skysight-inc/HackerNews huggingface dataset:
There is a fourth use case for VPNs: evading traffic shaping and censorship on public wifi hotspots. Many hotels block not just porn sites but also legitimate news pages (e.g. Torrentfreak), and most drastically throttle YouTube, Netflix and other streaming-heavy sites.

A fifth use case is related: evading bad peering. Deutsche Telekom was infamous for years to "double dip", i.e. requiring that other (backbone/regional) ISPs pay them for peering, and so DTAG customers that tried to access Hetzner servers were throttled as the Hetzner-Telekom link got saturated in the peak traffic times.

[1] https://www.golem.de/news/hetzner-und-netzneutralitaet-extra...
My photographer mates have great stories about impressing airport security with the density of their gear, and of flagrantly getting away with 3-5 times the weight allowances for their carryon bags.
My use case:

- In Hotel, Airport. VPN can be used to bypass DNS based captive portal.
- Yes true hopefully all website are encrypted with ssl, but still an attacker can easily fingerprint me through my internet usage, even though everything is ssl, there are still a lot of plain-text data flying around. So yeah, ProtonVPN, ftw.
Yeah, no.

> OK, but what about my DNS and TLS records being exposed to everyone so they can follow what I am doing? In a public place, anyone can look at your display already. Or, if you are worried about your ISP selling your traffic data, there are better options for you. Use DNS over HTTPS, for example. You have to use a VPN provider you trust better than your ISP/Wi-Fi provider. Also, as Encrypted Client Hello is about to start soon, it will be exponentially harder for eavesdroppers to figure out which sites you are trying to visit.

Encrypting DNS is a nice start, but the ISP can still see the IPs you're connecting to, which is enough for a lot of sites, and Encrypted Client Hello is about to start soon is a lot of words to say "today, your ISP can see the domain on every HTTPS connection you make". So no, distrusting my ISP is absolutely a compelling reason to use a VPN. (And lest you say "but do they actually spy on you?", I literally got a letter from AT&T informing me that they were going to start monetizing information mined from my connections.)

> But if you care about privacy, the answer is always ToR, ToR browser or Tails, and never VPN. Except in cases where you first have to hide your ToR usage using a VPN, which is a rare exception among users. If you don’t understand why you would need that, you probably don’t need that complexity. Tor Browser uses uncountable techniques that prevent tracking your browser. And if your privacy is essential against local Wi-Fi attackers, your ISP, why is the ad industry not in scope? Adblockers are only half the solution against tracking.

I mean, yeah I also use uBlock, but TOR makes harsher tradeoffs than are necessarily needed (multiple hops is really safe but also really slow). I'm just hiding from my ISP's prying eyes; I explicitly don't include the NSA in my threat models and lesser methods are Good Enough™ for websites tracking me.
Never underestimate the bandwidth of a station wagon full of tapes - from a lifetime ago when we moved full systems backups from East Aurora to Chicago.
Sure you can run things off a ramdisk, but the way you lay out data to achieve high performance from disk vs from RAM is different (disk assumes that you read pages of data at once, and tries to avoid reading extra pages, while RAM assumes that you read cache lines of data at once).
The market is the average and the market is always open.
> so you can use common displays

VGA capable displays ARE common where this thing will be used (racks, movie sets/studios, etc). Plus, those display outputs are for emergencies only as this will always be used headless all the time. You'll get your GUI video output from the thin client connected to that thing over the network.

>I'd expect displayport to be more likely to be added though.

Not in severs. You don't want to waste PCI-E lanes for driving a display output that will never be used and that server chip doesn't even have an iGPU anyway.

Plus, the VGA output is most likely only displays what the motherboard controller is doing and can't display the GUI of the OS running on the CPU.

Also, the VGA connector is miles more robust and fault tolerant than digital outputs where if the handshake fails you get no picture.
This will no doubt cause confusion and shouldn't be allowed to go through.

