skysight-inc/HackerNews huggingface dataset:
Just checked, systemd-resolved doesn't even support that behavior anymore[1], so any multi-label FQDN will get resolved without appending the search domain.

So that's still a mess, but no mess of "rip apart the entire home network right now".

1: https://www.freedesktop.org/software/systemd/man/latest/syst...
Just checked Stylus and it seems exactly what I needed before! There are always some UI elements that you want to get rid of. :)
Canceling out the Bayer pattern to get full color is clever but I’m more excited for the release of Sigma’s full frame Foveon camera with their X3 sensor that doesn’t use the Bayer method. https://en.m.wikipedia.org/wiki/Foveon_X3_sensor
Commercial air travel is the safest form of transportation in the history of the planet. If you’re terrified every time you get on a plane, you shouldn’t be using that intuition as a guide to policy.
Huh. Where is the "indirect promise" ? Is there a (conventionally hinted as "free", so it's not good if there's one which isn't very cheap) as function? Like as_os_string or something?
Does not seem to be the case anymore: https://www.heise.de/news/Fritz-box-Domain-aus-dem-Verkehr-g...
Never tried, I have static IPv4 and v6 so I feel no need for a VPS, but various guides exists for OVH and Hetzner, so I imaging it's not that hard, at least for NixOS.
Public funds are ostensibly managed by democracy for the benefit of all of society, while so-called "private" funds are literally managed by dictatorship for the benefit of the dictator.

I wouldn't consent to these rules, but most people do so they are the rules, and it's likely the logic behind Elon's thinking.
Time to make the suffix configurable and default it to something standard like home.arpa (or .internal once it’s official) or a sub-domain thereof, AVM.

To me the root problem still seems to be that we use FQDNs virtually nowhere even though that is the intention. Linux and macOS not applying the suffix for multiple labels is just an implementation detail. Maybe we should standardise the behaviour and maybe it’s better to turn it around: consider everything an FQDN and provide an escape mechanism (e.g. an xx-- prefix or an escape TLD)?
I'd guess it was a decision made a long time before gTLDs came into vogue, maybe a very long time before.

If there's a list of falsehoods programmers believe(d) about DNS, "that TLD will never ever resolve, not ever" should be somewhere near the top.
Ahh yeah gotcha
Complain to your city manager, state legislator, or representative when you get bad customer service from a government agency. They work for you. You don't have to put up with it.
https://archive.is/Vvoz9
Show HN: Medici is a JSX-native browser with built-in peer-to-peer
Example front-end code:

<>
<Text fill style="linear-gradient(purple, red, 150, 50, 0, 0)" size={26} text="Featured files" x={8} y={36} />
<Link source="@exactchange:text:example" text="Example text link" id="link1" x={0} y={50} width={200} height={24} />
<Link source="@exactchange:data:example" text="Example data link" id="link2" x={0} y={74} width={200} height={24} />
<Link source="@exactchange:image:example" text="Example image link" id="link3" x={0} y={98} width={200} height={24} />
<Link source="@exactchange:image:davinci" text="Davinci drawing link" id="link4" x={0} y={122} width={200} height={24} />
<Link source="@exactchange:audio:example" text="Example audio link" id="link5" x={0} y={146} width={200} height={24} />
<Link source="@exactchange:video:example" text="Example video link" id="link6" x={0} y={170} width={200} height={24} />
<Link source="@exactchange:page:example" text="Example page link" id="link7" x={0} y={194} width={200} height={24} />
<Link source="@exactchange:app:example" text="Example app link" id="link8" x={0} y={218} width={200} height={24} />
</>

Add peers to `peers.json`:

{ "@youralias": "https://your.domain/somefolder" }

When a user navigates to @youralias in Medici, the browser knows to look at https://your.domain/somefolder for the following sub-directories:

/app
/audio
/data
/image
/page
/text
/video

JSX-to-Canvas renderer:

- Vasari: JSX interpreter with renderer (based on node-sdl)

- Cross-platform: SDL is based on C and is naturally cross-platform

- JSX is native code in Medici and transpiles to Canvas drawing (not HTML/CSS)

