skysight-inc/HackerNews huggingface dataset:
You can say that about any field. We could invent the elixir of immortality tomorrow, but is that a realistic expectation? The CEO of Nvidia is a smart guy, he's pushing the hype train because his business is riding the wave. But you have to separate hype from an empirical view of what we can actually do today with these tools, versus what hasn't been delivered and is being oversold.
Right? Eyes down at their phone, Air Pods in, it's not easy to get their attention even if you need to. They're essentially already connected to a VR headset, just a poor version of one.
iPhones on average don't last 3 times as much ib people's hands as Android phones that cost 66% as much. Better resale value is fair, but I am contesting that 2N figure strongly.
> Most people think it's rude to talk to each other indoors with sunglasses on.

Nobody finds it rude to talk to each other with actual glasses on. If AR had similar utility and minimal impact on seeing each others eyes, then the same would be true. Sunglasses prevent people from tracking where people are looking which is why they come off as rude.

> That's the slimmest form factor you're going to get, and it still steps on the toes of human connection.

The minimalist form factor for AR is contact lenses not glasses. Several companies are working on them though it's a long way from a consumer product.
Software Composition Analysis Research from Doyensec
You don't; DNS-01 doesn't require contacting any servers besides the DNS registrar, which is what makes it so nice.

In practice, most domain registrars have certbot plugins - you just grab your API key from their customer portal and put it in a file, then run certbot in DNS-01 mode and instruct them to use that. Certbot places a temporary TXT record, which gets verified and the certificate is issued. Then certbot removes the TXT record and that's that. If there's no plugin, you do that by hand, which works but is a bit more involved.

You don't need a firewall for that or a DDNS client. Also if you have a weird registrar that only offers you to set NS records, most VPS providers have free DNS services.
Better RAG 1: Advanced Basics
Reframe your thinking. You’re approaching it like other computer systems, where a given input yields a determined output. Instead, treat it like a junior dev whom you can unload an unlimited amount of work to, but the result still requires review.

We’re all used to working this way in human systems, people that sound confident might also be wrong, and you learn where you might trust them more or less as you work with them over time. Until you are confident that they are always “right” in a given problem domain, you need to apply some level of review.

Finally, keep in mind that there are "smarter" and "dumber" LLMs. If you didn't pay for what you were doing, you were talking to a "dumber" model. The quality does go up if you have $20 in your pocket.
> Considering we are talking about Megabytes in the age of Terabytes HDDs,

Most distributions still use a "Live CD" format, actually a "Live DVD" nowadays (with a few hacks to make it also work as a USB pen drive image), for their installers, and that limits the installation image size (which also includes enough packages for an offline install of a desktop environment) to a bit more than 4GB (they fit into a common 8GB USB pen drive). So it being the "age of Terabyte HDDs" does not matter, for packages expected to be installed on a normal desktop system.
Heck - I live in the Midwest and when I'm on the West Coast, I like to stop at Jack in the Box!
What is your concern? It's the VCs that are losing money by subsidizing non profitable companies. Why should the government step in to disallow these companies?

Don't drivers know how much they'll be paid ahead of ride acceptance?
Imagine that each command is rigorously studied by multiple people and an incorrect entry may be a news generating event.
not a criticism here, just a genuine question. What about this makes it friendly for ADHD? Is it a formatting/style thing? Information ordering?
And once you get to prison, there definitely will be physical violence.
I think if the Rust team had the capacity they might have considered adding—and maintaining—more stdlib functionality. I never asked for details but I guess that the core Rust enjoys only a fraction of the funding Go and .NET have enjoyed. It’s not only a merits based decision case I think.

Regarding C++, it’s based on a standard, the situation is a bit different. You have a variety of implementations. Imposing anything beyond the typical use case the compiler implementations have catered to would induce an insurmountable overhead on the implementation coherence. Therefore, I believe it’s more reasonable to have application-level logic in the realm of community maintained libraries. In addition, C++ is huge syntactically and the stdlib is immense, but it’s more focused on algorithmic tasks rather than on quickly building mini-servers.

Besides, the Go community has a myriad of reinvented wheels, ranging from logging over caching to maps, and until recently HTTP server libraries. The logging story for example has just recently led to a discovery of the patterns desired by the community, mature enough to accommodate structures logging in Go’s stdlib. Similarly for error handling. Robust and settled approaches turned a de facto standard make total sense to be included.

.NET is different again, having a center of gravity with Microsoft and the .NET Foundation, with typically one preferred library for a given task, contrary to Java and Go. Centralized and decentralized, the classical dichotomy.
Yes, as you say because the style is not important. Consider the wasted time on arguments between tabs and spaces and how many spaces; the noise in PRs from style conversions that hide the actual additions and alterations; the increased efficiency that comes from learning and using the shapes of a codebase to more quickly seek.

