skysight-inc/HackerNews huggingface dataset:
Not every country is setup to handle criticism in a way that doesn't punish the one who is sharing the criticism. Even in "modern" countries like Spain they can (and have in the past) punish you for criticizing the police or the monarchy.

So if you want to write/edit/admin Wikipedia articles about those "touchy" things, you might want to do so under anonymous identity, as otherwise it can really make things difficult for you.
Be that as it may, with Kagi at least I can choose to omit sites from search results or "pin" high quality sites.

Plus, privacy
> I don't know anyone who uses Debian and actually sticks with their packaged apps.

Many people in corporate, because that removes a lot of noise in "compliance" audits - show them that you have the main and security repository enabled and do regular update checks and installs, and that's it.

For me, the exception is Docker and Kubernetes, but that's easily explainable to auditors as a business need.
You can buy a basic city bike for <250 euros new: https://www.decathlon.fr/p/mp/moma-bikes/velo-trekking-hybri...

> Logically there should be more bikes than cars

There are twice as many cars than bikes in France from what I can find online, not sure about the rest of the world.
Seems low to me...
> Is that really bad? You are free to not use such distributions.

It's not really bad but it kinda defeats the purpose.
> i.e. LOCK XCHG with the Intel mnemonics.

Didn't all XCHG with memory operands have an implicit LOCK prefix on Intel 8086?
The documents look to be available here: https://www.drm.org/specification/
OpenBSD replaced sudo with doas (with a vastly reduced feature set) several years ago, and without breaking everything. Sure there are use cases where you absolutely need some feature of sudo, but you can always install it.
Technology holy wars are coordination problems (2020)
"what hapend" is that the corporations took the piss and created monopolies, suppressing the free market. It's up to goverment intervention to ensure a fair and level playing field, so that in this case new search engines can get a chance and improve / innovate. I don't know if you've noticed, but Google's search results have regressed sharply in the past few years, but they get away with it because the competition is literally priced out of the market, or in the case of Apple, bought off. That is, there was rumours that Apple was developing their own search engine, but $18 billion a year (presumably) is a compelling argument to not do so.
Silver Nanowire Networks to Overdrive AI Acceleration, Reservoir Computing
I don't know if this is true compared to C++. It's not as though it's easy to pick up a C++ codebase. Some languages, yes, but I wouldn't say C++ is one of them.
Rust isn't hard. Programming in general is hard. Rust makes this difficulty explicit.
I’m a child of the era. It surprises me Microsoft embraced open source but it also doesn’t surprise me they bought the largest service for it. While git doesn’t have lock-in GitHub actions and the rest totally do.
You don't need to master all aspects of a language to write code for it. The point is beginners who do not master all of it are not shooting themselves in the foot anywhere near as much as C++ beginners.
Don't forget to turn on closed caption as he explains things during the video
The corporations aren't free either, not when the biggest one can throw money around to suppress any competition.
This raises the question why Microsoft didn't simply outbid Google. It would certainly be possible given that Microsoft earns significantly more money.
All my new android devices in the EU now asked my during setup what the default search engine should be.
That's why I have 2 bank accounts.

It happened to me once in Africa, and I said "never again".

I now have a backup plan for everything that is critical for my life.

I have several modes of transportation, several clients, 2 computers, 2 sources of internet, several ways of contacting my family, etc.

System always fail.
To change the wording in the title of this post would be improper in view of multitude of comments referring to this title. I will consider rebranding this.
Bookmarks were a wonderful feature and I used them all the time for release workflow. It was basically like tags in docker.

Hg was indeed better than git, especially in the early days. But as git added features, made sane default choices more common, and cleaned up the CLI a bit, it doesn't matter now. They all do roughly the same thing, but the Hg workflow was still better imo because they just worked more intuitively coming from never using any DVCS before.
The way around this is to think even bigger.

The UK should be exporting green energy. Which means installing two or three times the capacity projected, plus as many nuclear power stations as we can throw into the mix.

