skysight-inc/HackerNews huggingface dataset:
Some of us are not serving our blogs through Cloudfare. In fact, I'm using a 5 year old entry-level Synology NAS located in my apartment to serve mine. I do that because it's already always-on by policy and therefore doesn't cost me anything extra to serve my blog from there, besides the DNS domain name.

Badly behaved RSS readers that download feeds uncached are wasting orders of magnitude more of bandwidth and CPU (gotta encrypt it for HTTPS) on my end than well-behaved clients that get served 304s. Some of them don't even set "Accept-Encoding: gzip" and download it uncompressed. That's hundreds of kilobytes per request wasted for nothing.

My blog doesn't see enough traffic to make this an issue for me, but I can see why this could be a real problem for popular blogs with loads of traffic.
> They are only lower in the sense that incomes are lower

The urge to measure everything by income leads to absurd results, like putting Saudi Arabia and the UAE near the top of the "housing affordability" list because they're flush with oil money, and for the same reason the United States.

> We really should have that lower end housing, I agree, but then we are comparing apples to Orenjis.

But that's the point. Someone in the US who makes 20% of the median household income still needs somewhere to live, and by refusing to provide smaller units, we make things cost more for everyone else too. Because now they have to spend their entire salary on housing and make up the rest with government assistance, which bids up housing costs for people in the middle -- who are also the ones footing the bill for subsidies made necessary by the high costs.

It's not just about the cost per square foot, it's also that small units aren't even available because the rules proscribe more units from being built on the same lot. The result is a de facto prohibition on smaller units because ordinarily it costs a similar amount to build a small number of large units and a large number of small units, but now the latter is unlawful and a small number of small units is uneconomical.
Unveiling the Alarming Reality of Social Media Addiction
At some point we run out of people in rural areas to migrate to urban and 30-50 more years later we get Detroit, maybe, except everywhere at once.

Watching South Korea very closely... for the next 20 years.
Nothing wrong with JWT bearer tokens as a technology.

However, too many times they're implemented incorrectly or without forethought. I've seen a few teams who used the bearer token, set the age really high, and never bothered to implement a refresh mechanism.

Fast forward a few months and someone says it is not possible to log someone out of our service.
Ask HN: How much you can customize iPadOS?
Unfortunately Apple created great piece of hardware, new iPad Pro and keyboard, but decided to keep it crippled with iPadOS. Since under new DMA laws in EU you can install 3rd party software, I am thinking to what extent it is possible to customize iPadOS? Would it be possible, using extensions, open source and other customization, to make iPadOS more general OS like (better FS access, better support for multi tasking, etc, etc) ?
The thing is that preventing "sharing" isn't sufficient. People who are concerned about privacy don't want any such data collected or stored in the first place, ever. The implicit "sharing" of my data with Google (or whatever company) is a problem in itself. Regardless of how "seriously" Google (or whatever company) takes it, for a lot of the data I don't want them to ever have it in the first place.
Your post reminds me that my wife's Windows 11 laptop has a bug where it won't always shut down when she closes the lid. Sometimes I'll get up in the morning and hear the fan roaring, and the room will even be warm because of it. Guess who's the one that's going to have to figure out how to fix it. Her Windows maintenance time is low.
A late edit for a brain fart: “and then you can’t ever refresh the page” should be removed since it can be served from service worker cache. You can’t refresh the page while allowing a connection to the server.
Thankfully it was only 3 interfaces down.

The whole codebase is riddled with the same kind of layering but we do now have guidance about doing stuff like that ("DON'T") and a plan to simplify some of the worst offenders (like the multi-layer `Validate` hell hole.)
Some people might use the terms in this sloppy way, but not distinguishing between a field and a discrete grid sampling of that field is incorrect.
Is there a easy way to see how your reader works?
Indeed. Using a streaming platform makes sense only if you need messages durability (and sometimes reusability). When implementing a request/reply pattern on top of such a platform (Infinitic does that btw), it necessarily adds some latency due to multiple persistence operations.
Elon Musk Fights Back as WhatsApp Denies Harvesting His Data Every Night
There also was an inverse project of GNU/kFreeBSD stopped in 2023
https://www.debian.org/ports/kfreebsd-gnu/index.en.html
Yeah, it’s very much a case of “the map is not the territory”.