It doesn't matter what the style convention is so long as you have one, you have automated tooling that creates and validates it, and that enforcement is done by machines as part of the delivery process.

Not because style is valuable but because time is a valuable resource and spending it on preference differences and dealing with variances is wasteful.
Compiled on Deb 12.5.x - pretty cool. Thank you.
I'm pretty sure it's actually hair brained
How to Approach a Reduce Problem
I'm biased, of course, because I work for Let's Encrypt, and spend a lot of time thinking about the trade-offs and how to make this ecosystem better.

I think claiming that "SSH provides stronger security guarantees than X.509 certificates" is pretty outlandish.

SSH is trust-on-first-use. How many people actually verify the key fingerprints? Maybe you do when you're sshing to your single corporate bastion, or to Github.com, but could you imagine if you had to do that for every website? It simply would not work. It only barely does for SSH because of the (relatively) low amount of use SSH gets. When at a previous company I set up an SSH CA, we found an SSH MITM within 3 days (though benign; an ISP-provided modem/router was resolving all hostnames to itself when the WAN was down), and the user was planning on just accepting the new SSH host key.

Certificate Transparency is an auditing system, so of course it's after-the-fact. It has helped to improve the CA system immensely. While there's still work to do, the TLS ecosystem is unrivalled in terms of actual security benefit delivered to the most people.
26% heavier (135g) than the Quest 3. And the default Apple single-strap band favors aesthetics over weight distribution, which makes it even worse.
Correct, but a lot of pieple treat it that way.
> The formatting is ridiculously bad, which makes it extremely hard to read: Subsections within subsections within subsections with approximately zero indentation.

Maybe I misunderstand (I can't get the page to load right now) but what kind of document indents subsections? Not any book or article that I remember...
Academic research (especially a PhD) is about going deep into one particular topic. You are fully dependent upon the giants on which you stand.
I'm unsure which "pokey city in Aus" you're referring to as that arguably covers all of our capitals. You really can't compare any Australian club to Berlin's institutions, and that a good thing!

Music, events, and culture in general should be diverse. It would be a fucking bleak future if the world converges on the single right way to party, detach, relax, or feel.
Google I/O Conference
I've observed two things. One, writing is different to speaking, because it's async, you can think before you write, you can edit, etc.

But second, speaking in a non-native language makes you think harder about what you're about to say. Less colloquialisms, more focus on making sure your meaning is understood, more sensitivity in case you might offend someone, perhaps?

It's not new either; a lot of science and whatnot has been done in people's not-native language, like French, German, Latin, etc. Another factor there is the lingo of the field; I can't simply say "Kubernetes is een open-bron houder orkestratiesysteem voor het automatiseren van de inzet, schalen, en het beheer van zachte waren" without confusing half my native speaking audience.
It doesn't even say whether it's an expert system (reasonable) or machine learning (unreasonable).
It's amazing how that's not a terrible choice of tech stack even today after 26 years.

Not fashionable by any means - but still feasible to maintain unlike Windows IIS / C++ or Oracle / Perl / Flash.
> DNS-01 + a wildcard SSL cert takes care of that unless you need third level domain names.

This will allow internal-only services to get LE/ACME certs, but those cert will still show up in the CT logs and be visible to the entire world.

Some folks do not want that visibility, and that's what an internal-only CA gets you.
Programming language for resource-constrained MCUs
i just reposted this question with the "Ask HN:" prefix
Lifelong Montréaler here. I think having "problem" in the title is what is ruffling feathers, although I'm not particularly bothered by it. That's perhaps where the analogy is strained the most: stylistic divergence in code can be problematic, but in architecture and urbanism it's typically seen as an asset.

Perhaps calling it the "Montréal effect" would be more apropos?
I think Daubert is the relevant rule. Knowing the error rate and being subject to peer review should be helpful here.

https://en.m.wikipedia.org/wiki/Daubert_standard
Show HN: Latitude – Open-source framework for building data apps using SQL
Hello HN,

We spent the last 2 years building software for data teams. After many iterations, we've decided to rebuild everything from scratch and open-source it for the entire community.

Latitude is an open-source framework for building high-quality data apps on top of your database or warehouse using SQL and simple frontend components.

We're actively looking for feedback and contributors. Let me know your thoughts!
Suppose it really can't be done cheaply enough that Pornhub could pay for it and still make a profit. Possible in theory, but not possible within their budget. Would you then call it impossible or onerous? Which term describe that situation, in your opinion?

