skysight-inc/HackerNews huggingface dataset:
For the Windmill [1] project, we wrap deno to make it the backbone of a self-hostable infra to run scripts (like aws lambda), workflows (like temporal/n8n) and UIs (like retool). This release is amazing for a few reasons. We leverage enormously that you can define script with dependencies in the same file and provide a monaco editor backed by the deno lsp through websockets. So without deno, windmill would not be possible. We also support python too but it's a much slower as a language and make more sense for slow, long-running processes like ML.

> Improvements to npm and Node compatibility

Every little improvements to npm compatibility actually unblock a very wide range of npm packages to now 'just work'^tm. I would have been interested to get numbers of incompatible library but `npm:crypto` has been the biggest blocker for our users.

[1]: https://github.com/windmill-labs/windmill
I’ll think of you every time I hate on my car computer system, I guess.
tldr: Nothing is changed by the bill but it will make a fine feather to stick in their election day hats.
You can't deduct inflation from the interest earning, so yes the interest rate has to be high enough to cover inflation after tax.
I think the only chance it doesn’t succeed is if they do what clubhouse did.
You say "the url works" as if there is a clearly defined url for every Fediverse user. But the way I read the specs, that is not the case.

Some servers link you to hostname/users/username, some use hostname/@username, some use hostname/username when you look up a user via webfinger.

And the way I read the specs, those don't have to be permanent. A server could change their scheme from hostname/users/username to hostname/u/username and would not violate the protocol. Because the way to identify the user is via a webfinger lookup.

Maybe the only way to say who you are on the Fediverse is "I am <username> on <hostname>. Look me up through Webfinger"?

That might be the equivalent of saying "I am https://masto.ai/.well-known/webfinger?resource=acct%3Amg%40..."
Building a KV store into the runtime, that has more features when using deno deploy is just that: vendor lock-in. It's just one more way to force you into paying for the service when you have locked yourself in and you can't use an alternative store.

Deno is not and has never been an "alternative runtime" to node.
Try out Jellyfin! It's an open source Plex replacement that doesn't mess with its users.

I switched a year ago after some dumb monetization change at Plex annoyed me enough and it's just been so much better.

Imagine a product just like Plex, but without all the shit Plex tries to pull all the time!
Disgraceful?! I'd much rather OSS authors have an additional SaaS offering to support their work and work on it full-time rather than get them to work nights and weekends for free while AWS collects the checks for deploying their work.
There's an album I love that have the most amazing retro 60s, early 70s inspired cover design. I wanted to get the LP to have the cover in larger format, sadly it was never release on anything but streaming platforms.
I doubt it. The ongoing operational costs of a mega constellation like this is huge and I doubt they will be able to sell their services to maritime, aviation and military sectors at a much higher price than existing operators.

They will also meet hefty competition the next few years from Amazon Kuiper, Oneweb and I assume existing operators are scrambling to meet the competition. Interesting times.
> How are these remote systems kept secure? How do you prevent someone just constantly brute forcing the password?

I would be somewhat surprised if any proactively secured tech used a password. Key pair encryption is the way. A password over 20 random characters is virtually un-brute-forceable if there was one.

DDOS would involve either a botnet or a nation-state. Both could be solved by the US government if needed. It would be a bad target because you would almost certainly gain fed attention and that isn't attention you want. A satellite could probably be signal jammed with the only possible way to stop it being to blow up the jamming device.

I think your model of a satellite being more special than a web server is probably not all that correct. It's probably not significantly different than your home router in an abstract sense, just with a humongous antennae.

Most serious networking devices separate the control of the device from the operation of the device, so it's possible that there are specific configuration antenna or specific configuration frequencies, or sequences of frequencies that are used for configuration. There is probably some wireless equivalent of "using a different cable."

ACL's are probably standard, rate limiting is probably standard. I would be surprised if there were not 2fac. I would be surprised if there was not an incredibly monitored machine that is the only machine with credentials for those satellites, maybe even air-gapped from the internet at large.

