skysight-inc/HackerNews huggingface dataset:
Ask HN: Where can I find an active help community for Nginx as a solo dev?
I'm asking this out of a lot of frustration.

At a high level, I have a few expert-level questions and need some help troubleshooting some problems that while not unique, are absolutely nothing I can find any related results just by searching.

Adding to the frustration are the following:

* Google's search results are so completely useless these days it makes me angry. It seems that no matter what magic spell of keyword combinations I try, all of the top level results are either completely unrelated to what I search for or are otherwise just populated by SEO related spam that is mostly just nginx's commercial vomit.

* Serverfault.com looks dead. I asked something there in late April and to date its had 28 views and no comments or answers.

* Asking on general Stackoverflow gets your question closed because its not programming related. (I agree with that policy. Just saying its not and shouldn't be a valid avenue for help with this topic.)

* https://www.reddit.com/r/nginx/ is mostly a dead community.

* https://www.reddit.com/r/sysadmin/ is really active, but generally not a good place to ask for nginx.

* I don't think there is a Discord community channel for nginx. I searched a bit the other day for this and couldn't find one.

* I've resorted to ChatGPT and it at least acts like it understands my questions, and it is somewhat helpful sometimes, but most of the time the answers it gives are not actually accurate enough to help. But a couple of times it has pointed me towards the right direction.

Although I've worked as a software engineer for years here in SF, only a couple of my friends are even in the field and none of them have experience that would help.

I've recognized that I'm probably at least shoulder deep into this particular rabbit hole and its time to ask for some help to pull my head out and show me other resources I'm not aware of.

Appreciate everyone's help.
How do they "manipulate" this data in any form? That is not how any of this works, it just sounds like a conspiracy theory talking point to keep saying citadel are conspiring against everyone.
Why is that worth noting here? This specific plant is invasive, damaging, and non-native. Quibbling on the definition of a "weed" seems completely non-sequitur.
Minsky refused Epstein's girl. He was with his wife at that party.
It also seems that most bigger startups that are calling the OpenAI API will now need to invest tonnes in security.
The UK’s analysis was highly speculative and not that persuasive to me as an antitrust economist.

I don’t think this is likely a good merger for consumers due to the possibility that Microsoft would foreclose PlayStation users. But the EU’s reasoning in terms of “damage to future competition in a sector which might exist but currently doesn’t” was really unpersuasive.

I don’t know UK competition law that well but if they can appeal and the law is like US law then I would imagine they have a good chance at getting the merger approved in the UK.
Sure, in an idealized enough world you can make many statements true. In the real world people buy and sell stock for many reasons, and value different types of returns on different time horizons, and it’s likely that for a majority of stock trades both the buyer and seller are happy with the trade.
The difference is that traditional finance is usually riddled with regulations and legal potholes to find yourself in if you don't follow rules, whereas in crypto the rules consist of whatever validation SBF's excel sheet had.
Citadel makes money with PFOF for sure, but it is usually a net good for retail investors. If it wasn't the brokerages wouldn't be allowed to do it: https://www.finra.org/sites/default/files/2021-06/Regulatory...
Maybe. The scenarios Capillaries is intended for do not need complex/flexible workflow, we just need some basic dependency rules (easy to implement) and really reliable scheduling (RabbitMQ).
I was a huge fan of what was promised here. I ordered one but every time I tried to work with it I had some catastrophic unrelated incident - like a curse lol.

Anyway I suspect the problem is the nature of crypto. For this to actually take off, you would have needed to hand a bag of money to Jake Paul or John mcafee or a bitboy, and I'd highly suspect a really good product has a hard time competing against those that do
All true, but who is to say that the impacts of human-accelerated stochastic gradient descent are necessarily evil?
Can crypto currency be used easily? Yes, through centralized entities like where your parents currently store their money.

Some people may forgoe ease and aim for self-custody because they value decentralization over convenience. Others will choose a middle ground where they and a centralized entity both hold part of the key, ensuring that the 3rd party can't move their funds without permission.
Comparison table is a great idea - we will add.

We noticed that the industry is laser-focused on tackling feature drift after production, but we spotted a gap. Most ML teams are wrestling with model validation even before anything is deployed in production. We also noticed that post-deployment analysis sometimes misses the mark, lacking components like identifying underperforming cohorts or giving actionable insights. This leads to a barrage of alerts and the inevitable alert fatigue.

We decided to start Openlayer to offer a more holistic solution that helps teams from the ML development and experiment tracking phase to more advanced tasks like monitoring and fairness. We established a strong baseline with this launch and are now building several features on top.

