skysight-inc/HackerNews huggingface dataset:
NAT64 is just stateful NAT, exactly the same as IPv4 stateful NAT. It happens to be translating between v4 and v6 as part of the translation, but it’s no different whatsoever from pure-IPv4 NAT in this regard. You can call it “tunneling” if that helps you conceptualize it, sure, but you shouldn’t extend the tunneling analogy to make it seem like it’s conceptually different from IPv4 NAT, because it isn’t.

This phrase:

> The tunnel that the NAT64 system sets up is time-bound. So while outgoing traffic re-establishes the route, incoming traffic is not stateless. It stops.

Makes it seem like NAT64 is doing something conceptually different from what we’ve had for decades with every IPv4 network. It’s not.

And when OP says:

> When you have an IPv4 <> IPv4 UDP tunnel you can just send traffic. If one device is behind NAT you set up port forwarding. It'll work today, it'll work tomorrow, and in 2 years

Everything they just said applies to NAT64 too. You can “set up port forwarding” of your public IPv4 address to forward to an internal IPv6 address too. It’s just NAT!

Edit: I think what’s happening in this discussion, is that WirelessGigabit responded to my comment about my home setup, with drawbacks about their T-Mobile setup, which was a bit of a change of subject. It took a few re-readings of their comment for this to become clear. In my toplevel post I’m referring to a scenario where my ISP gives me an IPv4 address, but I don’t have IPv4 enabled in my LAN. (No IPv4 DHCP addresses are being handed out, my router does not have a v4 address on its LAN link.) WirelessGigabit is referring to a setup like in T-Mobile, where they’re putting the NAT64 box somewhere in T-Mobile’s infrastructure, and thus WirelessGigabit has no control over doing things like setting up port forwarding rules, etc. Basically they’re complaining about things I never mentioned about my setup. And as others have pointed out, T-Mobile’s XLAT setup is basically CGNAT by another name, but one where if your use case is pure IPv6, there’s a path to avoiding the NAT issues. This is very different from my case.
> how it’s presented in public discourse

My problem is that this article is not helping in this regard.
Location: London, UK

Remote: Yes

Willing to relocate: No

Technologies: NodeJS, React, Typescript, Python, Objectice-C, Swift, Google Cloud Platform (GCP), AWS, SQL, NoSQL, CoreData

Resume/CV: https://www.linkedin.com/in/bhirmer/

Email: benedkt@hirmer.me

- 14 years experience building scalable software for iOS and cloud

- Fullstack (frontend & backend)

- Former SW engineer & manager at Apple

- Built SW teams & organizations to deliver scalable consumer and B2B solutions

- Looking for part-time opportunities as fractional/interim CTO, technical advisor/strategy (SeriesA+ startups), Engineering manager, or SW engineer

- Worked in the past as technical advisor to startups to help them with technical product direction, hiring, creating effective software engineering processes, etc.
Great developers in India make more than Great developers in Europe in my experience. (India has a lot of okay developers who don't make very much, but if you want someone great you will pay more) some of this is Europe culture makes potentially great engineers limit themselves to good - they refuse promotions to great, and they refuse to officially mentor younger engineers (they do mentor but in ways where they don't get credit for as credit would them them a promotion). As such it is difficult to have great engineers leading the project and without that leadership you can't have a project at all.
That housewife remark is uncalled for.
Just subscribed. Any reason to do a manual email reply verification instead of using button click automation?
They'd probably be fine.
You may be confusing the Taiping Rebellion (1850-1864, 20-30M dead) with the Boxer Rebellion (1899, 100,000 dead)?

