skysight-inc/HackerNews huggingface dataset:
> Taking control away from the owner of networks is a good thing. Control is supposed to reside with the owner of endpoints. To see why, imagine if your ISP started to MITM all of your connections that went over their network.

What you need for this is some kind of encrypted DNS. What you don't need is for it to be implemented in the way DoH commonly does it.

What you should have is a router, which hands itself out as the DNS server via DHCP, takes the client's plaintext DNS request and does an encrypted query -- ideally directly to the authoritative servers for that domain, but at least to something of your choosing. Or, you configure your device to do this itself for every application using the system DNS. These all work fine, because the device owner can reasonably change them -- you configure it in one place for every application or your whole LAN at once.

The problem with DoH is that it puts it into each individual application, and then its infeasible for the device owner to change it because it's a million settings in a million places and some applications don't support changing it at all. Worse, you get evil applications where the endpoint device is the thing controlled by Evil Corp and the local network is the thing the device owner is using to block spyware. At which point "the network" needs to be able to block this or malware and evil IoS garbage can operate with impunity.

The claimed workaround is that browsers try to resolve a particular name with the system DNS and then turn of DoH if it resolves in a particular way, but now you're back to this:

> It's a case of "can't, because even if you change the setting, $evil_isp will hijack the queries anyway".

Because then $evil_isp can just resolve that name in that way to go back to doing the MITM. At which point you've lost any benefit of the device doing this against a truly malicious ISP, or it becomes an excuse to remove this "feature" and then the device owner can't do it either.

This is the wrong way to do it.
The court of popular opinion gets to decide.
Can we get those bionic knees first please?
If you spend only ~75% of your time working (i.e. you can finish your work in 32 hours instead of 40), does this imply that in the event your company switched to a 4 day workweek you would be busy 100% of the time?

It seems more likely that people would retain a similar ratio of slacking to working.

As an aside, how does "I finish my work in 32 hours" even work? What does that mean? Are most developers out there getting paint-by-numbers printouts they need to color in and then they're all done for the week? Almost all of my roles in a professional capacity have required self-starting, and the project life cycles are much longer than a day/week such that there is literally always work to do.

If you're building a house and you're done nailing in shingles by noon you don't go home and come back tomorrow, you go put up sheetrock or install bathroom tiles. The "I finish my work in a few hours" that I see on HN and Twitter must be extremely poorly managed teams or people that are leaving a lot of work on the rest of their teammates.
Man, these kids today, huh? Expecting to be able to use PERSONAL computers instead of punch cards. They're lucky they have computers at all. If their managers tell 'em to use slide rules, they should feel privileged, I tell you what. And can you believe that they're not wearing ties five days a week? What kind of wusses are employees today with these polo shirts? Next thing you know, they'll be expecting to own their own automobiles and to have electric lights, refrigeration and air conditioning!

Goddamn, can you BELIEVE that expectations change over time? What kind of bullshit is that?

---

I won't bother to add the sarcasm tag for the humor impaired here, but if you don't believe that most remote workers are actually (checks notes) working, the problem is not with the remote workers. Bosses can demand whatever the hell they want, sure. But if it turns out that some bosses don't demand everybody come back to the office and those companies turn out to do just fine, well, that's that vaunted market at work, baby. Expectations really do change, and it is not reasonable to assume that every "knowledge" worker has to be in the office all or even most of the time these days.
Why not both?

Because of Reddit's api changes it's harder to track this, but at one point it was pretty easy to find accounts that only posted comments that had already been posted in the past.

Now, it's difficult to trace most comments under 7 or 8 words, but there were accounts that only had ever posted replies from other users. Just watching some threads in popular subs for replies that were exactly the same as others. Then trace both accounts. Sometimes one is a legitimate human, and one is a bot. Other times both accounts where pretty much every post in their account is something that had been previously posted.
Who, whom?
> The point is there exists a tax you have to pay for simply owning something

Not at the federal level, and the methodology used for computing effective tax rates in this article (both for typical households and the centibillionaires) is explicitly federal-only, so that's not really true.

I agree with you broadly but the Constitution does not permit a federal wealth tax. The 16th Amendment authorizes only income tax.
No worries! These things happen.
Thanks y'all for the context. I was mainly going on the context from that one slashdot link.

If he waited too long to sell and only got a ~$1 million that could quickly become $500k after taxes, especially in CA. Just another case of options/equity being worthless until there's cash in the bank.
These people calling marxists or communists people just wishing for social democracy, how much would it take to let them open a book sometimes, they’re a cemetery of human knowledge
Oof, or drag-to-reorder while supporting nesting.
Thank you! I treat them as documents, with some interactive elements. I tend to avoid traditional animations because they're outside the reader's control. I want the reader to be able to pause, slow down, speed up, rewind, etc. One thing I'm going for but haven't completely achieved is that I want the diagrams to be useful even before the interaction.