Modelling such processes as normally distributed is objectively wrong, but it’s also not wrong enough to matter.

We could, and arguably should, model such processes as truncated normals instead, but normals are just so damn convenient to work with.
Back in 2011, I had the pleasure to take a peak at the sociable plugin (#2 on their plugin ladderboard) and it was one of the more brittle and bloated piece of code I ever saw. Felt like an unfinished weekend project that dragged too long and ended up published, 5 screens long for loops over massive globals, duplicated to then do whatever.
The age shouldn't be an issue, and it should actually be the opposite. Also, I'm not talking about Arch Linux in this case. For Arch, my issues were with the Network card. But as I said, just hop on the "news" panel on the arch linux website, and you'll see all the tiny manual interventions you have to do. For a "rock solid" UX, I would definitely not use Arch, but probably Mint or Fedora instead.
Still got the last edition of the Emigre set on a USB stick. Dead History baby.
I think it's generally a poor idea to serve a blog, especially a popular one with loads of traffic, from an entry-level Synology NAS.
Mate cocido is just mate in tea bags, rather than the traditional preparation method. Sugar is prevalent but strictly speaking, optional (nobody is going to say it's not mate cocido if you don't take sweetener in yours).

I know a few retired Argentine Navy guys who make their mate cocido in a coffee percolator. The horrors of war change a man in ways difficult for us civilians to understand.
The point is that when logging in with AzureAD your app needs to talk to AzureAD using OIDC but JWT is an implementation detail of that specifically and there's no reason this means you need to or should be using JWT throughout the rest of your architecture.

If you're using AzureAD for IAM, you're not "using JWT for authentication tokens", you're using AzureAD. This isn't what the article is about. The article is about building your own services that generate and process JWTs. And yeah, if you use an OIDC API you likely use an OIDC library instead of rolling your own. So as far as your own code is concerned the token is entirely opaque.
I work near health environment, and what I notice is a heavy selection. If someone doesn't tolerate "living cadavers" they quickly take options: go to the private sector, take a speciality that doesn't deal with such events, or in the worst cases they drop out to something like the pharma industry.
Creators usually get paid by ads as well. Its been a long time since I've seen an ad on YouTube thanks to adblock, but a longer video you can fit more ads into.
Related:

Gleam: a type safe language on the Erlang VM - https://news.ycombinator.com/item?id=38183454 - Nov 2023 (242 comments)

Gleam: A statically typed language for the Erlang VM - https://news.ycombinator.com/item?id=22902462 - Apr 2020 (109 comments)

Gleam 0.15 - https://news.ycombinator.com/item?id=27061500 - May 2021 (78 comments)
That's not correct. If you set the CAA correctly you can limit certificates to for example letsencrypt and dns validation.

An attacker can get around that if a CA does not use DNSSEC validation to check the CAA. But that would be a problem with the CA system.
I think the situation is a whole lot different since the days of Windows 7.

The biggest change is that Windows just stopped caring. The UI is inconsistent and messy. It ceased to be an improvement over Linux a long time ago.

Crapware is also another problem. Windows had this problem since the 90s, but it's now worse with Microsoft itself pushing for them. It's the only major desktop operating system to have this problem.

Worst of all, it's a real pain to use. People avoiding it are no longer doing so out of abstract principles. It's just so bad that any person with self-respect wouldn't want to use it. From the constant resetting of user preferences to obnoxious banners and full screen nags, Microsoft is making it very clear that they have no respect at all for the users.

With modern Windows, users are expected to work for Windows and not the other way around. Any data it touches also becomes the property of Microsoft. Or at least they act as if that's the case.

