skysight-inc/HackerNews huggingface dataset:
> they still have significant agency

It is objectively true that the public has significant agency, and the empirical evidence is the number of companies that took a political stance on some issue and then had to reverse it because of (uncoordinated) public backlash. Your unfounded assertions are categorically refuted by concrete examples such as Target and Bud Light publicly reversing their stances on some issues after consumer backlash.
Is there a reason you split IoT stuff off of the guest network?

On my network we just have a guest network which denies LAN access to anything connected to it, but I'm wondering if there's a good reason to split IoT off entirely.
Makes sense, I think.

I don't think you need another endpoint that will respond with cookie commands?

On your page, the one that got the "?code=foo" payload, you can use javascript on your site and make another call to the backend to get the tokens. The same javascript code should clear the URL so that a naive copy/paste doesn't get it.

This is in contrast to having another server side endpoint that can set cookies on another http redirect response to the user. One that has to be in the same domain as your application, for the cookie to set correctly.

This will leak the "code=foo" in any access logs surrounding the user. But, that is already in the user's history and already happened. Is why cognito goes out of their way to make "foo" one-time use.
Seems like you could do the same with rqlite [1], since SQLite supports JSON.

[1]: https://rqlite.io
> Build the applications as logical monoliths but hand them off to automated runtimes, which makes decisions on where to run

Any additional details on what tech they used to achieve this automatic splitting?
when I discovered STLport around 2001, it was a real revelation and very convenient because I was finally able to compile the code my coworkers wrote on "real UNIX" with "real C++ compilers" (lol cfront)
In researching my answer I came across
http://www.stlport.org/resources/StepanovUSA.html#
"putting it simply, STL is the result of a bacterial infection."
> Never mind that the iPhone’s official marketing line from the beginning has been...

Fixed.

It's an age-old sales tactic. "It's not a bug, it's a feature!"
Virtual product placement can help advertisers grow their brand [2022]
If you had watched video of this story, you would know that "the time it spent careening down the runway with a massive fireball" was measured in seconds.
> a sense of connection at variety of scales.

This is the heart of the matter for me. The article talks about how a well-ornamented building reveals more detail as you get closer. I see that kind of fractal richness as the building repaying and thanking the city for giving it the space to exist. It's interesting at every distance, aware of its immensity and respectful of the people who have no choice but to look at it, offering something for the eye of anyone in line of sight.

Glass skyscrapers and unadorned buildings don't have that quality: you get the same cold-shouldered inscrutability whether you're ten feet or ten blocks away. They're fundamentally rude. In the city, but not of it.
Cool! I had no idea this was a thing. Looks way more elegant than HSTS and all that mess.

Whats the status on DNSSEC? Last I checked, it was a bit of a mess as far as protocols go.
Companies and conservative governments are notorious for thinking short-term, and not being willing to spend money 'on the future'. So they are always playing 'catch-up'.

If the Energy companies had planned ahead and spent money on infrastructure in advance there wouldn't be "waits of up to 15 years" for "applications to connect to the electricity grid". In other words, their inability to plan long-term and invest in infrastructure beforehand is affecting their energy sales business income NOW.
The more colloquial, sloppy, and nonstandard the language, the less likely a student's cheating will be flagged as plagiarism. There are many, many dishonest uses for LLMs; students around the globe are leveraging their ability to furnish essay answers and entire reports with expert-level domain knowledge.

If a student doesn't engineer the prompt properly and the LLM uses its "native" voice, this can be easily detected by instructors, so it's very important for cheaters to disguise their cheating and hew closely to an inexperienced writer, even a foreign-language speaker, in order to pass muster.
Oh good they have Stab. That franchise really went downhill but the first one was great!
No it's not an immediate goal. It's just a good feeling building something useful to you and it be useful to others that's why I strive to perfect it in every way whether it be documentation, code, design.. doesn't matter! I'll also obviously try to share it with the world in every way I can! :)
> but it does not means the system is stable.

