skysight-inc/HackerNews huggingface dataset:
The trend we are seeing across the tech industry and business in general is to know/consolidate/extract/exploit. Even users who pay now are still "the product". Who are the buyers? Intelligence agencies, both governmental and private who have different aims, but with the same intermediate goal is to know everything about you.

The only (ONLY) motive is profit. Growth, growth, growth above all costs at the expense of people and the environment. Jeff jumped into this thread to try to color it with verbiage such as:

> we came to the conclusion that the world doesn't need more communications, it needs better communications. More relevant. More effective.

This is another way to habituate and legitimate the exploitation of users for those few who profit. An example, is the A2P 10DLC registration that is being forced on users of the product that will charge a registration fee, a vetting fee, and a recurring monthly cost. From what I can tell, there is no legal basis forcing this. The Telco cartel got together and came up with a way to make more money off of you. Sure they will talk about it in terms of "improving your experience" and "stopping spam texts". While there may be a kernel of truth in there, that is not the main reason. Go back to rule number 1: profit, profit, profit.

It is a shame that the Telcos are strong arming the CSP middlemen to make them abide by these rules or not deliver their messages. And of course that rolls down to the end users.

But I think the bigger issue here is that they need to know exactly who you are in terms of registration. Blocking VOIP numbers for OTP verification, etc etc. Why do you think this is? Because they will take all of the data you provide, the metadata you produce and sell it to third parties for profit at your expense and without your consent (or otherwise wrapped up in a "privacy policy" that is too long that no one reads).

None of what I am saying is new, it is the same old playbook that most people are ignorant of. I suggest reading The Age of Surveillance Capitalism by Shoshana Zuboff for a deeper study of this topic.

If you would like to refute any of this @jeffiel I would welcome it. I find the forced registration of A2P 10DLC absolutely horrifying. The trend for everybody is to put them into a "pre-crime" bucket. In doing so, we lose all privacy on the web, and with it the web itself.

Edit: I don't know Jeff and I am not making my comment about a personal attack or a character (mis)representation. My point is to look at trends in general, at the decline of privacy for the growth of profit, and how language is used to characterize it as something else selling it as you are getting a better experience through personalization, relevancy, effective, etc. Zuboff touches on this in her book and it is recently in my mind so my comments are coming through the lens of this recent discovery. However, the larger anti-privacy trend and centralization across the web is not new, and I stand that we are all losers if we allow this trend to continue.
Hilarious conclusion from the author. It's almost certainly not the case that the owners of this service are using it to 'DDoS' targets, rather it's much more likely they are using your device to host a proxy server and then selling access to some 'residential proxy reseller'.

On the other side of that, some random Joe has probably purchased access to a set of these 'residential proxies' and is using them to scrape flight data from the airline site the article author noticed, with some of those requests being sent over the author's connection.

Many 'free vpn' and 'free proxy' apps engage in this behavior, you may proxy your requests via their connection, but they also proxy their requests via yours, generally reselling that access to someone who finds your IP address to be of value to them due to the fact that it's not a datacenter address.

It's certainly questionable to straight up unethical either way, especially so if the service doesn't disclose to you that they're doing that, but on the other hand I find the author's DDoS conclusion to be so contrived and out of touch with reality that I had to write this comment.
I have been writing GraphQL APIs on and off for the last 5 years, and in practice haven't had many scenarios where this was an issue.

In GraphQL the query for the example you gave could look like this

```gql
query {
user {
things {
owner {
id
}
}
}
}
```

When resolving an array of type `Thing` for the `things` field, you would query for the user that the `owner` field represents. Rather than assuming all relations should be loaded for an owner by default, the client would specify the fields for the `owner` that it needs. Such as I have above for the owner id. Even if no fields are specified, it would be weird to assume all relations should be loaded by default.

Now if your developers are intentionally creating infinitely deep queries, then you'd solve this the same way you'd solve an infinite loop in your code today. An issue you would catch during development or CI/CD. This can be easy to catch using a linter or during review.

```gql
query {
user {
things {
owner {
things {
owner {
things { } # etc
}
}
}
}
}
}
```

To simply protect from bad parties / developers, you might use something like
https://github.com/slicknode/graphql-query-complexity

In addition you could introduce CI tools to enforce your devs stop writing such complex queries. Also see the @skip and @include directives that can further be used to control what data is queried. In practice, however, this isn't something that comes up too much. In cases where I have seen this happen, it's usually because a developer is trying to reuse fragments without considering what data they are querying, and whether they should be reusing those fragments.

https://graphql.org/learn/queries/#fragments
I'd consider that an insult to Amsterdam, a place far cleaner and far safer than SF as a whole and the Tenderloin in particular.
Middle click paste to the rescue. Just have to combat sites that prevent text selection.
Unless you go full blown DoS you will not be able to scrap 100.000 of articles multiple times a day. Geizhals for example compares prices every 10 minutes. It does this by working with the stores (they provide a price list) not against them.

