System for replacing DNS:

https://www.gnunet.org/gns
That's my argument though. If being yourself is such a threat to your way of life you feel like you'd be outcast, you need to change yourself.
Lisp dialects that have deviated from these choices require the programmer to write hideously verbose code, unable to take advantage of the economic idioms they afford.
or just be dyslexic or any other myriad of disorders like ADHD etc that may affect such minor grammatical rules yet not change or alter the likelihood that they could be a senior meta engineer?
Every dog owner I’ve talked to about the end of life of their prior pets mentions how hard it was to let go. The selfish act is to preserve the relationship with your pet for your own emotional needs, and peace comes once you acknowledge the suffering of the animal.

The expense of medical care for pets is often the wrong way of looking at it. A dog doesn’t understand chemotherapy, it only knows it feels really sick. It doesn’t understand invasive surgery, it just knows pain, and wearing the cone of shame. Dogs don’t have the same inner life that we do, so a lot of medical interventions would cause a lot of suffering for what, a few months more life?

And if you don’t want the hassle of dealing with a pet’s illness, don’t get a pet. The relationship you build with a pet should make you understand you owe them your loyalty in the bad times, not just the good.
If anyone wants a mini AMA I went to Waterloo and have personally been into the tunnels (and was never caught!)
Not really. There is deep knowledge and capacity in doing the hardware design. It's not as if Apple sends over a couple powerpoint slides with some renderings and then Foxconn delivers a product a year later. Apple delivers highly detailed designs, exact geometry and tolerance of each and every part, all the process documentation, specs, materials, designs for how the assembly line should be, etc. All that gets handed to Foxconn and they manage the staffing and feeding of the lines.
In my case the location it shows is in most cases very wrong and also sometimes places I have never visited. Sometimes it changes during some minutes to other places hundreds of kilometers away. So in my case it is completely nonsense what is going on.
> I suggest you do a little reading

You're of course welcome to be on either side of this issue, but please edit swipes like that out of your comments here. This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html.

(Your comment would be fine without that bit.)
Because companies will want to use their own custom chips as a competitive edge. If google started making streamlined RISC-V CPUs, they could drown out a lot of RISC-V competition because Google has the capital to acquire some of the best to design their chips. Why give away what they could turn into a competitive edge away for free? As a lover of open source, this sucks and I wish it were different, but it is the reality of business. Especially since making hardware is so much more expensive.
It’s not a recent trend: https://en.m.wikipedia.org/wiki/India_and_the_Non-Aligned_Mo...

The current trend is mixing it with a big dose of nationalism.
>> Except, when this Domain Validation is performed, you don't have a certificate yet. That's why you're going through the process in the first place: to get a certificate. Which means that when the CA verifies that your domain is correctly hosting the challenge, it does so via ordinary, unencrypted HTTP... which can be trivially subject to man-in-the-middle attacks.

This is not completely true.

For HTTP challenge, yes its true. But for DNS Challenge its not.

DNS Challenge requires the provisioning of a special DNS Text record. Assuming you are using an API with your DNS provider this can happen over HTTPS. (Indeed I can confidently say it would Have to be over HTTPS, or similar.)
I've really only dipped my toe into what Obsidian is capable of (very few plugins), but I took it up a month or two ago as a sort of minimal-resistance place to do simple but interlinked text mind dumps, and for that use case I've come to enjoy it more than I thought I would.

Thoughts that were dissipating into the ether now increasingly get written down there, which frees up mental bandwidth for other things, which has translated in increased motivation to actually do the things I'm writing about.

I'd tried doing similar things with Apple Notes and Bear in the past, but it never stuck very well and I didn't find myself revisiting notes too often. Something about Obsidian has worked better so for though and I'm not sure what it is.

That said, I could see easily getting lost in the weeds and "overmanaging".
Bye Felicia
I actually prefer it the other way around myself. I find pdf that technical books to be better since the equation typesetting, and any other similar things, can be done with a single page size and font in mind. I find that really suffers from trying to reflow when you change the eBooks font size.
> Why isn't it "Thousands of Canadians are being killed too soon in an effort to save the government money"?

