skysight-inc/HackerNews huggingface dataset:
> It's interesting to compare Dart, which has zero uptake outside Flutter

Caveat: I work on Dart.

I don't see that that's a very damning critique of Dart. Every language needs libraries/frameworks to be suited for a domain. Flutter is a framework for writing client apps in Dart. Without Flutter, no matter how much you like Dart the language, you'd be spending a hell of a lot of time just figuring out how to get pixels on screen on Android and iOS. Few people have the desire or time for that.

Anyone writing applications builds on a stack of libraries and frameworks. The only difference I see between Go and Dart with Flutter is that Go's domain libraries for networking, serialization, crypto and other stuff you need for servers are in the standard library.

Dart has a bunch of basics in the built in libraries like collections and asynchrony, but the domain-specific stuff relies on external packages like Flutter.

That's in large part because Dart has had a robust package management story from very early on: many "core" libraries written and maintained by the Dart team are still shipped using the package manager instead of being built-in libraries because it makes them much easier to evolve.

I prefer that Flutter isn't baked into Dart's standard libraries, because UI frameworks tend to be shorter-lived than languages. Flutter is wonderful, but I wouldn't be surprised if twenty years from now something better comes along. When that happens, it will be easier for Dart users to adopt it and not use Flutter because Flutter isn't baked in.
> Firefox will reverse its longtime decrease in browser share after gaining a strong impetus from Google's plan to switch to "Manifest V3" in the Chrome browser. That transition will make ad blockers harder, if not impossible, to implement in Chrome.

That seems to be not the case? Like, there's a version of uBlock Origin that works with MV3. It's obviously not as featureful, but I understand it works decently well?

And plenty of people use Safari, which only supports declarative content filtering, and are satisfied with that.

I think the real bit is in one of the comments below the article[0]: no one really cares. The market has overwhelmingly spoken, and browsers like Chrome and Edge -- despite the fact that they are privacy disasters -- have won. I don't think ad-blocking getting a little bit weaker will change that.

[0] https://lwn.net/Articles/956701/
>>"I'm John-rosebud, so with that said, I'll leave you with a Chaow...

Chaow-rosebud"
I love Bluey. I was raised with Heeler dogs so that was major for my initial openness to the show. I may like the show more than my son does even!
even the stem??? and here i thought i was adventurous for not peeling carrots and potatoes
I think you're understating how important the fact that interfaces are structurally typed is to the overall effect of the feature on the language and—even more—its idioms and ecosystem.

Go would be a deeply different language if types had to declare the interfaces they implement ahead of time. It's one of Go's main distinguishing features (or at least was until TypeScript came out and also had structurally typed inferfaces, for different reasons).
Your linked article does not show that PyPI has been attacked in this way (I don't think this is really an attack, but putting that aside for a second).

The way PyPI does deletions is through "yanking," which is really a soft-delete mechanism. Yanking prevents usage of a particular package version for new resolutions, but allows fully-resolved versions to be downloaded. As a result, PyPI doesn't have the specific behavior that caused this (forbidding people from removing their packages because removal means hard-deletion).
Nor'easter to dump first significant snow in two years across East
I spent 20y in the woods in Fairfax and Prince William counties. Never ran across it. Only edibles I recall were persimmon, raspberries, blackberries & a wild strawberry. Also osage orange for whatever they were good for.
Just don't expect even an iota of evolution. Barring a change in leadership, generics is almost certainly the last new language feature (at least in this decade)

Great! :)
So wholesome!
I haven't gone quite this crazy, but I do have three SSIDs broadcast from my UniFi APs - my main network (WPA3 PSK), a guest one, and a devices network for IoT devices. All these are on different subnets/VLANs and firewalled off from each other.

A lot of the IoT stuff doesn't work with WPA3 or 5GHz, so it's useful even for that reason, but the main thing is screening them off from everything else.