This is a direct result of Go's lacking error handling, and would not be necessary if they'd have learned from C++ and Java's mistakes, instead of just repeating them.
If only we have custom components and JSX directly supported by browsers without the burden of using React
BTW, Google also modified an existing ex-mall in northern CA, Mayfield Mall for the Google X offices (https://x.company/blog/posts/from-mall-to-moonshot-factory:-...

I've worked with a fair number of people who walked in, thought it seemed familiar, and then realized they had gone there as kids.
Wait, the AWU is tiny. I remember the count being something like 2,000 union members out of 100,000 Google employees. It does not make sense for Google to negotiate with it.
Wonder how they’re getting around patent encumbrance. Ryan Seacrest already tried this a decade ago.

https://www.pcmag.com/news/ryan-seacrest-invests-in-typo-iph...

https://www.cnet.com/tech/mobile/typos-hardware-keyboard-for...
Does the NSA use WiFi at all other than for clandestine collection systems in the field?
The only axis that really matters in terms of web development is WordPress vs anything else.

The reason the world believes websites offer crippled functionality compared to everything else essentially boils down to the fact that everyone uses wordpress and it’s incredibly hard to enter meaningful from the front end into a WordPress site.
I’ve been thinking along these lines for a while. The web has to support pages all across the spectrum, and it’s reductive to argue that one type of website is what a website “should be.”
Isn't it what's happening now with vox?
> the old "dynamic" vs "static" language wars.

We used to argue about dynamic vs static languages. We still do, but we used to, too.
I think you're right that cars are not a unique ill here. But I think it's worth observing that car-dependent societies disproportionately exhibit complexes of destructive patterns: car dependency goes hand-in-hand with insufficient urban design, poor transit networks, food deserts, etc. The latter aren't uniquely produced by car dependency, but are substantially aggravated by it.
I'm in good shape and healthy and if I sit and drive for more than 3h straight, my body is quite unhappy with it. It's possible but not a good idea.
There's always made up Tethers. This recent run is supposedly people and institutions adding to their bag before the spot ETF coming up some time in January.
Zed is great, have been using it to do the Rustlings exercises and learn Rust:

https://github.com/rust-lang/rustlings

If you've been looking for an excuse to learn Rust, check it out.
My home network is so small I just use MAC VLAN policies on my managed switch. Same SSID and PSK for all devices makes it easy and they all go off onto the untrusted VLAN by default.
Huawei's homegrown operating system may soon overtake Apple's iOS in China
That kind of behaviour leads to a lot of valuable people abandoning workplaces because they can't stand the abusive atmosphere. In the end all that's left are the shouty arseholes and that doesn't do anyone any favors.
Yeah this is what I do. Both guests and naughty cloud devices get put on the same LAN as everyone else but can only talk to the gateway and the internet.
Almost every golang program I've seen was ugly. It's strange given that they designed the language from scratch with all the ugliness ingrained in its structure from day one.
Also it's a lot easier to complain on the Internet and raise awareness. Having to actually pay higher prices or go without the best product is a real cost to the individual. Easier to just "put it on global companies man". Peter Schiff did a good video a while back standing outside a Wallmart asking if any customer would pay more so the staff could earn more. Guess 100% of the response.
It has always surprised me how many employees and contractor Google has. Anyone has a rough estimate of tech/non-tech division in Google?
Yea I wish I could run my router with PMF enabled and WPA2…so many devices do BOT support such options…specially WPA3
That's right and since we are talking about ROVs, I recall that it is common to power the ROV with relatively high voltages specifically to allow for smaller and lighter tethers.
I guess it depends on what kind of friends you have, but assuming iot devices are insecure rubbish, I wouldn't want them on the same network as guests. But then again you might want to turn on client isolation for the guest network, so that wouldn't really be an issue.
Freedom includes allowing users to choose a less free alternative because they derive benefits in doing so.
Ember might be the last of the old guard frameworks where this is somewhere between hard and impossible (last I looked at it anyway).