- Supports native 2D and 3D drawing via Canvas2D, WebGL, and/or WebGPU

- Uses the Node.js JavaScript runtime

Stateful example:

<>
<Declare boxId="redBox" boxColor="red" />
<Event id="handleHover">
console.log('hovering over the box');
</Event>
<Event id="handleClick">
console.log('box click');
</Event>
<Event id="onExit">
process.exit();
</Event>
<Text id="heading" fill style="white" text="Click the box!" x={15} y={20} />
<Rect id="redBox" fill style="${boxColor}" x={0} y={30} width={100} height={100} hover={handleHover} click={handleClick} />
</>

Great for building app/game launchers, downloaders/installers, peer-to-peer content networks, and more!
> The best programmers simulate machines in their heads, basically.

Yes, but they still suck at it.

That's why people create procedures like prototyping, test driven design, type driven design, paper-prototypes, API mocking, and etc.
I’ll second this. And to emphasize, so it’s not just a useless “+1 comment”: I never cared for Sublime as an editor, despite some effort to appreciate it when it was at its popularity peak. But it instantly became, and remained, my go to editor for working with huge files.
Hackers had access to Volkswagen IT systems for years
Immediate understanding from across the room without needing to read a paragraph
From 12th October 2023
No English media has picked this story up, and the other source is Spiegel, but their article is behind a hard paywall.

Here is a Google Translate link,

https://www-zdf-de.translate.goog/nachrichten/wirtschaft/vol...

An attempt at a summary:

> The actors are said to have managed to steal more than 19,000 documents. They were mainly looking for information about the development of petrol engines, gearboxes, dual-clutch transmission systems, e-mobility and fuel cells. Volkswagen noticed in early June 2014 that their IT systems had been hacked. This was because the hackers allegedly made a typo. This typo reportedly caused the IT systems to suddenly start asking for a lot more capacity and that was noticed. Volkswagen then put together a team of security experts to keep an eye on the hackers and take the necessary measures.

> According to the journalists, it was possible to analyze the IP addresses of the hackers and they appeared to come from China. According to Der Spiegel and ZDF, the hackers always stopped their activities at a certain time. That time corresponded to 4 p.m. in the Asian country. This makes the news media suspect that these are Chinese state hackers with an office job and associated office hours.

> Volkswagen has confirmed the hack. The company emphasizes that the attack took place more than ten years ago and that the company has since better secured its IT systems. Volkswagen has not yet gone into the facts in more detail.
What is worse is that you cannot change your DNS domain from fritz.box. I looked in the settings many times and was unable to find how to do that.
So are liquids over 3.4 ounces
The funny thing is that these days, people are paying more (thanks to inflation) for products and services while customer care is getting worse.
Halo 1 came out before Xbox Live existed.
Diatoms generate a silicon dioxide skeleton and they look like little space probes.

https://paleonerdish.wordpress.com/2013/06/10/an-introductio...

https://www.mediastorehouse.com/science-photo-library/diatom...
Iran quickens path towards the atomic bomb
The site loads quickly. It's fast with few ads.

Maybe the date command can do things like calculate the number of business days between two dates, accounting for U.S. holidays, and add or subtract work days excluding U.S. holidays -- I don't know. But I know it would take more effort than I'm willing to do to figure that out and test it. And I suspect it would involve a few switches and be subject to easy error.

For pulling up the calendar, it's literally a bookmark that brings up a browser tab with the year's calendar, showing U.S. national holidays. Can the cal command show holidays at all? It's unclear.

I think it's a bit sad to discount the value of a clear, usable, and fast GUI over a command-line interface for certain day-to-day tasks. Both tools have their uses.
I know what you mean but "we're safe until we go extinct" doesn't give me warm fuzzies :)
I've been to universities in India where the CS faculty put their "free" Microsoft software boxes on display because the state government has made a deal with MS, but are running Linux on all the computers.
Writers get a bit dualistic on this topic. It's not "sitting in a hammock and dreaming up the the entire project" vs. "hacking it out in a few sprints with no plan". You can hack on code in the morning, sit in a hammock that afternoon, and deliver production code the next day. It's not either-or. It's a positive feedback loop between thinking and doing that improves both.
Thank you!