I am setting up a NUC as a little home Proxmox server (for some other stuff mainly) but for "fun" I can actually see myself setting up a Samba 4 Active Directory domain controller and hooking FreeRADIUS up to that to do Enterprise for my main SSID, but we'll see!
AWS Verified Permissions – Security Explorations
Dive into the world of AWS Verified Permissions with Abhay Bhargav! Uncover the secrets of scalable permissions management and fine-grained authorization for more secure applications.

Don't miss the raw, unfiltered exploration!
Back in 2010 I had an iPhone 3GS and a Blackberry Bold. I really wanted to justify using the Bold because of the professional image I associated with it. In repeated typing speed tests, I found my WPM to be essentially the same between the two. Every other aspect of the iPhone user experience was vastly better. I kept the iPhone and never looked back to phones with keyboards.
The issue isn’t Medicare Advantage, it’s Medigap regulations. If a person can demonstrate continuous coverage, there’s no reason that they shouldn’t qualify (I mean, ideally, obviously they aren’t in reality).

I’d also note that MA plans are absolutely not incentivized to deny necessary care. If they refuse to grant a PA to treat your actual cancer, they will lose a ton of money when you go to the hospital. It’s part of the entire point of MA incentive structures. They are incentivized to deny unnecessary care (low back scans and a lot of other unnecessary radiology, for instance, that traditional fee-for-service incents providers to order needlessly).

This is a shockingly poor article from NPR.
That sounds fine, and I'd hate to see those opportunities taken away.

Largely, the contractors at Google have worse pay, harder jobs, fewer benefits, and less security for what is _almost_ an ordinary full-time job. They're often angling to become full-time employees. It might be legal, and it _might_ even be ethical, but it looks at best (even to other Google employees in places like memegen) like Google is abusing a legal grey area.
About three years ago I joined a company that was on Sketch after working at a Figma company. I thought I was pretty tool agnostic but after starting work, I quickly realized how awful the Sketch workflow is.

It's awful collaborating and sharing files with Abstract. More and more plugins were unmaintained. And with the growth of WebGL, Figma was actually far speedier than Sketch. Sure if you're 1-2 person shop or a really big company with lots of specialized Sketch plugins, Sketch might be fine but on any other team are better off making the switch.
I think it's more a question of encrypting data on the backend. The data wasn't stolen by phishing 16 million individual users' passwords. Companies that deal with sensitive genetic data should be subject to the same level of HIPAA compliance as those that deal with medical data, for instance.
> The password alone can identify each client, and activate different configs for each one.

That's interesting, first time I hear this. How would that be represented in the hostapd config file? Would it be WPA enterprise using a radius server, or would it actually use WPA-PSK?
Whats the verdict on temu vs aliExpress. I still find things %30 cheaper on AE while most of my orders are delivered within 6 days.
Unknown. But if it means higher costs for routine shit. GFY. However, you can in fact go live in the forest in your underwear if you really want.
No, price is determined exclusively by the seller. The ability to make sales and overall revenue is determined by supply and demand.
Computer Networks Video Lectures by Jim Kurose
right!? i was hoping this would be a guide with something like freeradius and letsencrypt/acme to handle certs instead of yet another rando “free until we go under/get bought” saas service
What is your threat model to warrant this effort at home? Are your work-related machines not networking through an encrypted tunnel in some other way (that would be a serious oversight!)? What government are you living under that is routinely compromising WPA3 from mobile vans? Are friends/guests so untrustworthy that you can allow them into your home but can’t trust the VLAN implementation of your network equipment to protect you from them accessing your network admin plane?

I’m asking incredulous and probing questions because I used to live life the way you are currently, and it’s frankly unhealthy for the human brain. If “home” feels like such an unsafe place to warrant your current measures, you need to either make serious changes to where home is, or your mental state. Neither is easy but at least one is necessary.
The fastest java solution from the current leaderboard runs within 2.6 seconds in my brand new M3 Mac.
I have an idea for a hardware accelerated VP8 video encoder. The bottleneck is pretty obvious. Any FPGA that supports PCIe costs enough that you can just buy a faster CPU and do everything in software. 1080p@60fps requires around 3gbps. Your only hope is to take a low end FPGA and connect it to the USB 3.0 FTDI chip that gives you a 32 bit @ 100MHz parallel interface. The resulting PCB including all hardware would probably cost around 60€. This would be enough to reduce the costs of real time video encoding below 100ms to make it profitable to run it as a business with a slim profit margin.

