skysight-inc/HackerNews huggingface dataset:
It is more than that. In the UK we track this through a figure called HPI (house price inflation). It just means the cost of real estate. My guess is that the graph would look quite similar for most non war ravaged countries around the world. Rocketing HPI over the last few decades.

There is more to it than just "anglo countries don't build enough".
It isn't just developer experience.

- Can I trust you?

- Where are your company credentials?

- What's the business continuity plan?

- What's your support? Sending an email to hi@ may not work, when my application is dead because of some bug at your end.
I prefer something like Django to build more complex websites against for clients, or just pure PHP for blog style stuff for myself. WP level sites wouldn’t hire me as two days of my work is as expensive as years of WP hosting.

But I admire the way the web was democratized with these CMS’es.
Prototype is not the first system.
Every application made with dbus in mind seems to break when I run it remotely.

For example, "eog" (eye of gnome) always either breaks or is incredibly slow.
These comparisons are really unfair. For example there's no reason you have to use a bucket policy in the sdk (I've never).

Unless it's S3 compatible it's going to be a gargantuan task to make this successful as _everything_ uses the S3 API.
Whether you use protobuf or avro/cap'n'proto/flatbuffers has little to no bearing on whether you need a registry for schemas.
I was kinda hoping this would just be a simplistic API on top of actual S3 so I get the benefits of both.
> Every country was a utopia until the British and French got there?

Nope, but you can bet that in every single case it got way worse when British, French, Spanish, Belgians, Russians, Italians, Venetians, Turks, etc. occupied them by often unspeakably brutal use of force, and then exploited their natural and human resources while giving close to nothing in return.
You’re conflating lots of unrelated things. IE was a horrible browser to support because Microsoft deliberately implemented their own incompatible version of web standards, or refused to implement modern standards. The push to deprecate IE was because it was creating a massive burden, I personally dealt with IE6 support in corporate world and can attest it’s depreciation was necessary.

What you call chrome skins isn’t a thing, people are building softwares on top of Blink, the rendering engine used by Chrome. The issue here is the risk of ending with a single rendering engine for the majority of the browser market, a diversity of engine ensure a good respect of web standards, that has nothing to do with privacy or security.

When you say “they just replaced IE”, that was >10 years ago…
R2 is also a solution to much of this.

But best of luck to OP!
FYI, WooCommerce added the ability to store orders in a separate database table.
Standard S3 is $.02/GB, this is $.12/GB so 6x the price. You don't pay data transfer with this solution at least.

Quick alternative:

#!/bin/bash

if [ "$#" -ne 2 ]; then
echo "Usage: $0 <file-to-upload> <s3-bucket-name>"
exit 1
fi

FILE_TO_UPLOAD=$1
S3_BUCKET=$2
S3_OBJECT_NAME=$(basename "$FILE_TO_UPLOAD")

aws s3 cp "$FILE_TO_UPLOAD" "s3://$S3_BUCKET/$S3_OBJECT_NAME" --acl public-read

if [ $? -eq 0 ]; then
echo "File uploaded successfully."
PUBLIC_URL="https://$S3_BUCKET.s3.amazonaws.com/$S3_OBJECT_NAME"
echo "The file is publicly accessible at: $PUBLIC_URL"
else
echo "Failed to upload file."
exit 1
fi
Package management in most Linux distro is a bliss, this I 100% agree on.
> We need another variation of the rule: "Any sufficiently advanced desktop operating system contains an informal, buggy implementation of half of Smalltalk"

How about: any sufficiently advanced desktop OS eventually turns into a buggy microservices system.
>afaik there was a serious lack of v6 support within aws services.

There still is, even though they've started charging for v4!
Discovery could charge your dead phone in 60 seconds,car in 10 minutes
To Address the Irreproducibility Crisis, Invest in Digital Archiving
From client perspective, socket I/O is isomorphic to the file I/O - you get a file descriptor and you read/recv and write/send to it. The only difference is how servers handle it.

The ioctl() is different, mostly because it's used to share memory between kernel and userspace, but the same communication pattern could be implemented in file I/O too, probably with performance penalty. Just send the serialized structures, and receive them back.

