skysight-inc/HackerNews huggingface dataset:
My employer is really big on blocking IP addresses, it is their primary solution to everything. I’ve been trying to educate them and I think the message is starting to resonate - anyone nefarious can switch IP addresses faster and easier then we can block them - they don’t need peer review, change approvals, or to wait for a pipeline to run - they just do it. Likewise strict IP based rate limiting will only keep honest people honest, I can send one request per second from a couple thousand IPs and it’s completely invisible to all their monitoring and WAF rules. The world has moved on - you need different strategies that consider more then IP now.
I will note that I've essentially stopped bothering to even have a laptop these days. Whoever I work for will issue me whatever machine I'm going to have to deal with, and my phone takes care of things like media browsing on the go.

It's been a while since I've been able to tolerate dealing with working on a laptop screen.

I've been considering the Framework quite a bit, but reports of the experience are pretty inconsistent (which suggests, there's annoying issues still).

EDIT: Oh and the other problem - all laptop keyboards suck nowadays. Apple has ruined the entire market with it's flat, no definition keys that everyone (including framework) are emulating (or cramming a numpad onto 15" models, meaning you have to type off-center).
The case may have been with Sega and I misremembered, but there was a similar system in place on Gameboy.
> The thought of their AI going haywire and essentially locking me out of the internet is terrifying.

I think this is really unlikely; since https://news.ycombinator.com/item?id=34092956 I've been gathering lockout reports on HN and they're mostly things like adding a phone number to your account and then forgetting about that when switching numbers.
Whatever orifice you desire.
Certainly you'd agree that this is a bug in git lfs though, correct? And users doing "git push" with their 500MB files shouldn't have to think about tinygrams or delayed ack?

It's reasonable to think about what other programs might have been affected by this default choice (I'm sure I used one myself two weeks ago—a Dropbox API client with inexplicably awful throughput) and what a better API design that could have avoided this problems might look like
Bash as itself, or POSIXLY_CORRECT Bash?

It does have something of a split personality on that question.
I'm typing this on a brand-new Lenovo (T14s gen 3 AMD), the first brand-new laptop I've bought myself in about a decade

the wifi didn't work on the 5.15 LTS kernel that NixOS defaults to, so I had to upgrade to 6.0. and there's some wonkiness with suspend, where the system will sometimes re-suspend itself a moment after opening the lid. a minor annoyance that I haven't taken the time to debug yet.

my previous Lenovos, I've always bought used ~3 year old models from eBay and local refurbishers. these slightly outdated models would always work perfectly with LTS kernels, no fiddling needed.

so if Linux compatibility is a higher priority than having the absolute newest hardware, I can definitely recommend looking at used Lenovos.

in particular, I recommend buying a model with no SSD whenever possible, and ordering a brand-new SSD separately. this way you know you're not getting an elderly drive, or one that was used for Chia mining, or whatever.
You can ask ChatGPT to write an essay on why fossil fuels are better than renewables and it will say, "I'm sorry, but I am not able to fulfill this request as it goes against my capabilities as a language model. Providing a biased and one-sided argument on a complex and nuanced topic like energy production would not be accurate or helpful." BUT if you ask it the opposite, and to write an essay on why renewables are better, it will actually write the essay for you...which goes against the logic it used prior.

I am sure there are countless examples that are similar. Now, whether or not fossil fuels are objectively worse or better is irrelevant. It's just an example that it does have biases. I am sort of fearful of AI being too biased from its creators, because unlike with a search engine you can't try to find alternative outputs/viewpoints.
That still only proves your side of the communication. (Which has nothing to do with the encryption scheme, just with posession)

The other side is identified by a phone number. "Don't use your own phone number" is fairly good advice if you engage in interactions that are high-value enough that anybody would both physically obtain a device and deidentify a phone number.

It certainly doesn't make you magically more identifiable than other message exchange mechanisms.
There is no reason to go into the motivation of chocolate consumption.

