skysight-inc/HackerNews huggingface dataset:
I think the key is that nobody "wants" to spend any time at all on CI or their build system. It is one of those necessary evils that you have to do to have functioning software. Once you do it, even if it's a slow buggy pile of hacks, you will just ignore it until the pain gets very very bad.

This was the same problem that caused our team to abandon CircleCI. They kept wanting us to rewrite our CI configs, touting various benefits that we just didn't care about. All we wanted was for our janky broken builds to keep working 90% of the time, like they did before Circle tried migrating this or that.
For some things like SSL/TLS, Elixir is mostly just syntactic sugar over erlang features. I didn't find it trivial when I was trying to figure out SSL/TLS issue but worked fine on same OS but different language stack. Keeping track of versions+patches of Erlang, Elixir and Phoenix for a web app may be trivial until you run into something where its not Elixir then you have to dive into erlang things. I was merely pointing out it is in fact another step people may have to take.
Something to consider when evaluating languages. I ran into this with an app that does a lot of API calls externally, dealing with many varying TLS certificates.

Fans of Elixir out in force today downvoting dissenting opinions even though its valid.
Data exfiltration works just fine with a locally downloaded SPA. There's Script/image embedding as you mention. There's also iframes and form submissions.

As for XHR, the same-origin principle doesn't prevent the request from going out; it prevents the response from being readable by the page. Even so, a remote site can add the right CORS headers to allow access from anywhere, and your browser will happily send the data out AND allow the page to read the response.

You could probably mitigate most, if not all, exfiltration using a CSP [1] that you manually add to the HTML meta tag.

The reason for using a local copy is so once I verify that the copy I have is "clean" (either built myself or reviewed, and confirmed to not send data out) then I can trust that version until I replace it.

If I load data from a website, there are no guarantees that I don't get a different version every time.

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
> Google can and should modify their algorithms until the site that users actually want is first.

Why?

Google is an ad company, that has integrated search.

Why would they cut their own bottom line in order to make data happy?

You aren’t their customer. You are Google’s data. Google’s customers buy your data.

Why would they change anything about their business model, which works amazingly well?
It could be like resistors, where there are separate stripes for voltage, wattage, data transfer speed, DisplayPort version, thunderbolt support, etc.

So you’d know a cable with red-green-black-blue-yellow was good for up to 60w @ 20v, USB 3.2 transfer speeds, DisplayPort 1.4, no thunderbolt, no active electronics.
Users are pretty much always able to choose their search engine. I don't understand what you mean by "give users the choice of default search engine". What would that look like? A global vote on the defaults for various platforms?
Theoretically yes but using GPS time of flight to synchronize sensor triggers to within tens of picoseconds is so far outside of "amateur" that you might as well incorporate and start replying to DoD RFPs.

When your math starts requiring relativistic physics, it's a lot easier and cheaper to just run some fiber.
In Micromouse (https://en.wikipedia.org/wiki/Micromouse) - a competition where autonomous devices solve a mouse maze - the fastest competitors are all using fans to increase traction (and thus speed).
just wait until Tesla makes its DoJo into a software-as-a-service
Kagi returns the expected link first, for what it’s worth.
Sorry, I still don't follow. With SMS 2FA the attacker needs strictly more information as compared to just a password. It doesn't matter if you log into your bank account or twitter.

Did you mean a TAN for protecting individual transactions? I file this under authorization instead of authentication. But even then a SMS TAN is better than no TAN. I cannot see a scenario where adding SMS authentication makes things less secure.
Google accused of abuse of power over search monopoly
Not an answer to OP question, but if you find yourself googling "python endswith" (as per example) then your DX is somehow broken.

Invest in good code editor with linting. No more googling for such trivial things
The term for this is Administrative state

https://ballotpedia.org/Administrative_state
> Basically, if you're not using it (and you shouldn't be using such functionality on a production machine), then you don't need it and should disable it

Actually, most everyone wants zero-downtime config reloads. The API is necessary to perform config reloads.