I would potentially be worried about my hardware supply chain, for example if components came from China, they would probably inspect them quite carefully.

Your model of attacking the satellite itself is probably also wrong. Exploiting a companies networking devices, particularly from the outside is probably quite hard, what people go after is employee devices. There are probably a number of starlink employees with access and compromising their laptops might compromise all satellites. This means attacking the satellite system is probably like any other corporate hacking job, phish some employees or compromise a supply chain, use that to move around a company's network, hopefully undetected, etc.

If I wanted to compromise Starlink, and I was a nation-state, I would keep a list of all starlink employees or attempt to get that list via technical means and then try to compromise an employee. Compromises can be done technically, with bribery, extortion, and then violence.

The first stage of hacking is figuring out information. Who are the employees, who are the suppliers, what is the security architecture, etc. That informs the approach. Maybe there is a piece of software that would be easier to find a zero day for. Maybe it would be easier to compromise a supply chain. Maybe it's easiest to honeypot the employee with a beautiful person.

Setting up a coffee shop next to a starlink office and putting some great cameras and microphones in it for example, would probably be fruitful.
Pine Tree Riot (1772)
Grabbed a Dev On on sale for $500 and I'm very happy with it.
> Domain Name System (DNS) acts like a phonebook for the internet

I wonder if this analogy doesn't become increasingly inscrutable for younger readers, because phonebooks aren't a thing anymore.

It also seems to me that you don't actually have to know about IP addresses to understand why domain names as handles could be useful.
And mass produced CDs will have lost their coating and no longer be playable in ten years.
Once China launches it's own 13000 satellite in the coming year then we will start hearing about Kessler syndrome.

Till then it's a beautiful sight to behold.
It's a lock-in strategy. There is zero reason for a language runtime to be opinionated about the database. All the good programming advice will tell you such a coupling is a bad idea. What if you want to move parts of your application to a different language in the future, do you need to redo the entire database? That is just nuts!

Database providers, cloud application platforms should be agnostic of the language their users are using. There are many such decisions deno is making where they want to be the end-to-end service. That is not a good sign. It creates perverse incentives for the company to devise lock-in mechanisms at each stage and discourage compatibility with the rest of the programming ecosystem, perhaps even undermine the rest of the ecosystem. I would stay away for this reason.
My 7 year-old phone has had a completely smashed screen for the past year. Thanks to this (super-easy-to-run script), I haven't felt the need to repair the screen at all.

10/10 would recommend.
Deno's major adoption point can be it's native typescript support but without an easy way to bring an npm package into it, developing its community will be tough. So I can totally see why they are ployfilling `node:crypto` since many cloud SDKs are using those in their packages.
Next you'll tell me to stop visiting the alternate timeline where everyone has a mustache and domain names end in a period.

https://news.ycombinator.com./item?id=35751030 ;-)

( warning: your cookies for news.ycombinator.com won't work in news.ycombinator.com. )
Portfolio Performance
Yeah, but even the with salt butter in Germany, if you can find it, has way less salt if you look at the nutritional labels.
The product is essentially something like a very slow, "low-code" programming framework/UI builder. You get a huge variety of quality in Salesforce implementations, ranging from bad to extremely terrible.
Though note: SpaceX does exactly that. They passively position the positions of the satellites along their orbits so that Starlink satellites don't need to avoid other Starlink satellites in orbital operation.
Don’t really rely on Siri that much. I absolutely hated Apple as a kid, but I dunno. Apple can take their time rummaging through my data in my humble opinion. Like, do they need to be the leader of ML when we all know what it takes to improve the models.. all of our data.. so, yeah.. I’m good with this.
Getting the hash makes brute force faster, but it's not in general necessary. How important it is depends on the password quality and how often you can try to login.

If a system let you try one password per minute, and the password is in the dictionary, you could break it in a day or two with no hashes.

And if the system isn't configured to limit login attempts, you could try orders of magnitude more passwords.
Research Evaluates AI Detectors – Accuracy Results
I just don’t understand how none of the 5000 banks in USA haven’t renamed themselves as “safe bank” and promises to only invest in t-bills or maybe just floating rate low-ltv loans. That’s great for entities finding themselves with millions in their checking account.