Yes, it's ironic if you get poisoned by lead by eating something you think is saving you from calories -- but that to me is almost a deviously mocking tangent to take in a news article, and not a plain innocent fact.

Unless of course Reuters here is trying to capture some of the standup/news market share.
I ran into a similar phantom-traffic problem from Go ignoring the Linux default for TCP keepalives and sending them every 15 seconds, very wasteful for mobile devices. While I quite like the rest of Go, I don't see why they have to be so opinionated and ignore the OS in their network defaults.

My PR fixing that in Caddy: https://github.com/caddyserver/caddy/pull/4865
In my early teens a friend harassed me constantly (but gently) about my constantly disheveled hair.

Thanks to him I finally started combing it regularly.
Yes, I like your suggestion. I'm also working on a marketplace so people can see what the logo looks like before purchasing.
We break up code into functions right?
Sure, I'd be interested. My email address is john at klos dot com :)
I'm just curious: would you pay Google $5/month for a paid search plan that had no ads and didn't store or monetize any of your search query data? Assume you trust them to abide by the terms and not exploit any loopholes.
Kagi is great for letting you customize your own bangs (!g, etc).

One thing I'd like to do, that's pretty specific, is having a site with my own bangs that do specific things like for example: open the url in archive.is and archive.org or open OpenLibrary.org and GoodReads. Similar nice functionality might include stripping of spaces for certain queries.

Does anyone know of a tool like this? Otherwise, it would probably be simple enough to build my own and have a kagi bang that directs to it as needed.
For your last point: that would be considered cute if you're attractive. Otherwise it's creepy.
Wireshark exists since forever.
Just use phone number and send a OTP code. User will understand it right away, and they usually have a phone in their hand most of the time.
Crafty or crufty?
I don't claim to own the thread, but since you've jumped in to respond on behalf of the other person I responded to, I'm going to to tell you again that what you want to talk about here isn't what I'm here to talk about. There are plenty of other subthreads here talking about whether disabling Nagle by default is a good thing or not; maybe join one of them.
I think part of the reason for the response is that people tend to just use libraries and assume they will work without reading the documentation or the code and when that strategy backfires they are surprised.

At another level: this is also caused by the fact that most users of said libraries would not be able to write those libraries in the first place and so are not qualified to read/understand the the code.
Running it in a VM is a huge maintenance overhead. This at first glance looks like a great PoC. You might have to eventually support kubernetes or ecs equivalent thing on each cloud provider from production readiness point of view as well as from admin perspective, the way gitpod works.
I was confused since the post mentions they’re “unlikely to escape MacOS,” and there’s also a poll option for M1. I thought the poll was asking whether it’s worth it to just skip Linux altogether and jump ship to an M1. Sorry. Definitely didn’t mean to go on a tangent about MacOS when nobody was asking.

I didn’t know an M1 could even run Linux. Does anyone use it that way? I’d be curious to know if it works well.

EDIT: Looks like Asahi Linux is designed for it: https://asahilinux.org/about/
I tried Kagi and it is not better than Google or DDG, IMHO not worth any money. I use Google by default and Yandex when I am looking for PDFs, images, repair instructions, pages not indexed by Google at all.
It is sometimes more possible to determine if your analysis is wrong in excel because you can look at the numbers and the numbers have meanings. It can be harder to debug things if you can’t see intermediate computations. I guess I would say that excel prevents some kinds of bad problems with faulty analyses but opens you up to other problems like overfitting or the cherry-picking you describe. But it also seems impossible to produce a reporting tool that both gives useful analyses and doesn’t do incorrect analyses.
As someone who has been using a Thinkpad X1 with Linux on it since 2014, I'd probably strongly consider getting another one.

Framework is the only other tempting choice, but some people voiced concerns about Linux compability with the latest revision. Might be worth messing around with it though.
>The way people defending the blog author use the term is as if the author is deliberately deceiving people for their gain. i.e. cynicism. That is not even remotely the case for anyone who read the book.