Stay tuned!
Visual Studio on ARM powered devices
You have just described Hydra:

https://github.com/abo-abo/hydra
What makes you say it’s damaging? Some arbitrary moral framework whereby “native” species are better than “invasive” ones, most likely. I’m of the opinion that human-accelerated SGD (aka “Evolution”) is a natural phenomenon just like any other.
Takes a long time to find the right model, it it is well worth it and if you do find it, you will keep the secret as guarded as possible, otherwise the model will be arbitraged away by the other market participants….
WireGuard and SSH
Abstract:

"Protecting your SSH port is a critical part of any good Linux security policy. While the list of things to do is well documented across the internet, I wanted to give an alternative to the standard SSH protections. Why not only expose the SSH port via a Wireguard Tunnel? The steps are fairly straight forward, especially if you’ve setup a Wireguard server before. However, there are one or two unforeseen pitfalls which could trip up even more experienced users."
Absolute spam. Automated regurgitation of the announcement from Anthropic.
The field C is most impactfully commoditising is low-level coding. Instead of someone giving opcodes to a CPU, they’re increasingly able to give them to a compiler. It’s an open question how far this can scale. But we may be near the zenith of the practicality of large-scale coding expertise.

Pedantic, maybe, but “coding expertise” isn’t going anywhere.
Curious to know what Phase One, the other major medium-format camera maker, will do.

* https://en.wikipedia.org/wiki/Phase_One_(company)
You should have a healthy dose of skepticism about anything you read online.

The examples I'm thinking of where people completely dismissed ChatGPT were asking things like "tell me about <MY NAME>", "Explain this thing I wrote my thesis on".

In other words, throwing a toy problem at it, getting a bad answer, then making up their mind that it's not useful.

I'm not advocating blind trust in it, I'm just saying don't try a couple things and decide it's garbage. You're doing yourself a disservice.

I love asking it for unit tests and docstrings for my code. Is it perfect? No. But does it give me a starting point for something that I otherwise might not do? Absolutely.

I've asked it a lot of things that I'm familiar with the topic and can immediately eyeball it's answer, either because I'm having a brainfart or because it's a little fiddly to work out. It can be good at those.

I've asked it a lot of questions with things that I'm not at all familiar with, probably the best example is Powershell, and it's provided good answers, or answers that were at least able to lead me in the right direction so I can iterate towards an answer. But then I also tried to use it to write an AWK script and it failed miserably, but got 80% of the way there. Which, honestly, is about the best I've ever been able to do with any complex AWK script. :-)
Patronizing a prostitute under 18 years of age is a federal crime throughout the United States, irrespective of local age-of-consent laws.
I have an additional Ctrl on the CapsLock key, and use Both Shift keys to toggle Caps Lock mode - best of both worlds!

setxkbmap -option shift:both_capslock -option compose:rctrl-altgr -option ctrl:nocaps -option lv3:ralt_switch
Without Cymer, which ASML acquired in 2013, there would be no EUV, the current state of the art lithography technology. Cymer continues to exist as an independent subsidiary within ASML to this day.

This is a contract between Cymer and Lawrence Livermore Lab to enhance EUV technology:

https://www.osti.gov/servlets/purl/1413999

Granted ASML builds the actual fabrication machine that chip makers can use. We can’t praise their technical expertise enough.
Yep thank you
Weird how people were saying the same thing about HIV
NYT is by far the best at it. There’s a reason they’re not bankrupt and Vice is. Vice wouldn’t have gone bankrupt if they had stuck to their niche
>> What about tools for torture?

Only if there are ethical uses for such tools.

One could make a hypothetical argument that if a known terrorist planted a bomb that would kill thousands of innocent people and the terrorist was caught before the bomb exploded it might be considered "for the greater good" to use extreme measures to find out where the bomb is and how to disarm it.

Yes, it is a contrived example, but some nations have had to make similar decisions. I am not saying that I agree with such choices, but I have never faced such a decision. It's hard to know what the best answer is in such difficult circumstances.

Is it right to torture people? No.

Is it right to let innocent people die? No.

So what is the ethically correct choice?
Yes, and if you want to advance the argument that finance is too well-regulated for anyone to ever break that separation, no matter what the incentive, that would be a great contribution to the discussion!

But that's not what the original comment[1] was doing. It was just saying, the roles are nominally separate, therefore there can't be collusion, which is a hasty inference I was right to call out. I completely agree that a different argument, one not made in the comment I was replying to, might not be so bad!

[1] https://news.ycombinator.com/item?id=35956915
I have some experience with previous AWS IAM policy language and evaluation, but not cedar directly. Some context that might help:

C2a: think of the use case around a centralized policy & identity store with lots of independent services consuming that. The services dont know or care how individual users create/store/update their policies. Nor how other services perform authorization. Each service is the only source of truth for that services requests, and must supply the necessary API request context etc.
C2b In addition you could certainly build a “cedar service” that owned identity policy and identity context then joined that with the services context to perform the access evaluation.
C2c: Conversely if your service is much more monolithic, with no central trust or trusted peers, you could do all of the above inside your mono-service. But batteries are not included here.