If a store owner doesn't want the reach, it's their loss. IMHO no need for a DoS attack.
Have you brought this up with your spouse (at a good time, of course)? If you're thinking of torpedoing the relationship anyway, might as well risk offending/upsetting her.

I don't know a thing about you, but there are plenty of people (especially people who have bullied, who I suspect would be over-represented here) who aren't necessarily surrounded by toxic people but fail to advocate for themselves and communicate what they need.

If that describes you, then you're going to be "taken advantage of" by everyone, even people that don't want to have that sort of relationship.

I've become more assertive in my relationship over the last couple of years and it's done wonders. There's a guy who works for me that needs to do the same too...
It's more like that the bottleneck is any of the following:

1. Infrastructure
2. Architecture (not sufficiently decoupled, insufficient cache design, etc.)
3. Database/storage limitations
...
...
99. Rust
It sounds to me like the two perceptions of your previous startup are pretty well aligned. You felt your partner was coasting so you checked out. They felt that you checked out. Maybe they were doing more than you realised, or maybe they were just freeloading.
Ask HN: Are we ready for embodied robotic agents?
I remember seeing Boston Dynamics videos and thinking , this is probably in the +10 years timeline. However there has been increasing papers [0] showing how robots can be grounded with LLMs. As artificial intelligence (AI) continues to develop, it is becoming increasingly possible to create robots that are capable of autonomous action. This raises a number of safety concerns, as robots could potentially be used to harm people or property.
One of the main concerns is that robots could be used to carry out malicious acts. For example, a robot could be programmed to attack people, steal property. In addition, robots could be hacked and used by malicious actors for their own purposes. In addition, robots could be poorly designed or manufactured, and could malfunction in unexpected ways. Specifically in this demo, this robot can be prompted to do things unforeseen.

Here are some specific questions that need to be addressed:

- How can we prevent robots from being used to carry out malicious acts?

- How can we prevent robots from causing accidents?

- How can we ensure that robots are designed and used in a safe and responsible manner?

[0]https://ai.googleblog.com/2022/08/towards-helpful-robots-grounding.html
[1] https://twitter.com/MetaAI/status/1670484372309573632
4g hats don't even work with many providers anymore since many US carriers are whitelisting only their allowed devices to send SMS on their networks.
What I'm after and can't seem to find are good quality¹ glasses frames that have (bone-conduction) headphones built in to the stems. I want to replace my existing prescription glasses with this.

¹ E.g. Spring hinges, nose pads.
> I think most of you all are faking it

The world is huge. We're all traversing different areas of interest and expertise.

It makes sense that there are lots of different types of domain experts in our field. This is a great place where they tend to congregate together.
Sure, the same people that absolutely cannot get their remote coworkers into a group chat for five minutes or have an ad-hoc Zoom call without scheduling a meeting, resolving schedule conflicts and sending out an agenda, are suddenly able to pick up "clues".
But even us as humans (or anything with biological intelligence) infers the rules from data.

The only thing is — we start collecting data since birth and we also don’t have to pay for every little thing we put in front of our eyes.

If you’re training an AI, you have to pay for data. If you generate some of your training data, you pay a little less.

(Also I think we ask of AI more than we ask of humans. For example, it’s common to be face blind of ethnicities you’re not familiar with but we get pissed if an AI is face blind at all.)
Perhaps a more accurate headline would have been this buried deeper in the article

"The US worked through Third World countries and fake companies and finally was able to ship the ore to the US to build the SR-71."

And to complete the loop, Russia is now importing sanctioned American microchips for its missiles via third parties. I wonder if the order form states they will be used in smart pizzas ovens.
Many carriers don't allow non-authorized devices like 4g modems to send SMS on their networks now. That's a recent change (last year).
Windows would have exactly the same menus had Apple not had a patent on them when Windows started out.
> Potentially, the role of office stints as de facto schools where employees can learn and keep fresh a view of their skills, task, product, and company, just can’t be replaced. And this will be the downfall of remote.

Well maybe it should be more explicit, where the office is literally an employee school and meeting place first and foremost.

I think many "engineer" types would accept some mandatory, but infrequent and planned in-office blocks followed by exclusive remote work.
Khachapuri was certainly known but hardly could be ordered anywhere outside few large cities or Georgian SSR. Most people who knew about it have never tasted it (as is still the case with me).
Well yes, but I have veto power for that reason, as lead engineer.

