skysight-inc/HackerNews huggingface dataset:
> I still think DoH is hot garbage and the way it has been implemented across browsers is an atrocity.

Not sure if it's a hot garbage, but I don't see why it's better than DoT or DoQ, except maybe a use case for censored countries. DoT is faster and can be abstracted away from from HTTP. Presumably, DoH is more privacy preserving, because it runs on the same port and looks just like the rest HTTPS traffic. But I think a spying ISP can probably guess that it's a DNS traffic by where it's going. If it's an HTTPS connection over 443 going to a know DNS server, then it's probably a DNS request, thus I don't see added privacy here.

But from traffic administration, it is harder. As a an example, now your Smart Spying Device can phone home and it is going to be harder to block it.

Also, we are moving from your ISP knowing too much about you to Cloudflare knowing too much about you. It's one of the biggest DoH DNS services, often they see unencrypted HTTPs traffic, they also an exit node for iCloud Private Relays. ISP is left out, but Cloudflare seems to be able to consolidate this knowledge.
IMO, when we reach those limits if rents still don't tick downwards because the demand exceeds the market's ability to respond to it we're just going to go through another even more insufferable version of the argument I originally posted about except people will dig their heels in _even deeper_: "density didn't solve anything!"

So that's why I'd go with 'end' personally.

See: London.
What you'd want to do is de-orbit an asteroid made up mostly of precious metals, say, platinum, using something like an Orion drive. Then use the moon as a catcher's mitt (even better if you can use Earth, but K-Ting ourselves is going to be a hard sell at the shareholder meeting).

Refine / cut up your asteroid on the lunar surface, then you need a relatively small amount of dV to put your payloads into a decaying orbit around earth (~1/4 the dV to get into low earth orbit from the surface). Enough heat shielding, and you'll be able to crash your payload into the ocean somewhere for recovery.

Frankly, the biggest issue is that you'd end up flooding the market.
I'm pretty sure all GPS receivers now are multisystem. So GLONASS and Baidu will continue to serve you
VPs are not qualified because they climbed a corporate ladder - they are qualified because they are in charge a wider section of the business and are authorized to see data from that wide area.

If you're an L4 code, you're not going to getting a bunch of confidential data piped to you.

>You can read in the trade press what market share everyone has

This is exactly the point - some jr associate sipping morning coffee and reading whatever news declaring Monopoly internally is not helpful in any way to the enterprise.
Things every hacker once knew: esr is a dick.

(Something that can easily be true, even while he has done some small number of valuable things. Though I do claim this essay is not one of those things)
> If you believe that it's in the public interest for this information to be released

Public official A promised to do so, publicly and repeatedly. Public official A ostensibly earned some level of goodwill for declaring that. I kind of feel like the leaker held up A's end of the contract for him.

Put it another way: If I published an ad on a website you visited promising "$500 just for clicking on this link", then you tracked me down and took the $500, would anyone feel bad for me? It would have been an illegal act, but it would hardly feel like a perversion of justice.
Thank you for the link. A bit unfortunate for the aesthetics but likely necessary.
Thanks! Yeah it was something similar to it, except probably from the 80s and for IBM DOS.
OpenAI must be destroyed.
> They had machines that could verify the checksum of the disk in three seconds by reading the entire thing with multiple laser heads.

I would love to be able to buy such a drive, would be great to rip all my old discs.
This vulnerability in libvpx is in boring setup code that runs literally once, and it wouldn't matter if it was 100x slower.

Codecs have a lot of "glue" code handling configuration, I/O, and other stuff besides their most performance sensitive bit-pushing loops.

But this safe-or-fast dilemma has been mostly solved with Rust (and Wuffs). I am writing codecs in Rust.