But I get where they're coming from. I'm sure there are plenty of SF visitors whose travel plans work would equally well with flying to OAK instead of SFO, but don't realize that Oakland is just across the bay from the city, or that SFO itself is a fair ways outside the the city limits and not really that much closer to downtown.

Hopefully they can work together and figure out a compromise that helps travelers realize they have options without being overly confusing.
Perhaps I'm missing something, but is program synthesis just writing a compiler for a long-winded functional programming language? I'm not even clear if it will avoid bugs, since your specification could just as easily have a missing or mistaken constraint as the equivalent program?
Amnesty International had a few words to say on it: https://www.amnesty.org/en/latest/news/2021/10/mil-dias-bols...
Thought about it, decided to start with simpler and good enough option. The goal here is not to beat Redis anyway.
Time to update "software Peter principle" to "ai Peter principle"
Unix in general is a very cozy tent with a lifetime supply of canned beans, set up in bear territory.

Ok for a while but I wish we had build a house by now.
> The user’s DNS provider would no longer be their ISP.

Only if the ISP doesn't do DPI to transparently route any outgoing DNS traffic to their (censoring) servers. There have been enough cases of that.
Before you get all smug, Vim people, this applies just as much to you as to us. :P

I'll probably never let go of Emacs, but have encouraged both of my kids to avoid it and use VSCode instead.
> Is "geofence bypass for region-locked content" actually “illicit”?

Yes, in practically every jurisdiction. It’s wilful breach of contract, tortious interference with the content distributor’s licensing schemes and copyright infringement.
There's someone here in Australia doing advocacy work on behalf of renters who has just started publishing a list of vacant houses for people who need a roof over their head (1).

It is irritating a lot of people but we are in a massive housing crisis and there are credible sources saying we have a million vacant homes.

I'm a bit torn on this - my grandfather moved into aged care almost a year ago. His home is vacant up to three months at a time, then family come and visit from the US to look after him and they stay there.

We need more pressure to get truly vacant homes back into the market. There seem to be a lot owned by international investors just for sitting on housing to have it appreciate.

1. https://www.instagram.com/p/C5fsx0ZvZSY/
Think you would have loved Signularity OS[1].

It featured software-isolated processes that communicated via contract-based message passing, which allowed for zero-copy exchange of data.

As a research OS it never became a fully-fledged OS[2], but an interesting attempt IMHO.

[1]: https://www.microsoft.com/en-us/research/wp-content/uploads/...

[2]: https://en.wikipedia.org/wiki/Singularity_%28operating_syste...
> It's not __caused__ by FPTP

Isn't it? FPTP makes it all but impossible to sustain a third party because of the vote splitting effect. Even when there have been new major parties in the past, they replaced one of the major parties instead of coexisting alongside them for any significant period of time. The most viable districts for minor parties like the Green Party are the ones where the least similar major party is completely out of the running and then the minor party serves the role of the second party rather than a third.

> Where people are not investing time to vote.

But these things are related. If you have a two party system then you typically either have a clear choice where you know without doing much investigation which party you favor, or you don't align with either of the major parties and then no party satisfies you and your choice is basically a coin flip. Neither of these promote investigation because either the choice is obvious or the choice is unsatisfying and equivocal.

Wheres if you had e.g. four viable parties, there would much more likely be one that does closely represent your interests, and another that could come close, giving voters the incentive to at least pay enough attention to distinguish them.
Building a Community [video]
If anyone looking for a C++ solution to convert HTML to Markdown, I'm using this library https://github.com/tim-gromeyer/html2md in my app.
Pocket saves the address; I don't think they save the content.
> Exactly. Is there anyone whose primary use case for a personal VPN is not "Geofence bypass for region-locked content"??

Hi! /waves I use a VPN to stop my ISP from monitoring my traffic and selling my personal information. My VPN (usually) exits in the same "region" as my real location; I guess if I hit a geoblock I could look at that, but it hasn't come up.
The employer doesn't know how much you'll work, if you'll quit early or give up or make mistakes or not bother to show up.

Information is missing on both sides.