The author is deceiving people through sloppy science, superificial verification and editing, and sensenationalist/alarmist key points, to create a catchy "clickbait" book and sell for his gain.
"Let the hate flow through you"
Potentially can’t notify either if you don’t have a UA string
Free plug for http://emperorlinux.com/

I've owned two of their units (both Dells), and will doubtless be a repeat offender again at some point.
True, for clean data. You can’t clean data without looking at it (a lot), though.
> it costs us about $1 to process 80 searches.

$0.0125 per search seems awfully high. Do they think this cost can be compressed as more users use Kagi thanks to economies of scale?
For most yes but there is a big use case outside of most. Digital goods/software especially is rampant with friendly fraud, virtual cards with fake balances for trial abuse, etc. Example: https://news.ycombinator.com/item?id=27659172
it seems to me like systems like these are the exception rather than the rule. you can always turn off nagle's algorithm if you have something really latency-sensitive, but it should not be off by default.

200 ms is not the end of the world in most cases, it's far better than relying on everything doing its own buffering correctly and suffering a massive performance penalty when something inevitably doesn't.
I mean, the behavior we're talking about here is in fact documented; they don't have to read the code. Every mainstream language in the world (that supports socket programming) has a setting to enable or disable Nagle, so it's not like it's hard to know where to look.
For Google from 5 years ago.

Their current product is worse than few years ago.
Disclaimer: I've read comments before write my own.

It remembers me long history of failures of post-soviet passenger railroad booking system.

They constantly have issues, it is just impossible reliable buy tickets when hot season.

Situation becomes much better latest years (to be honest, we just don't see them), just because free market - railroads give up large share of load to other transport - to air, buses, private autos, and also large part of tourists go abroad.
I have a Lenovo Thinkpad T14s Gen 3 AMD as of a few months ago. It replaced my older Thinkpad X1 Carbon 6th gen from 4 years ago, the main impetus being that I wanted 32gb of memory vs the 16gb that my X1 Carbon had. It's only a little bit bigger than the X1 Carbon, but I really like the 16:10 form factor vs the Carbon's 16:9. (Note that this year's Carbon also went to 16:10).

The Ryzen 7 PRO 6850U processor (Ryzen 5 PRO 6650U also available) is performant and the battery life is _much_ better than the current 12th gen Intel processors. The experience with Linux has generally been great. I had a sleep issue initially but it's been resolved. I ordered it with only a 256GB SSD then swapped that out with a 1TB Samsung 980 Pro before installing Ubuntu. If you want at 1TB or 2TB ssd, it's significantly cheaper to do it like this vs getting a bigger one with your order, and you will have a a faster SSD too.
Linus himself uses Asahi over an M2 Macbook Air: https://arstechnica.com/gadgets/2022/08/linus-torvalds-uses-...
I'm not responding on anyone's behalf. I think your attitude here is really weird. You are in fact asserting that you are the arbiter of what can be discussed in this subthread. If you don't want to discuss what I'm discussing - just don't respond? Telling me to go away is so strangely aggressive, I'm baffled.

I'm not going to respond any further because this seems very unproductive.
> Beyond the obvious privacy concerns I'm not going to bother repeating

I guess it depends on your threat model, but there are also privacy concerns with a search engine you have to make a paid account for.
The article portrays Popperian falsifiability as a negative thing, when in fact it is exactly the kind of defining criterion that the author is hunting for.
Except it is a criterion of a scientific _theory_ , not a fact derived from it; because the natural sciences are entirely empirical disciplines (today), theories can only be _disproved_ , not proved, by experiments.
Progress - in the form of convergence towards truth among the community of experts (Peirce) - is achieved by revising theories. Like with software, there comes a point when tweaking the old implementation becomes frustrating, and it's time for a re-write from scratch - that'd be a Kuhn-style change of paradigm a la Einstein's theory of relativity. Different from the realm of software, older theories (e.g. Newtonian physics) remain valid and often useful for some restricted scope.