Rust has many zero-cost abstractions (high level wrappers that get inlined, and compiled for specific types and values you use them with, and it gets optimized as concrete low-level code). This allows writing a lot performance-sensitive code using safe Rust. For example, you don't get redundant bounds checks if you use iterators, and despite being high-level abstraction with chains of iterators and closures, they compile to simple loops, and may even get vectorized (even more so than C, thanks to Rust's stronger no-aliasing and immutability guarantees).

When you need something more adventurous, you can dress it in a safe (compiler-verified) higher-level abstraction on top of minimal amount of unsafe code. Even though the underlying unsafe code is as unsafe as C, making a small component out of it helps to review/test/fuzz it in isolation against its interface, rather than test it as part of a complex algorithm.
Does UK have the right to remain silent?
A Week in the Life of a Young Person's Smartphone Use [pdf]
I have never worked with anyone doing 12 hours a day 5 days a week as usual. Then again I’m in Europe .
When did this project start?
Ok? And? You can get cancer even without being exposed to asbestos...
Spanish justice ends John McAfee case: ‘no indication other than suicide’
> widescreen to vertical

You’re a monster.
Does a sea wall help with too much rain at once?
No need to send it back: Netflix posts its final DVDs to customers
I believe so, but somehow it takes 18 domain lookups and 1.6 seconds of rendering a whopping 277 lines of HTML to deliver, including:

"headline": "What Elon Musk's X is getting right",
"description": "Credit where credit's due.",
"text": "\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp style=\"text-align: right;\"\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp\u003E&nbsp;\u003C/p\u003E\r\n\u003Cp style=\"display: none;\"\u003E\u003Cspan style=\"display: none;\"\u003E\u003Cimg style=\"display: none;\"

(a bunch of <p>ara's containing nonbreak spaces?)
That'll probably be the death of analytics. Nobody wants cookies, given the option.
What is a QR code if not a 2D barcode?
Honestly, that's fair. I just haven't read something like that in a major publication in a long time.
I agree, more should be written about Perlin Noise range. You might find this useful: https://digitalfreepen.com/2017/06/20/range-perlin-noise.htm...

In addition to range I'd like to see the distribution, especially with multiple octaves of noises added together. I haven't found a good page about that.
I think their model is acceptable and sustainable. It's MIT licensed, and they make money on the self-hosted enterprise edition that gives you SSO, permissions, audits, etc.

Recently switched to it after going through most of the alternatives, because it has a clean UX, works on every OS without install, and has all of the features I need.
The old switch could be disabled in software under accessibility settings, and silent mode can even be bound to a Shortcut!

I have a 15 Pro, and while I like the new action button, I still do miss the old switch. There's no reason it couldn't have been added as an addition rather than a replacement.
They are talking about an art project from students at a dutch university and are misinformed. https://youtu.be/D1Thmz61sho
It was when I was a kid in the 80s and 90s. Yeah they were on old planes that were just still in use.
NYC resident, here. Its crazy bad.
radio is a gateway to abilities that some consider to be unnatural

(my grandpa gave me a shortwave and explained I could receive far-away signals due the radio signals bouncing off the ionosphere. It was my introduction to numbers stations, but I never found radio that interesting, when I had the internet available)
Excel sheets and now Airtable bases are another way to build apps I see pretty often. The problem is when these things outgrow their original platforms there's a huge step in effort up from "simplify the formula/query" to "ingest all the data into a database then write a view on top". My own wish for low-code tools is to cross this chasm.
4800bps! Back in my day we were happy to get 2400!

Sadly, I had a 1200 baud; my uncle told me his first was 300.

I remember a 110 setting, which might go all the way back to the '48 Berlin airlift!
makes sense, considering there lacks an open std to port back and forth.

people stick to datadog / elastic / etc passionately, to avoid "redoing their charts"

also low hanging fruit to evals prompt and check (does it JSON or not), is significantly more useful then folks give credit for Q_Q
Not sure if /s, but I recently read about emoji history. It apparently originated from pagers and then "graduated" to phones.

https://one-from-nippon.ghost.io/story-of-the-emoji/

Doesn't talk about kaomoji though which I think are supercool. Like this table flip: ( ╯ ° □ ° ） ╯ ︵ ┻ ━ ┻
I was one of the idiots who bought a butterfly keyboard macbook pro. Said keyboard started breaking within 2 weeks - i use the laptop on an open balcony. And it was the second iteration where they claimed they added extra sealing.