Contracts are open with all Information available. To that route if you're wanting to make more than the W2
No better way to get traffic than rage baiting I guess.
Oh sorry, me and my team aren't English and we sometimes make typing or spelling errors.
It's much easier to get to downtown from SFO than OAK.

Double so if there's traffic.
Wow, that tweet they link to with a super punched in shot looks really really bad! Hard to believe Cameron thought this looked better than just a normal 4k transfer, yikes. Was really looking forward to a UHD release of The Abyss but now I'm not so sure...

https://twitter.com/RazorwireRyan/status/1735753526167347232
Last I heard (this was early 2010s) at least it Texas, it was capped at 80 hours/week for residents. Seems like a lot but probably better than the 100+ they used to pull.
But is still orders of magnitude slower than a hash-map.
Rumors that they're discontinuing the snowmobile service:
https://twitter.com/0xdabbad00/status/1776999225550938124
unique_ptr seems inappropriate here since the pointers aren't unique. shared_ptr doesn't even work because it looks like this data structure is representing a graph and would expect to have cycles. Perhaps you could use some sort of weak pointer that gets nulled out when the target object is destroyed, but that would not have fixed the bug here, just replaced segfaults with some more controlled exception or panic.

In fact, full-on garbage collection wouldn't have prevented the bug here, and could arguably have made it worse. The problem is that nodes were unexpectedly being copied and then the originals deleted. With GC, you'd still have the copy, but never delete the originals, so you end up with split brain where there are multiple copies of each node and various pointers point to the wrong ones. That'd be pretty painful to debug!

IMO the language-level problem, if there is one, is that C++ is too willing to copy in cases where you would expect it to move instead. This is, of course, for backwards compatibility with the before-times when there was no move and copying was the only logical thing to do. But I think life would be better these days if all non-trivial copies had to be requested explicitly.
Ask HN: What's the best book/resource to learn web application security?
Hmm, am I the only one who is not worried?

Although I don't really see anything in the license change that would prevent me from using it at both home and business, Redis seem "complete" functionality wise so using a pre-license-change version can't hurt even long-term I think.
Does that work anymore with DNS over HTTPS? I think the real leak is that until we get Encrypted Client Hello your HTTPS connections expose the domain in plaintext so DNS is kind of a moot point.
I could have told you that!

My god, those scientists are so slow to catch onnnn.

30 odd years ago I used to grow mushrooms. Lions mane and oyster.

I learned then that the human body is rife with bateria.

I lost count of the number of perti dishes contaminated with "Staphylococcus aureus" and other evils lurking on the human body.

I had a pretty good ongoing sterilisation procedure but the bacteria always found a way.

A simple thing like forgetting to brush ones teeth before doing any mycelium transfers was enough to contaminate the entire batch.

The mouth is such a cesspit of evil.
Hi. On the immigration visa and police cert. For every place you live >.5 yr since 18. Ever seen one go through if you have several city certs but are missing one?
The link to AWS was/is really bad as well, since that has to go through Telia.
If I was to do this, I'd upscale for larger screens, but recreate the film grain and scratches as if it were just from larger negatives ¯\_(ツ)_/¯
Usage information for instructions on recent x86 microarchitectures
Solium Infernum (digital boardgame) FAQ
Originally by game designer Vic Davis (https://forum.quartertothree.com/t/does-anyone-know-what-hap...), Solium Infernum has been resurrected by League of Geeks and seems like a number of HN readers might be interested, based on what I've read in game discussions here. Nothing turned up in an Algolia search for "Solium Infernum", hence this post.
Is it available in keychain form factor?
A data center has backup plans. This is more for data on the go. Think of a fashion show where the production shoots tens of TBs in high resolution and they can’t afford to setup a server room because it would be impractical. You get one of these and you’re done.
At the risk of getting us all put on a list, could you say some more about what machining the stuff safely involves?
Show HN: Bot that tests the UI / UX of your website
Many of us had it drilled into our heads that the only way to succeed in life was to take out a big loan and go to college. By the government.