For a nation that relies upon imported food, it is vital that our exports are also required by the rest of the world. Being a major green energy exported - particularly if we can bottle it as synthetic liquified methane - is the way the UK needs to go.

You don't need storage if you build big. Those who import from you need the storage.
Ask HN: Our domain got serverHold. What should we do?
Today morning we found out that the primary domain we use for https://pinggy.io tunnels, that is pinggy.online got into "serverHold" state.

We did not get any prior communication from our domain registrar Porkbun. We emailed them but their turn around time seemed unacceptable for such a severe incident. (We have not heard from them after 10 hours).

We transferred the domain to AWS Route 53 hoping that they could help. But till now, the serverHold code is still there. The DNS is not working even after the transfer process has been completed.

To give some relief to our users we configured a different domain to work with.

What should we do here now? Is there any way to deal with this quickly?

Incident report: https://pinggy.io/blog/outage_incident_november_2023/
https://archive.ph/H82hV
Curious, what was the a16z crypto dump play? I saw them pump for a few years, until the market tanked.
Incident report: https://pinggy.io/blog/outage_incident_november_2023/
It is useful in other domains as well.
I'm not smart at all.
Like avg at best.

But still I'm learning and using Rust for a project.

Its about the willingness to break that wall down you have in your head not about how intelligent you think you are.

The most intelligent devs at least from there own opinion have written the most shity code I have seen.
I don't access Youtube with a Google account so I wouldn't be impacted. I'd actually like that move actually, as it would certainly foster some alternatives to Youtube (e.g PeerTube), as most owners post their content on Youtube only because it's just free and the most popular video website.
I agree with the official Rust book, but I disagree that one shouldn't learn it.

Rust, even as a learning exercise, makes you think about a lot of concepts you'd normally not notice. It is a fun language, fun to experiment with, and due to its learning curve, it'd be far less stressful to learn the basics ahead of time if you ever needed it.

I used Rust-python bindings on a small project where we didn't want to use big python math libraries for portability, but a few of our calculations ran really slow on python primitives. Re-wrote a couple functions in Rust for a 40x speedup and its fully switchable to return to the original python implementations.
A single bit flip reveals the entire private key, for RSA with PKCS#1v1.5. RSA with PKCS#1v2 (aka RSA-PSS) is not vulnerable.
Only since Intel 80286 (1982).

On Intel 8086/8088 and 80186/80188 an explicit LOCK prefix is required.
Who isn't concerned about that? Have you forgotten all the anti-trust lawsuits aimed at Microsoft and their bundled software (like browsers, media players) from the past two decades? Your whataboutism is unsubstantiated.
You don't need that backup. Fix the problem, which is either you don't have enough storage or you don't have enough generation. As I tried to make clear people don't need much storage.
Show HN: A World Cup simulator that sims the complete tournament forever
The React + Mantine site is hosted on Github Pages. It can simulate from 2022 onwards infintiely. The teams can get stronger or weaker following each tournament. I've simmed up to 2100 and there are no performance issues at all.

I initially used TypeORM + sql.js + react-query but it was getting too complicated and inefficient. Browser TypeORM didn't work at all in production, and it made the bundle too large.

I replaced them with just zustand and things are much simpler. I found Typebase a few months ago but I've already built the base with zustand.
One feature they didn't mention they left out was the ability to run `make me a sandwich` (https://github.com/sudo-project/sudo/blob/main/Makefile.in#L...)
GoGoGrandparent (YC S16) | FULLY REMOTE | Full-time | US, UK, or able to work 4+ hours overlap with mainland US (UK time-zone OK) | Senior/Staff Backend Engineer

Build high-quality, robust engineering at the rarest of things - a Silicon Valley startup that is both wholesome AND profitable. We have 8-figure revenue, are YC-backed, and growing fast.

Tech stack (required): Back-end (Node, Typescript, MySQL, REST*+GraphQL), deploy (AWS, Docker/K8s)

Minimum 5 years experience (with Node). If full-stack, you must be strongest on the backend.

2-stage interview process.

