skysight-inc/HackerNews huggingface dataset:
The indie web is unbelievably easy.

What is unbelievably easy:

1. Generating a website

2. Writing content locally

3. Adding media to your local site

4. Making your website available on the network

5. Giving your website a meaningful name with DNS

6. Sharing your website name with your friends

And it’s unbelievably easy to pave that path for non-technical users.

What is unbelievably hard:

1. Finding a reliable route between your friends and your local website

The network you publish to isn’t the network your friends are on. You are on a subnet. And the identifier for your subnet is dynamic. And the identifier for your friends subnet is dynamic.

On the modern web, it’s easier for two devices on the same street in Illinois to rendezvous at a datacenter in Virginia than it is to find a stable and reliable route to the device down the street.

The web isn’t broken. The internet is.

The web is an overlay network on top of the internet. We need a better internet.

Personally, I believe libp2p is that better internet.
https://supabase.com/blog/react-native-offline-first-waterme... may be of interest. https://supabase.com/blog/postgres-crdt seems to be abandoned but would be the next logical step beyond this.
No, as company employee is directly tied to and the responsibility of the company.

These companies are responsible for their employees behavior and data but they are not responsible for nor legally liable for (in most cases, some exceptions apply) the actions of a third party that they have retained to help with hiring.

In fact the contract they have with said third party likely absolves them of any liability.

The title should be: I owned an AI startup via Firebase misconfiguration.

You can even name the startup if you want. That’s not flashy though and this person wants marketing.
How do people get ahold of you?
> Yes, I think it is, even if it is a very effective placebo. My point is that you don't need a psychedelic to cure depression of PTSD.

Have you taken into consideration the important distinction between abstract reality and object level reality?

Some fires can be put out with a fire extinguisher, but not all fires can be. Yet, it is objectively true (though misinformative, an extremely popular meme ~2 years ago) to say that "fire can be extinguished with a fire extinguisher".

Or if that's too poorly stated: "you don't need a psychedelic to cure depression of PTSD" is only true to the degree that it is true, and it is not possible for you to know that degree - thus, your mind fills the gaps of the unknown, and you take it as true, as you have been conditioned for decades to do. "It is unknown" is not an option available, to you.

But then that's ~~just~~ my opinion, I could be wrong.
Call me cynical but whenever I see a corporation talk up privacy, I start to question their motivations. It's worrying that a US company that Man-In-The-Middles most of the internet (and totally does not give the NSA all your keys) is working on attestation technology.

It's already annoying to fill out CAPTCHAs and many CloudFlare-backed sites simply just block my VPN. Couple this with Microsoft forcing TPM requirements on PC vendors for Windows 11 and a future where you need a locked down MS/Google/Apple OS to even browse to most sites is getting closer and closer each day.
How do you get simpler than Netlify and a static site generator? Actually self hosting will always be out of reach for most people. Do you want a GUi for making sites? How about square space?
You need refinement types. Psuedocode:

timespandays : int, timespandays > 0

your program can then be proven by the compiler not to NaN.
Instead they fixed (mostly) everything that was initially wrong with JS (and now typescript).

Which is fine by me and seemingly every stakeholder out there.
That and the War on Drugs™ is built on the foundation of oppressing "minorities".

The public has now been so conditioned by this bullshit that most people think that they're being protected by these stupid laws, when in fact they're either directly or indirectly suffering because of them.
The thing that’ll kill it is games moving to DX12/Vulkan only which that card doesn’t support.
Some companies intentionally Gray Rock security reports, because they neither want to attract attention by giving bounties, nor do they want attention for not giving bounties. If they just say nothing, the researcher usually just leaves them alone.