I am collecting some of the design elements here: https://www.redblobgames.com/making-of/little-things/
Hi, one of the makers of RecipeUI. Happy to hear this is something you liked! We're still finding edge cases when it comes to parsing cURL commands, so if you find any that we missed please file an issue or send us a message (here or discord).

Also glad to hear any other feedback you have :)
> The dumb thing is that the market WOULD solve the problem if it was allowed to

Not only do you not have a way of knowing that for sure, history would indicate otherwise.

Housing is fundamentally a good with limited elasticity, therefore the market on it's own without a good dose of regulation could easily become disastrous.

For a historical parallel, take a look at what happened in industrialising countries when the market was the one making decisions about housing where it was needed (next to the newly appearing factories/otherwise urbanising areas). The result was people living in horrifically cramped and squalid conditions (alongside other fun ones such as company towns) which was literally one of the main inspirations for socialism and communism.

Regulations on housing are a must, but their impact needs to be carefully managed and offset with appropriate incentives, policies and subsidies to make sure housing is of good quality (nobody should live in asbestos and lead paint filled pods under a highway next to a chemical factory) but abundant.
I agree but Hookup Hot Shot and Facial Abuse is what they believe all porn is.
There is overlap between the smartest robocall software and dumbest humans. To be charitable people are not expecting an instruction of "We are screening incoming calls. To ring through press 1." and often react by hanging up thinking they dialed the wrong number. And calling again.
> but.. that's not really what we are talking about here, is it?

I suppose I better make the link that I saw more clear. A lot of people use cloudflare services because they are free. I've done it myself. And in many case that would be fine. Cloudflare are in a unique position - partly through the reach those free services have given them, they now have an unusual level of power over the internet. Using cloudflare services gives them more power. I think before anyone uses a free cloudflare service, they should absolutely think about whether they're going to use that power wisely.

This is particularly the case when there are good, free open source alternatives such as the service posted here, that you used as a jumping off point to talk about the cloudflare service.
Holy cow. Never in my wildest dreams did I ever think I'd ever hear of PRIMOS again.
> Why isn't Phoenix/Elixir more mainstream?

Very simply. It hasn't been adopted by a giant tech corporation as one of its main languages. All the startups that do use it aren't the size of Google or Microsoft.

Thats not to say it's not a wonderful language.

The frameworks and libs are top notch.

Elixir developers tend to be polyglots and very good engineers.

I know of plenty of small companies who did start off with elixir because they could do so much with a single language across multiple domains, with fewer engineers and lower server costs.

Maybe one of them will be the "next big thing."
Again?! Didn't this same thing happen last year or maybe the one before?
See also slide to unlock game (https://news.ycombinator.com/item?id=36138304). I wonder if it used lostpointercapture.
This is super insightful, thanks for outlining this!
This would make a great piece of a videogame. There's an extraterrestrial enemy that's completely impenetrable to our weapons and systems. They based all their defenses around our devices and current tech.

One day we discover this old russian tech that was a fork-in-road tech-wise 70 years ago and is ultimately the key to beating the enemy!
I’m referring to Americans philosophically accepting a wealth tax. There was no federal income tax at one point too.
Intimidating people with acts of violence for political objectives actually falls outside of the definition of vigilantism. Vigilantism refers to taking what's perceived to be current law into your own hands.
Why is auto routing a PCB so different from IC design? It's not reasonable to expect humans to route a full IC with hundreds of thousands of standard cells, so constraints are defined and the auto router is sicced on the mess. Do PCBs just fall in the range where designs are still simple enough for humans to do by hand, and due to board size limits, will not go beyond that range?
Trust is hard, yes. Cloudflare might not be going for the low hanging fruit such as injecting ads, but they clearly want to be a monopoly around whom the Internet recentralizes.

Moving DNS from an ISP, who we pay and with whom we have legal contracts, to a company that does things, supposedly, for altruistic reasons, with whom we do NOT have contracts, doesn't fix anything. It makes things worse. The solution is to remove DNS from your ISP and run it yourself, or use a not-for-profit that isn't trying to become a monopoly, that isn't in a position to have its data syphoned off by the NSA, that doesn't knowingly and willingly host spammers, phishers and scammers.

How about we don't trust ISPs AND we don't trust Cloudflare?

BTW - I have to flatly disagree with your suggestion that, "once you've got one MITM it becomes harder to trust that there isn't a second one". That's ridiculous. I can check and verify things to a much greater degree by running my own network. Also, I never said anything about MITM my own network. I want to run my own DNS and block DNS to the rest of the Internet. That's not MITM.