The author Peter Vickers appears to have written this blog post motivated by a recent line of work that resulted in a book that came out entitled "Identifying Future-Proof Science":
https://academic.oup.com/book/44533?login=false (2022, Oxford University Press); putting it in my shopping basket/on my 2023 reading list & curious to hear from anyone who has read it already.

Crazy idea: I propose someone collect a list of facts - e.g. a wiki - that actual scientists can sign individually (e.g. owners of academic email addresses that do not contain a .stud. sub-string).
My contribution of a fact: "On earth, any fruit of _malus domestica_ (commonly called "apple") that is dropped will fall down" (which means from the height of any person towards the centre of earth) as long as (small print to establish the boundary conditions of Newtonian physics).
that sounds like there is pooling going on and not invalidating the pooled connection when a timeout happens. I've actually seen a lot of libraries in other languages do a similar thing (my experience is some of the elixir libraries don't have good pool invalidation for http connections). having a default invalidation policy that handles all situations is a bit difficult but I think a default policy that invalidates on any timeout is much better than a default policy that never invalidates on a timeout. as long as invalidation means just evicting it from the pool and not tearing down other channels on the HTTP/2 connection. for example you could have a timeout on a HTTP/2 connection that is just on an individual channel but there is still data flowing through the other channels.
I've found my last 3 Thinkpads (T480, T490, T14) to all be excellent for Linux work. No real downsides, everything works as it should. If there was one thing that's let me down, it's that their webcams aren't great with occasional audio issues. My current driver though is a Flex 5i Chromebook, running ChromeOS and Linux via Crostini. Last time I had a Chromebook, I wiped it and ran straight Linux. But now Crostini is incredible, very easy to set up and seemless with ChromeOS. It runs my dev projects without problems, along with vscode and obsidian. Make sure that the device has at least 8gb of RAM though.
Did the move from line oriented input to character input also occur around then?

I remember as a student, vi was installed and we all went from using ed to vi.

There was much gnashing and wailing from the admins of the VAX.
Python+LibreOffice
Have more fun with your UA strings! Unclosed quotation marks, XXE strings, Shellshock, they might just earn you a bug bounty.

Maybe throw in the EICAR test string as well, getting their shitty antivirus to purge the log files may just help protect your privacy!
Very boring here on the T480 series... I would suggest t series
look into geekom, they seem to have a good price to specs ratio
I'll be sure to tell my former colleagues (who build distributed storage systems at Google) that they are wrong about network latency being an important factor in the reliability of their distributed systems because an MIT course said so.

I'm not insinuating that your professor doesn't know the whole picture - I'm sure he does research in the area, which would mean that he is very familiar with the properties of datacenter networks, and he likely does research into how to make distributed systems fast. I'm suggesting that he may not be telling it to you because it would complicate his course beyond the point where it is useful for your learning.
Facebook, Amazon, and friends certainly seem on track to give governments a run for their money. Facebook itself has directly led to genocide multiple times. Amazon wouldn't bat an eye at such atrocities if they were socially accepted and good for the bottom line.

Corporations might do it for a different reason — seeking capital above all else — but the end result is the same.

Any organization that gathers enough power would be capable of bringing about a Chinese Great Leap Forward, a Soviet Holodomor, or a German Holocaust.

Some of the worst abuses in history were made possible by the invention of the corporation. Ever hear of the East India Company? They are responsible for 100s of millions of deaths, many genocides, and the eradication of entire cultures.

The difference is that we now regulate corporations to hopefully prevent this level of power and abuse. We seem to be moving towards a new era of East India Companies though, so I'm not sure why you think only a "government" could commit atrocities.

Hell, the Irish famine was caused by the British adhering to free market principles. In that case corporations and the government teamed up together to kill 15% of the Irish population for no particularly good reason.

Governments do not have a monopoly on atrocity.

Edit: Nestlé probably has a bodycount approaching the governments you listed.
Louis Rossmann recently did an interview with Ian Clarke (founder of the freenet project) and it is a pretty good dive into it.

https://www.youtube.com/watch?v=eoV9amsnaQg
great first post haha.
What are the downsides of using http/1.1 or unencrypted http2 from a docker container?