One could speculate that these companies want to pretend that infosec isn't a problem for them, and if they ignore the "problem", it will go away.
X's @Safety account just confirmed some details of the compromise: https://twitter.com/Safety/status/1744924042681897343

I'm surprised that the SEC wasn't using 2FA.
At the same time, i've used sendmail on my laptop to send an email to myself as a test and it somehow ended up in my inbox on gmail.
That's pretty much how seasonal rivers work & other natural intermittent water reservoirs.
Show HN: DeepTab – AI-Powered New Tab for Chrome
I often see this repeated, but in my experience self-hosted email works just fine as long as your IP has a good reputation, and isn't on some crappy bulk VPS.
Cli is hard because you need to tweak dotfiles hell or hoping the tool understand your environment, and also know how to upgrade itself. Also using terminal on windows, with native c libraries, with cydwin hell ?.
Title: I pwned Chattr.ai via Firebase misconfiguration

That’s what you should call it. It explains to readers what’s going on without over sensationalism.

That isn’t too long either.
Goland collapses this to a single line, and vscode is looking into it too.

https://github.com/golang/vscode-go/issues/2311

It papers over the issue, but helps some.
Ibogaine has some questionable investments:

https://www.thedailybeast.com/the-big-money-behind-kentucky-...

https://www.thedailybeast.com/kentuckys-risky-bet-to-fight-t...
Not sure what you mean by “clearest”, but TypeScript is the best typing system ever invented.

For 1 simple reason - it is flexible enough to have just as much typing as you want in every case.

Is there any other popular language that can be statically and dynamically typed at the same time?
It's a flawed solution based on a misunderstanding of how houses are actually built/designed/engineered. Most of what you see being built today is dimensioned based on available timber. It's part of why all the houses look the same, because it's the most efficient way to build. Everything structural gets built with 2x4's or prefab trusses (which are also made of 2x4's), windows are all standard sizes, as are cabinets and flooring, and siding, and trim, and if you weren't terribly concerned with building homes that were interesting to look at, you could probably optimize all of this further on the design side of things and then prefab things like walls and door frames then lego them together and wind up with something much nicer and likely cheaper than what they're doing.

The premise isn't terribly flawed though, prefab everything into 4x8ft panels, standardize your roof trussing, standardize your layout, and you can probably dig up a little more margin for builders to put directly in their pockets, and have perfectly cookie cutter houses with no regard to the environment they're placed in. Not really a neighborhood I'd like to live in, but, also not too dissimilar from what most of america lives in, so, I suppose it's tolerable.
I feel this needs a framework (not a library) to take care of it all. Abstract away the webbyness. Something like Elm, with a type that represents data, and behind the scenes it does all the ServiceWorker and syncing crap for you.
The Demographic Dating Market Doom Loop
All roads lead back to RDBMS, it's amazing how this piece of theory just works.
Would be interested to see y’all compete in DARPA’s AI Cyber Challenge. https://aicyberchallenge.com/
They are free to leave a message, and I'll get back at my leisure.
Yes, they are quite easy to set up. Yet I know several small ISPs that haven't done it yet. :(
Of course, but it that’s good in most cases as then you don’t get an overreaction.

The right people will read it (Chattr.ai’s customers) and respond . Right now everyone looks at it and some CISO will overreact and make everyone go check their Firebase configurations which may likely be a non-value add.
> any account on any one of their existing customers had full access to every row in the database.

Correct. :/
I love the idea of Atuin but it's just way too slow with large history files. I've synced my history on my own for the past decade and have like 170k lines and the history search the ctrl-r search just crawls.

I don't need most of the history, but there's 0 chance in hell I'm auditing that many lines to decide what I need and what I don't need.
I don’t disagree with this either, I just didn’t think of it when I put my response in.

Naming and shaming does work.
The linked article points to blog.google which points to this support article https://support.google.com/mail/answer/81126 which then finally points to this article: https://support.google.com/a/answer/14229414

> What is a bulk sender?

> A bulk sender is any email sender that sends close to 5,000 or more messages to personal Gmail accounts within a 24-hour period. Messages sent from the same primary domain count toward the 5,000 limit.