Also, it is kinda ridiculous that at 18 years old it is completely fine that I can take out an almost $10,000 loan, another $10 at 19 and so on and so forth. Making this decision when I am barely an adult, for many people the first time that they had any real sense of financial freedom with no one to tell them no. Differed payments so it's a problem for 4+ years from now and barely any education on what that actually meant.

Trying to compare this to crypto is stupid.

I am fine with paying for my loans, but it is ridiculous that I have been paying or my student loans for 10 years and I am still 2x what I originally took out. My sister is 5 times what she took out.

There is a fundamental problem with our education system and student loans and we need to address both of them. But let's not pretend that student loans are not largely predatory. We just don't call them that because they are for school and by the government.

Not everyone gets out of school and lands a job, or lands a job that will actually pay enough to pay off their loans.

Edit:

Since we really want to focus on "personal responsibility" here, I feel like we should remember that we don't think someone can handle drinking alcohol until they are 21. But by the time they are allowed to drink we are perfectly fine with them having taken out $32,500 in loans for school assuming they take the maximum at 18, 19, and 20.

How do we not see the problem here. I can get in more debt than I will likely ever be in except for buying a house (even a car may be less than that) before I am legally able to drink alcohol.

It sounds like we think that 18, 19, 20 year olds are not responsible, unless it is about getting into a life defining amount of debt that will seriously hamper your financial stability likely into your 40's.
People who knew what they where doing could pull of some timeless art with 90s CGI and a decade of improvements did not stop people from ruining otherwise good movies with bad GCI either. AI is just another tool that needs to be used correctly.
I felt stupid when someone told me what the 'roses in a glass' tubes that were sold in convenience stores were really used for, but I guess it never occurred to me that crack pipes would be something these places would want to be associated with. At least it restored my faith in romantic gestures a bit to know people weren't buying them as a token of love.
> leaving the object before the exception modified and the code in an unrecoverable state

It isn't likely to leave the code in an unrecoverable state even if recovery is calling std::terminate (or worse).

It is likely to leave the data in an unrecoverable state. Imagine that a vector of 4 items was resized -- the first two objects move successfully, but the third one throws an exception. Then in your move function, you catch that and decide to undo your changes before propagating the error. Then when you're undoing the changes the first object throws an exception when it's being moved back. Oof! At best you've got multiple active exceptions (legal if you're in the catch handler, but should be rare and definitely should be avoided) and at worst your data is indeed unrecoverable (thus one of many reasons why std::terminate is the default option when multiple exceptions are alive on the same stack).
> but if they take negative expected value options then yeah I'd call them suckers.

A "negative expected value option" is founding basically any startup. :-)

How can this contradiction be resolved?

Simple: startup founders don't look for the (negative) expected value, but for the, say, 5 % quantile gain (i.e. the gain that they will only exceed with a probability of 5 %). This gain is sufficiently large.
Squatters take over Gordon Ramsay's London pub
NTSync still seems to outperform any userspace fsync implementation https://github.com/Frogging-Family/wine-tkg-git/issues/936#i...
I would expect that someone discussing this topic would be familiar with the various things Adam Smith and others have said about collusion to increase prices and related topics.
How would an index mess up another query? AFAIK indexes would only hurt write performance marginally per index, but most slow queries are read-only. I’ve tended to just add indexes as I go without thinking about it and haven’t run into issues, so genuinely curious.
I've worked a bit on inductive syntax-guided synthesis, but did it at the worst time -- right before it was made obsolete by LLMs: https://grgv.xyz/inductive_program_synthesis/
>is the next obvious step drone carriers for extended range?

Yep. https://en.defence-ua.com/weapon_and_tech/drone_carrier_quad...