Because nobody's made that case.

Making a case requires evidence. Not handwaving and appeals to movie plots.

> We already have stories of Canada asking Veterans to join "MAID" instead of getting a wheelchair...

As long as we're trading conspiracy theories, the person who reported that was paid off by the right wing to make MAID seem horrible, and therefore something that should be ended, and my conspiracy theory has a lot more going for it than yours does.
It wasn’t necessarily a New Year’s resolution but I started intentionally walking extra. Not a crazy amount, not “I have to get <x> steps in today or I’m a failure”, not a reinvention of my entire health ethos or whatever… just avoiding sitting around so much. It’s a nice break away from things sometimes and my feet aren’t tired/sore when special events/trips roll around.
From the text it seems that mobile is not the issue "5% GPU utilization" screams of seriously large problems on the CPU side. What where they writing their software with? CPython, an interpreter only JavaScript runtime?

Also the current generation of VR was basically build on top of smartphone hardware and there where quite a few ideas to make use of the full hardware instead of using it as a dumb display.
On tablet I actually load the book in a narrow column to recreate the phone experience, and use the rest of the screen for note taking.

That or crank the font size way app.

That being said. It’s beyond me why the mac version only allows for a paginated view.
The first iPhone forever changed how people use and perceive smartphones as well as how they are built. It only sold 6 million units over the course of 13 months, an average of 15k units / day.

I too can pull up completely irrelevant statistics.
It's just the equivalent of a consumer protection law: you have to sell people the software, not a build artifact.
"Being counselled to suicide should be ineffective if they want to live, no?"

It should but it's possible to push real hard. There are literally TV interviews where MAID participants are like "I would like to live but they convinced me it's for the better"

I'm actually personally fine with counseling people to die, even moderately aggressively. In many cases it's the right thing to do and we should probably be doing it more. The problem is that when there is a conflict of interest because the org that is telling you to die is the org that benefits from it.

Given this conflict at best the Canadian government should be providing death services for free and mentioning it is an option. And that's it. They should be letting other nonprofit orgs with no funding from the govt counsel people to die.
An OS project got its first 1000 stars on GitHub
My background in philosophy is "studied a decent amount of it in college," so I certainly could be wrong here. But to me the paragraph that you are describing as "just plain wrong" seems relatively measured, consistent with the SEP article, and consistent with what I learned about logical positivism through my philosophy courses and textbooks (e.g., Schwartz's Brief History of Analytic Philosophy, Godfrey-Smith's Theory and Reality, Ney's Metaphysics, Devitt and Sterelny's Language, Truth, and Reality). Here is said paragraph:

"As in most philosophical movements, not all positivists agreed with each other, but they generally agreed that if you couldn’t verify something, it was meaningless."

Here is Ney on positivism (p. 121):

"Logical positivists differ on what verification must involve in any particular case, but a pillar of logical positivism was the view that there are two basic kinds of verification: by analytic and by synthetic methods."

Or Godfrey-Smith (p. 27):

"I turn now to the other main idea in the logical positivist theory of language, the verifiability theory of meaning."

You can also look at Devitt and Sterelny's discussion of verificationism, or the section on logical positivism in Schwartz. They are pretty consistent with the quoted paragraph from Philosophy Bro.
Please cite a code that requires a land owner to contract with the electric company.

People enter electric contracts voluntarily, but maybe you can cite code from one of the municipalities in USA.
There's a huge disconnect between the technical execution of blockchain or crypto exchange, and running a business with proper internal controls.
Incorrect, a VPN connection establishes a point to point connection to another computer. Whether that computer has an unfettered connection to the “next hop” or not is not known to you. SOC report may provide the network info? They may be selling data about the websites you visit to 3rd parties.

It boils down to who do you trust more, your ISP or your chosen VPN provider. In places where there are ISP data laws, you likely (dependent on VPN provider) have a more private connection. Conversely, if your ISP injects ads through other pages and intercepts your dns calls to provide you advertising, a well researched VPN solution might be a good choice.