The Taiping Rebellion was a civil war between the Taiping (ethnic Hakka, Han subgroup) and Qing dynasty (ethnic Manchu). While yes British opium was a destabilizing factor, so was rampant Qing corruption, religious/ethnic zealotry, etc. China had constant wars for millennia, and this war coincided with the invention of modern guns and artillery while still using pre-modern tactics, which (like the American Civil War) made it especially deadly. Its disingenuous to pin an internal and ill-timed conflict on "capitalism".
Check out “routine action theory” (which I came across due to the above meta-analysis, can’t explain why it 403d for you, paper is Pratt & Cullen 2005). Posits crime as occurring when three conditions are met:

* Motivated perpetrator

* Vulnerable victim

* Lack of guardianship

Presence of police reduces factor 3, increase in socioeconomic deprivation increases factor 1. It’s unclear to me how you can confidently make the statement that “more police is the most effective” as that doesn’t seem to be attested to anywhere in that study (though I can only read the abstract), however thinking about the balance of these three factors brings our two arguments somewhat into line.
Dark Side of Behavioural Science Stardom Unpacking Ariely and Gino Controversy
New method can better identify sneaky sugars on viruses' spiky weapons
thanks.dev does this. I think I saw GitHub Sponsors also started (or will start?) doing something like this, but I'm not sure on the details off-hand.

But yeah, I've argued for this a long time as well: who is going to look up 100 to 2,000 dependencies and see if they accept donations and set that up and cancel when you stop using it, add new ones when you start using them (and many will be transitive deps, so you have to check if it changed every month or something), etc. etc.

You just want to give one organisation $500/month or whatever and let them sort it out. You don't even need SBOMs, just start by sending them your go.mod or package.json or Cargo.toml or Gemfile or whatever.

That the FSF and OSI are doing basically nothing in this regard is why I have trouble taking either organisation serious.
It's easier to verify what's currently in use than what has ever been in use. I know I'm not holding any radioactive monkey wrenches right now. To be sure I've never held one will require some investigation.
From the main Wiki entry on IQ tests: “The raw score of the norming sample is usually (rank order) transformed to a normal distribution with mean 100 and standard deviation 15.”

So, you’re not too far off numerically. 80 IQ is only a -1.33 Z-score. So, 9th percentile. 91% of people score higher than 80 IQ.
Charlie Munger’s controversial dorm design at UCSB appears dead
If you want to automatically generate Dockerfiles for more versions of Rails (not just the latest) that detect OS packages that need to be installed from gems present in your Gemfile, check out https://github.com/fly-apps/dockerfile-rails

You can install it in your rails app by running:

1. bundle add dockerfile-rails

2. rails g dockerfile
This looks like a really neat project… But on the homepage it does say, Intel is a gold corporate sponsor? Look, I don’t have a horse in the race, but that is kind of silly :)
Well, sort of. It's still global warming, it just makes things weird enough that you'll see local extrema in either direction. Globally though, we're only seeing extremes in one direction.
Actually it’s a bit more complicated than that. As well as the integer number of seconds between GPS time and UTC, the GPS signal includes a small linear correction (rate and phase) that gives you a more precise version of UTC(USNO). So to get something like TAI from GPS time you must also apply the rate and phase correction. But that still isn’t TAI as such, because TAI is only defined after the fact, in the form of retrospective corrections for each time lab’s implementation of UTC. So you would need to get Circular T from the BIPM and apply the USNO correction.
I wouldn't be surprised if system token included "this photo contains following text: <output of tesseract ocr here>"
I agree with you about the build quality, but also from a software perspective.

I've been a long time Pixel user, and have had the Pixel, Pixel 4 XL, and currently have the Pixel 6 Pro.

On every device, there has been one or several glaring software bugs that haven't been fixed for months, or have required a really, really nasty workaround.

A good example was the bluetooth stack on the Pixel 4 XL. We got a security software update one day, applied it, and then found that the bluetooth connection to loads of devices was suddenly broken. Google took months to get the issue fixed, despite a few hundred pages of complaints on their forums. Instead someone (not from Google) worked out that if you went into developer mode, you could swap out the bluetooth stack for a previous version, and it might work again.

Is this sort of blasé approach to quality assurance and lack of urgency around fixing user reported bugs that really, really irritates me about Google's hardware devices.

The 6 Pro is an ok phone but also has it's problems (painfully slow and somewhat unreliable fingerprint unlock). I think I've had enough and I'll probably give a Samsung device a try.
> The most surprising thing is how little professional people get paid, again compared to web dev.

