skysight-inc/HackerNews huggingface dataset:
From their FAQ:

UniFi Express can route traffic at speeds up to 1 Gbps. Security features such as Device Identification, Traffic Identification, Country Restrictions, and Ad Blocking can all be enabled without impacting routing performance.
Hello! Thank you for answer. You hit the bull eye.

What I think we have enough, is coffee, for other things, we need them, but exist nuances.

Most important, I'm veteran of Ukraine Maidan, but this war exhausted us economically.

I must admit, this time I just cannot spend enough money to talk with people offline, I think you know how this is important.

I know, Ukrainian defense need all these things, but not everything. I mean, we have technically powerful enemy, with developed radio intelligence, and environment changing constantly, for example, analog radios are not interest at all now.

And if we talk about radios, car parts, I must do even more - I must regularly talk with officials, and visit field tests, to check how they work on more or less real environment; for cars, I must calculate, which are more economy effective, so I'll not give military forces finance Black Holes.

Sorry, this time I need to take a pause and gather info. Will answer more later.

I think, my other answer also could say something additional: https://news.ycombinator.com/item?id=38503774

Thank you again, please share your thoughts and knowledge if possible.
It's a WiFi 6 box too, so it's got decent home throughput. Gig WAN, gig LAN and it's pretty decent for the majority of ISP customers.
India's encryption laws require service providers to allow law enforcement to intercept, monitor and trace encrypted traffic. Encryption within India is limited by law to weak forms.

https://www.eff.org/deeplinks/2021/07/indias-draconian-rules...
This page is a bit confusing if you don't already know the terms...

What exactly is "A complete UniFi networking stack" anyway? Is UniFi some protocol that extends WiFi?
Ask HN: What DNS host / nameserver providers do SVCB and HTTPS record types?
tl;dr: Ehat DNS hosts / nameserver providers provide SVCB/HTTPS record types?

Background for this questions -

SVCB and HTTPS (RFC 9460[1]) are new record types.

HTTPS allows pointing to a HTTP3 resource directly from DNS without first doing a DNS lookup, then connecting to the server and establishing it does HTTP3, then connecting via HTTP3. This saves waste from hops.

SVCB allows a service to be provided from multiple alternative endpoints.

The recent story [2], not submitted or affiliated with me, highlighted Cloudflare currently hosts more than 98% of SVCB and HTTPS record types.

HTTP3 now in Nginx 1.25 mainline [3] is rapidly pushing a tipping point for seeing HTTP3 a norm.

So, HN, in the interests of not being bound by Cloudflare, whose services are useful but in the interests of seeking independent options, what other DNS hosts / nameserver providers provide these record types? Such a service for me would be worth moving registrar for.

[1] https://www.rfc-editor.org/rfc/rfc9460

[2] https://news.ycombinator.com/item?id=38498743

[3] https://nginx.org/en/docs/quic.html
Read this several times. Still don't know what I am looking at. What is "UniFi Networking stack", what is "UniFi Network"? Is it a WiFi router? I use a TP-Link router at home, and they don't sell it as "TP-Link Networking stack".
What is UniFi?
BMW recalls SUVs after Takata air bag inflator blows apart
Ok, but the article this discussion is about didn't show examples of child slavery, but of child labour, with a coverup being performed by locals, and suggestions of a large corp not doing enough to verify things independently.

Rich countries should help poorer countries lift themselves out of poverty, but let's not pretend everything is clear cut and simple. How do you deal with corruption? What is an acceptable level of violations is acceptable? How do you measure the good you do vs the harm you're causing?
Most language package/environment managers do not come close to giving you the guarantees that Nix does.
What kind of small business actually benefits from an IDS/IPS or WAF?
You can't attack another user like this here, no matter how wrong they are or you feel they are. Please make your substantive points thoughtfully and avoid posting in the flamewar style.