> I'd love to see where the management part of this goes

Can you elaborate on this? What do you mean by the management part? More control on the configuration side?

> did you make it in draw.io/diagrams.net by chance?

Yes, I used draw.io. If you're interested in building ASCII diagrams in terminal using keyboard, I have implemented another utility for that ;) https://github.com/amirkarimi/term-ascii-diagram
Out of curiosity, what happens with a custom DNS server but still using DHCP? Will the suffix still be used?
Not to jump off topic, but my takeaway from Norman's "The Design of Everyday Things" was that design is of process of compromises. Could be time, could be budget, could be other factors within the company, etc. But there are almost always unseen forces the public isn't aware of that impacts the design they do see.

I would presume APIs are no different. There is no objective and absolute perfect API. Instead there are always tradeoffs, always compromises.
.box domains can only registered since 2024.

Guess they didn't expect a .box-tld
> Microsoft is a national security threat: ex-White House cyber policy director

They needed some decades to find out. /s
>I'd tweak the script; then to see the results I would press F5 to run the already built binary and wait over a second EVERY SINGLE TIME (about 1480ms).

I put in a bug report for this years ago but it got ignored :( https://github.com/microsoft/vscode/issues/137066

Vscode has gotten slower over time. It's true you can't get nanosecond performance out of JS, but anything under 17ms should be trivial. I believe the vscode developers are skilled, it's just they don't care (imo) enough about performance for whatever reason, and that's a shame.
A lot of ISPs will not give out their configuration options and handshake credentials to force you to use their provided equipment only.
"Direct dial" was never a good idea.

There is a class of internet users that doesn't use a search engine, and instead types things like "usedcarsdetroit.com" in the URL bar until they find something they want.

And there is the class that starts with a single word search like "cars", which can't go straight to Google. It instead has to see if "cars.fritz.box" exists, because perhaps there's a server called "cars" on your network.

And god forbid that your parent types "bankofmerica.com" instead of using a bookmark or their smart phone app.
This is a brilliant and useful application of LLM technology, I'm impressed.

One question- On the backend, is it downloading each video CC (closed-caption) transcript and feeding that into a tuned prompt? What happens for videos where this is missing? Asking because I've noticed CC is occasionally unavailable for some YouTube videos.

If you cared to have a fallback, a potentially interesting experiment / solution for such cases is to download the video, extract the audio to a WAV file, then through the audio through Whisper [1] to generate the transcript. Using CPUa, it will still be incredibly intensive and slow, generally not much faster than real-time (e.g. a 5 minute clip will take on the order of ~5 minutes to complete transcription). However, with Whisper running on a fancy GPU it is insanely faster, between 100-200x faster, meaning even for long videos, generating the transcripts will complete in only a few seconds.

Great job @aka_sh!

[1] https://github.com/openai/whisper

p.s. Is there any chance you'd open source your code? Or do you plan to turn this into a business? The code itself is exactly a huge moat, and it'd be cool to see how you did this. Cheers.

p.p.s. stepify.tech app is currently crashing out to a heroku error page when I try to submit a YT link.
OpenWrt For the win!
Nonsense. The domain is registered. https://who.is/whois/fritz.box

Also, this should be worth an email to abuse@namesilo.com, no?
Yep, that is just a small section with a combined total of authors ' favorite reads of the year :) that is only 1% of the website. Just try search for any book, author, topic, or genre you are interested in.

Here are some explore points you can try via search:

Sci-fi explore point - https://shepherd.com/search/shelf/9008

Sci-fi bookshelf - https://shepherd.com/bookshelf/science-fiction

Book list by authors - https://shepherd.com/best-books/science-fiction-for-fantasy-...
Do we actually need that? As parent commenter said, you can buy something cheap or you can pay more get good support. Your choice. If the government intervened, nobody would have the option anymore, the "expensive with good support" would be chosen for you (and that's a best-case scenario).
It'll be too busy arguing with itself over whether its an integration test or not
That both isn't true and doesn't matter. What matters is the post is wrong.
> It's not possible to blind the experiment's test subjects.