They pay less because they can - there are many more highly motivated people who dream of making video games than there are open spots.

People are less highly motivated who dream about making Another Corporate CRUD App 2.0 (this time with Firefox support), and there are a lot more job openings.
The market for electric wheelchairs/mobility scooters is doing really well, now that you mention it!
Privilege Escalation Vulnerability in Confluence Data Center and Server
Has that kind of metaphor ever helped in a real case/conversation you know of?

The metaphor illustrates how what you're saying might be true and helps understand what you mean. Somebody who disagrees usually understands what you mean by "it's getting warmer". They just don't believe it. At least that's my experience.

Convincing someone in such matters is completely impossible unless there is a prior personal relationship of trust and respect. Even then it's very hard.
Yeah I had a look at that too, but I'm concerned it may use a custom API that does not line up with the spec. WebRTC is confusing enough without an additional premature abstraction! Also, not to disparage, but it's missing: API compatible with browser RTCPeerConnection, which I think is essential for our use case.

Also, when you say native, I guess you mean just in Node, right? C++ or wasm binaries are going to be faster, and I'd just prefer the performance extra performance / lower overhead in something lightweight for real-time streaming that I believe webrtc-node offers.

From: https://shinyoshiaki.github.io/werift-webrtc/website/build/d...
It’s probably the hero typer thing that is constantly changing the page content and makes it tremendously distracting.
Oh no, I’m not disputing the existence or value of having acquaintances. But rather I can’t imagine doing the level of socializing with them as described by the post.
SheHappy helps men understand their partner's cycles by having them record her moods and period start and end dates.
I don't understand the arguments.

1) TCP needs to establish a connection. That is ZERO problem.

2) Encryption is needed in the bottom stack! WHY?

Idiots are eating the world.
Bold first fkn sentence
I agree; there's no grounds for saying that reefs will be fine.
Yeah this is the unfortunate reality of software engineering methodology research. As a field we simply don't have strong and reliable research demonstrating what makes teams more productive or software more reliable. And we don't even seem to have new methodological ideas on the horizon to come save us.
Yes, I understand that. It's just like filmmaking industry but not that bad.

If I had had the same level of understanding of economics as I do now, I probably would have stayed in web backend development.
The way I see it, Markdown is a way to add semantic formatting to a text document. Yes, you can insert other forms of code into a Markdown document, but at a certain point, inventing a new "markdown" syntax for all of the the non-semantic-text code that you want to add isn't really Markdown anymore, and just kind of misses the point. If I want to write semantic text, I'll use Markdown, if I want to create a PostgreSQL table, I'll use Postgres, etc, etc. I don't see the point of trying to make Markdown an interface for things that is wasn't designed for.
I don't sign up for any and I only give out throwaway email addresses to get freebies. I don't actually know how many newsletters are delivered to /dev/null.
But then you have to waste a salesguy's time generating a quote for a product that I'm not likely to purchase. I hate doing that. I'm basically stealing from them just because I'm trying to shop around for the best product. I'm calling salesguys and giving all of them my information and getting several different quotes, but I'm only going to execute on one of them. And now they're spamming my inbox every time their company does something even though I've never bought anything from them.
The five star reviews are all about the comfort level of a pair of socks from before the listing was changed into an industrial part.
This seems thankfully unlikely for Krita given its origins in the KDE project, which for example has the KDE Free Qt Foundation as a poison pill should Qt attempt such a move.
I'd argue we should bar people from driving who collide with stopped vehicles without any other extenuating circumstances. Maybe adding self-driving cars to the mix will increase these collisions for a few years, but if we bar people from driving for doing these kinds of accidents we'll quickly weed out these massively unsafe drivers from the driving population and be much safer overall. Maybe we'll finally start decreasing the pedestrian fatality rate instead of increasing it.

If you refuse to drive safely you have no place to be on the road. We shouldn't just accept people driving in massively unsafe fashion.
Ask HN: My browser extension is cloned. Will the Code Copyright help?
I'm the creator of a Chrome extension with 4.7 stars for 500+ ratings. It is one of Google's favorites of 2022. I noticed a company cloned my code (even though I published the uglified version) and published their version of the extension (they are struggling to bring users though).