> Sending domains: When we calculate the 5,000-message limit, we count all messages sent from the same primary domain. For example, every day you send 2,500 messages from solarmora.com and 2,500 messages from promotions.solarmora.com to personal Gmail accounts. You’re considered a bulk sender because all 5,000 messages were sent from the same primary domain: solarmora.com. Learn about domain name basics.

> Senders who meet the above criteria at least once are permanently considered bulk senders.

IMO this is better since they have to handle all of the personal domains and small communities that send from a SMTP service like Sendgrid or Amazon SES. Relying on IPv4s to not be shared wouldn't work universally.
Sourced from https://www.astralcodexten.com/p/hypergamy-much-more-than-yo...
Having worked with every vendor under the sun for networking equipment across my career, I enjoy working with Juniper by far the most.

The configuration syntax works as expected, it's flexible but extensible in the right places and mostly has lots of knobs to tune things but without requiring extensive boilerplate to get things to work as expected.

The hardware seems to fit intelligent niches and actually does what it says on the spec sheets.

The system is FreeBSD, while that's a debatable choice in 2024 it's far better than the obscure OSes that others are using for their core systems.

At the end of the day you can always just "start shell user root" and be root on a FreeBSD system. If you're a bit crafty on most Juniper systems you can also run unsigned code if you like. Some Juniper platforms (and not talking about just the huge ones, some of the 1U pizzabox switches) allow you to run a full-blown Linux system alongside the FreeBSD image (because they are actually Linux running FreeBSD on a hypervisor).

JTAC was filled with skilled, intelligent engineers who actually cared and tried to solve your problems. (Not sure today as I haven't had to call them in years). The other TACs I've delt with were focused on call time and ticket handling metrics and would ask obviously pointless questions or repeat information you already provided for a fast close.

I still remember calling JTAC during one outage we had. First L1 engineer after my initial description of the problem basically came back and said something like "that sounds like a really bad outage, please open SSH from 1.2.3.4 and add this public key and I'll login and get the information for L3." Within about 15 minutes I was on the phone with an L3 engineer who correctly diagnosed and proposed a fix for the issue. Amazing support. Not perfect, I have some horror stories too, but, always with people who cared and far less than with C or other vendors TACs.

Very sad day.
Glad I'm not the only one
Sorry, it's been a long day. My eyes kept moving past that. I wonder why they presented it that way instead of the inverse, like connections per CPU second.
If you're able to put up a simple website and already have hosting to add another site on, getting a ~$10 a year domain and making your own feed reader might be worth it.

There are Wordpress plugins to pull RSS feeds and also php scripts to pull and display rss feeds, like Magpie RSS https://magpierss.sourceforge.net/
M-Disc (Millennial Disc)
Browser fingerprinting?
That was one of the worst things I've ever had the misfortune of reading.
5 a month with 1,000 users is 5,000 a month. You add in the costs and taxes and you are left with supporting a thousand users that you can't afford to hire for. If you had 2,000 users you might be able to afford someone but now you have to support 2,000 users.

If prices were tripled you could afford to staff for now and the future (r/d).

When small you need to go higher. When you are big you can use size to scale.
Having multiple possible sources for electricity is an advantage for price stability. For example California's gas prices tripled this time last year.

In general I think natural gas prices will continue to go up as people switch to electricity or more efficient gas setups. Less gas usage means additional fees for infrastructure. As prices go up, more people will switch. It's a feedback loop. At some point it won't be worth it to run the infrastructure for natural gas anymore.
The rumor is that RDNA 4 is a mulligan gen for AMD while they get chiplet based GPUs ready for RDNA 5 in 2025. While Nvidia is going fully monolithic for Blackwell and won’t be using chiplets until at least the 6000 series. So there’s a chance AMD could actually pull out in front of Big Green in two years.
Not projecting anything. It's just an experience I've received from people who want to be part of that collective nothing.

Their staffing levels are remotely out of bounds for the scale of the operation.