It's pretty obvious that an FPGA is a bad choice as an accelerator if you can get away with it. Future CXL FPGAs will be highly capable platforms, but they will be both expensive and a nightmare to develop for, negating most of the reasons why you would use them.

By the way, your complaints about LUTs taking up transistors is pretty irrelevant. Most of the transistors are being "wasted" on the routing switches and connection boxes. The space taken up by LUTs is so small that there are mask programmable gate arrays, aka FPGAs without the routing switches and connection boxes. They end up three times as dense as a regular FPGA as a result.
Here's an archive link: https://archive.is/ArnbD

Pretty much spot on, it has a couple funny quotes like the Bluey episode about a cricket match beating the ratings of the actual cricket match, and how the ABC (Australia's BBC) gave the international rights to the British BBC (which was a rather colossal mistake).
https://archive.ph/ArnbD
> The less charitable, but understandable interpretation probably runs along the lines of, "we've been doing this for a decade and it's frustrating that we haven't gotten enough recognition for it, to the point that the subject of this HN post seems to be striking people as quite unlike anything others have done before".

I think that's a fair digestion of the force behind the tenor of my comment, which I would otherwise agree is perhaps a bit harsh.

> I think that's just typical nerd pedantry [...] It is correct to say that you can't bridge "WebRTC" to "SIP"

It's a bit ironic to me because I come from a humanities background, leading to amusing - and sometimes infuriating - cultural clashes with nerds and their pedantry, since I'm very comfortable gesturing at commonsensical understandings of things and being what programmers would consider "vague". I often grouse about needless nerd pedantry myself.

Nevertheless, telecom is about rigourous and labouriously articulated standards, and always has been. I think you correctly discern a note of displeasure in the way that people with this kind of metaphysic see the socialisation of RTC technology into the web economy. It's a bit like how Node is seen by classical systems programmers to be a psy-op meant to convince JS UI developers that they can write robust backend code. It does the job well enough, but sometimes you have to actually know things.

Yes, in short, I think that conflating "WebRTC" and "SIP" in this manner, and popularising this crude understanding of the various parts and where they fit, does not so much further productive adoption and public understanding as hinder it. In the case of RTC in particular, where tolerances are lower and robustness is paramount, taking the shortest path to democratisation of the most general QuickStart Guide may not be the best thing to do. We see the consequences of this every day on the mailing lists of the various open-source building blocks previously mentioned, as well as others, like JsSIP and SIP.js.
> companies trying to duck various taxes tied to employment.

surely the contracting company gets to pay that tax, rather than the client.
so-vits
Ah yes, the no true contractor fallacy.
Best use of time ethically speaking. Goal is to develop ideas.
The medical underwriting on Medigap plans also affects people who have the foresight to choose Original Medicare with Medigap.

Once you have a disqualifying health condition (and since Medicare is for the old and disabled, this is most people), you are stuck. If your Medigap provider raises their premiums above the rest of the market, you can’t switch to another one. If you miss a premium payment and get dropped by the plan, too bad, so sad, Medicare Advantage is your only practical option now.
think fancy Finder window
> the astronomical community on the other hand as far as I'm aware expected this

Huh I didn't realize that. Do you have a source handy?

I couldn't find it in my brief literature search.[0] I found a couple references to Starlink brightness from 2019, but they're all after the first operational launch.

> https://arxiv.org/pdf/2309.14152.pdf seems to be the latest review I found on the issue, with Post-VisorSat being worse than VisorSat

Yes SpaceX needed to delete the visors to add laser hardware, so they developed a novel space-rated dielectric mirror as the new mitigation method. That was their first generation mirror, with the current second-gen mirror having better optical performance. As far as I know they haven't been characterized yet.