Nowadays, the main libraries are designed to not totally take over the entire page, though add-on frameworks which want to be "batteries included" (i.e. Next for react) certainly will.
Human-Like Browser Automation with GPT-4 Vision and MeiliSearch
I've been messing around with Q10 keyboards, MCUs and cases but not got to anything as good as a Fairberry - I'd love one or two if you have spares! Couldn't see details for private messaging you, but my profile has enough to email me on :)
How is the software support? I'm using Blackberry Keyboard on my Key 2 and it's pretty good, does that work okay with Fairberry?
Indeed. If you're not building medieval siege works then you too aren't a real engineer.
Something like that is the core idea behind Black Mirror S2E1, "Be Right Back" (2013).

https://en.wikipedia.org/wiki/Be_Right_Back
Backend people use Go in my company. They do great things with it. It works well enough when the interface between a Go program and another one is a socket kind of thing.

But we also have a couple system utilities for embedded computers written in Go. I still get frustrated that I have to go and break my git configuration to enable ssh-based git clones and set a bunch of environment variables for private repos. Then there is CGO stuff like reading comments as code interfaces. Those things are incredible waste of time of the embedded developers and it makes harder for no reason to onboard people. Go generally spits out cryptic errors when building private repos like those.

I always wanted and still want to create a wrapper that lauches a container, makes whatever "broken" configuration that makes Go compiler happy, figures out file permissions and runs the compiler. The wrapper should be the only go executable in my host system and each repo should come with a config file for it.
Private Equity Vets Are Coming for Your Kitten (2023)
Errors are just checked exceptions where you get the chance to introduce bugs, by unrolling the stack manually.
I've seen this project, it's very cool! I'm all for it if you want to use it. I just didn't want to go the route of SQLite + a layer. SQLite as well is not encrypted by default. There's a lot to the comparison but it's not the same.
Thank you. The felt table texture is a nice touch. And using a ported FEN format to specify a position is interesting, and looks much easier to grok than some other formats like gnubg[0]. Cool project!

0. https://www.gnu.org/software/gnubg/manual/html_node/A-techni...
And of course, labelling practically all of our computers as 'Not Windows 11 Capable' isn't helping Microsoft at all.

Windows is not today the 'Must Have' that people used to think it was in the past. Remember those all-night queues for Windows 95?
It was fun compared to table and sizer gifs
> I wanted to make something beautiful and easy-to-use, without logins or ads or in-app purchases or any of the other stuff a lot of them have.

mynoise.net
EAP-TLS is generally a great practice, as EAP-PEAP is vulnerable to MITM issues (fix proposed in https://www.ietf.org/archive/id/draft-josefsson-pppext-eap-t... but never adopted).

For the use case cited -- blocking MAC spoofing, EAP-TLS doesn't quite solve it, it mainly only solves authentication. The outer layer is not wrapped with TLS and is instead based on an ephemeral session key. Additional work is needed to stop the spoofing. The RFC states explicitly that channel binding, which would help stop the MAC spoofing, is not implemented https://datatracker.ietf.org/doc/html/rfc5216. What it does prevent is a client from being man-in-the-middled.

What's even wilder is that on some access points, when set to bridge mode, with an upstream Radius Authentication Server, as described, they may be vulnerable to ARP spoofing of the upstream radius server IP. This is something we've reported to vendors and were told "won't fix". Names include Netgear and TP-Link, though we don't suspect all routers from them are affected by this. We have not tested with the unifi access point referenced in the article.

So to restate the attack, cause it's so ridiculous, you should know about it: an anonymous, unauthenticated wireless station associates without a password. Next it would begin the EAPOL negotiation but it instead then proceeds to perform ARP spoofing to claim the IP address of the upstream Radius that is supposed to only be routed over the uplink interfaces. Even without knowing the shared secret, it's possible for the client to pretend to be the radius server to the AP, and authenticate itself onto the network.
One thing you want to be very sure of when setting up 802.1X Radius Auth, is that your access point is not going to be misconfigured to allow clients to do this.
I don’t doubt the data, but the question is how to use it. When it comes to long tail events like breakdowns there is a big difference between an individual purchasing one car and a large fleet owner purchasing in bulk where the law of large numbers helps remove the variance.