No, I am not ceding anything. Locale and expanding market work is frequently done by contractors.

But yeah, you still sound upset it seems.
Twitch's differentiator is its backchannel, the viewer's 'chat'. Unfortunately for Twitch this only works if the whole loop is low latency. This makes it very hatd to optimize for cost. On top of this, it also makes adds even more intrusive and disruptive for the viewer.

One thing that surprised me is how they never managed to grow the VOD side. They basically handed that side, arguably a less costly and easier to monetize segment to Youtube.

For content producers, twitch often seems like a not the primary revenue stream. They put out lucrative sponsored content, or have twitch as an advertizing channel for their Youtube VOD/clips or their onlyfans. All revenue Twitch misses out on, while bearing the streaming cost.
More architectures is good.

I don't want to replace ARM with RISC-V. I want ARM and RISC-V to compete with each other, micro-architectural progress to continue, and to be able to pick the best part for each task.
Arista or whitebox switches, depending on how big you are and your appetite to DIY your network as code vs DIY writing configuration.
I went for blue, thinking it was a game (the blue button might move away). Damn.
I was about to post that video too. Highly recommended.
I'm surprised no-one's mentioned neocities (https://neocities.org/). It's open source (https://github.com/neocities).
Going through Hussein Nasser course right now, which is a good guide for noobs like myself.
It was good of the Director to be honest with you at that point. He may have been risking his own job by doing so.
Juniper died today.
It's mentioned in the follow-up post:

https://gilest.org/indie-easy-again.html
At very least, unless you hate other developers for some reason, you need to document in your test suite what errors are returned.

How, exactly, are going to forget a necessary `if err != nil` without your test suite blowing up?

If you do hate other developers for some reason, why not leave out some `err != nil`s to really drive home your hatred towards them?
$5 a month, the only support you get is the ability to cancel :-). However I kind of agree, given that this has sensitive data perhaps, so customers might get annoying about that, charge a bit more.
I'll never forget the time I was in an interview and I was asked about paging data in a sql query and I laughed and said I'd have to google the syntax and the interviewer gave me this horrified stare like I had just said I wanted to eat his children.
It's worth noting that Firebase doesn't have a true offline-first architecture, but rather cloud-first: By default, queries run against the cloud and results of those specific queries are temporarily cached on the client. By default Firestore will try to reach the server first before falling back to the local cache, which can result in a subpar UX on a patch network connection. It does also provide store-and-forward of updates from client to server. But it's not a true offline-first architecture since it does not preemptively sync a database to the local user device for offline-by-default access.

Regarding Postgres, that is where tools like PowerSync (disclosure: co-founder) and ElectricSQL are useful, which are both sync layers for Postgres for offline-first architecture.
You could take a look at this: http://mmm.page/
Small(ish) community that is make cool stuff. The developer is really good with community feedback and pushing features!
The article offered that example as an extreme, impractical, but easy-to-imagine case to show the utility of using codes over smaller data segments. I read this article as a discussion about data entropy, data encoding, and information theory.

Nowhere did they suggest that concatenating zillions of emails could be a real world system, or that such a system would be good or practical, or that any actual real system used this approach.

What you describe with Backblaze is using redundant storage to sidestep the problem, so it's apples and oranges.
That's so weird considering those two domains are the source of ALMOST all the spam I've seen over the last couple decades.
HPE is in the same boat as Juniper in terms of market and mindshare. I guess they want to see what it looks like to merge I guess
Crypto Degens Are Betting Millions on a Bitcoin ETF Being Approved
I wonder if USPS would raise their flat rate shipping weight limit.
Oh, btw, I've recently stumbled upon a VPN-service -- officially registered in country thousands of miles across the ocean from America, not even in Europe. That VPN was pretending to be about privacy and blablabla. The usual. Even offering static ips and port-forwarding (which is rare) and accepting BTC. But the coolest thing was how easy it was to just see through and know who they were: simple check of its IP and the associated ASN lead directly to this captcha-company name. Not to say that was a surprise - an amusement, more like - at how they put every little tentacle they can afford to use out there, to reach everybody, and especially the ones trying to avoid them.