The drone carrier also acts as a radio relay, the other big thing limiting FPV range, since they both have to use low gain omnidirectional antenna and also operate very low to the ground, which is terrible for reception range.
US per capita CO2 emissions now at 1913 levels
Thank you! I also think that the relational model can get you pretty far if you don't need to squeeze every last bit of performance out of the program. And the added benefit of using a battle-tested SQL engine is far fewer storage-related bugs.
Whoops, bad sentence construction. That reference was for the first phrase, regarding each of those dishes being post-War concoctions or reinventions.
Which shows how far ahead KDE was even in 3.5 times with reusable embeddable components that were highly engineered. For example Konqueror has a long list of plugins including calling kwrite to render inside of it. The early kio tooling that predates fuse in having universal access through a single file viewer.
IMHO this is another case where C++'s hidden layers of complexity hides bugs that would've been obvious in plain C. In fact for this particular use-case I'd probably use indices instead of pointers.
You can set mullvad (which offers VPN service) as your DNS over https server. Traffic is also mostly encrypted by https. Your ISP still gets the destination IP addresses, though they are harder to track.

Wouldn’t that address your concern?
The author specifically excludes "Company VPNs" and VPNs to "phone into your home network" from the scope of the article.
Why don’t more people contribute / coalesce around Keycloak?

I don’t know if it was even that “bad” per se “10 years ago.” 10 years ago, React was only open source for 1 year. Meteor was Supabase. People were still writing CoffeeScript.

You are lamenting the complexity of changing authorization requirements without changing application code. I don’t know if OIDC was really set in stone back then. There was no Rego or Cedar, there were IAM policies, and that was also relatively new, and attributes-driven SAML. It’s just a lot of development has happened.
Not surprised as all humans have biases.
Why must it always be either or and not in symbiosis? I understand that the author has to use different tools as required by the employer or external constraints. He even lists the various purposes Emacs serves in his digital life, such as org-journal, code editing, etc. And isn't that exactly a point for Emacs? Emacs is not just a code editor or an IDE, but a whole operating system around plain text. So even if I have to use different IDEs, I find enough reasons to use Emacs for personal knowledge management, as a Postman replacement, for journaling, and much more. All in all, the reasons to move 100% away from Emacs are not convincing to me. If everything else that Emacs offers has failed, including its hacker friendliness, there is at least the ethics to it for which I will keep it cherished among a dark, propriety neighborhood that a system that provides Visual Studio is setting.
Well I agree, that's a good starting point. You probably won't be able to beat Redis with SQLite anyway :), although given that WAL mode allows for concurrent reads it might give it a large enough performance boost to match Redis in terms of QPS if the concurrency is high enough.
Sir I would have you know that I participate in no such illicit tomfoolery. My VPN use is strictly for torrenting pirated content!
Doesn't most vendors sell switches capable of that?
Former journalist chiming in. Should probably be noted that this is material is about 13 years old. It got a lot of things right, before a lot of things changed.

If you read their Time-Displacement and Efficiency page, many of their basic assertions about news consumption were valid before the rise of social media. However, many of their more optimistic views on the future of journalism in the 21st century were formulated immediately before the onset of major changes in how people consume news. If this were a project for the 2010–11 school year, then they would have missed the launch of Snapchat by a year, as well as Snapchat's story/news platforming. Instagram would have been around, but only as the "cool filter photo app." TikTok/musical.ly would not have emerged for almost five more years. This was also the "last hurrah" for many magazines.

Journalism in 2024 and beyond faces a lot of problems, but mostly the inability to actually chart a path to expansion is why it's a dying industry.
I would, however, encourage anyone to learn the GNU readline keyboard shortcuts. I don't use emacs but I think they are emacs adjacent.
I've come across those shortcuts in many many places (that used readline or not). There's also rlwrap which wraps any non readline REPL.
The article appears to be written by a technical person who doesn't understand (or want to acknowledge) how bad end-users can be at security. We're still trying to get users to not reuse passwords on multiple sites and not click on links in SMS messages. Meanwhile, the author is suggesting you contact every website you use and ask them to add HSTS.

Some end-users need straight forward advice like "Use a password manager" or "Use a non-free VPN on open WiFi connections". The rest is going to get thrown out with the bathwater.