Interest rates would suck, but that’s the price you pay for insurance.

Anyone chasing higher rates or pricier customer service (or going with whichever bank blows their budget on marketing) is playing with fire.
Now do live map with latency measurement through Starlink

New York City - New York Stock Exchange (NYSE) and NASDAQ Stock Market

Tokyo - Tokyo Stock Exchange (TSE)

Shanghai - Shanghai Stock Exchange (SSE)

Hong Kong - Hong Kong Stock Exchange (HKEX)

London - London Stock Exchange (LSE)

Toronto - Toronto Stock Exchange (TSX)

Mumbai - Bombay Stock Exchange (BSE) and National Stock Exchange of India (NSE)

Frankfurt - Frankfurt Stock Exchange (FWB)

Paris - Euronext Paris

Sydney - Australian Securities Exchange (ASX)
> a natural product that’s made from cellulose and outperform synthetic materials

ah, marketing speech: this is a semi-synthetic material, like we've had for decades.

Better to recycle old jeans than throwing them away, but it's not the same kind of recycling as glass.
Here Comes India
Worth noting that, on an unrooted Android device, most of this stuff is only possible if you run Termux.

Termux may cease to exist from a moment to another, as on every new version of the Android API there are new limitations that make it hard to run it. And, of course, battery optimization can't really be tinkered after some point.

I've been a Termux fan for years, I use it on all of my Android devices, but it's sad to see that the only viable solution to run a user-mode Unix-like environment on Android has to always find a way to work in what's basically a hostile environment.

I've seen videos of people in Africa who have learned to code thanks to a cheap Android phone with Termux. Think how much potential Android could have as a development/headless environment if Termux had it easier. No need to root your phone, install PostmarketOS or Ubuntu Touch, or an alternative ROM like LineageOS (which also comes with many of Android's limitations).
I'm not sure why it wouldn't, and having dead content enabled, I've seen some weirdly incendiary responses to pretty harmless comments recently. It's weird.

I wouldn't be surprised if the HN team is already doing a lot of work already. Another factor that may have spared the HN community is that there are lower hanging fruit to pick first, reddit being the prime example.
They already sell it to maritime and aviation sectors at significantly less than existing operators, though significantly more than the regular service.
You're right, it's not vinyl that makes it possible, so I believe there's more to this than my original comment implies.

I think it's the physical aspect of the vinyl compared to streaming services. Some people do that with CDs, but I like vinyls more since they feel more "analog" to me. Also I like the warmth of their sound. Also GP has a point about the turntable engaging you more.

> Forcing yourself to flip the record and drop the needle keeps you more engaged I feel.
Are you sure you're right about those nines?
Before delving into this topic, it's important to differentiate between Starlink and Starshield[0]. Both offer end-to-end encryption. The latter serves national security purposes and thus demands more robust security measures.

When considering targeting a single satellite, note that Starlink's Ku-Band beam spans approximately 3 degrees[1]. Given their low-altitude orbits, individual satellites will move out of coverage within minutes, to be replaced by the next in line. Analogous to aiming at a static target is easy, but when the target is rapidly moving, it becomes much more difficult to target, not to imagine the hardware required. The challenge becomes almost insurmountable at certain cost scales when dealing with multiple, swiftly changing targets.

In addition, SpaceX is establishing LISLs[2] (Laser Inter-Satellite Links), where instead of communicating with a ground-station, the satellites can communicate amongst themselves which yields higher data rates, less interference, lower latency, and mostly importantly provides a higher security by eliminating the need for a ground-based intermediary. I was fortunate enough to tour Starlink's assembly factory and witness the development of LISLs firsthand - their work is truly impressive.

In terms of updating and patching the satellites, of course there's the traditional software patches applies. As for hardware updates, it's worth noting that Starlink satellites have about a 5-year lifespan. New satellites are frequently launched to join the constellation, presumably with the latest hardware patches, while older or malfunctioning satellites can be de-orbited.