Linux is slowly but steadily maturing. Also, end users are moving away from PCs, meaning those who still use one have a high likelihood of being a power user. I think FOSS desktops are more relevant than they were a decade ago.
I don't have the time to dig into all these links, but this might be different than an OS issue, more of a manufacturer, or a poor choice of hardware from the people posting it, or they messed up with their software (not updated driver etc.). Because in theory, the NVidia drivers for the GPUs are flawless on Windows. So this doesn't play at all in the Linux VS Windows balance.
Of course you can have multiple apex A records that point to the same IP address. We are talking about CNAME records here. Are your sites using CNAME records or A records?

Even if you are using CNAMEs, that's only been possible recently due to hacks/workarounds, as bonzini said.
If learning durations were log-normally distributed, how would people be able to graduate from universities and finish studies, mostly in time? Or accomplish anything substantial in their limited time span?

I agree that distribution of most human tasks' duration is skewed (not necessarily distributed log-normally), but these tasks can still have a reasonable upper bound for completion. The success is not binary. Like in grading, we need to accept that some projects will get an A, and some will get only B or C, and it's still OK. Some may fail.
Tripping over the potholes in too many libraries (2020)
But that's just it: it's not failing to adapt. It's avoiding doing too much extra work.

If IPv6 were a simple replacement for all things IPv4, and you simply had to learn IPv6 instead of IPv4, no one would complain.

But you need to learn IPv6 in addition to IPv4, in almost all areas of networking. The complexity adds up, it isn't replaced.
By using the token to access the userinfo endpoint of the OIDC API? Yes, some info is encoded in the token already but that's why OIDC includes that endpoint unlike OAuth2 (which was authorization only even if it was often used for authentication).
Previous discussion: https://news.ycombinator.com/item?id=24105729
I’d also like to be able to run anything on an iPad. But I know I can’t so I don’t buy it.

I find this notion that companies should do what we want ridiculous. You know the features and capabilities upfront or you can at least and then you can decide to buy or not.
That’s a very good question. It seems likely that behaviour during that period reveals the unconscious
If you set the CAA correctly, then letsencrypt will limit validation to the dns method. Together with DNSSEC that is enough to prevent issuing certificates in case of a route hijack.
I made an invoice site to help prevent you from being audited
One day, while checking my email, I noticed my customers kept asking about the invoice. I also realized that after I send the invoice, I tend to lose it. This led me to consider building an invoice app that can store the invoice for future audits and can be sent via email.
You seem to be attacking a strawman.

"The central goal of the attacker we consider is to gather location and movement
data about a large number of devices, either globally or pertaining to a specific region of interest."
> RSS feeds [would be] a more or less stagnant technology, mostly adopted "for fun" or by a niche of people who find them useful

Pray tell, what would be the good alternative, for this «niche of people» who collect the news? We use RSS because news are collected through RSS.

And clients have to be properly, wisely configured: some publish monthly some much more than hourly; some are a feed per domain, others are thousands of feeds per domain... This constitutes a set-up problem.
Yes, this is a good point, however when it comes to GPUs, you might not have an optimal choice at all, since some stuff come only on NVidia GPUs.
However, after the GTX 1080 they released open source drivers and things should be better for more recent versions.
> This really is a global phenomenon.

It's global in the sense that it's present in multiple countries, often for the same reasons. For example, the costs are high in the UK for similar reasons as in the US. But many of the comparisons just don't apply.

If you look at a country with a very low median income, of course housing costs a lot compared to the median income -- everything costs a lot compared to the median income. And housing in particular requires skilled labor and global commodities like timber and steel, which put a floor on the cost regardless of what local incomes are.