I'm going to post the same reply to the users breaking the site guidelines on the opposite side of this fight. We don't want this kind of battle here, and we ban accounts that do it repeatedly.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules from now on, we'd appreciate it.
10 years ago? Yes. Today? No. CCP got caught raiding peoples' savings and needs a scapegoat. Guess who that is.
It's been a couple of decades but when I spent time in India as a kid, Tom and Jerry was a popular cartoon on TV.
Exactly, I only understood that it's basically a WiFi router by reading this thread. I guess I am not their target buyer... still, would appreciate more clarity.
$230k: The price at which the average American would give up democracy
Interesting assertion. None of our customers are YC companies but I do remember that being an anomaly during out batch.

Anecdotally the ones that sell outside of Bay Area startups overlap a lot with the ones that are still around.
Tom and Jerry is very popular in India. Parents like it because there's no (less) subversive NSFW content (e.g. Bikini Bottom in Spongebob).

Don't shoot me, I'm just the messenger.
See my other comment above about me using the cloud in an unorthodox way.
Old post by Joel Spolsky https://www.joelonsoftware.com/2006/06/16/my-first-billg-rev... I'm not sure about Bill Gates current understanding of GPT-?, but he is not just a marketing guy.
>What would you have them do instead?

Why instead? They didn't a bad thing, just nothing beyond what the law requires.
1938 Yellow River Flood
The part that's missing for me is what hardware do I put it on?
Unifi AP for wifi, Unifi switches, Unifi security gateway of some kind, Unifi point to point for terrestrial wireless to share with another set of Unifi gear in a barn/shed/whatever down the road. All managed by UNMS.
This is to my massive irritation. I don't want to use the router built into my cable modem, but my Internet is 1.2gb and I feel like I'm throwing money away.

Routers with 2.5gbe uplink are hard to find and even more expensive.
why does frankish == european?
“Inadequate” depends a lot on what you’re doing. I wouldn’t use any of this stuff in a datacenter but for a small business or branch office it’s totally fine.
Graham Hancock, I think you mean.
Why would that make any sense?

Humans "have their own motives" because we're designed to reproduce. We're designed to reproduce because anything that didn't, over billions of years, no longer exists today.

Why on earth would an artifact produced by gradient descent have its own motives?

This is just an absurd consequence of extrapolating from a sample size of one. The only intelligent thing we know of is humans, humans have their own motives, therefore all intelligent things have their own motives. It's bogus.
Which most likely is part of the problem. There is no major outcry about any of this. It's a mere inconvenience to agencies, congress, courts, press, etc - nobody seems to care much about it.
I bought into their unifi ecosystem years ago. Separate devices, prosumer pricing, features and quality, single pane of glass.

... And I haven't upgraded anything since. Their new products are totally undirected, they aren't making items that are obvious and needed. Their software is falling behind and they just don't care.

Case in point: the usg pro 4 is years old but they havent released an updated affordable just-the-border device. Their new stuff like the dream machine, and now this, just isn't the right thing to replace what was there before. The VPN on there doesn't work with recent Android or iPhone, and they just don't care.

Adding even the most basic firewall rules is hard. The single pane of glass got a major interface overhaul, and they added a huge amount of hard-to-turn-off phone-home crap at the same time. Enshittification reigns supreme.

And don't forget other runty hardware like the poe ceiling lights and doorbell.

The company just needs to buckle down, make good stuff, fire the product astronauts, fix obvious major problems before adding pointless new features.

... Suffice to say, my next hardware refresh almost certainly won't be from this company.
Thank you. This *ception misuse is annoying. Conception is the act of creating an idea. Inception is the point at which something is conceived. The movie created a fake verb form that means "to induce a conception." None of this is conceptually related to the nested dreams in the movie.
Ahh, as in fully exclusive sets of genes
OK, as an engineer with decades of experience, I give up. What is "Unify AP for WiFi"?
I've never owned one but I've driven friends' 911s. They're amazing cars.

But now I own a Tesla Model Y. This is the "Mom's SUV" of Teslas, and it is in every way a better car than a 911, including being faster and more fun to drive.

For $275,000 you could buy three Model S Teslas. And of course the Model S is much faster than the Model Y.