So you keep it up. Waste the money. Even it's not yours, but taxpayers' money (which isn't unlikely). All in vain. And for what purpose? What goal? Who knows. Does it matter for us to try and guess if it ain't going to work?
It took a few clicks to find the relevant docs, but this is where libp2p explains how it connects private networks. tl;dr via relay servers or by creating two simultaneous outgoing connections to just make a direct connection. Very cool.

https://connectivity.libp2p.io/#hole-punching
It seems to me that one of the strengths of LLMs is their ability to _not_ differentiate between (human) languages, because to a statistical model, (for lack of a better term) people gonna people, no matter their culture or background.
The long and short of it is that the EU, in determining the gatekeepers, looked at the monthly active users for each store separately on the premise that each OS (i.e., iOS, iPadOS, macOS, tvOS, watchOS) is separate from each other with its own constraints, functionality, and purpose.

The EU then realized that the only App Store that meets the monthly active user threshold is the iOS App Store (and maybe iPadOS, I am not 100% sure as I write this, the preliminary findings were a while back), which wasn’t desirable for the EU as they want to regulate as much as possible. Hence, the EU basically said: “fuck it, we’ll treat them all as one; the DMA is written vague enough that we can get away with this.”

Apple is now appealing this finding and echoed the EU’s original stance that these are to be considered separate, with each their own monthly active user threshold to meet.
You have a Wiki'd sense of humor.
Yes this is why you can just operate on the non error value (with map), immediately propagate the error (with ?), just operate on the error value (with map_err), or ignore it completely (eg by converting it to an option or using something like unwrap_or_else). Errors in Rust are still just possibly present values: they’re just wrapped in an interface (a sum type) that forces you to be explicit about your intent to ignore, handle, or propagate the error.
Yeah there are two ways around it. One is right click and open and the other one is allowing it in security settings.
fwiw, some facial recognition systems, especially ones coming out of Asia where masks are far more common, are pretty good at identifying people with masks on.
There's more research on this drug for treating addiction.

Trauma/PTSD is said to be a driver behind alot of addiction . I wonder if the way this substance works is by fixing the root problem (trauma), would that then mean the drug addict no longer needs to use the drugs as a means of escape?
- https://www.wix.com/

- https://www.weebly.com/

- https://www.squarespace.com/ (the one with sponsored segments in every YouTube video)

- https://www.ionos.com/websites/website-builder. IONOS is a domain registrar, most other domain registrars (at least namecheap) offer website builders as well.

The keyword is "WYSIWYG". These site builders are targeted for non-tech-savvy people who want an easy solution, they include publishing and not a single line of code or terminal is required.
I think we have to differentiate between the industry itself and the artist community in general. The industry as it existed in prior years may be gone for good, however in my experience, there are a ton of really good alt/indie artists performing on the local level, in small venues such as the Java Barn at St. Lawrence University -- a student-run venue with a history of featuring awesome up-and-coming acts.[0][1] These artists also generally publish music on Spotify (e.g. Moxie)[2], and although they may never enjoy the widespread success of making it to the Billboard Hot 100, you can find them in almost any part of America producing awesome music.

[0]: https://www.instagram.com/javabarnmusic/

[1]: https://en.wikipedia.org/wiki/Java_Barn

[2]: https://open.spotify.com/artist/4K2IUtmY2APWh6mdxzBOZF
A fairly big deal is being made of this, but dmarc has been a signal for a long time and there's a good chance half your mail has been randomly landing in junk folders if you don't have it setup right. This may actually help people by making them realise that.
Pretty much everything you said is wrong.
My young kids enjoyed Inventioneers.
Standard shell history searching is so bad, a good version of that would already be a huge leap for most people