Iterative development takes time, it's true. It also takes money, which is why Starlink competitors are investing essentially zero resources in dark sky stewardship and R&D. Why bother? They know skywatchers will call anything and everything Starlink, so Bad Billionaire will soak up the blame regardless of who really caused it.

The competitors are astronomy's real 'enemy at the gate,' but most folks are too distracted by the shiny Elon Musk bouble to notice.

[0] for example https://scholar.google.com/scholar?q=megaconstellations+brig... and https://scholar.google.com/scholar?q=starlink+brightness&as_...
I can't explain it but my brain can't handle that this is a website and not a mobile app.
There is no pretext.

Google's legal responsibility is to maximize shareholder profits.

That means they have a responsibility to not overpay for value given. If contractor wages meet the value google needs, they will opt for contractors vs FTEs.

Its not fairto criticize google for doing something that every person does everyday When looking for mechanics, plumbers, and general contractors
This is mentioned in the blog post:

Running as a single node (no cluster support yet)

If cluster is supported, I think this can compete with Kafka
oh absolutely they look bad, and they could certainly have chosen a more tactful response. Most people won't even understand the nature of the data loss, and it's likely to affect their bottom line. And honestly IMHO that's more than enough lesson to start forcing security down their customer's throats.

But as I see it right now they have no legal culpability and calling for them to be drawn and quartered over it isn't exactly productive. Honestly I'd worry more about an industry knee-jerk reaction slapping crappy but CYA security on all kinds of sites if they lose the legal battle over this.
> At dispute here is if this union is even legal in the first place

Does any reputable legal authority think Google's claims have merit here? They're appealing the court ruling against them, sure, but that looks more like a stalling tactic than something they expect to actually succeed.

> Regardless, "bargaining in good faith" purely means an intention to bargain honestly. If that bargain means "nothing changes" - that satisfies the NLRB according to their own website[1].

Which would be a win for the employees - they're trying to get Google's (unilateral, illegal) changes to their working conditions rolled back.

> A union is not a magic ticket to get whatever you want. Employers are free to reject any demand for any reason. Being an employee does not mean you can force an employer to give you things...

Not true. Employers have obligations, employees have rights, and unionised employees have more rights. Yes, you can't always get everything you want. But you can get some things, such as preventing your employer from unilaterally worsening your working conditions.
I'm sure people will create holographic Hitlers for historical reasons too.
Huh? Almost every cryptographic session protocol starts out with the parties sending unauthenticated data of some sort to each other. Having a way for a party to send a blob as part of its request to be let in is straightforward.

Plus we’re taking about WPA, which, AFAIK, still uses a horrible hack for EAP even in WPA3, and as you can see mentioned elsewhere in the comments, EAP makes a pretty strong showing in its quest to be the worst widely-used example of giving an unauthenticated party actual access to the network as part of the authentication flow.

Doing this right is not that complicated.
Once again, thanks for such a thoughtful response. You’ve been a great resource and inspiration!
I'm not sure how many similarities there are between current mainstream interfaces and Fibre Channel specifically, but there has been an obvious trend of convergence, and Fibre Channel was probably one of the earliest instances. Nowadays, almost all high-speed interfaces have abandoned parallel links in favor of serial signalling over differential pairs implementing a packet-switched network. There's enough similarity at the physical layer that you'll often see a chip designer go with a general-purpose PHY shared across SATA/SAS, USB, and PCIe ports because they all operate at similar speeds and often similar encodings (eg. 8b10b). Likewise for sharing between InfiniBand and Ethernet.

DRAM is still almost always a traditional parallel bus, and it's basically alone in that. HDMI was a late holdout where the signalling was serial on differential pairs but the clock speed was variable depending on the data rate; newer versions of the standard rely instead on the link operating at one of a handful of fixed standard data rates, as done by everything else.
Absolutely not what I’m doing… I used the phrase “one of” for a reason
Depending on your local resolver, you possibly can provide DoH on localhost as well? I'm using unbound, and it was trivial to also provide DoH on localhost with a funky port, so 443 localhost remains available for other things (my motivation was that firefox also doesn't support ESNI without a DoH resolver; I assume this is still true for ECH as well, but haven't re-visited).