It's not necessary. Randomized experiment is good enough. So are natural experiments.
I see this sentiment all the time, but it could never apply to the defense sector. Do you really want our nations enemies to have access to the source code of fighter jets, cruise missiles, the nuclear weapons program, or missile defense systems?
This runs really smoothly on my midrange phone. On the GitHub page it doesn't mention if there is translated versions, I will consider it if there is a version in Spanish.
> Half the work is figuring out what the customer wants.

And a substantial portion of the rest is telling them why they might be better off asking for something a little different.
FritzBoxes are used as voip server/bpx, printer server, nas, and home automation. And probably more. (German) telcos provide specific FritzBox configuation instructions (select correct sub-branch of provider and contract kind), adding the quest to get real connection data to the attempt to migrate to anything standardized.

Switching to something else is not as easy as buying a new modem for most normal people.
The secret to designing entire applications in your head is to be intimately familiar with the underlying platform and gotcha's of the technology you're using. And the only way to learn those is to spend a lot of time in hands-on coding and active study. It also implies that you're using the same technology stack over and over and over again instead of pushing yourself into new areas. There's nothing wrong with this; I actually prefer sticking to the same tech stack, so I can focus on the problem itself; but I would note that the kind of 'great developer' in view here is probably fairly one-dimensional with respect to the tools they use.
What are you going to do, take your business to a competing agency? “We don’t care, we don’t have to.”
A Utah Mountain Town Brings Back an Old Idea: The One-Room Schoolhouse
ERAM is multichannel, which is why we do the failover between A-channel and B-channel during APL and OS CUTO. If I remember the SSMs right, we do the update on the B-channel first and once it has been approved by TechOps, A-channel is then updated.

Everything is built to provide a fallback in cause of failure, including the OS updates when they come in.
There is a huge asymmetry in costs. When an issue arises, the customer has to spend an inordinate amount of time and effort to fix it, but for the company, the problem actually benefits them (e.g. a billing mistake, refunds for a cancelled flight, saving customer support costs).

Company profits increase and stock goes up, but customers' lost weekdays and weekends are not measured.
Lovely visualizations! Thanks for linking :D

I was thinking about generating a graph of connected nodes like the one you did. But TBH, i really like the ones on Wikipedia[1], and didn't really feel like making something of equal quality hehe.

[1]: https://en.wikipedia.org/wiki/Kaprekar%27s_routine#Kaprekar'...
Thankfully the House of Representatives finally passed a $60 billion aid package yesterday which is expected to get rushed through the Senate. The Pentagon said they could start delivery as soon as Tuesday.
I flagged this post because it's just spreading FUD (in the traditional meaning) at this point. The fritz.box domain had been registered in January, but someone (likely AVM) quickly contested the registration and it was disconnected in March. It is currently in the settlement and resale phase, so very likely AVM, the makers of Fritz! Box, will just buy the domain and ensure it responds NXDOMAIN to any query or something. While I still believe that using a non-reserved domain like 'fritz.box' as their internal domain and suffix is just dumb, they are aware of the issue and working on a resolution that appears sensible.
> X Edward Guo, a professor of biomedical engineering at Columbia University, said that part of the problem is that, unlike in the US, military research does sometimes take place on university campuses. “

Yes those dastardly Chinese universities which do military research on campus, unlike in the good old US.

Of course this is ridiculous, military research is happening on campuses all the time. The Internet I'm sending this through was a DARPA project, never mind the thousands of even more military specific research projects at universities. In fact there are a host of laws requiring the US military on US campuses ( https://www.pbs.org/newshour/show/high-court-rules-in-favor-... )
I refuse to pay for this. I’m willing to wager it will be free within a reasonable amount of time.
Might also be related to how the public treats retail workers (ie not well). So there's a lot of turnover, which means the remaining employees have less experience and the parent company isn't going to want to invest a lot in training.
If you can’t pay minimum wage, you probably shouldn’t be in business. Hopefully that’s not a controversial opinion.
Kazakhstan and DNS. Always always my personal reminder that OWASP applies to all applications, and to always sanitize inputs. DAMHIK!
Probably a combination of new developers and wide spread use of SSDs have made it's public image of speed. But really it is pretty quick, on modern hardware it is more or less instant at most tasks.