The least wrong thing is to not replace something that MIGHT be shitty with something that MIGHT also be shitty, but might also open you to new problems and security issues. The idea that it MIGHT be less shitty isn't a good enough reason for DoH.
Where I’m from, the f in plural œufs is silent. Also, note the correct spelling of œuf
> With a year or two preparation, you can make your tax return say whatever you want

Which is why they usually disclose more.
Eh, media dying would probably be better for us... current evolution of media isn't taking it towards a destination where it's beneficial to the user. Much like the morphing of staph into MSRA.
This is a power struggle, which I do not believe is really even on purpose by the people involved.

We used to have a decentralised Internet with a truly open and engineering-led garden of interoperable protocols. However during the past decade and a half we've seen a massive change. We find ourselves in a situation where only https matters. It's a catch 22 type of situation, where anything else better be able to tunnel over it, otherwise many users will be left out since it's all that is supported, because it's what others tunnel over.

While this happened, the browser organizations grew politically strong and now controls not only the public key infrastructure that underpins https but also standardization of https itself.

The only exception to this is dns. Together with ip itself it follows the open meritocratic process that gave us decentralised planet wide internetworking. Unfortunately, it is closely tied with the domain name system, which is controlled by a parallel organization which isn't as open and meritocratic.

So basically we have three stakeholders of political value in the Internet ecosystem today. Us proponents of open and permissionless internetworks closely align with one, one is a gray area, and one is a conglomerate of private companies.

It is really healthy for the Internet if Mozilla, Microsoft and Cloudflare took control over dns resolving on a wide scale? Even apart from the obvious privacy issues?

They may mean well, but it logically follows that when dns is centralized among a few actors, they also will have an unproportionally large say in the evolution of the system. They could even tack on some extra top domains or other extensions that they could resolve. All in good faith of course. But that would, in time, bring over any remaining users of the old decentralized system.

It's not as if similar things hasn't happened before, in other contexts. So, yes, I will be one of the holdouts and keep resolving my own dns queries. It's not harder than "apt-get install unbound". It's the way the distributed domain name database was designed to work, and for good reason.
I see 80 year old men on TV and in positions of privilege, but they don't exist in my fam. Now you say 120? Yeah, maybe for someone with an easy life.
Remember when basically all of congress potentially had their health records breached?

https://apnews.com/article/congress-data-breach-hack-identit...
And chances are that any given Xbox 1 doesn't work, period. Probably went red-ring years ago.
Hmm. It's true, the set model breaks down when you remove the key relationship, or add filters.
The Public Switched Telephone Network is effectively a series of proxies. Some of these are in foreign countries. Each phone companies earns revenue in proportion to the volume of calls flowing through (termination fees). Upgrading their legacy PSTN switches to SIP softswitches that support SHAKEN/STIR costs money. No one wants to invest in a legacy market (voice calls). So they have an incentive to delay deploying countermeasures.
Pascal like enumerations, yet another feature that Go missed from the 1970's.
Hasn’t something like this been around for a year or so to “decensor” hentai pics?
Clever!

But what problem does this actually solve?

When I see a type alias of a string and enumerated variants then why would I pass in arbitrary strings?

There are _always_ ways to break assumptions. Putting arbitrary, complex guard rails at every call site doesn’t make a program magically better.

An API is primarily about affordances. We provide utility to the caller.
I use Grindr very often and would love to support them more, except for that every single aspect of the company and their product epitomizes unethical business practice. Their adaptive pricing model is extremely exploitative and the app directly lies to users to convince them to purchase boosts.

They're enacting return to office mandates as a response to workers unionizing (who haven't even made formal requests yet except to have a union rep on the board of directors, which is not unusual or unreasonable).

Also the app crashes every day and consumes the same amount of power as a household of four.
[IT Perspective] In my personal experience, these tools also overreach. Most people I've met in IT (15 years) want to go into Engineering, or at the very least, something MORE technical and code-related.

They are hungry and willing, but often overlooked. I have seen many climb out and teach themselves code, build tools for IT and revolutionize the way teams and orgs work. It's a marvel to see someone with drive do what they desire.

Fast forward to today. I see IT forcing all members to use a low-code tool. The passion drains from their eyes. I can see the fear of the mounting weight of becoming unemployable. They've shared with me their experiences. The directions they want to go have nothing to do with Low-Code, and the roles and orgs their interviewing with aren't interested in people who build with them. The question "what have you been working on?" is like a death knell. I'm pretty sure a lot of them don't see a future beyond helpdesk because of these tools.

My point is, think carefully about who is using this product. You can kill careers with this stuff. I think it's great for business teams who want to "do x in x app when y happens in y app."
> My network is not my ISP's network.

Right, but traffic from your computers passes through both.

> My ISP can't censor me.

Either you and your ISP can both do network-level censorship, or neither can.

> I'm not sure why you want to conflate my network with what my ISP provides, but anyone thinking that clearly doesn't understand how things work (or is just trying to be a troll).

Because your endpoints' traffic goes through both, and they both have the same ability to censor.