[0]: https://www.spacex.com/starshield/

[1]: https://fcc.report/IBFS/SAT-MOD-20181108-00083/1569860

[2]: https://arxiv.org/ftp/arxiv/papers/2103/2103.00056.pdf
> Don’t drink more than 2 drinks in a day

Just to clarify, because this one tripped me up: you specifically mean alcohol, right?
No, it's actually truly sent using GMail. Otherwise, it could not benefit from GMail's reputation.
They've only just started expansion into those areas (so far 2 countries in Africa). Here's the service map: https://www.starlink.com/map
I work in the coffee industry so maybe I'm a bit jaded here, but most of the edge in coffee that Australian's can claim to comes from that particular snobbishness that coffee seems to bring out in some people.

Don't get me wrong, you can get great coffee in Australia and they do genuinely care about it. But you can't get better coffee than you'll get by visiting a "third-wave" specialty coffee shop in any big city around the world. What you will get is a stronger helping of "our coffee is better than everyone else's" served alongside your cup. For a real sneer, if you dare, go into Melbourne coffee shop and order an Americano instead of a long black. Or maybe you'll get lucky and meet less condescending baristas there than I did. I certainly hope so.
Is there a bank out there that advertises that they don’t do any long term fixed loans with their checking account deposits?

Seems like there should be a big market for that kind of thing. No idea why anyone holding large $$$ would go with anyone else.
not what i was saying whatsoever. saying they write the code, and then they collect monthly service fees for something they already did. The SAS model is way over done, and imo this is an example of reiterates that.
There is already some basic functionality to alias handles, for example @shane@reustle.org points to my mastodon.social profile. They still need to add a bit better support until it works fully, though. For example, when I tag this alias handle, it gets replaced with the m…social domain. This would let you jump around instances without changing your handle.
There’s always more than one way to write an IP address, sure, but there is only one way to canonicalize them all: remember IPv4 is just storing a mere 32-bit integer. So why not just store the straight 4 bytes?
> How do you prevent someone just constantly brute forcing the password?

Unless they are morons, they will use some sort of key derivation step, probably on the client side, that is relatively expensive to compute and produces a key of a size that is completely impossible to brute force. That key is the actual "password" verified during authentication. If done on the client side as I suspect, the parameters for this step could be chosen to take up to multiple seconds of compute time, thus making even simple passwords effectively immune to being brute forced in turn.

I doubt you'll get much hard evidence as to which measures are being used, but the above is pretty much guaranteed.
Nobody wants to talk about something called the "Dark Mail Alliance", it's such a dodgy name.
Honestly, I suspect the other, fancier parts of the idea were more like a solution in search of a problem.
Show HN: Hackercast – an AI-generated podcast summary of Hacker News
I made this as a fun side-project to try out summarization with langchain (and because I get the Hacker Newsletter every Friday and never get round to reading it).

It works by scraping the Hacker Newsletter, summarizing the individual articles using Langchain and GPT-4, and then converting the text to speech using AWS Polly.

Let me know if you have any suggestions or feedback.
You would love Oberon, and its derived OSes, Acme UI is based on it.

In Oberon, you can select any piece of text and apply a command on it.

Commands are public procedures in dynamic modules, so Module.Command will load it if not already loaded, and then execute command.

There are a couple of ways to write commands, depending if the act on selected widgets, selected text, selected windows, or if they ask for additional input.

http://www.projectoberon.net/

For trying out it emulated on the browser,

https://github.com/schierlm/OberonEmulator

And how the latest iteration of it, Bluebottle (AOS) with Active Oberon, looks like

http://www.progtools.org/article.php?name=oberon&section=com...

One of the great things about PowerShell and Windows, is that despite all the warts it has, it allows exactly a similar kind of workflow, with .NET, DLLs and COM replacing that Module.Command experience.