I use Jetbrains IDEs and am migrating to neovim, even Jetbrains is basically instant searching across large codebases once on good hardware.
It seems to me this move will only work if it's a step to a flatter org with managers who efficiently ensure technology is connecting to business needs. Once your org is really broken, half measures won't fix it.
It's the same issue that self-driving cars have. 99% can be automated. The remaining 1% is a bitch, and life-threatening.

I've heard piloting described as 99% moments of boredom, followed by 1% moments of sheer terror. If you actually could program a computer to anticipate all of the possible scenarios in that 1%, it'd be good to take the sheer terror out of the equation. But it's frightening because those are the moments when something has gone wrong and normalcy no longer applies, and you need to apply collected knowledge, wisdom, and experience to save your life and the lives of your passengers.
flash it with OpenWrt
By checking what the car you’re waiting for looks like and its license plate number and then watching for cars.

I can’t remember the last time I hadn’t already found my ride by the time the phone noticed it was there.
ok. most.

and an aside note do you really want the national defense to be one thumb drive away from total collapse?
A couple more decades 'til they notice that software runs on hardware.
I'll voice the obvious objection to this: what happens if you share everything you do, then someone else stands on your shoulders and invents a world-changing technology, then refuses to share it back and completely ignores your patent claims? Now they dominate you economically and perhaps militarily.
I will rebut by saying blank-and-white unnuanced opinions ("you all disgust me") is definitely part of the problem with political discourse, and it might be worth examining if you truly value the things you seem to
> part of the problem is that, unlike in the US, military research does sometimes take place on university campuses.

Oddly misleading, military research definitely takes place at US universities.
Tesla is flailing.
If I were to guess, like everything else, it’s fast until you install extensions.
Search forums local to your country and write documentation on how to use Linux or BSD as a modem.

For OpenBSD on Orange France FTTH: https://lafibre.info/remplacer-livebox/remplacer-sa-livebox-... or https://try.popho.be/securing-home2.html
My home router is an old PC running Linux with some extra 10G ixgbe cards. If you know how to configure it, I'm convinced there isn't a better way: the only real downside is the power use, and it's not that bad.
I'll note that many websites do NOT support this:

https://duckduckgo.com./ - blank page

https://www.google.com./ - 301 redirect to non-trailing-dot

https://www.amazon.com./ - works

But even "works" means that the page makes lots of requests to other subdomains etc which do not have the trailing dot, so are still vulnerable for DNS hijack if you have search domains set on your system. So while using domains with a trailing dot is a strongly good idea for calling APIs, etc. it is not a practical solution for the end user with a web browser.
Hm, curious behavior on my Windows box: nslookup is indeed always applying all the search suffixes whenever I do a lookup, but if I just use the normal resolution process (for example running `ping www.google.com` etc), then the value of `HKLM\Software\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName` is respected, which defaults to 0 since Vista.

So this shouldn't really be an issue for most people, but highlights once again that you should never ever use a domain in your infrastructure that you do not own or at the very least use one of the suffixes from https://www.rfc-editor.org/rfc/rfc6762#appendix-G
> Commercial air travel is the safest form of transportation in the history of the planet.

Until it's not, right?

Historically, it has been.

If there was a 1/1,000,000,000 chance you were going to die on a plane ride, would you voluntarily choose to take it? Ok, what about 1/1,000,000?
The domain is still not owned by AVM so it's still hijacked.
Sounds meaningful for the 10th percentile, but what about everybody else? I assume this is supposed to be a joke?
Continuing to read for you:

"Alaina P. (CEO) - $193,725
Jo Anne R. (President Product & Communication) - $184,085
Samaria R. (Chief People And Inclusion Of) - $169,913
Shanna G. (Chief Program Officer) - $137,760
Lise R. (CFO) - $135,625"