So housing in India or Vietnam costs a lot relative to local incomes because wood costs a lot relative to local incomes, even though housing there doesn't cost a lot in absolute terms. Which is not the problem in San Francisco, is it?
Note, the page has a typo: "Join out team" should be "our"...
Ah yes, time. Not just time - 'free' time! It is so free people need to sacrifice their freedom in exchange for curated experience and long battery life to get it. What they are unable to sacrifice, though, is convenience and pleasure. And Touch ID.

When freedom is at stake, some may sacrifice their lives on its altar, but worker bees will never sacrifice USB-C displays.

Yes, I am a zealot.
What You Shouldn't Know About Quantum Computers
That’s not the modern usage though. If you look up “shirk” in any modern dictionary you’ll definitely find the definition you’re replying to. Perhaps only the OED will have the older nautical meaning.
#!/bin/sh
read x;
tnftp -4o/dev/stdout http://wayback.archive-it.org/all/20250000000000/$x
# (TLS forward proxy listening on port 80)

Example:

https://wayback.archive-it.org/all/20240506083041/https://ar...
No. Bachelor's only if you're getting a paid ride. Anything else make sure it's than 2 years, and it's a program that proves industry placement and strong connections. You will be stuck with a useless bachelor's in most programs today.
The downvotes remind me of a thing at a job. We had an API for programmatic access to our customer's data, and one customer had bought some expensive BI-solution that they wanted to feed with data from the system we provided. For months they came to us and complained that the API was broken and asked us to fix it.

When I looked in the logs I could see that they hit the API with a lot of requests in short succession that generated 403 responses, so we said that they need to look at how they authorise. After a while they returned and claimed our API was broken. Eventually I offered to look at their code and they were like 'yeah sure but your silly little PHP dev won't understand our perfect C# application'.

So I looked at it and it was a mess of auto-concurrent, nested, for-loops. If they had gotten any data out it would have been an explosion of tens of thousands of requests within a few seconds. They also didn't understand the Bearer-scheme and just threw the string they got from the auth-endpoint straight into the Authorization-header without any prefix. Maybe we should have answered with 400 instead of 403, but yeah, that would have been a breaking change and we didn't want or have time to do a new API version because of this.

Anyway, their tech-manager got really mad that I found the issue within an hour that they had struggled with for months, and also had mentioned that the API-adapter was designed for DoS rather than a polite API-consumer and maybe they should rewrite it to be less greedy and maybe also use ranges instead of crapping out a new request per row in in a response and stitching it together again on their end.

A few weeks later they got it running and it was brutal, but our machines could take the load so we didn't think more about it. Later I heard they got performance issues on their end and had to do as I had suggested anyway.

Be polite and pay attention to detail when you integrate with protocols and API:s. At best you'll be a nuisance if you don't, but many will just block you permanently.
Perhaps arsed rather than asked
It might be better to not write everything in your head.
So far the ideal "portable" setup is MacbookPro M3 Pro with:
- UTM VM for ArchLinux arm64 for all the linux stuf
- UTM VM for Windows for ARM (use it only for retro games)
- Crossover for occasional modern not AAA gaming

Zero issues so far and I have all the benefits of Apple hardware
Indeed... Tested it for one month (for CL editing), found it is very pleasant!

Smooth installation, nice default theme, fast, most (90% ?) emacs keybindings are
there
Easy to add bindings/own commands, as in Emacs (only CL packages come in the way)
Cache-Control goes a long way in the right direction: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ca...
Rick solid software is very dependent on the quality of your Rick.
True. My bet is that arbitrary text queries converted to SQL via LLM will become an increasingly popular alternative. Not sure if it will completely replace the custom query languages though..
It's a response to his summary of the article, not a contradiction.

> the measures mentioned in the article — lower interest rates, lower transaction fees, down payment subsidies
Some games can do that, but not all.

For some game concepts, you have to engage in the equivalent of 'suspension of disbelief' to keep yourself from falling into these unfun traps.

It's hard to come up with an example at the top of my head. But here's an attempt: many people like to play chess competitively, but some people also like to have a casual chess match with a friend.