As others have said, you may use a unix socket instead for the admin endpoint. And see https://news.ycombinator.com/item?id=37482096, we plan to make that the default in certain distributions.
> Anyone else find it strange how the author uses CI as a noun?

Do you mean using the term "CI" with no other modifiers/qualifiers?

> Also the idea of running CI on your laptop seems questionable at best, downright irresponsible and insecure at worst.

Didn't you also use CI as a noun here? And isn't it a noun?

> Sure faster builds are nice, but by the time you're running your code through CI/CD its not usually after adding a few lines of for a feature, it's when the completed feature ready to merge or some sort of integration test is needed.

I hear you, but not necessarily. You might have a test suite that runs in CI and after you open your PR, you continuing pushing to it and it's nice to have a fast pipeline.
Sure, but MFC is from Microsoft.

wxWidgets is not and things may have changed but my experience with most cross-platform libraries back in the day was that they could get close but never get real native UI experience.
Show HN: Rental data supplied by tenants in Ireland, searchable by all
I created https://www.howmuchrent.com last Friday to help bring this kind of transparency to Ireland, allowing people to submit their rents. Would love to get any HN feedback on the idea/website.
Does anyone here use Efani? They are a security-focused provider, and the only one that claims to have had zero SIM-swap attacks successfully executed against them. They are an MVNO.
> I find myself landing there from google results to a question they had closed as not worthy of the site

Well, you did google for the question and not for the answer. ;)
While weathering hurricanes in Florida, self-powered landlines were a reliable means of communication, even during a neighborhood power outage. It's sad to see these go.
Is this for some kind of
[European?] [electric?] Formula SAE equivalent?

I took part in formula SAE ~20 years ago! Some of the first and most rewarding engineering work I've done.
This shit is so frustrating, every query I ever have for Rails stuff goes to APIdock
It very much depends on what you are building and testing. I work on a distributed database and while our build takes like a minute, the tests take hours and we run them on clusters we start on-demand. Getting our CI faster, has been a constant effort for years that quickly pays for itself.
How do you square what you say here with your prior comment that unity is driving devs away?
"making your (secured) admin panels accessible via tor"

Very good suggestion, thanks!
A potential issue with heavily processed foods is contamination with substances other than what's on the ingredients list.

E.g. some mass produced dry pasta is extruded through parts coated in PTFE, which contaminates the pasta.
Social Media (Basic Expectations and Defamation) Bill 2021

> 6 Investigation of complaints
> (1) The Commissioner may investigate a complaint made under section 5.
> (2) An investigation under this section is to be conducted as the Commissioner thinks fit.
> (3) The Commissioner may, for the purposes of an investigation, obtain information from such persons, and make such inquiries, as the Commissioner thinks fit.
[1]

The phrase "The Commissioner may" and the "as the Commissioner sees fit" each appear twice

> Part 5 of the Bill will when enacted create something called the Independent System Operator and Planner, a legal person (‘likely a company’), which will do all sorts of vaguely-defined but important things, like ‘co-ordinating and directing the flow of electricity onto and over transmission systems’, ‘carrying out strategic planning and forecasting in connection with…the conveyance or supply of electricity [and] the conveyance and supply of gas’, ‘providing advice or information’ to government ministers, and so on. And the Bill also mandates that it shall do these things in view of three requirements: to achieve Net Zero, to secure energy supply, and to promote economy and efficiency.

As part of the bill under discussion in the OPs article.

Those are just 2 instances I found without much looking.

Sauces:
1. https://www.legislation.gov.au/Details/C2021B00157
Hard disagree: I think it's awesome how all our recent 20V chargers double as perfectly fine (even if wildly overbuilt) chargers for simple one-cell devices like mice or Gopros or, well, anything you throw at them. It's awesome, so much better than having a zoo of chargers standing at the ready.