If you want to help older adults and people with disabilities, send your LinkedIn/CV to william@gogograndparent.com (keep it brief) or apply at https://www.ycombinator.com/companies/gogograndparent/jobs (UK jobs can be applied for from anywhere and salary ranges can be adjusted for the right candidate)
On the top get started section. All three links is all you need.

https://www.rust-lang.org/learn
Rust is harder than C++ to write a linked list in, or other “more complex than hell world” programs. But large applications i think it ends up being easier than C++. As far as mastering goes, i think far fewer people master c++ just on account of c++ being a massive language. Not only is it a massive language, but its a language with a spec, 3 major compilers, and not all of them agree on everything.
If you read the testimony from Nadela, their search was so bad that Apple didn't want it even if they paid more money.

Which... kinda cancels out the thesis from this article.
Integrating with Salesforce can maximize your productivity and efficiency gains. But finding the right Salesforce Integration Partner can be challenging. Here is a quick guide on How to Find Salesforce Integration Partner that can help set up your Salesforce integrations requirements.
I would pay to have all my (forgotten) accounts deleted at socials, but also websites and apps
This is a very good way of looking at it, actually.
The most common search term could still be used quite rarely.
Not only that, but you can flash an MPF*S with a non-S version. You only lose the "security" features (read: anti-tampering and debug prevention)
You haven't been much around C++ people, have you?
Why don't you need distributed HVAC? A gaming desktop can use a kilowatt of power, which is what a small space heater might put out. It often will make the room uncomfortably hot. (Anecdotally, this is part of why I switched to Geforce Now, myself. My apartment got incredibly uncomfortable from the heat. It's an older unit with no air conditioning.)

In data centers, sometimes (not always, and perhaps not often?) the heat can be more efficiently handled through central heat exchangers, more efficient commercial HVACs, etc.
Not sure it was ever possible to bypass NT4 logins with whatever key combination... but Windows 98 was definitely doable.
That's one diff between git and Hg. Hg likes to consider the history "sacred" so there's no "cleaning up your commit" via squashing/cherry picking.

This is actually superior in most cases. Being able to force rewrite history so easily in git was a design mistake imo.
The idea that this is about "control" is incorrect. It's about safety. I want to know where my kid is, if I can't find them. I want to know they're at school and not the woods between school and home. I don't need to know what they're doing but I do want to know where they are, if they aren't where I expect them to be because I love them and don't want them to get hurt.
Priorities. If a fundamental security tool's design limits it's trustworthiness, it greatly reduces it's usefulness and "breaking" it's interface is thus warranted.
To give some easier explanation: This is an attack against faulty RSA implementations.
There is a common optimization in RSA signature implementations that splits up an expensive mathematical operation into two smaller operations. If one of these throws out a bad result then you can break the key.

Why does this happen? Multiple reasons. Implementations of big number math can and does contain bugs. (I used to hunt for those via fuzzing, which turned up an amazing number of them.) Hardware failures. Other bugs that corrupt numbers in memory.

The basic attack is well known. Florian Weimer has demonstrated this against TLS in the wild:
https://www.redhat.com/en/blog/factoring-rsa-keys-tls-perfec...

The new thing this paper adds is applying this attack to SSH.

There is a countermeasure against this attack, and this is to verify the signature before revealing it. It works. As the paper says, openssh uses openssl's RSA implementation, and it has been doing that since forever (2001).

So in summary: Applying a well-known attack against RSA to its use in SSH. Only works if you have an RSA implementation that outputs results of flawed computations. Countermeasures exist, and RSA implementations should use them.
> The Taiwanese have built a very progressive and open society against all odds and against everyone, it should be obvious that they are perfectly capable of not being dragged in a war they don't want.

Yeah, they have progressive open society against their neighbours, so they should seek peace and bend to the will of their open and progressive neighour. You know, to so that they are not killed by unknown green men seeking to liberate them.
One difficulty with NPM packaging is that it's traditionally quite hard to work out whether your dependency spec is correct or not. You can either keep bumping the version, or leave it be and hope no-one checks becuase it's hard to test.