Competitive chess matches use a timer to keep things moving. But adding a timer to your casual match would (probably) not work. But you also want to keep the game moving.

That's where, even when you are tempted sometimes to over-analyse a board position, you have to show some restraint and just make a move after a reasonable amount of time.

(And the vagueness of 'reasonable' is part of the point I am trying to make. Exactly how long that is depends on you and your friend and the moods you are in.)
『 0x61 』- Wayland/Sway on OpenBSD
That’s disingenuous. Reorgs are also possible on Ethereum.

To date no transaction has been rolled back on Solana once two thirds of the validator set have voted on it.
Being able to install any OS onto your hardware would let you avoid running an OS that screenshots your every move in the first place
>deductive reasoning is just drawing specific conclusion from general patterns. something I would argue this models can do

That the models can't see a corpus of 1-5 digit addition then generalise that out to n-digit addition is an indicator that their reasoning capacities are very poor and inefficient.

Young children take a single textbook & couple of days worth of tuition to achieve generalised understanding of addition. Models train for the equivalent of hundreds of years, across (nearly) the totality of human achievement in mathematics, and struggle with 10-digit addition.

This is not suggestive of an underlying capacity to draw conclusions from general patterns.
> You now know why libel and slander laws in the UK don't allow the factual truth to be an absolute defense.

That probably has more to do with Russian oligarchs being enabled to sue critical news organisations into bankruptcy.

If factual truth is not enough, you are in deep shit.
I've just ("just" being a week ago) received a kind e-mail where an XYZ company is informing me that "post an interview with me, they've found me great and blah blah, but they decided to go with another candidate blah ..." which is pretty standard and common and all. The catch is we never had the interview.
Time is the real issue.
I'm in the UK and I'm at a point in life where I've got too many family orientated tasks. If I'm heading to the cinema it will be with family for a PG film (very few seem interesting to my child) or occasionally by myself to see a blockbuster (if they screen it for long enough for my free time to align with it).
Millions in US face extreme-heat threat as experts urge better protections
Also

> - Doesn't need cookies = immune to data loss by accident

How is this immune if you have to remember to save it manually? That seems much worse than relying on cookies. Sure you can maybe restore it from the browser history, but if cookies are not considered reliable, then the history even more so. It's easier to delete history than cookies.
Be aware of marketing blog posts like this (looking at you Confluent, Databricks and Camunda!).

Another "forget this style, only use our new framework".
What he forgets to mention, and what is probably not in the scope of "our new framework that does everything better", is that it is totally valid to use orchestration and choreography.
Same as Confluent pushes the case to use choreography, this post pushes to just use orchestration.

That's wrong. From my point of view:

1. use choreography for small to medium services (for example one domain)
2. optionally orchestrate them on a higher level (for example between domains)

Don't orchestrate all your business logic for all services down to the smallest event/command!

Also: You don't *need* to store all your events forever. This pattern, often pushed, comes with downsides as well. Maybe you have a good case to do so, but don't fall into the trap to just use this pattern because you've read that in some blog post!

Alternatively, you can also just go the route of those vendor blog posts and pay later for the lock in.
> Then we need a DSL.

Or perhaps just the data structs already expressible in Protobuf, come to think of it. Versionable and textual thus git/etc-able.
If Google and/or Apple have gone to the trouble to build the network side of this edge-computing infrastructure, presumably it's because they think their customers will see enough benefit from this to buy more devices. But then why would they tie this to the customer's telco being on board? Apple/Google surely know how to run a data centre, and there doesn't seem to be much that couldn't be hosted just as well by them as by each telco; on the contrary, owing the network side of the stack is going to make it a lot easier for them to make performance, security etcetera guarantees. And of course it means all their customers can be on board on day 1.

On the telco side, as I understand it the CDN hosting isn't seen as a revenue centre - rather, it's there because it makes their pipe faster than the competition's (for the principle use cases of most of their customers, anyway).