The only thing I miss from the micro-USB days are really lightweight cables (and plugs)
I'll take this opportunity to plug "Peopleware: Productive Projects and Teams"

https://en.wikipedia.org/wiki/Peopleware:_Productive_Project...

It is my favorite book when it comes to practical advice on managing software development teams.
Seriously? Your claim is that Apple is afraid being able to make calls on an iPad would cannibalize iPhone sales? You think this is what's preventing people from walking around talking on iPads? Apple prevented calls on iPads so that AT&T would offer a cheaper cellular plan for iPads. Apple completely cannibalized their iPod business with the iPhone. They have proven over and over that they will cannibalize their own product lines.
Exhaust, noise and particles from road vehicles (even electric) also kill people.
Yeah, I totally grok the fastidious corrective path upon which you sit, its just .. as a person .. I know absolutely nobody who used the proper terminology for these things, we'd also often just call them a "9'er" (DE9) or a "chunky" (DB25), which could be a cunt or a fuck, depending on sex.

Especially, rather late at night, deeply embedded in the A/C ducts and 'services tunnels' of the various hospitals, skyscrapers and other locations of this particular company, for whom I rashed my knuckles, bent my noggin', thrashed the chiclets and hacked mad code for long enough to know, that as long as someone else knows what you mean, it doesn't matter what word you use... as long as they fucking don't drop the thing into the abyss before you can embed burn tracks in your flesh and get it secured in place, to be left for the next damn junior fool who dons the overalls and climbs into the hell of it all, to upgrade things.
I wish someone made a cheap cable tester, sort of like the chip tester pro but for cables.

These days I just toss out all the random USB-C cables I get and replace them known (expensive) cables.
I see it in supermarkets, often kept by the customer service counter.

I've seen several places requiring ID to purchase dry-ice to avoid youngsters making soda-bottle bombs with it.
For me, it was Skittles! I traveled to the UK, bought some Skittles, and almost spit them out (blackcurrant instead of grape). Had to look up what it was. Still haven’t tried the real thing, only in candy form.
You don't sound very democratic either.
how many gees is that?
FWIW, DuckDuckGo gives me the same crap results[1], but at least the !bang syntax works.[2]

[1]: https://duckduckgo.com/?q=python+endswith

[2]: https://duckduckgo.com/?q=!python+endswith
What do you find so problematic with tor?

I've been using another chat app that uses tor (briar) to chat with my family and the chatting app has been working flawlessly for us so far.

Tor curcomvents the nonsensical restrictions that isps place on users and makes it very easy to build p2p applications. No need for stuff like nat stun turn. Just exchange public keys and go!

If anything, I find it weird that other p2p chat apps don't use tor given how easy and reliable it makes the chatting UX.
This reply is from another (major) Linux kernel developer.

For those not in the know, gregkh = Greg Kroah-Hartman

https://en.wikipedia.org/wiki/Greg_Kroah-Hartman

> broodbucket
I have no real experience. I came across this a while ago, but never got around to implementing the project I was looking at using this for.

https://learn.microsoft.com/en-us/power-apps/powerapps-overv...
There are many people out there who can barely afford a car. On average gasoline accounts for ~16% of people's transportation budgets and ~2.5% of their take-home pay (obviously, these numbers are using average everything). A $2/gallon tax is an increase of a little more than 50% (not in California, but using the US average price). So that's more than 1.25% of their tax home pay and 8% of their transportation cost. That's a lot. And again, those are averages. For people at the bottom it's worse.

It's not a lot if you are making six-figures. But for a lot of people it quite literally puts driving to work as too expensive.
How to Protect Yourself Against a SIM Swap Attack (2018)
100 km/h, to remove any ambiguity
The title is clickbait and not the title of the paper.
iPhones are used for professional videography, so for those people, all the time.
YC was unique because it was helping nerds who would never start a company on their own, start one while protecting them from the VC leeches. YC is maybe the one unique case although these days I'm not sure of it's value as much.
Technically it was shipped as a plugin for Caddy back then, it wasn't actually part of Caddy proper. Now they ship it standalone and recommend to reverse proxy to it. IMO it would be nice to still have the ability to include it as a Caddy plugin, but alas.
Because Google is run by business executives and clueless product managers. The engineers have been forced into the back to only think on whatever the current sprint is and told to buzz off when it comes to biznass decisions only those with MBAd can solve.
>But the more delicate berries not so much.