But the goal of DBus was never performance, it was to provide a unified interface to global system services. File I/O here seems like an obvious choice - it's the most fundamental interface that almost every program in the world supports.
I like this choregraphy inside a domain, orchestration across domains rule of thumb.
I think it maps to what we did a few years ago at previous enployer (without actually formalising like this).

Some cross-domain things are inherently orchestration problems (like GDPR deletion)
How many humans have you tested this with?
The good thing about S3 is the API is stable this s bunch of clones have popped up, or at least workalikes.
I fundamentally disagree with most of your points.

It might work for a usecase you have in mind but in general, it can't work. And it assumes that the world is a perfect place where the incentives are aligned and that ISPs cooperates and that you'd actually want to expose your phone. As if the tech we have (mobile networks, phone batteries, coverage) would allow for it, which it don't.

And somehow denial of service attacks is only worth mentioning when you have a dedicated PC with proper 100+mbit internet but not when you have a battery powered phone with wireless connection?

And I truly fail to see how all anyone could even argue that all that complexity would be better than direct access.
This seems like a great idea.

I've come to think the UX requirements of enterprise and indie dev / start up customers are fundamentally incompatible in the cloud.

As an enterprise I want to be able to set restrictions at the org, project, team and resource level for various compliance rules. And I want these rules to be restrictive by default (e.g block public access).

However as an individual developer the mere existence of those options makes getting started and debugging things painful. It's why I'll never again use Azure for a side project, although it'd be my first choice for a government project.
Thanks for the reply. I ended up implementing this idea in Go and wrote a blog post about the results: https://blog.felixge.de/blazingly-fast-shadow-stacks-for-go/

I'm curious if you've done any benchmarking for your implementation as well?
Common Nginx misconfigurations that leave your web server open to attack (2020)
"If you plan to throw away one, you will throw away two" -- Programming Pearls

https://tildesites.bowdoin.edu/~ltoma/teaching/cs340/spring0...
There is a huge continuum from scrappy startup all the way to the point where you ask this kind of questions before even touching something new.
I sort of understand what you're saying but I'm struggling to agree with your examples in the comparison.

Even if you're working on a "project" comprising hundreds of near identical houses, there could be massive differences in the project constraints and their solutions for adjacent plots for any given selection of houses.

There could for example be a large tree with root protection zones on site where you would have to carefully design the foundations to account for this and their future effects such as heave due to volume change potential of the underlying soil.

My point is that there are many "hidden" problems solved by the design team during the project / design phase even for seemingly insignificant or simpler "projects". In my experience of analysing and designing hundreds of buildings for over a decade every project was unique and as such treated like a "project".
Extreme Flaring of Starlink Satellites
"Starlink satellites can become extremely bright when sunlight reflects specularly to an observer on the ground. The observed brightness of such flares is consistent with a bidirectional reflectance function of the Starlink satellite chassis. These findings are applied to the case of an extreme flare that was reported as an Unidentified Aerial Phenomena by the pilots of two commercial aircraft."
I agree with your concerns, but wow do I miss the 1990s/2000s era of the internet. Things were so much more fun then.

Perhaps a 'mirror to S3-compatible store' feature would address these concerns though. Sure it is extra cost, but it would be a nice de-risking option for early adopters.
I'm talking purely about DNS, and in fact I wrote explicitly that "HTTP can multiplex multiple sites on a single IP address", because the problem exists only at the DNS level.

A compounding issue is that CDNs (or GitLab/GitHub) want to be able to change their IP addresses, so they don't want you to use an A record.
"chronic optimism"

I'm not sure if you mean 'toxic positivity', but I find that quite draining. It's clearly another 'motivational' groupthink technique, to distract from the fact that you're slaving away for someone else's bottom line.
Even as of 1 person, the car was also cheaper, all in, for me back then (a 20 year old car).