I've personally witnessed various iphones - mine and others' shutting down within your 0 to 35. Maybe when it's hot it's hotter inside, but it shut down o me in a car where it was definitely over 0 C, maybe 5-10. You'd think the temp inside the phone would be even higher than that.

So please stop explaining to me what's written on the phone or laptop. I've personally seen it isn't true.
It is the case under certain conditions.

Casting is by definition an escape hatch.
Given the name, it'll be Qix, I had a copy as well!

https://en.m.wikipedia.org/wiki/Qix
Interesting observation, does this mean there might be an aging expert effect if we aren’t careful?
I don't think the machines could save the data. They just loaded into RAM, took the checksum, compared it to the known good checksum, and then moved on.
What's your point exactly? Climate change is an important factor in causing more wildfires, and it's going to get worse. Wildfires are only one example. We have to convice the wealthy and powerful people who make the decisions to act on it now. No-one is suggesting that we can ignore the other factors that you mentioned.
> I agree that's the wrong way to let DoH be turned off, exactly for the reason you describe. It should only be possible for DoH to be disabled by, e.g., the local user manually going into settings or by Group Policy.

DHCP is group policy for network configuration. If you're connecting to a network where you don't trust the DHCP server then don't use DHCP for DNS or use a VPN.

> The problem with that is that I don't trust the DHCP server of whatever network I'm on to not be trying to censor or surveil me.

The application default needs to be the system DNS and the device default needs to be DHCP so the device owner can feasibly change them. Then anyone for whom this doesn't work can change it merely by changing one system-wide setting, with the easiest way being to use a VPN and their DNS -- something that should be done on untrusted networks regardless.
Like many other US Government programs, service is provided in unprofitable states and rural areas as the representatives from those areas demand it.
My dad does this, but he’s also hard of hearing so he can’t understand what they’re pitching half the time. So mostly he just answers so that he can cuss them out. Unfortunately, he’s done that to friends, medical offices, and relatives who call from an unknown number. Landline only, of course. I tell him not to answer, but he does anyway.
The big point is that any intelligent extraterrestrial life should be highly visible, and spread itself out at some fraction of the speed of light.

Earth as it is right now is in a fleeting transition period on cosmic timescales. It seems unreasonable to assume other extraterrestrial life that evolves to be intelligent/space faring would stay in that state for millions of years.

The universe is 13.8 billion years old, and lets assume it was only "inhabitable" more recently. So if there is any intelligent life within ~500m lightyears, we should probably know about it, because they would have spread out to Earth by now.

If primitive life is "common: in every galaxy (aka detectable by the JWST right now), then the ascendance to intelligence would have to be extraordinarily uncommon for spacefaring life not to spawn. I find this unlikely based on Earth's history, which would mean intelligent civilization is extremely likely to "burn out" before it spreads over the stars enough to be visible, or there is some other likely-not-good reason why we can't detect abundant spacefaring life yet.
My guess is it's because the commute is really up to the employee. So if someone moves does the employer adjust their salary? What if I ride to work on my bike a few times a week (15 miles)?

Perhaps there could be some time stipend, so days may start a bit later and end sooner than 9-5.
Intrasexually competitive women advise other women to cut off more hair
Not with that that frequency and magnitude.

https://www.carbonbrief.org/mapped-how-climate-change-affect...
I've long since thought that applescript might be the world's only _read only_ langauge. Turns out that C2 thought so too:

https://wiki.c2.com/?ReadOnlyLanguage
I'm currently in a basement in the US, and my cheap phone GPS has acquired 6 US, 4 Russian and 4 European satellites in view.
That's why I said it's very situational.
are you sure that's the right link?
This is wild to me. You could just not do though things and I genuinely believe the world will feel a bit less strange for you personally.
Security: what's this?