I have reached out to the company that cloned, they are demanding the data and a monthly fee to remove their extension.

I am now considering to Copyright my code and its derivatives to prevent such incidents from happening in the future. Is this recommended? Anything else I should take care?

Is there any way I can report this to the Google team and take the other one down?
Good on you for releasing a dependency to it so early. I like the approach. And kudos for bringing webrtc-node into the present (which admittedly on the web, moves pretty fast! haha, the "past" is not that long ago in real time).

Don't know why you got the downvotes--you just closed a 40M series A, right? Congrats!
> will be required to avoid 800 million climate refugees

"to handle" or "to mitigate" it's way to late for "to avoid"
Dont.

If you must, there is a continuum of tasks that range from suitable to risky in production settings.

Most definitely choose things on the suitable side of that scale (Eg - text generation, or classification).

More complex tasks like Data to text or Summarization? I personally would always avoid it, except if there are certain very specific workflows for your team/task.

Further, Its not just test cases - its an entire evaluation and prompt versioning layer. Of the few that I am aware of, most are not even openly available (Including Azure Prompt flow)
> In an epilogue, Houston compares the fate of the calculator to that of an alien species in the science fiction of Iain M. Banks, which becomes so advanced that it ‘sublimes’ from the physical universe altogether to settle in higher dimensions.

Really nice comparison.
AI threatens to dethrone the 4-year college degree
Russia has done a lot of stupid dangerous things, some of which are underreported, but wow that's some wildass speculation there. I would not be too surprised if, say, makers of fake parts are selling to Russia. But Russia has no incentive to make that process more complicated. Even if they got certified parts, the repair schedule on all their planes is so far off requirements and uncertified that their planes will never fly international again.
I guess they hadn't yet figured out this little kernel of wisdom: Beans, beans, they're good for your heart. The more you eat, the more you fart. The more you fart the better you feel, so eat your beans with every meal.
No pricing info, no easily accessible demo, government agency logos on the landing page.

This is setting off all of my "enterprise trash software" alarms. And if there is one thing those all have in common, it's being way too expensive.
My experience that played out over the last few weeks lead me to a similar belief, somewhat. For rather uninteresting reasons I decided I wanted to create mp4 videos of an animation programmatically.

The first solution suggested when googling around is to just create all the frames, save them to disk, and then let ffmpeg do its thing from there. I would have just gone with that for a one-off task, but it's a pretty bad solution if the video is long, or high res, or both. Plus, what I really wanted was to build something more "scalable/flexible".

Maybe I didn't know the right keywords to search for, but there really didn't seem to be many options for creating frames, piping them straight to an encoder, and writing just the final video file to disk. The only one I found that seemed like it could maybe do it the way I had in mind was VidGear[1] (Python). I had figured that with the popularity of streaming, and video in general on the web, there would be so much more tooling for these sorts of things.

I ended up digging way deeper into this than I had intended, and built myself something on top of Membrane[2] (Elixir)

[1] https://abhitronix.github.io/vidgear/
[2] https://membrane.stream/
Ngl, that’s creepy and controlling.
JEP 459: String Templates (Second Preview)
Zip files are the same. At least it makes it easy to detect truncated files?
It feels like something that would happen in Canada, an anglo/franco political compromise that is biased neither way and satisfies no one.
Yeah... that's an unsecured VPN. Blocked.
You're evil. Seriously.

I don't know how people get their head this far up their own arse, and before anyone flags me for saying that do remember that OP asked for this.

The exact same argument you're making could be used to justify human experiments too. In fact, this has happened - often - in recent history; with the same language and reasoning. And guess what... It was fucking evil.
What do you think of Full Stack Express
Hi! I'm looking to get some honest feedback on how I can improve my newsletter. It's a weekly curated newsletter to help software engineers improve, with a focus on Big Tech and the JavaScript ecosystem.
Security 100% does not require comprehension in the philosophical sense
> We do have regulations, even quite strict ones in this case, yet it happened.