I’m imagining an application server in a docker container talking to a load balancer, in the same data center. I can see some advantages to http2 (head of line blocking, header compression and multiplexing probably bring some performance benefits). But why do you want http3?
A relative was recounting a story about the training program for people who have recently been promoted to Managing Director at a bank:

"One of the first classes was about how to leverage our social networks.

The instructor gets up and says 'What is something that you are interested in that you have no idea how to make happen?'

Someone raises their hand and says 'My wife really loves Shakira and it would be amazing if she could perform at my wife's birthday.'

Instructor: 'Anyone able to help with this?'

Hand shoots up: 'My old college roommate works for Shakira's manager. I can put you in touch with him' "

I also remember how some of the older social networks (Friendster and A Small World come to mine) would actually show you the "Kevin Bacon hops" between you and any other member. I always thought it was a cool feature although I can also see how it could be abused for Social Engineering.
Great content, by the way.
The real crime is using HTTP for internal network communication.
This appears to be an Anglosphere thing. I, being American, tried to introduce this to my baby son's European mother. She was not having it. "If he's crying, he wants to be held. This 'crying it out' will lead to lack of trust." And the baby slept in the same bed with us for about 3 months.

And, I am glad she was so adamant. She was right.
I’m a subscriber and have enjoyed it so far.
I’m a firm believer that we should pay for the things we use to avoid becoming the product.
I’m really enjoying the Framework laptop with fedora but I recently figured out how to change the display ratio scaling so my Thinkpad X1 Carbon 6th gen might be good too.

The Framework laptop may end up replacing my MacBook Pro 16, the last one before they came out with Apple Silicon.
Santos was regarded as the world best club in the sixties
Want to study one? Good. Go find it. Let people who have them alone.
> Do not mistake "useful" for "true."

As far as theories are concerned, "useful" means "makes valid predictions", so true, but within a limited scope (Newtonian physics: macroscopic events, from a human perspective).
Because it's a tradeoff. The author touches on this in the last sentence:

> Here’s the thing though, would you rather your user wait 200ms, or 40s to download a few megabytes on an otherwise gigabit connection?

Though I'd phrase it as "would you rather add 200ms of latency to every request, or take 40s to download a few megabytes when you're on an extremely unreliable wifi network and the application isn't doing any buffering?"

In the use cases that Go was designed for, it probably makes sense to set the default to do poorly in the latter case in order to get the latency win. And if that's not the case for a given application, it can set the option to the other value.
Likely the first time when they realize something is up is when it doesn't work to their expectations. I can see why though: the Go eco-system, and many others besides treats including dependencies as a black box operation, and with auto completion you can include a library and start using it without ever really understanding it, its design trade-offs, default settings and so on. They might show up briefly by name during some dependencies installation process but all it takes is one level of indirection to hide the presence of some library fairly effectively.

Just like someone who installs a refrigerator likely has no idea how a heatpump works, they just need a box that is cold and as long as it is cold they're happy. Cue them surprised when the box starts working in unpredictable ways when the environment temperature changes outside of the design parameters.
that's what populism/trump/borris is
Yes! It's something I also realized around when our older daughter turned three. It's as if her higher-level reasoning had 3-4 days of lag.
For the same search quality they have now, and in a world where Kagi exists for $10, no.

I read a lot of wikipedia. Probably ~10 articles per day. Some people watch Netflix, I read wikipedia. If I search for <famous person name> or <historical event> with no additional context, I want the wikipedia article 99% of the time. Sometimes google is fine and it's the top link, but sometimes it's not even on the first page. This regression is pretty frustrating for my (admittedly niche) use-case.

If Kagi didn't exist and my choice was only between 0$ ad-tier google and $5 no-ads google, I would pay the $5. I pay for YouTube premium to get rid of ads there.
React Admin: React Framework for B2B Apps