I am the lead because I know, from experience, not to allow this kind of nonsense to happen.
For my teams, we used Twilio services on projects very early in the company's lifecycle. Its always been a running joke about how the company's trajectory will play out. So far the cynics seem to have won out. In hindsight it wasn't very difficult to predict but the trajectory Twilio is on appears to repeat itself on more than a few of the tech companies we invested in or utilized. ugh! Moral of the story, is to get off someone else's platform as soon as reasonably possible.
And then someone else makes another site that also compares prices in different stores. Instead of scraping all the stores they can just scrape the first comparison site and invest the time saved into SEO :)
I would bet that that counter increments much more quickly when people say nothing about being off-target before it's too late.
The world is trivially not zero sum. If it were zero sum we would all be living worse off than medieval peasants
I don't think that's a universal definition of salary, though. I get paid the same sum every month, and I have a fixed number of hours I'm expected to fill per week. If I work ten hours more than that one week, that counts as +10 hours in the records, and that allows me to do 10 hours less at some point. Maybe next week, maybe next month, but it's in the books.

Please cite the language in your employment contract that entitles you to this. This would make you a non-exempt worker in the US and in many other similar jurisdictions, meaning that you're being paid hourly instead of salaried. Most companies with similar policies instead have the following language:

Comp time is granted to exempt positions. There is no legal requirement or obligation of [Company Name] to grant comp time to exempt employees. A supervisor may choose to grant comp time to exempt employees who are required to work in excess of 40 hours per week for special projects or during weekends or any normally scheduled time off.

Note "special projects" and "may choose to". The company is offering this as a benefit, not a requirement of the contract
BC gov?
I've tried this before.

As selfish as it sounds, saving (an expected) 186.328 lives in Africa will not create the "feel-good chemicals" that teaching a kid to ride a bike will.

Rationally, it's a good thing. But emotionally, I don't think it's actually all that effective.
Is there anything wrong with Mullvad?
No free lunch
Be aware that the voice chat is being recorded for "moderation" purposes.

https://steamcommunity.com/app/671860/discussions/4/67177293...
The phrase "throw a photo" coming from "tirar una foto" is kind of interesting. It seems plausible that since "tirar" can be translated as "shoot" as well as "throw" that the Spanish phrase may have had an origin as a calque of English "shoot a photo". Now in Miami it is coming full circle but using a translation of a different meaning for "tirar".

I wonder how the researchers determined that the 's' in "Thanks god" was from the 's' in "gracias" when we already had "Thanks" as a short form of "Thank you" in English. There is also the formula "Thanks be to god" that is common in religious writing.
That’s… an over simplification. But it’s an example of what happens when sales people are trying to sell jpegs and mpegs before anyone has done any development. It drives development to the point that virtually nothing is “done” and everything is half-done.
why is parent comment downvoted? in europe an anonymous payment of that amount is not even possible, i believe at least on payments over 10000€ (maybe even lower) you must show where it comes from.

i know the US are very keen on tracing payments to track criminal activity, so i very much doubt that anonymous payments that high will go through without someone taking a close look.

it is quite possible that an anonymous payment that high may not be legally accepted at all.
The most common practice is to turn N+1 into 1+1 using dataloaders (https://github.com/graphql/dataloader for JS, there are equivalents for most implementations). The N resolvers invoke a single batched loader which receives a list of keys and returns a list of values.
> And I don’t think it’s symmetrical: WFH people don’t have a reason to insist that their colleagues WFH.

Of course it is symmetrical. While designing a complex system, I prefer talking to colleagues in person over a whiteboard. Even if 3 of us are in the same room and 2 remote, my company forces everyone to log in and chat via Zoom. Separately from our individual laptops. We are not allowed to dial in from a conference room where we can use a whiteboard.
This is the same secret society that Alex Jones filmed worshipping the Moloch.
I don't think you two disagree, GP is just saying that large-scale rewrites are rewarded, regardless of the result. I've seen that happening even when stakeholders were unsatisfied.
Look into jfa-go. I run it on the side and it hard-integrates into Jellyfin and adds a lot of account management stuff and the group/policy specific config you're mentioning

https://github.com/hrfee/jfa-go
> Going away at this moment sounds like an irrational choice, but I was one I had to take, I had to place myself and my peace of mind ahead of anything else.

I can relate to this. No, I didn't leave my startup. I've worked with three startups altogether, including one of my own, which started off with a co-founder back in 2012. In the not-my-own ones, I was once the founding engineer, and once the fourth engineering hire.

Why didn't I leave my own bootstrapped startup despite the amount of pressure, chaos, uncertainty, and pain, all of which were setting in at the same time? Not to mention immense difficulties in dealing with co-founders and all the social pressures (home life, relationships, real day job at a fortune 500) and burning hard-earned cash to keep the thing running in the face of uncertainty and the very real likeliness of failure.