I have a mountain of experience freezing wild maine blueberries and wild strawberries. They both freeze just fine and can be eaten as is after thawing, a little mushy but still clearly the proper flavor profiles.

My grocery has an entire section of frozen berries.

Frozen berries will travel just fine and be delicious anywhere. Most berries don't cross significant borders because A HUNDRED YEARS AGO they couldn't travel well, and so local tastes diverged. Consider, gooseberries are easy to find here in new england when they are in season, but you still wouldn't see something like a gooseberry soda, because that's just not that popular of a flavor.
You could argue the same about other types of buildings too. You are going to a restaurant, a McDonald's, a Cafe, a Taco Bell, a bar that also serves food and so on. People make a distinction between those when they are all places to eat food. Sure the food differs, the way you interact with the staff too etc. But they all serve the same core purpose, yet people call them different things. The same way, people go to different places of worship for different faiths, with different expected behaviors and building designs
Pretty sure 95%+ of crypto “investors” are in it for get-rich-quick, rather than some sort of “zero trust” ideology.
> presumably because they can't track purchase revenue

So tracking installs and distinguishing between pirated and legit copies, and fingerprinting consumer hardware, and dealing with malicious or troll installs is going to be something they're somehow better at?

I can't prove Unity's motivations, but I can quote directly from their article:

> Qualifying customers may be eligible for credits toward the Unity Runtime Fee based on the adoption of Unity services beyond the Editor, such as Unity Gaming Services or Unity LevelPlay mediation for mobile ad-supported games. This program enables deeper partnership with Unity to succeed across the entire game lifecycle. Please reach out to your account manager to learn more.

and I think it's reasonable to at least entertain that it's not enforcement trouble that's causing them to create this policy. Not for the least reason being that they still have a revenue requirement sitting in front of this policy, and they still need to engage in the exact same accounting and fights to figure out which companies have made $200,000 so they can start charging them per-install.
In what way is this a standard?

Where can I read the specification?
probably to do with realpython blocking content with the popup unless you sign in.
Google has never worked this way. By adding more examples to an SEO article you are also actively farming long-tail clicks, which will make people spend more time on the page and if Google was to use that as a metric (there have been rumours) then it is beneficial to the SEO site as well.

Like I said, Python or any other language can fix this issue by changing the entire mindset of how documentation is built. You can then get the OSS community involved on GitHub to slam dunk on all the SEO spammers.

Just look at MDN or Web.dev, both have their content repos up on GitHub and people contribute metric tons of useful info. And both of these sites have healthy standings in the context of SEO.
Yes, thanks, t0mas88. I have some more questions but I can feel myself drifting into the weeds a bit, and your comment was extremely helpful as-is.
I've completely stopped using Google for this kind of thing. ChatGPT or devdocs.io to go straight to the docs
Google shouldn’t whitelist them but use them as a test case for the ranking algorithm. If a content farm comes up ahead of the official documentation site then the algorithm is obviously broken.
There is no virtue or happiness in being Too-Smart-to-Care about the lives, beliefs, or histories of other people in the world. Its certainly ok not too care, but to feel the need to signal this and imply some kind of superiority with it is a short road to a bitter solipsism.
I highly doubt this. It is already a pretty regular occurrence for ICE cars to combust on drag strips
I think the idea is to run the CI on your laptop for debugging and building the CI process itself. This dramatically shortens the build-test cycle (for the CI, not your product). Instead of "edit, git push, wait for runners, download logs, stare confusedly, repeat", you have "edit, run locally, watch logs, stare confusedly, repeat". Plus you can get real access to the actual runners, so maybe you can do things like strace, gdb, etc to see what is going wrong.
(Quiet founder here) Yes! This is very underappreciated! Tor is like the Internet we all dream of having: forever addresses for everyone, with built-in hole punching.