GNOME and KDE can offer similar workflows, alongside DBUS, and fish shell, however people seem more keen in keeping the UNIX experience of yore instead of going down that route.
Many years ago, my Samsung S3's wifi chip broke. I had to resort to mobile data for everything. Luckily I was able to use gnirehtet to download apps/updates for some time until I was able to buy a new phone :)
I'd compare domain names and IP addresses to street addresses and GPS coordinates. We could just drop all street addresses and numbers and just use GPS coordinates, but that'd be a massive pain in the butt to use. So we'll just keep to simple, human-readable text instead.
SVB bought mortgage backed securities as well, not just treasuries.
I'm not sure this is true.

Lossless compression algorithms exist, and HTML compresses almost absurdly well. A 20x compression rate would be quite impressive, but I don't think it's impossible, since 10x compression is fairly common in this domain, and there are reasons to expect wikipedia to compress even better given the significant amount of markup on each page.

I've worked with cleaning up rendered wikipedia texts, and if you strip the mediawiki class names and cruft, the uncompressed HTML shrinks a lot, often from hundreds of kilobytes to tens of kilobytes. You can then probably compress that quite a lot as well since plain text compresses very well on its own.

Basically, mediawiki uses this much markup to say <li><a href="#Assessment">Assessment</a></li>:

<li id="toc-Assessment"
class="vector-toc-list-item vector-toc-level-1 vector-toc-list-item-expanded">
<a class="vector-toc-link" href="#Assessment">
<div class="vector-toc-text">
<span class="vector-toc-numb">6</span>Assessment</div>
</a>

<ul id="toc-Assessment-sublist" class="vector-toc-list">
</ul>
</li>

So yeah. 20x isn't too far fetched.
Supply shortages lasted months, not years, and are largely over. Chip shortages are an exception. People did buy a lot more than they had been buying previously. This is very well documented.
The US Air Force sent F-35s to defend NATO. Here’s what it learned
> many depositors needed money at the same time because they were burning runway. Even without a bank panic this effect alone could cause losses on banks with large HTM portfolios.

Seems like there should be a market for a bank that advertises “no long-duration HTMs unless we hold a duration and interest-matched CD” and “short-dated investments only on checking acct balances”.

If that doesn’t exist, it sounds like big depositors were ignorant or quite happy to get some extra interest (or fancier offices/marketing) in exchange for that risk.
Java and .NET are much closer to Smalltalk than Emacs.
> Sam Altman himself failed with his original startup (Loopt)

I wouldn’t exactly consider being acquired for $43M a failure.
Probably science.
There’s also this on why Luckey didn’t file a defamation suit: https://twitter.com/palmerluckey/status/1652187034243710977
> and there's no reason you should be downvoted for doing so.

You are correct, but this is HN.
Vinyl is a completly different experience: the smell, the look(!), the age(!), the masting and care for the production, the cover(!)- these things matter.
If the economics of electric semi trucks work out, they could potentially be more cost-effective than rail. I'm not sure about energy efficiency, though I think it would be at least close.
> The question that often popped up was where to store data. Deno Inc. provided several guides to connect to different cloud services.

Sure.

> But they want the friction reduced to a simple `await Deno.openKv()`.

Do “they”?

If so, who’s using it to solve that problem? …because it seems the big uses of deno deploy are not using it, fine with that and it’s pretty unclear who the “they” is in this circumstance.

Still, if it’s a thin layer over foundation db or some other established database product and this is just part of the lock-in for their cloud offering, fair enough.

It’s not like others (eg firebase) don’t do the same thing.

The messaging “we’re building a database” and “we’re offering a hosted database service based on existing mature reliable technology” are different things though.

The latter all cloud vendors do.

The former is ridiculous, and it really really wasn’t clear that wasn’t what was happening.
Exactly. Throw "cryptocurrency" into anything you want to spoil and witness the dynamics of greed ruin the fruits of your labour.
It cannot work, per founders of one of old search engines and authors of page rank algorithm.
I find myself reaching for the pink one more often than not. Taste has a lot more going for it than the concentrated white dust natrium chloride. It's also interesting that you cannot taste the difference. Do you usually consume lots of the stuff?