Why I nearly did walk out:

- Extremely unpleasant co-founder. Unsociable, condescending, biased - for instance I'm quite sure he perceived me as being worth less than himself because I had no wife and kids situation going on. Treating me as employee despite having equal shares in the company.
- No VC capital or outside funding. The expectation of having close to 0 in the bank account once the pay-day happens from the "real" job (and rent+bills have already been covered) sucked really, really much.

A few things spring to mind as to why I did not walk out:

- Luck. We seemed to have the right timing. There were almost no products on the market which attempted to solve the problem the way we did. There was a tremendous interest in our product, but we just couldn't get any significant number of people to convert, despite seemingly offering the right product.

- Having listened to feedback and tweaking the product (most notably the pricing/business model), we managed to achieve decent market capture (it took almost 3 years from) and that came mostly as a result of persisting through the cash-burn, listening to and evaluating all customer feedback, and iterating on many aspects of the product dozens of time. Fixing broken things and solving weird edge-cases which weren't weird in retrospect pointed to the fact that we were simply inexperienced. We still pressed on and sought to break through this barrier of having no freaking clue about this emerging market.

- The real break was the actual realisation of the for-reals breakeven. It changed the game - the point at which no money needed to leave our personal bank accounts to pay for cloud services, domains, tax accountants, templates, logos, you name it, was one of the greatest feelings ever. At point-breakeven the whole thing went from a "somewhat successful side-project which has been draining our personal bank accounts" to a project which could potentially provide enduring sustenance, and we might be able to take it further. At that point it became all the more compelling to press on.
90% of everything is crap. -- Sturgeon's Law
Going login-only would be suicidal. A large chunk of Reddit’s traffic and probably the majority of new users come from search engines, which login walls lock out. It’s not like Twitter where most growth comes from existing users linking tweets and user profiles.

TOS as far as I know is not legally enforceable, and even if it is there are people in countries that disregard such things who are training LLMs.
This is the thing that he pretty much got right.

After that, his record get rather, uhh, spotty.
Are you referring to the formatting/contents of the session token, or some other way to tell within seconds?
They don't support port forwarding which eliminates the main use cases for VPNs: https://mullvad.net/en/blog/2023/5/29/removing-the-support-f...
When I was building a website and companion app, I researched a lot of the open-source options for auth. My primary requirement was ease of setup and operation. I didn't want to mess around with JVM dependencies and 100% didn't want to start messing around with k8s for such a small project.

I was also very intimidated by the ORY stack. I didn't know how all the pieces fit together. And to self-host you pretty much need to run and orchestrate it on k8s. I'm not an auth expert, I just want a login thingy for my website/app.

I'm not affiliated with it in any way, but I really liked what ZITADEL[1] is doing, in case anyone else is researching their options. It has a very simple interface to get started with, but also a ton of features. It being written in Go is a huge benefit since that makes it much easier for me to throw it up on my vps and calling it a day.

1. https://zitadel.com/
How can we prevent robots from being used to carry out malicious acts?

In my opinion we can not. A tool will do what it was designed and capable of doing. It will be given orders by whatever human or other robot or pseudo-AI is controlling it. When a tool is misbehaving it must be disabled, reverse engineered to figure out who programmed it and then the person or company must be made example of to discourage this behavior. One need only watch iRobot starring Will Smith to see how corporate types will respond to incidents of industrial accidents.

Until such a time that robots are designed with multiple layers of safety then robots would have to be treated as dangerous tools and there would need to be legislated guard-rails in place similar in concept to firearm laws. Laws are usually reactionary so a number of people will have to suffer losses first.

I foresee mandatory certifications for different classes of robots, think obstacle avoidance on drones or levels of self driving and impounding and destruction of robots that are not certified or malfunctioning.
Ask HN: How to Learn Kubernetes
How was your experience learning Kubernetes at your work? How did you learn the different concepts, architecture, implementation and tools ? Which course, books, blogs, videos etc. helped to ramp up your learning ?
Am GP, it is finance based, but not commercial finance.

Most of the systems handle complex calculations. The system is a monolith that has been around for 15 years or so.

It isn't cool. It isn't pretty. Lots of it would be better for a refactor, but absolute stability is the goal. Refactoring things may result in long-term cost savings, but with risk. The business has no risk appetite, so it doesn't make sense. If it works, it stays, however ugly and costly.

That isn't to say some things don't get refactored, but there's a strict business case that needs to be met. Usually if the system is under performing, error-prone or end-users want features/performance that can't be accommodated without a refactor.

It's nice. The latest framework isn't being integrated year after year, there's no microservices, nothing fancy.

It's java. It's tested. It works. It makes money. It pays.