Tor startup and onion address connection times can be slow, but this is improving!
That's a very specific and small target to aim. Your victim not only has to use an email with their own domain, but they also need to have their domain expire at about the same time as they die. Wait too long and the family already had access to the bank through traditional means.
And a weirdo who hates a developer could keep auto-reinstalling (or just re-triggering the "new install" signal to unity servers) 1000 times per day, every day.
Odd, because Apples already implemented a thin client on iPhones, it’s called CarPlay. It can work over usb or Wi-Fi.

Otherwise I don’t see apple ever allowing a device to be a one stop. If they were going for that then it obsoletes stuff like handoff and universal control.

But really, why do people actually want this? If you’re using your phone for work then it’ll probably have to be domain joined. Then at that point your employer has eyes into the one device you use for everything
While I believe this is still a bad metric, I also believe that finally it should be up to the user to decide which sites they want ranked first - I'd definitely boost python.org while banning these content farms.
Yes. But the military has effective, focused training with little room or tolerance for bullshit (now, overall, yes, it’s hilariously bullshitty as an organization, but the training tends to be about as serious and efficient as you’re likely to find)

They also have a couple other benefits:

1) The clear command structure, obviously—however, I think the “they gotta follow your orders” aspect gets overstated in importance, and is actually a minor part of it.

2) There’s minimal experimentation and bike shedding. Low and mid level managers have little room to fuck around with whatever new method from the idiotic airport book they read last week. Here’s how we do it: now, go do that. This is how you manage, and how you run things, if you don’t know what to do, here’s the document you read, and here’s who you talk to.

3) Crucially, 2 is supported by having a well-defined way things run. Most corporations are an absolute mess of tribal knowledge and fucked-up procedures that nobody with perspective realizes are fucked up, by comparison. Officers and high-level NCOs move around every couple years, and everything’s got to be ready to keep running even if the #1, #2, and #3 guys in, say, a brigade, all get killed at the same time. Your military’s simply fucked if it’s dysfunctional in the same empire-building, managers running around doing their own half-baked thing, onboarding is an afterthought, any new VP can radically shake up the way whole segments of the company run on a whim (and different divisions might run totally differently, probably not for any good reason), way that most corporations are.

4) They actually train leaders. How many companies do that? Of the ones that do, how many take it even 1/10 as seriously? Almost none. Companies act like leaders have to be minted by an MBA (and, let’s face it, being the Right Sort) and like most people aren’t really cut out to be leaders and have to prove they can do it before they get any support or training at all, or like leadership is some secret that only those who’ve figured it out on their own deserve to know (why, imagine if leadership became too common a skill! The horror—for managers’ salaries). The military’s approach is that leadership’s not rocket science, and most folks with half a brain can be taught to achieve some useful level of leadership skill. Will they all be great? Will they all be generals? No, but most folks could be trained to be bottom-of-the-pyramid managers at least without doing too horrible a job of it, on average. And unlike an MBA that’s full of learning about business more broadly with practical leadership training as a kind of side-quest, military leadership training is focused on leadership per se. It’s efficient, and honed to reliably produce fairly OK results, at least.
We are to a point where I think Google should start manually de-ranking content mills and blogspam, or even stop indexing them altogether.
Yeah, but this is just rails folks bristling at someone calling their baby ugly. People like to pretend that it's just technology, but there's always personal, emotional investment in the choice, which leads to a need to defend it against perceived attacks.
Often that "loophole" is making themselves too expensive or difficult to prosecute rather than finding an actual hole in the laws.
I rarely visit Reddit anymore. But that's more about Reddit dooming third-party clients than the boycott. Does that count?
Then it seems it is not really a true democracy.