For firefox, you can use a self-signed cert on your resolver (firefox did not work with ed25519, it did work with NIST P-256; I wanted a small key for lower overhead [having to use TLS + HTTP encapsulation for a resolver on localhost bothered me in irrational ways, and I was determined to minimize the overhead, even if the rational part of my brain said the overhead difference was too negligible to matter]). Add it with:

edit-> settings -> (search "cert" in 'find in settings') -> view certificates -> (server tab) -> add exception -> enter the url:
https://localhost:4353/dns-query
ensure "permanent" is checked

The file, "cert_override.txt" is created by firefox after adding the cert exception, which can be copied to other profiles for provisioning.

The gui DoH config will create the following in about:config which can be used for provisioning with user.js:

network.trr.uri https://localhost:4353/dns-query
network.trr.bootstrapAddress 127.0.0.1
network.trr.mode 3
trr true
(network.trr.custom_uri is not used for anything but display in the gui)
network.trr.custom_uri https://localhost:4353/dns-query

I don't think chromium requires DoH for ESNI / HTTPSSVC, so it can just use plain-text localhost:53 as before. If it does need DoH for this, I do not know the equivalent to the above config, for chromium.
I don't think so either, but as we move past that side tangent and return to the discussion, there was the battle of the 'event systems'. Node.js was also created in this timeframe to compete on much the same ground. And then came Go, after which most contenders, including Python, backed down. If you are writing these kinds of programs today, it is highly likely that you are using Go, Node.js, or some language that is even newer than Go (e.g. Rust or Elixir). C++ isn't even on the consideration list anymore.
I had never read any papers on shadow paging when I wrote LMDB. I refer to it as double-buffering in the original LMDB paper because of my own prior experience writing graphics code. You can find the (L)MDB paper here https://openldap.org/pub/

Other commenters noting that append-only isn't efficient enough for general use are correct. We found this as well in the early days of testing LMDB with append-only behavior; 99% of pages were obsolete after only 5 transactions. That's why LMDB is CoW but not append-only, and that's why it uses a double-buffered meta page.

Bzero's work on append-only Btree was educational and illuminating, but not usable in the real world.
Influenced, not determined.
Where I live we have typhoons. The last big one caused gasoline supplies to be disrupted (I believe the tankers could not approach to dock or something like that) and all the gas stations were out of gas for two or three days. The electrical grid didn't even blip so there was no problem for EV owners.

ICE cars are really unsuited for places where the gasoline supply is not guaranteed perfect.
Exactly. And if there are no visited items, evictions happen at hand and hand is at tail and doesn't move. Full cache is dedicated to finding items that will repeat. They are getting the best chance they can.

Once some visited items arrive they are retained and the fraction of cache dedicated to new ones shrinks, so they have less time to get visited again and avoid eviction. But this happens for the benefit of retained items. If they were already seen second time there's a chance they'll occur for the third time and more. They are worth more than fresh ones. It's unfair to new items but beneficial for the cache as a whole.

When many different items are revisited hand moves and eventually reaches the head. Then the cache is full. So it's moved back to tail to see if we can evict some of the old stuff because maybe they weren't re-visted since last time we considered them for eviction.

Can you see it's not random and that it's actually useful?
"On the casino I used to run"? That might be the most casual intro to what sounds like a fascinating corner of the internet I never experienced.

Do you have any other interesting stories or references to that time of your life?
> Once you’ve installed the profile, we once again need to manually tweak trust settings. This time to explicitly enable Full Trust for the Smallstep RADIUS server’s root CA. Again, this is not true for a full MDM enrollment.

Do not download and install and fully trust root CAs from anyone on your iPhone.