Shameless self-promotion: https://www.npmjs.com/package/downgrade-build

This duplicates your project in a temporary directory and locks all the direct dependencies to their lowest semver-compatible version. It's not infallible, but it helps.

The only problem is that some projects rely on their direct dependencies bumping versions in order to force update transitive dependencies. Which is horrible, and also relatively easy to avoid needing to do by using a tool like Renovate.
That's fucked up. I don't know what else to say about it. I've worked with plenty of people in the US on H1B, and I've seen how that process is like bureaucratic blackmail. Your story is a whole different level.
The relevant factor is not whether these demonstrators support Palestine's right to exist (Which everyone does, no one in Israel wants a one-state solution) but whether they support or acknowledge Israel's right to exist.
This is removing the video stream (-vn) so that's not involved. Not sure which parts are in parallel here, but I'm guessing decoding and encoding the audio.
So not completely impossible, just effectively impossible.
In Microsoft Edge for Business - Version 118.0.2088.76 it seems not to work :(
> there’s no guarantees whatsoever the package works once unvendored.

And it’s precisely the job of the maintainer to ensure that it does, and more generally that all the various things that they ship together not conflict with each other. Assembling a coherent system despite each individual developer’s understandably narrow view—in explicit opposition to that view, if need be,—is and always was a distro maintainer’s job description.

Unfortunately, the bug reporting story has become worse over time. GNU packages included a configuration-time override for the bug reporting email to accomodate distributions and other modifications, but in most software today you’ll more often see a hardcoded link to the upstream homepage. And of course people will often just ask Google for the bug tracker address instead. This leads to understandable annoyance on the part of upstream developers. (It still doesn’t make acting against their intent improper in any way, though.)
Cowboy news?

HN has become a second reddit...
If you're comfortable sharing, which one?
You can walk into any USPS office and buy up to $1000 in money orders anonymously. What prevents them from selling anonymous prepaid cards the same way?
There are su and runuser in util-linux (GPL-2.0) [1].

[1]: https://github.com/util-linux/util-linux/tree/master/login-u...
Aren’t C++ newcomers embracing “modern C++”? Touching new and delete is a feature for advanced users. Most newcomers can exist happily solely with STL containers, RAII and smart pointers.
Why Kotlin Multiplatform Won't Succeed
There is also GEF, which is widely used by the reverse engineering and CTF community.

https://github.com/hugsy/gef
“The safest program is the one that doesn't compile”
This is our future if we believe the AI companies.
One of those left out features is `sudoedit` or `sudo -e`. I use this a lot when editing files in /etc or any file that my user does not have permissions. The flag first copies the file to a temporary location with permissions for my user to edit, then opens my text editor (defined via $SUDO_EDITOR env var) as _my user_, without any sudo permissions. After I close the editor, the file is copied back with the original permissions only if there were any changes.

The cool thing is running the editor via my user, which loads my user's configuration/plugins, instead of the root user's.
I have a 1660Ti. I get 40+ fps on 1080p. It's functional. Now, whether it is really any better than the previous generation is the more relevant question in my opinion. There are a few things improved, and a whole lot missing. The performance issues are only a small fragment of the game's issues.
This society sends people to jail for tax evasion all the time, even if the original source of their income was non-criminal.

Al Capone was guilty of running a massive criminal organisation responsible for many many crimes (very difficult to prove due to structures of organised crime). He was also guilty of massive tax evasion (a crime carrying serious jail time), because it turns out it's hard to pay the right tax bill when you're trying to hide the income from your massive criminal enterprise.

The Capone tax case wasn't some made up crime to try pin him. He committed serious tax evasion, which would also carry severe penalties if you or I did it at that scale with legitimate income.
That seems like the Right Way to do it...

As annoying as it is to have to update every sudo reference -> doas, it forces you to think about everywhere you're using it, rather than waiting to see what breaks and then trying to fix it.
I mean, that's literally the result of this practice. They've been paying for ubiquity and coaching people's minds into thinking "I can google that".