FWIW I've no idea how expensive commercial age verification is. I'm just wondering why none of the commenters seem to consider the aspect of cost, and picked a random commenter to ask.
> I have not formed an opinion on the index being assessed

If you do later form an opinion on this particular index, it may be more consequential to file a github issue against the index, rather than appending to a dormant HN thread.
Cyclomatic complexity (and the other new kind of complexity that I forget the name of) are a good way to measure code readability/reasonability. We have a few rules of thumb for JavaScript that our junior devs have absolutely railed against, but some of them are from code standards that have persisted in the industry for 20+ years, and to me at this point are somewhat standardized.
How difficult would it be to build an app where your friends could join remotely, watch the same movie, and appear right next to you? With good enough latency you could talk to each other like you were sitting right next to each other?
We'll likely reconstruct what the missing piece was in hindsight, but it's very probable there's no one missing piece. Just like human evolution.
> When I use them they do great on trivial problems but can't help on hard ones.

That sounds super useful! The tools free you up from wasting time on trivial problems so you have more time to focus on the hard ones. What's not to love?
I know I'm going to sound like an old person shouting about how "they don't make'm like they used to", but it's honestly true. This isn't just sofas - it's almost everything. Businesses know that it's far cheaper to make something look high quality than to actually make it high quality. And if you can make it seem expensive, then you can charge expensive prices for it.
Yes just to be pedantic, twitter has never been "a video platform" – but that they've had support for streaming live events for years.

So take with that whatever it means, that it's just not going to be as first-class citizen like in Youtube. But the CDN etc must be good enough as those things are easier to do nowadays.
Yeah, it's not exactly a libertarian utopia. It offers freedom within the context of Judeo-Christian values and fiscal conservatism.
It's a great strategy for sure. If I were running a software company that depended on software licenses and consulting fees for income, and I had to keep my stuff open-source, then what you outlined would be the best (and really, only) strategy for long-term survivability. It's a moat, and a good one, because it's plausibly deniable.
Not really. All they have to ensure is that enough people hope to succeed at franchising that they keep pulling in money.

Quiznos literally sucked their franchise owners dry, but it took a while.

Subway has been extracting wealth from their franchise owners since the very inception of the "$5 footlong" and they're still around.
To be frank that's one of those things where it depends on how much you care about what gets compromised. For a purely internal homelab, the main use is to get software working; the HTTPS is only needed because modern browsers get upset about a compromised secure context if you don't, which leads to them disabling all sorts of random APIs. The actual security component is pretty much secondary for the usecase where you're dealing with devices that exist solely on an intranet - you're already gating off access by different means.

Personally, the way I'd solve the problem in the situation where it'd be a problem is to not put auth on the same domain; auth would go to auth.secondexample.com. That's generally speaking the better choice to begin with due to browser weirdness regarding domain isolation (which is also why you often see software with CDNs use completely different domain names; reddit images being hosted on redd.it for example but also YouTube thumbnails being on ytimg. If they didn't, a maliciously formed file could read out browser storage for different subdomains).
At least for me: short sections with emoji, varied formatting, etc provide anchors for me when I loss focus and come back.
Or perhaps more appropriately for this context: "hey, you work with computers. Can you fix my printer?"
Apple has a history to sticking with things like this. Watch and HomePod were both seen as over-priced and sold poorly the first iterations. Apple leadership had the confidence to see through those initial versions. This was part of the internal culture during my time at Apple.
Self-proclaimed Bitcoin inventor is not 'Satoshi Nakamoto,' UK judge rules
> somebody compromising printer.lan.example.com can impersonate auth.lan.example.com

Nope: one can setup ACLs so that the script that can update the records for printer.lan… cannot also do foo.lan… or any *.lan….
That's why I love the fact that Elixir has a built-in formatter and pretty much everyone in the community just uses it. It's also not very configurable, so there isn't even a point in having these kinds of discussions.
> And your eyes are both covered so there isn't a good way to non-verbally communicate waning interest levels...I suppose a solution is to simply care less if I hurt my friend's feelings but I'd also like a way to spend time with friends without feeling trapped.

I hadn’t considered those antisocial patterns that the technology is foisting on users, but I suppose one can also juts directly communicate verbally. Could work in low context cultures but not so well in high context cultures.

> The eye tracking thing also kind of weirds me out from a privacy standpoint.

Indeed. While I am less worried about Apple “going after me in a direct targeted nefarious way”, I don’t appreciate more levers for technology to disintermediate my manipulate my behavior, emotions, or interactions.
I lived in a 1930s art-deco apartment building in London, and it was the nicest place I lived in England.

At some point all the windows had been replaced with UPVC double glazed ones. The heating system had some redundancy, so when they closed half of it off to replace it we just had a day or two where they asked us to limit hot water use. (I don't remember but I assume this was done during the summer.)
IMHO Meta's #1 mistake with VR thus far has been presentation. No good press has ever come with screenshots of silly cartoon avatars (with or without legs). The focus on games highlighted its lack of utility. AVP only highlighted utility, which draws instant connection to our daily lives.
It’s a huge jump from “Walmart hires off-duty cops for security” to Walmart having “the cartels” murder whistleblowers.