C3: I actually dont know how to feasibly accomplish this with a capability based system. As youve mentioned authorization is very dependent on context, which is typically dynamic. Eg it might include time checks, source/dest network address, or even things like the machine identity that sent the request. It seems youd need to populate all the potential context to perform an evaluation, and a simple index/enumeration doesnt fit. Very interested if you have counter examples.
Public transit systems often have their own police force because they cross many jurisdictions. In my area, the public transit system includes boats, busses, subways, trolleys, and heavy rail...normal cops aren't trained in how to operate in/on those systems, which can easily be lethal in a lot of ways.

The system crosses at least half a dozen counties, two states, and has a diameter of over 70 miles.

Stop making everything into some corporate-fascism nonsense.
> trustless system

Crypto let's you choose who to trust. You can build your own wallet, you can buy one, or you can choose to let someone hold your assets for you.

Many people will choose to trust large centralized parties, and some will choose to generate their own keys offline with code they've verified.

Do they have to trust that any cryptographic libraries they use generate seeds properly? Yes, but there are plenty to choose from that are well known, well tested, and the developers are funded.

It's not as simple as saying "the entire premise of crypto currency is flawed because you have to have some trust." The people that much of the crypto community don't trust are large bankers and governments.
I still don't get it - how do you define rules by PID and make it work after the next reboot? Won't the PID change for the process in question? I assume by PID we are talking about the same Process ID that we can see in "ps"
What’s ‘fun’ is splicing in a remote switch so you can just flip that screen off whenever it wants to start showing ads - and what’s even ‘funner’ is the company seeing that you’re doing it via metrics
What do all these things have in common?

MS Visual Basic 6, MS ActiveX, MS Silverlight, MS Visual Foxpro, MS C# .NET Compact Framework, MS ASP.NET WebForms, MS ASP.NET MVC, MS Windows Communication Foundation...

I think there common is a theme there. But shhh, don't tell him.
The claim here is not about expectations. random(X) is identically distributed to random() * X, even if X itself is a random variable, because the randomness in random() is independent from the randomness in X. Indeed, the way you would implement random(X), if you only had random() and X available, would be to compute random() * X.

So in particular, random(random()) is identically distributed to random() * random(). (To be clear, this is different from random()^2, as pointed out elsewhere.)
The study itself warns it was a small sample set and thus a small number of infections, and at that level it's possible a number of cases of illness sufficient to change the risk ratio were missed in either arm of the study, since they were essentially self-reported. Furthermore, because it was a strictly pediatric study, it would be very iffy to generalize this to adults.

But let's go ahead and stipulate the conclusion is true. The takeaway message is not to _not_ protect against influenza, it's to find better ways of protecting us from the other seasonal respiratory viruses. Relying on viral interference as a way to avoid infection is like starting a fire in your house to avoid the wildfire outside.
As long as we have elected sheriffs this will continue. They basically get to set the policy without accountability.

On the other hand, I get why. There has been a history of bad apples, and now everything is scrutinized. Can't pull someone over anymore without it being plastered all over the news where everybody picks every frame apart.
This is so cool. I'm wondering, is it because I was born in the 80s, or was the initial computer era more magical than now? It was all new but at the same time you could understand it. I could open my 286 and invert some fusibles until it was in a flashing loop at boot, or change my dad's autoexec.bat with random values and stop his (powerful) 486 from booting. Then it was all fixed when we brought it to his techy friend, who would give me the "what did you do this time?" look and then laugh.

PS: look at Amy's Art section of the blog, it's awesome!
You Can Play Doom Eternal and N64 Games on This $10 Desktop Calculator
You don't have to trust that at all. You can verify that the wallet signs a message with the correct private key that was generated offline.

When you send funds to the wallet, you don't need to send them to the address that the wallet presents, you can send them to the address you calculated during offline key generation. As long as you use the Trezor derivation path on your offline machine, it's predictable what the first address will be.
I get really excited about this one!

Right now we don't do anything about it. BUT - I get excited because our wake word detection and speech rec is so good I have to go around my house and unplug all of my other devices when I'm doing development because otherwise a bunch of them wake. So it's good and bad right now :).

My thinking hasn't completely formed but I believe I have a few potential solutions to this issue in mind.

I've been replying to comments for 12 hours, can you let me slide on this one ;)? I promise we'll start discussing/working on it publicly fairly soon.
Galileo didn't have evidence of his theory? Surely he had a little and didn't just pull it out of thin air. How much evidence was there for the Ptolemaic system?
To be pedantic, rms is an uncompromising absolutist on free software, not open source.
Is there a PDF version of this somewhere? I looked for a link to one on the site but didn't find one.
You are correct that Make is being abused because it's common. Me, I'm going to keep abusing Make vs bothering to find something supposedly better, that will then inject dependency startup problems I'd rather avoid.