Person subject to security: it's a device I can use to compromise your security

Of course they'll confiscate it then. This would probably apply to any device they choose to describe to security this way.

Security: <pointing to pen> What's this?

Person subject to security: I can stab you with it. You really should all wear bulletproof vests to stop that happening!

What do you think will happen? It seems reasonable under these circumstances to take your pen if they're going to allow you on board at all.
> The only slightly tricky part is spinneret’s attribute validation

I'm firmly in camp cl-who, so not a problem for me :)
Uh the justice department? It’s literally labeled public corruption. Was Cheney not a war profiteer?
America Has No Transportation Engineers
For some people. For others the chance of having a large home for their family makes it worth.
Let me get this, (win perspective for now), I need to open a bash wsl, then screen session to the tty panel? - with a config (con type. port, other vars) maybe.

Or open putty and retain my saved sessions ?

I believe you are worth your salt, I always like the use of screen, but surely you can see for win, putty is just easier ?

Edit : wsl being a lot more mem required than putTy
> You can do something like ECH in a way that not even Cloudflare will see it

How is it possible for a Cloudflare to front a website, without knowing what the website it is. You browser is only supposed to do a handshake with a server with a certificate matching the domain, this make Cloudlare in charge of the cert. And Cloudflare needs to forward the traffic to a known location, so they __have__ to know the target host.
Today’s flooding was caused by excessive rain, and I think the problems are mostly around inadequate drainage? Whereas Sandy was a storm surge and could have been mitigated with something like levees.
I feel so bad for all those who just moved there, I hope they’re all ok.
Bingo. This is it. One of the variants for sure! Thank you so much!
What was the second time in the last 24 hours?
Show HN: An animated explainer on AI Doom risk I've helped create [video]
This is an animated version of a often-discussed post by Paul Christiano https://www.lesswrong.com/posts/xWMqsvHapP3nwdSW8/my-views-o...
I made a calculation for one of the projects posted here https://news.ycombinator.com/item?id=36093771 and (after fixing an error pointed out by jlund-molfese ) I got:

> For comparison, 1 gallon of gasoline release 9kg of CO2, so it's $12.15 USD more per gallon to be carbon neutral.

Let's be optimistic and assume that other projects are better and the cost is a half, i.e. $6 USD

A gallon of gasoline cost $4 USD (Planes don't use gasoline, but whatever.)

From a random link I got from Google, the 40% of the cost of a plane trip is fuel https://www.quora.com/What-percentage-does-fuel-cost-take-ou...

So the price goes from 60%+40%=100% to 60%+(6+4)/4*40%=160%. To simplify, just assume you will have to pay a 50% more per trip.

[This assume there is another project that can capture carbon for half of the cost of the linked project. For the full price you get 60%+(12+4)/4*40%=160%, i.e. a +120% increase. And this is very optimistic, because preliminary calculation are usually too optimistic.]
They both use the same type of outsourced labeling services:

https://www.sama.com/
The worst part of adult life is realizing you already live in a world where this happens. Regularly. And no-one bats an eye. And you try to maintain sanity by adding hypothesis (“But I mean, with the government giving the keys to…”) and all of the evil you can think of, also exists.
this is a great paper that provides a framework for comparing 2 phase and paxos.

https://lamport.azurewebsites.net/video/consensus-on-transac...
Hoverboards or electric unicycles might fit the bill, depending on how well your kids can balance. I have a $300 folding scooter that fits in my Honda's trunk and has more capability than the Motocompacto- the value proposition of a slightly smaller package is not amazing.
Hope it lands soon. DBs are usually locked down with no access to/from internet.
Ask HN: Which role in software engineering is the best for average person?
In your opinion, which role is the best to be average at? From compensation, work/life balance, fulfillment, career opportunities, etc?