Porsche's time of overpriced bespoke ICE cars is past.
Came here to say this, so I entirely agree. I found Forth and the concept of concatenative languages after deep study of the fundamentals of computing, specifically studying Lisps and the Lambda Calculus. Eventually found combinators and the Iota combinator. Finally hit the bottom of the rabbit hole!

It really does give the lightbulb moment. “Don’t try to generate code, that is impossible. Only try to realize the truth… There Is No Code (only data)”
The dream router can’t route faster than 500mbit, which is a huge limitation. This claims to do 1gbit routing, so pairing with a switch gives you a dream router that can actually route at 1gbit.
Mind expanding or linking a reference on the why that's the case?
Congrats on getting so far on this! I've started a bunch of languages I've never finished, so I understand (somewhat) how much work it takes!

With these kinds of docs, it's helpful if you can provide an example of what makes your language cool right out of the gate. It sounds like the main differentiator for Melang is the coroutines, so something like the HTTP example you give in that section would make a good intro. Comment it well, since you haven't introduced the syntax yet, but providing a taste of the coolest things to come is necessary to get someone to read through the rest of the docs.
Blackmagic basically sherlocked them with Apple's advertising support.
The cost of 2.5G chipsets is so low it really shouldn't matter especially for a 'premium' product like this.
The problem with Vishnu is he is limited to only having four arms and two ears, which of course limits Vishnu to supporting at most two production systems and, therefore, not being able to handle "web scale."[0]

0 - https://www.youtube.com/watch?v=b2F-DItXtZs
See the noprocrast setting in your HN user account.
Broadcom CEO tells VMware workers to 'get butt back to office'
Sort of, and sort of not.

UniFi requires a controller that gives you a single pane of glass style interface to control everything. Most of their controllers can run multiple applications, the top two being Network and Protect. Network runs their Routing, WiFi AP's, and Switches and gives you in depth data about what's going on where. Protect is their NVR system, which also does some AI stuff and ties into a few other things like Ring does.

This device is a bit low powered, so only runs Network; they do sell standalone NVR's that will tie into it and run Protect. The $50 more expensive UniFi Dream router is similar, but has a switch with POE built in to run a couple of AP's or cameras, and can run both Network and Protect (with caveats; it's not terribly powerful and it only saves Protect footage to an SD card).

So you can think of it as just a fancy AP, but it's also the base building block of a much larger ecosystem.

As a note, the weakest link of the system is, IMO, the routing. Running UniFi with a more professional router of choice is a common way to go.
There's more in-depth information on that subject here:

https://www.usenix.org/conference/osdi23/presentation/grubic
> This is Treasure Hill–a prototype for what one architect believes is the future of sustainable urban living.

Title should be "One architect's idea of the \"city of the future\" looks like a bunker"
> I suspect so too and again, their thinking is obviously incorrect.

That crap usually sits in the bottom of the water heater but it can become less safe with time (e.g. forming lead salts or dissolving lead, as mentioned, or grow legionella cultures). It can also get stirred up and you can get a whole bunch more of it all at once.

It also doesn't all come from the input supply; a lot of it comes from the hot water heater itself corroding over time.
Plenty of countries have used tariffs to successfully develop and protect key industries. Including... the USA!

https://www.gilderlehrman.org/history-resources/spotlight-pr....

The choice to get rid of these policies was made by people who fully understood that doing so would pump assets and dump exports, and that the ability to benefit from the asset pump would be concentrated while the fallout from the dumping of exports would be widespread.
The video surveillance caught the bad guys but a dragnet gets a pat on the back for 26,000 violations of privacy.

This is one good story however it is presented with a narrative that seeds unquestionable support for warrantless surveillance.

702 is on the horizon, what will we choose? Privacy or security. There is no such thing as both. In this well painted narrative the answer is simple. Security. What about other narratives though?
Any business can rent space in a colo pretty easily. The constraint is mostly hiring engineers with experience racking and stacking boxes, and willing to drive to the colo when on call.
Honestly Excalidraw got me back into being motivated to create more diagrams in my documentation.

draw.io is a pain in ass at times and it's just not "fun" to use like Excalidraw is.