> Likewise, "all legitimate" programs will allow DoH configuration? Really? Have you TRIED to do simple, common sense things in Windows like use another browser? Obviously this suggestion is ridiculous.

Again, what does being able to change the default browser on Windows have to do with whether you can configure DoH?

> Please tell me how traffic would pass through my network that isn't from or to one of my machines. Guests? That's a bullshit reason to suggest I shouldn't have control over my network.

Guest computers on your network are in the exact same position as your router on your ISP's network.

> "You're always sending your DNS requests to some third parties." No, I'm not. I run my own DNSSEC recursive resolvers.

Even if you don't count the servers your recursive resolver talks to as third parties, your ISP can still see all of your recursive resolver's traffic, and just drop the responses for domains it doesn't want you visiting, even with DNSSEC.

> "consider that someone complaining "they took away my freedom to own slaves"" is also trolling. If you think packets and programs are equivalent to humans, you're... broken.

I don't think they're equivalent at all. My point was just that just because you can't do a certain thing anymore doesn't necessarily mean freedom has been lost.
That's a lot of ESR's writing. This is just the tip of the iceberg.
We really just need one telescope at L1. That's all.
CF explain how to do this here [1]. Have your local DNS resolvers filter the HTTPS type of DNS queries on your DNS servers. One example from Microsoft [2]. Unbound would probably need a patch though a work-around could be an iptables string filter or u32 filter for the record type. There is a DNS module [3] for iptables but it is not part of any default installations AFAIK.

The second way is to return a “no error no answer” or an NXDOMAIN response to queries made to the use-application-dns.net.

I personally already use the second option to block DoH and cell phones seem to automatically figure out to use port 853 for DNS-Over-TLS on my home router Unbound DNS. I also null route most of the public DoH servers. People point out that DoH can be on any CDN IP but it never has been.

[1] - https://developers.cloudflare.com/ssl/edge-certificates/ech/

[2] - https://learn.microsoft.com/en-us/windows-server/networking/...

[3] - https://github.com/mimuret/iptables-ext-dns
If the UI is not GPU accelerated while you are recording, rr will work fine. You can even have GPU calls in the code while recording, they just can't be on code paths that are taken. So a simple command line flag that makes the code choose to use CPU rendering instead of GPU rendering should be fine.

That said, GPU rendering is one of the things that deterministic replay could be most useful for, so it's unfortunate that this doesn't work in rr for now.
'Tracking individual employee attendance'. This was perfectly normal 4 years ago for almost every single company around the world. Today it seems to be hot news. Wow, how rapidly changed, the world.
> But people need cars, so they are overleveraged.

Which is a massive issue in itself too. In many parts of the US and Canada a car is necessary for daily life, so everyone is forced to spend non-insignificant amounts of money on one or multiple cars, which is very wasteful.
English has so many accents that spelling would still have to be memorized to be used as a universal writing system.
Starlink really expanded the horizon on this however.
Museum Worker Sold Paintings and Put Forgeries in Their Place
It’s funny to me that this announcement:

- Came on a Friday evening

- Was a criminal information filing, meaning it was not an indictment and the target likely wasn’t arrested

- Was not precipitated by a major press conference by DOJ/Treasury

Perhaps because the current administration was “soft” on this issue due to a desire to raise taxes on the wealthiest individuals?
Why would a legal system set out a bunch of laws categorizing age limits for various objects? And laws penalizing people who don't secure their chainsaws in gun cabinets, for that matter.

Will they be allowed hand saws? Hammers? Chefs knives? Dremels?

Besides, 16 is old enough to drive and hold a job in lots of places.
Sweden gangs: PM summons army chief after surge in killings
perhaps more heartbreaking is a tweet from the original creator of Insomnia[1] (who sold it to Kong some years ago) which reminds me of the time a year ago when Insomnia forced the GitHub stars count to be prominently placed in the product, but explicitly without any way to disable it[2]. It was later disabled but just for paying users..

You can see the CTO arguing with people in that thread about it.

1: https://twitter.com/GregorySchier/status/1707472402454835593
2: https://github.com/Kong/insomnia/issues/5056#issuecomment-12...
>Members of the public own stock, so the public owns stock.

You seem to be equating members of the public with the entirety of the public. You need to get this misunderstanding straightened out to correctly understand the concepts being discussed here.

If you're going to be a pedant, be right.
> IMO if we think something should be legal

We don’t know that until we actually pass a law. In fact, if the law states that something is unlawful, illegal or criminal, that is the prior agreement we are already under per the law.

> then it's ok to support vigilantism that acts towards that end

It costs you nothing to “support” it, unless you’re the criminal.
"You're not allowed to build an apartment complex out of paper" regulations are not the main thing driving costs today. "You're not allowed to build an apartment at all" regulations are. End height and density restrictions.