Also this reads like an ad.
And thinking further, I'm not sure how MITM attacks would be useful, or expose anything. They would see the challenge request itself go by, but that's all.

Setting up the challenge, and fetching the certificate is done over https (the server acting as a client to LE.)

I suppose the MITM machine could recognizes the challenge, and attempt to then fetch the valid certificate (first?). I don't recall offhand if the client has a nonce for that request, I'd have to go and review the spec.
You mean there was one case - and we quickly learned that person was being paid by a right wing organization to do so.
> they pledged to free it when they stop working on it

Source, please? To my knowledge, while this has been mentioned, they have not actually made such a pledge.
This also follows the pattern of journalists who report directly on him being suspended - Linette Lopez of Business Insider is still suspended.

https://www.thedailybeast.com/elon-musk-suspends-insiders-li...
Is the West really stagnating? If anything, I'd say it's at the peak and continuing to climb. The bulk of the West's power is united under a single language, on a continent that's practically invincible, and it has constructed a system in which the brightest minds from around the world come to the US to work for Western companies and study in Western universities. Sure, China is catching up quickly, but that's because it is heading down a path that was already first cleared by the West - I'd expect diminishing returns to its strategy.

I think it's really quite different from what you describe. In my eyes, the game is over, the West already won, and the best that other powers can hope for is to join the West in victory - it's a fool's errand to try and supplant it entirely.
Are there no phones that call out like that? Maybe one of the Linux ones could be made that way.
Hah, I saw FF at 18% and knew it would be German ;)

Here’s our (also German, photography market) Top 5:

39.78 % Chrome

24.39 % Firefox

20.11 % Safari

7 % Edge

2.44 % Opera

edit:

And just because there are essentially only 2 mobile browsers, here’s the Desktop-only list:

34.08 % Chrome

32.26 % Firefox

16.82 % Safari

9.61 % Edge

2.79 % Opera
Another aspect was that the systems themselves were simple enough to fit in your head completely. Limited hardware, maybe a few special memory addresses or interrupts, and that was it.

If you could read from a keyboard, write to the screen, and load and save files, you could already do everything that almost any commercial software could do.

Going from that to more modern systems (even Windows 95) was a giant change. So many libraries, frameworks, and systems to know about. And you need to know them and work with them in order to create anything remotely like a commercial program. Your programs don't have full control of the entire system.

So yeah, there's a lot more stuff available now, lots of free languages and tools, etc. But it's also a whole lot harder to get into.
I would be willing to bet anything that Apple funded this "research" with a goal in mind.
Sorry for the late reply.

Optimizing people's professional well-being is a bit akin to engineering: a good practitioner can describe their potential strategies, their relative merits and consequences, and interactively - at least to the first order.
Pretty long. Itd take 120 years for relative prices to double, compared to 7 years doubling at 10% inflation.

Also, 0.6% is probably noise or error
Why is everyone so worried about personalized ads? Serious question.
Are we going full circle? Obviously not but there are some arguments for it.

First of first was: webmaster

Then it was: web designer (did it all)

Then: web developer

Then: frontend dev / backend dev

Now: full stack/software engineer
Obsidian vaults can be converted into formats that work with competing PKM tools. I swapped back and forth between Obsidian and an open source tool based on Visual Studio Code for a while.
It's to prevent DNS-based ad blocking (e.g. Pi-hole).
Please do share the total cumulative activity of all bioacumulative elements present in all non-filtered fly ash ever released and compare it to the Cs137 that Sellafield poured into the ocean as part of normal operation in 1975 or the Kr 85 that La Hague releases on an average year.
The rest are scrapers which I didn't bother to label. Google, Bing, Semrush, Ahrefs, Pinterest, Yandex, BLEX, Petal, MJ12Bot, Neeva, MetaJob..

They're probably overrepresented in this data set since I collected logs from about a dozen sites, but only a couple of them have any real popularity while all get scraped due to SEO.
Bodily autonomy is not a libertarian -only ideal, and the way you've phrased it comes across as some sort of extreme collectivism. I'm curious if anyone has a name for this philosophy.