In my anecdotal case, I traded a potentially larger but still small probability of a major breakdown for a guaranteed better maintenance schedule (no oil changes, less brake/rotor work) and no gas station visits. We’ll see how it goes!
I'd love to see a infographic style explanation website of all the different package managers and their tradeoffs, written to a package-maintainer level of detail.

It's such an interesting and important field but largely treated as an annoyance, dismissed by the very people who should be learning about it.

Simply having a table of all the fundamental concepts involved and how each package manager handles them would be really interesting. Or even just a list of the fundamental concepts useful for building your mental model of how they work!
False. It's nice of you to be overconfident, though
Last straw was for correctly pointing out that Canada had inadvertently harbored, nay, honored a Nazi.
Having to reload the page to like a video, add a comment or subscribe would definitely gut their engagement with creators.
And the NLRB's reasoning is summarized in this sentence:

> At all material times, Respondents Cognizant and
Google have codetermined the essential terms and conditions of employment of employees employed at the E. Parmer Lane facility and have been joint employers.
>I've yet to see a project where Gradle daemon a) does anything useful

Also my experience.

Only using Gradle deamon does not help making a multi-project setup much faster. You also have to enable build cache, configuration cache and configure on demand with `--configuration-cache --configure-on-demand` and hope nobody in the project breaks the ability for Gradle to use these caches. But then it still took at least 10 seconds to build and start my services (and that's with incremental builds, like you changed one line of code after the first slow build). I spend two days and more after release to speed this stuff up, before it was 30 seconds sometimes 60 seconds.

And the protobuf Gradle plugin sometimes did not update the generated code, so you had force-delete the files on every build. And then other stuff in the caches broke and you had to delete `.gradle` directory and sometimes even the `~/.gradle` directory. And sometimes the Gralde daemon hangs so you have to force it to stop with `--stop.

Go build, deno and bun are so much more reliable and faster. Something that was surprisingly fast was using the Gradle setup with skaffolding. Java hot code swapping is very fast.
There are 2 billion parking spots in the US, enough to pave over the state of Connecticut.
I'm guessing that's going to be an issue for handoffs between APs. Think walking around a multi-story office on a Wi-Fi call. Now picture 30 APs and 100 people on wifi calls/VoIP etc. with DHCP recycling addresses, randomized MACs and so forth.
Both Rust and Go are descendants of Limbo, Pike's prior language, although while Limbo's DNA remains strong in Go it's much more diffuse in Rust.
As others have pointed out, this has been a very mainstream, and largely turn-key use of Kamailio, FreeSWITCH, etc. for over a decade.

I am closely involved with Kamailio, and I believe its websocket module, meant to effectuate this functionality, was introduced somewhere in the 2011-13 time frame.

While of course the ecosystem can always stand to be richer, there's nothing new here.

Side note: "WebRTC to SIP" isn't an especially intelligible formulation, as WebRTC does not prescribe a signaling protocol. SIP can be used on the browser side, and often is (for interoperability benefits both real and imagined), but needn't be necessarily.
> it’s incredibly hard to enter meaningful from the front end into a WordPress site.

Hard to enter meaningful what? Missing a word?

(Just trying to understand your comment)
It's fascinating how phones have come full circle. One of my first cell phones had a full QWERTY keyboard with physical keys that was exposed when you slid the top face of the phone sideways. Many phones in that era had similar full keyboards.

The fact that the iPod touch, iPhone, iPads, and other surface devices didn't need physical keys was seen as more modern and desirable at the time. Now it looks like people are circling back around and wanting physical keys again.

History moves in a helix I guess.
Not an issue if all if you know how to touch type and aren't reliant on the labels for the keys.