What is left out here: How regulation mandated quality standards and reduced the supply of substandard parts (so low they're headline making outliers)

There was other Gov interference that brought us here: "AOG last month was ordered by a London judge to hand over records to help identify additional suspect parts"

epilogue: Both major biz and major Govs harmfully prioritize their desires above public wellbeing. Of the two, however, only Gov has a built-in duty to care for the public. One result of that is that Gov abuses are recognized as failures to be corrected - while Biz abuses are commonly regarded as successes to be rewarded and amplified.
Karpathy had specifically said this was an issue in Jun/Jul: PoCs are easy to make, but production is hard.

This is something their CTO reaffirmed last week at another talk.
I was just remarking to a friend in Budapest today that it's already October, but all of the trees are still green like it's the middle of July. Very bizzare.
Don't consider changing it. Change it. If your landing page eats CPU, you will lose lot of potential customers. I immediately bounce from any page that eats my CPU.
I agree to some extent, but there are emotional aspects to oppression / discrimination that are difficult to understand if you haven’t experienced it personally.

But there’s an even more egregious and insidious lie here: the idea that a person can be reduced to their social identity / group membership, and that this gives a complete understanding of somebody’s life. Many people nowadays are even offended when you tell them they can’t know if I’ve had an easy life or not by looking at my skin and knowing what my parents did for a living.
How about we charge how much it will cost to remove debris... This will kill negligent operators as well as spur investment in removal research.
I'm sure a mountebank promoting it as a tourist attraction is capable of paying for "studies"

Not all studies are as reliable as others though.

HNers shouldn't really have too much difficulty establishing whether an origin theory conceived by geologists familiar with dozens of similar sites or one conceived by someone talking about ancient Illyrians making a "cosmic internet" is more likely to be correct...
Youd expect much bigger increases in atmospheric methane if that were the case i think: https://gml.noaa.gov/ccgg/trends_ch4/
What I don't understand is why people find this situation so hard to belive it's possible. We've seen computer freezes/hangs for 70 years. Why is it so impossible to belive that an ECU can freeze too?

Before you say "watchdog", remeber that the watchdog needs to be reset by the actual "gas pedal" execution thread to work, and not by anything else that may still be running while the "gas pedal" thread is stuck/crashed. Also remember that an ECU needs to be specifically instructed to cut the gas/power after a reset, not assume that the car was off and it just booted normally.
emacs + org-mode + ox-hugo
Works perfectly for me!
you don't need to use the chat to test whether it was exclusively trained on github or not.

I started typing this in my IDE in a rust project I already had open:

// the following function prints out the best soccer players of all time, which teams they played for, and why they were great as a hashmap
fn soccer_greats() -> Hashmap<String,(Vec<String>, String)> {
let mut hm = HashMap::new();

it completed with the following:
hm.insert("Pele", (vec!["Santos", "New York Cosmos"], "He scored over 1000 goals in his career".to_string()));
hm.insert("Maradona", (vec!["Boca Juniors", "Barcelona", "Napoli"], "He won the world cup with Argentina".to_string()));
hm.insert("Messi", (vec!["Barcelona"], "He has won the Ballon d'Or 6 times".to_string()));
hm.insert("Ronaldo", (vec!["Barcelona", "Inter Milan", "Real Madrid", "AC Milan", "Corinthians"], "He won the world cup with Brazil".to_string()));
hm.insert("Zidane", (vec!["Juventus", "Real Madrid"], "He won the world cup with France".to_string()));
}

I don't believe that information is going to be on github anywhere, but i could be mistaken.
Not really. Post-modernism is kind of silly when it tries to deny reality. Good luck deconstructing narratives or whatever when you're starving due to crop failures from climate change.
Call it as you wish, it's still enervating when you ask it the same poetry three times in a row, and it invents a new poetry each time, and you force it to recognize that it doesn't match the previous hallucinations/confabulations, and it apologizes and proceeds to a new artistic spree.