Highly recommend trying it out if you haven't - you can also self-host.
Is this actually implemented? Do all browsers in india use weakened TLS or something?
I don't know if they're "unpopular", but I think the BEAM family of languages, Erlang, Elixir, LFE etc. could be used more. I read more and more problems people have on here and just think that they go away on the BEAM.
Please add an option to delete account. PayPal is the only free one? Moving on.
That is exactly the purpose of "distinguished engineering fellow" roles.
[dm-crypt] LUKS container creation without device mapper or loop device access
Source: https://old.reddit.com/r/termux/comments/187zhwi/dmcrypt_luk... (old.reddit.com/r/termux/comments/187zhwi/dmcrypt_luks_container_creation_without_device/kbhmuxs/)
Banker pays $2M for coal mine, discovers $37B rare Earth elements
So I started seriously using UniFi I think in 2016-ish after using some of their PtP/PtMP stuff for longer. I never ran anything massive peaking at under 200 devices total across various sites, but we did put it pretty hard, and I did enjoy it and find the value proposition excellent. And having said that I'd sound a real note of caution, which is why I've eliminated most of them in favor the same-niche positioned Omada. Ubiquiti turned into a real development dumpster fire, every bad tech trope right from the textbook. They have a long history of introducing constant new hardware that, particular for routing/firewall/gateway services then languishes even as it gets sold new without a single update for ages. Various touted efforts that then got unceremoniously wiped. Really basic core functionality neglected for constant UX churn, let alone useful important new features. "Dumpster fire" has not been an unreasonable descriptor. They've also added a concerning trend towards proprietary lock-in and pushing of cloud, even though to their great credit full local control remains a key selling point.

Omada isn't perfect either, and the hardware design is worse, though it's been more reliable and with a lot of basics better locked down for me. I'd be delighted to have two strong competitors there, and there have been a few promising glimmers on UniFi, like PPSK getting some initial attention (4 years late is better than nothing). And certainly the basic switching and WiFi mostly works. Having a whole single pane of glass remains attractive, and either is a big upgrade over the kind of stuff a lot of people are coming from. Just take some of their promotional gloss with a grain of salt is all.

And as always AIO is something to balance as well. When I switched out the routing side of things for OPNsense I could maintain the whole rest of the stack as I pleased, including APs in optimal positions. The latter is less of a (or zero) concern in small spaces, but even then WiFi, switching, and routing needs don't always evolve in sync.
Unifi is just their name for this series of products that all work together with their (free) controller. So you buy an AP, a switch, a router, all from the Unifi line of products and they all get setup from a single controller and work together pretty effortlessly
You can use markdown by adding the md suffix to your conf.py and myst_parser [1] to your sphinx extensions.

They are starting to work towards full sphinx functionality in myst markdown, too.

[1] https://myst-parser.readthedocs.io/en/latest/intro.html
[1] https://executablebooks.org/en/latest/blog/2023/new-project-...
I also interpreted it this way. Despite your knowledge of who you are and what you believe you have to offer, job interview rejection can feel like a personal attack.

Of course you’re not a fit for this role, why would you ever apply? We considered you before we knew who you were. But now we see you as you truly are. Monstrously unqualified. Your 15 years of experience in distributed systems is nice, but we’re really looking for someone who could invert a binary tree in 10 minutes, and, well, you were on track for 20+ before we kindly stepped in and asked if you had any questions for us.
Thank you Atlantic and Pacific!
No manual at all now? That's disappointing
Huh. Can't believe I never noticed this. I'm gonna enable it. Thanks.
I kinda hate Ubiquiti routers. My UDM Pro felt like a total scam, with the IDS/IPS being nowhere close to advertised. They promised but never introduced WireGuard. I also experienced strange bugs in the stack.

I eventually moved to OPNSense but the router I bought from them died. The interface was too cumbersome anyways, from the perspective of someone that just wanted WireGuard server+client, IPS/IDS, and VLAN.

I finally moved to Firewalla and it is lightyears ahead of Ubiquiti, OPNSense, and any other solution I've tried from a power user perspective. I use this with Ubiquiti APs connected to my Pi running the Ubiquiti management software, which works out quite well.