I'm typing this very message on a keyboard that has no labels at all, it's all muscle memory.
What is the value that Google derives from third-party contractor middlemen (vs. hiring directly)? Is it the ability to give workers the choice of more pay but fewer benefits? Is it the ability to have on-demand workers that can be laid off without damaging Google’s brand name? What laws, if repealed, would encourage Google to hire the employees directly?

Edit: To clarify, I’m wondering about workers who contribute to Google’s own core competency of creating software, not bus drivers, janitors, etc. for which Google’s benefits would be a larger fraction of their pay.

The Tech Equity Collaborative has a report giving some reasons (https://techequitycollaborative.org/download-the-contract-wo...), but they seem to boil down to big companies are so inefficient at hiring (e.g. “adding full-time, direct employees requires multiple levels of sign-off, budgetary allocations, and often numerous reviews and approvals”) that they are leaving money on the table (“tech companies often pay contracting agencies enough for the agencies to offer family-supporting wages”). I’m not sure I buy that.
Because it's not an operating system (for now).

We are essentially bolting on more and more management of hardware onto a userland application residing inside an operating system. At what point is it better to just get rid of the operating system and run the browser directly on the hardware?
Guatemala's baby brokers: how children were stolen for adoption
And that is the last day I ever eat at a restaurant.
> It's not so much cars themselves as it is car-centric development that causes many problems.

I wouldn't call it car centric, more like everyone-gets-to-have-a-lawn-and-2000-sq-ft-home centric.

Herein lies the crux of the problem, not in the mode of transportation. Americans are used to such huge spaces per inhabitant that driving appears to be the only option.

We have districts with detached houses where I live and to me they were always sort of a dead zone. No shops, no restaurants, not even a way to get across, as every square metre is someone's property, so at times you'll have to take a huge detour on the way to your destination.

Do the people living there drive everywhere? Apparently not all of them and instead they accept that they have to walk a significant distance to get to the next bus stop. All because they're used to having a lot of space and will never sacrifice it for an apartment in a place where everything is closer.
It works great to support the entire weight of the phone on your desk or a dashboard, even when driving a fast car or riding a bike (unless you crash of course). But it's 1-2 orders of magnitude less force than required to resist pulling it out of your pocket.
shameless plug: https://github.com/spr-networks/super is a project I work on that makes it easier to handle per-device wifi passwords on a single SSID, and it supports WPA3
On the topic of WPA3, I recently found that the old iPad 2 or 3 doesn't connect to wifi if it's set to WPA3+2, it only works in pure WPA2 mode. Tried on two different AP vendors, though I have no idea if they might use the same chip or driver or something. It's the only device that didn't work in this mode, everything else was fine, including some whacky iot devices like picture frames and an inverter.
Video intro is too long, without much substance.
> What do these sites have in common that this taxonomy usefully identifies? Forms with input fields?

Yes, that's what the article says, almost verbatim. The idea of the category is to identify sites that need to interact with a server to be useful, but do not need rich dynamic client-side interaction.

The editing part of Wikipedia would be "transactional" under this definition, because (last I looked) the way you edit Wikipedia is by typing your changes into a textbox and clicking Submit. It's not a Google Docs kind of situation where all the editors can see each other's cursors move around and type stuff in real time.
location: North Macedonia Remote: Prefer
Willing to relocate : Depends on location and if company willing to help.
Technologies : WordPress/WooCommerce Wizard, PHP, JavaScript, HTML/CSS
CV: Upon request, however most recent employees are Automattic(WooCommerce Technical Support)and WP Media (Tier 2 technical support engineer). Email: luan(at)luanluta(dot)com

More than 7 years experience in web technologies, helping local businesses be successful with technology and helping them develop a plan to cut losses in software they dont need. As a technical support engineer - helped tens of thousands of sites with their issues, writing custom code to extend the functionality of our the base plugin to suit the edge cases.

Looking for something in the open-source ecosystem, specifically WordPress.
I can't wait to watch Threat Level Midnight with Michael Scarn.