Saying "oh well, we're too far down the path now to change anything" just compounds the issue across generations, which is a level of apathy towards humans that we've come to expect, but shouldn't tolerate.
> rather that there is a management dysfunction around priorities and resources

That’s never only a management dysfunction. You also need a large group lacking either common sense or a backbone (ask me how I know).
As a young boy I decided to discover Atlantis. I deduced that it must be under water but not too deep. So I just searched for the shallowest place of the Mediterranean and declared it Atlantis.

Despite this early breakthrough no further discoveries have been made.
Pretty cool! Does it work with PNPM? I’ve mostly fully switched to that because NPM has for many years stood out as one of the worst package managers across ecosystems.
>least punk

Punk isn't punk anymore. When Google & other major corporations espouse the same core tenets of inclusivity, you're not rejecting or rebelling against anything. Perhaps Berghain and other exclusive clubs do not care about a 'punk' identity.
An interesting anecdote, I was sent to months of psychological and physiological evaluation as a child as some adults knew something was "wrong" or more accurately things didn't seem to make sense.

Those things finally made sense to me when I did a short screener for autistic masking and found myself in the 99th percentile.
what? um no: they are paying 21B because * Apple * has a monopoly on their platform and would divert users to another search engine who paid $1 more.
Every few months there is a new breakthrough in energy storage. To this day none really materialized in the way these articles claim.
I work in that sector but am not an expert in the technology so make of that what you will.
The general use case for ffmpeg inside proprietary software is the version of ffmpeg used needs to be statically compiled and linked into the software's executable, or it needs to be a separate executable called by the proprietary software.
Data Breach: Aadhaar and Passport Details of 815M Indians Listed for Sale
Got scales very well with source code but does terrible with binary resources like graphics. The only time I’ve seen got really fail (but still work at slowly as other systems) is when some stubborn tech lead decides to put 3rd party source deps as tarballs in git.
Not much happened since:
https://wiki.debian.org/Javascript/Nodejs/Tasks/gsa (last modified 2020-12-17)
still hundreds of npm packages missing.

gsa itself still at 0.0.0 (npm view gsa)
> So far, I've failed to verbalise exactly how I achieve that in my org

This is where I struggle as well.
I always found it interesting how the 286 and 386 seem to have been designed with Multics in mind. The hardware is not a perfect match, but it's weirdly close.
Explaining in a nutshell why mainframes are still in use and COBOL has market demand.
This. It's quite hard to find a computational task than an FPGA is more suited for than a CPU or GPU. Probably the biggest one is ASIC simulation. The biggest use for them otherwise is either dedicated high-speed I/O in embedded applications or super-low latency/jitter applications.
Similar big frogs in small ponds politics.
I'm still mad I can't just `tail -f`
Why Trail Runners All Believe They Are "Middle of the Pack"
There was also Apollo. They had the Domain 3000 series pretty close to PC architecture (ISA bus). Unfortunately, HP ate them.
This problem in various forms has been around for decades now. In 2007 it was clear to me that Debian style packaging was insufficient for handling anything beyond trivial deployments of any tools or services from the Python, Ruby, and Java ecosystems. Things have only gotten faster-churning and more complex since then. The old model of packages for shared libraries that are updated across the board just isn’t workable. Both from the packagers point of view, because of the busywork, but also from the users’ point of view, since the low package coverage means many things just haven’t been packaged anyway.

In my opinion it’s probably fine for Debian to stick to the old model still for the core OS features, but operators need to know when to use something different for their own needs.
It was an utter failure, but worse is how it tore at the fabric of our society. Suddenly, everyone who desired a little bit of power became a COVID hall monitor. I remember the police accosting a man who was exercising alone on the beach. Hotlines to report Neighbors. It was utterly disgusting and driven by the government. Covid evaporated what a little faith and trust I had left in government.
It is a lot, but it's explainable.

Such bugs tend to show up in crappy IoT hardware. IoT hardware often comes in large numbers.

If you scan the IPv4 space for SSH hosts, most of the ones you'll find are IoT hardware.