1. Frontend Engineer

2. Backend Engineer

3. Applied Research Engineer

4. Research Engineer

5. Graphics Engineer

6. Game developer

7. Enterprise SE

8. Fintech Engineer (esp. in trading/algos)

9. Cloud Engineer

10. DevOps

11. System Engineer (compiler, os, browser)

12. Consumer Application Engineer (macos/linux/windows)

13. Machine Learning Engineer

14. Data Engineer

It’s always good to be best. I got told best ML engineer would earn a lot compared to best Frontend Engineer. (ofc, it might be wrong). But which role is good to be average at?

It would also be awesome to know barrier of entry vs reward. For example entering graphics engineering is extremely hard and reward is also average compared to average frontend roles. Once the profile is built up, the former will be a great deal because the investment pays off!

So, what are your opinions? Any idea?
Just when I thought I was out, they pull me back in!
That relies on the user knowing that they can trust the certificate they use as the front in lieu of the certificate for the domain they actually want. Which is sub-optimal from a security point of view -- unless you complete a handshake with a valid certificate for the domain you're actually visiting, how do you know that the server you're talking to actually has a valid certificate?

In ECH, we still only complete one handshake per session. If you've got the right key for the inner client hello, you'll complete a handshake with the certificate for the domain you're trying to visit. If not, you'll complete a handshake with a certificate for the domain in the outer hello and the server will send you the correct key so you can try again with a new session. The client gets to validate the right certificate.
Thanks! I used to play it as a kid and have been trying to remember the name of the game for years.
This is one of the dumbest things I've ever seen.

To sum up:

- Qualcomm mandated that manufacturers use their power supply chips with their processor

- these power supply chips are wildly inappropriate for laptops, requiring 4-6 in parallel when a single properly spec'd chip would work

- said chips are designed for space-constrained phones, and are so small they require a different type of PCB

- those PCBs can't handle the power and need to double the layer count

- cost of PCBs becomes absolutely ludicrous at this scale

- Qualcomm refuses to allow manufacturers to use a more appropriate power supply

- manufacturers literally cannot afford the design and stopped using Qualcomm

- Qualcomm is now paying manufacturers to use their chipset, and are losing money in the deal

I don't even know how to express what an absolutely terrible idea this is. The Qualcomm chips are not fit for purpose, at all. Totally inappropriate for the application. No engineer in their right mind would go for this.

Qualcomm is mandating that manufacturers eat a fuckton of cost in raw materials, drastically reduce the efficiency and battery life of their product, and charge way more than the market would pay for an underpowered, overheating laptop with a pitiful battery life. For... Reasons?

It makes no sense at all. No one is going to use this chipset. If any devices do make it to market, their terrible performance will absolutely trash Qualcomm's reputation in this space and consumers won't buy them in the future.

Absolutely insane
Question for this group:

Do those iOS call blocker apps like RoboShield work? I'm not sure which conference sold me out (all of them) but I get 5+ calls a day of nonsense and I'm getting tired of it.
See https://www.americanradiohistory.com/Archive-Electrical-Expe... page 325 and 360. Couple of sewing needles across a carbon block. He noticed that when he removed the dry battery, he got a better signal.

These are things that would have been available to just about anybody at the time he did his experiments.
Update: BASTARDS. https://www.bbc.co.uk/news/uk-england-tyne-66966187
"Marsh believes he has found a way out of this dilemma with a patent-pending “secret sauce” he declines to discuss in detail, which he says can limit the amount of voltage generated so that it never exceeds what a charge controller can handle, even as high winds spin the turbine blades rapidly."

That's not usually the problem with overspeed. It's the blades or bearings breaking and blades flying off. If you have a generator with a field winding, you can turn off the field current and not generate much. But then the blades spin too fast with no braking from the generator.

We're missing some key info here.
FUTO is a newer player in this space: https://futo.org/