The Firewalla is far easier to use, has a way better UX, and covers 95% of the power user tasks.
With IDS and IPS turned off I can get routing at over 800Mbit consistently with my UDR.

It has the typical foibles of UniFi routing so I'm replacing it, but I haven't had too many issues with it tapping out the Gb port (when my cable line allows).

I wouldn't even try to add any fancy features to it and expect it to hold up though; it just doesn't have the power.

Oh, and one of the foibles is that if I do hit the router with a connection that saturates it it drops every other device on the network. So it being able to route above 500Mbit is kind of a non-starter I guess, as it can't do it to more than one client.
Same for every comment. You (not you, other commenters) "wish people knew more about X" but can't be bothered to write more than the acronym? Downvote. Explain what it is, why you care enough to comment it in this thread, why anyone else might be interested, link to a page, something, anything.
Redhat provides kpatches for 6 months, that's all. If you are running a year old kernel, no kpatches are provided for that kernel. Definitely, one needs to recycle hosts every six months.
> All of our roles are fully-remote

What are the availability requirements for these remote roles? Is it "you are available" whenever we need it, or there is a reasonable expectation set in the beginning? If you have an "on-call" system, what is that policy? How does that affect people in different time zone? It affects employees' health. Does it not?

A person I knew (not from my home country) worked at DDG for few months and left and let's just say he did not have very admirable things to say about the culture.

I apologise if you don't find this comment in good taste but I believe this is an important question about a job. People sleep at night and go on vacation oner weekends and an employer that keeps it "veiled" is not healthy. I had attended your calls (3 calls) and when I asked this question you all went radio silent. No response, no explanation, nada! Why not have some clarity about this?

Am I the only one who thinks about this aspect of this job? I mean this is a very important part of a job. It's not even about "I am not available psst 6pm", it's about - "set an expectation please!"

Why? I admire what DDG is trying to do (and that is why I singled out your post) but the people and culture behind the company that runs all that are very important too. DDG is not just another search company for me at least.
You are forgetting that most business' needs are extremely minimal. By volume there are more bakeries, bars, gyms, one man doctor's offices, little car dealerships, hair salons than businesses that have actual IT needs. And for those businesses a dream router is fine if not a bit overkill.
Ad blockers work fine on iOS. Yes, compared to ublock some things get through but not many. I have had good success with 1Blocker and AdGuard. Apple has allowed those apps for years.
What exactly do you think requires cycling millions of hosts to take 45 days? That's a couple hundred hosts every five minutes across a large number of datacenters?

I wouldn't expect it to be halved by optimization. I'd expect it to be an order of magnitude faster and take more like 4.5 days.

I wouldn't be surprised (but I would be impressed) if they tried and got it down to a full cycle requiring one working day. That's around 1% of hosts cycling every five minutes.
Why can't adblockers fetch updated filter lists and adblock strategies from a server and execute them dynamically? This would allow not having to update extension source every time to fix updated website adblocking.
That is a bad reason to give up, if that’s what you’re advocating for.

Where did they say anything like that?
Do the Unifi APs and other Unifi hardware still need a docker image or software installed that includes mongodb I think it was to manage devices?
Is this just a "submarine" for the government to get the general public on board with online surveillance?

http://paulgraham.com/submarine.html
Look, there's not much more I can tell you without just posting the proposed contract and their clarifications that yes, they really did mean that. I'm not talking about linking.

The terms don't apply solely to OSS code, but that's the most important thing restricted as far as anyone here is concerned.
I love it! Reminds me a bit of the protagonist of Aphyr's Verb-ing the Technical Interview series, with the parentheses of salt and bough of cloud pine and deep arcane knowledge.
STLFilt, probably. https://www.bdsoft.com/tools/stlfilt.html
Combination of repetition penalty and overwhelming the attention mechanism, depending on how you're using it (ChatGPT and ChatGPT/API, respectively)
How sure are you of the rareness? What if you looked into the VAERS data and it told you adverse side effects were several orders of magnitude more common than any other approved vaccine? Might want to look that up.
History of Hair Removal