Yes, abusing Make the way I and many others do is not the ideal use case, but it works just fine. It's good enough at being a task manager.
And yet you have been alive longer than deep learning has existed, with more capable hardware than anything yet implemented in silico. Much of that time spent alive has trained things like planning, pattern matching, theory of mind, etc which all transfer to a lot of other tasks you do

IMO it’s a meaningless comparison
I think this is the first time I've heard of a successful long-term career, and general life-fufillment from one of these outlier prodigies that are doing difficult university degrees in their early teens or younger. Terence Tao's another one, and in the past there's plenty, i.e. Mozart, John von Neumann etc.

But, I typically hear of the other extreme these days - child prodigies that struggle to fit into society and end up underemployed and neurotic. Maybe its just a selection bias (its not newsworthy to report on fufilled, grown-up child-prodigies doing their 10th postdoc in knot theory)...
The idea of invasive centers on the notion that ecosystems are largely static. But the reality is the environment is dynamic and always changing, with or without humans. Life has always migrated all over the place. There is no ideal state of nature. There's no lasting equilibrium. Yes, humans speed change by giving species a ride to other places. But a new dynamic will be achieved.
You're using the proper noun 'God' again - do you have a specific one in mind, or are you suggesting all gods - some 18,000 or so? - are all proven by the existence of life?

I'll gleefully agree that DNA is complex, and certainly more complex than the Ptolemy-related ramblings on a 2200yo stone tablet, but I do not agree that gets us to:

life is complex ⟹ god(s) exist

Things that aren't complex include the 'inspired by deity' writings from 1200-3000 years ago, that all fail to exhibit any of the anticipated god-level complexity, and instead concern themselves with despairingly pedestrian affairs such as rules around food preparation, slave management, agricultural practices, treatment of enemies, other gods, etc.

All of which sound much more like the contemporary concerns of middle aged blokes somewhere on the mildly literate to reasonably angry spectrum.

One would hope a deity that could countenance, let alone create, the complexity of DNA would have far more compelling interests than worrying out loud whether my shirt was a blend of polyester and cotton.
> So how many times is that on average?

Certainly it is a number 0-many

I know an uncle who has had it twice

I am ineligible for the procedure as my farsightedness is too severe when coupled with a thin portion of my cornea

I would guess the first surgery is generally the most severe and the followups require less material removal, but I think your research is probably more detailed than mine at this point.
That rule would make every adult in the 50 states and DC (*exceptions may apply in North Carolina only) police.

The state has a monopoly on violence but it does not restrict the use of its monopoly to police; it graciously allows anyone to advance the state's interests. A better definition of police probably requires mentioning immunization from the consequences of exercising that violence.
Barnacles can cut you pretty badly if you're not aware of them, and they have a habit of reproducing. When you have a large colony on the hull of your vessel they impose a nontrivial amount of drag.

(I'm more committed to the bit than this position though, it's a judgement call that an engineer must make relative to the requirements and resources available.)
For anyone who's interested in a technical writeup of the implementation, I did one here: https://mjg59.dreamwidth.org/66791.html . There's code in the iOS app that would mitigate the MITM issue, but would also restrict users to only being able to read encrypted DMs on a single device, and it seems like they decided functionality was more important than security in this respect (which is not an unreasonable tradeoff, as long as it's well-communicated to users). Group conversations are also unsupported in the deployed codebase, so the concerns I had there may end up handled in some other way (though it's going to be difficult to manage that and also retain reasonable user experience). The perils of reviewing code before you can actually test the feature.

Overall I think my original conclusion still holds. If you're going to use Twitter DMs, turning on encryption is better than not doing so. But right now it's protecting against someone with opportunistic access to the Twitter prod databases, not an advanced attacker or someone with subpoena powers, and if you have to worry about that you should definitely use Signal instead.

(Edit: someone asked whether working on fruitflies would have been more relaxing than reverse engineering weird encryption, and I wrote this reply, but they'd deleted the comment. You get the reply anyway:

Reverse engineering fruitflies means reverse engineering something that's almost entirely undocumented, what documentation does exist is frequently wrong, that has almost 4 billion years of tech debt, that relies on self-modifying code, executed on a series of components that aren't fully deterministic, that can only be bootstrapped from existing fruitflies, that has no debugger, that had no functional specification, that has an instruction set where the behaviour of an instruction can depend on the three dimensional structure of the encoding of those instructions and so be influenced by instructions that are several thousand (if not million) instructions away in what looks like an entirely separate compilation unit, and if you change the temperature or humidity or any number of other apparently irrelevant factors will just behave entirely differently. And, if you fuck up, you suddenly have a room full of fruitflies.

So, yes, reverse engineering Java is definitely more relaxing.)
The main branch of the public library seems to be a popular choice.
This guy did come first in that national math competition