And neither of your links have anything to do with major corporations.
I don't really appreciate this form of pandering honestly.

Edit: ADHD in software isn't about being able to read blog posts, we don't need blog post labels. It's about surviving our mindless bullshit one-size-fits-all corporate culture that demands perfect organization of pointless tasks and butts in seats at all times....just like our mindless bullshit one-size-fits-all school system.
People used to think it's rude to stare at a phone screen too, but here we are.

I'm not saying VR will become as normalised as smartphones, mind you, just that it's a possible outcome. That said, VR / AR as we know it now has been a thing for a while now and it hasn't taken off as much.
Something similar recently tripped me up: Some parts of AWS IAM are extremely detailed and you can create insanely specific policies allowing very precise control (almost to a fault). Other parts are very broad and unspecific.

For example, I recently needed to allow some EC2 instances to push a private IP around between those. I would have assumed I can create some policy along the lines of "Yeah, VMs with this role can push 10.20.30.40 around between their network interfaces". I haven't been able to find any way to restrict these IP addresses, so now I have the smallest policy I could create: "This role can assign fuck-any internal IPs to these interfaces, let's hope for the best." Doesn't really feel the greatest.
Reddit was good before that "manpower".

Infrastructure costs were covered by reddit gold. This was displayed on each community, some accrued years worth of server time.

Instead of organic stuff like the first IAMA's what that "manpower got you were promotional flybys by actors releasing a new movie or book or something, who didn't even understand what they were doing.
It used to be extremely rude to not take off headphones when people talk to you. Nowadays it is quite accepted for earbuds and "transparency mode" is even a selling point.

My guess would be that once AR allows easy sharing, e.g. showing others a funny AR cat video, it will quickly become socially accepted to wear frequently.
But in the mountains, altitude is also a very important information.

But wouldn't one carry a barometric altimeter in those cases? I mean, my iPhone and Apple Watch both have barometric altimeters, and those are consumer devices not designed to get you up a 7000m mountain.

Now, granted, that doesn't help the device that's "sewn into a jacket", but as a sibling commenter mentions, in a search elevation models could be used. Or if they can stick an altimeter in my watch, maybe there's one in this mysterious, unnamed device.

The basecamp in Nepal is in a very tight spot. Bouncing signals is there a problem.

I wonder how much of a difference the newer dual-frequency GPS receivers make. It makes a difference on my Apple Watch Ultra versus an older Garmin when running around in the woods, but I'm no mountaineer.
It's not only about being organized, but it's also about the fact that in software engineering, seniority is not valued.

If you need a plumber, or a dentist, or a car mechanic--you would select the one who has been in the profession the longest (considering other factors of course). Other professions have a sense of pride for having long years of service, and a car mechanic with 10+ years of experience probably won't have a problem to find a work at any good car repair shop. He is not expected to become manager or assume other leadership position within the repair shop.

And yet, the tech industry keeps promoting good engineers to bad managers, and expects you to be a Principal/Staff because you are too senior for being a senior.
So you don't somehow end up with mismatched curly braces?

I might paste something, but mess up and forget to select one of the curly braces or select too many. I am seriously considering closing all of them on the same line in this style

if blah {
thing; }
It has many of the problems, but it also has crucial improvements (mostly nails the user interface, vastly better pass-through, massively better screens). Did you read the article or just immediately come here to drop comments?
Why do forms require signatures if it's easy to forge (especially if you are submitting it electronically), and evidence of the agreement is gathered from other sources if it comes up in court?

Because it boils down what could have started as a nebulous mix of halfway-unethical actions into a single fraudulent act that can be pointed to and punished later, and will provide a lot of people with the impetus to back out of the fraud once they see themselves about to commit an unambiguously illegal act.
For whatever reason, the current zeitgeist is all about enforcing as many things as possible via tooling versus actually learning core principles.

I think this is because all of tech seems to be culturally downstream from FAANGs who have weird problems like "we have 500 devs making multiple commits a day and we can't trust them to do anything more than close tickets." Those are wholly self-inflicted problems, but the rest of the industry laps them up as if they are the secret to being as "great" as FAANGs. Couple that with tons of people who have less than <7 YOE in tech and/or are switching into it and you see there are very real political advantages to "keeping up with best practices."
It's not in their culture. I worked for a number of equipment suppliers for years and their mode of operation was more like a small government. Send out RFPs, inspect and test the prototypes from various companies, vote on the best ones, deploy. I can't imagine it's any different for their IT. Their expertise is in supply chain integration. Oh wait, that's HAVI.
Attaching a computer-tethered VR display should be as much of a non-event as plugging in a monitor. The Rift’s software experience is so unnecessarily sad.