NL public transport is super expensive. Doesn't mean it's never interesting, but when I lived in France near a TGV station, I took the train much more often. It did often have both speed and price advantages.
Isn't that why Heroku exists?
This is baloney. Here's a literal quote from their iPad Air "Why iPad" [0] page, "iPad is so versatile, it’s more than up to any task." They market them as do anything devices with art as a option. Hell that same page even talks about building your coding skills in Swift Playground although who knows what you're supposed to do when you advance beyond that level? I guess in Apple's mind buy a Mac?

https://www.apple.com/ipad-air/why-ipad/

And of course, they call out the iconic, but complete bullshit, "there's an app for that" with many tasks not in fact having an app for that.
I'm sorry to be harsh, but this is not an alternative to the linked product at all. It's not available through an API, there's no Javascript SDK, there's no CDN configured, you still have to set up and manage an S3 bucket... It's not even in the same category, imo.
It's also easy without this feature. You just reduce the opacity and then remove the elements.

The issue is that this approach somewhat clashes with the declarative and reactive rendering approach of most frontend frameworks. The UI is no longer a function of state, but needs to account for whatever animations are going on.

Solving this would probably need some coordination between the DOM and framework developers. Like an Element.animateExit() function that React et al. can call.
I have a few qualms with this.
Decentralization mainly grants
flexibility/customization/freedom, but generally you don’t really care about this — freedom only really matters when you can’t do the thing you’re trying to do.

If everything is already covered without such freedom, or you don’t care about what’s not covered (or failed to conceive it), then you don’t really mind having the freedom or not. It doesn’t change much.

Gmail is a good email client — email being decentralized is only relevant to me if I wanted to get off gmail to go to say fastmail. But if I didn’t, what do I care whether the underlying protocol is centralized or not?
We really wanted Backblaze to work. However, there's not a single week it doesn't have downtime at least once or twice. It's really really not ready for production usage (trust me - we've tried in production and had to revert back to S3 after two major outages).

Willing to try wasabi next time.
I need to look into Wails, thanks for the tip.

My use-cases would be perfect for a TUI, but I need to be able to display pictures and videos, so I'm stuck with a GUI :)

Tried to do a web ui + local backend setup, but that didn't go too well.
My critique is not about the paper _content_, it is about the paper _title_, which currently (arXiv:2405.14975v1 ) verbatim is: "Surveilling the Masses with Wi-Fi-Based Positioning Systems".

Understand it as a minor pet peeve on my side that I would prefer a less sensational, better disambiguated title in order for the paper to express its content and significance. After all, it's arxiv.org, and possibly a preprint open for feedback.
> Sorry, what's your point? That having both address autoconfiguration and DHCP is too complex?

My point is very simple: you can’t say “IPv6 is simpler because there’s no DHCP” if there’s DHCP. It’s pretty obvious right?
Can you elaborate a little?

I mean any ISP can check if a packet leaving their network is actually a network they have under their control, routing doesn't have anything to do with that?
You cannot hope that consumers are well-behaved on the Internet, it has never been the case unfortunately, you have to act defensively.

If the issue is the processing power because the content served is dynamically generated, cache the content. Even with a server running on ESP32, just a few second should be enough (if the rest of the website to be statically generated)

If the issue is the bandwidth you may focus on big content (i.e. media) and return a 429 or use a CDN just for that (not worth for a feed in my opinion)

If the issue is neither, why bother ? Your time is precious, and you should spend it on more enjoyable things (that is, unless you find doing this enjoyable of course).
Sounds a nice compromise, thanks
What's that supposed to be?
This is classic feature bloat of a product that's been around for a while. Some customer wants a really niche feature so product adds a new option for it. It's just one new option so the experience isn't that different. Rinse and repeat hundreds of times and nobody stops the think of the cumulative effect on the 99% of customers who don't need those features.
That's why I say I see value in school 3D printing.

But not in a school machining shop since that's a very niche skill. You don't need to machine widgets for your home that much, it is a marketable skill with poor market.
Well, when we explore on Earth, do we use robots, or do we have people involved? Let's ask some field geologists.

When exploration hardware is maintained on Earth, is that maintenance all done with robots, or do people do the maintenance?
OpenAI says it has begun training a new flagship A.I. model
Not all are cryptographically signed, no. We have no special documentation but we are also not directly modifying closed firmware either. We are working with mediatek cards and will post more updates this summer. We last posted about our approach 6 months ago, https://www.supernetworks.org/pages/blog/barely-ap-surfaces.

So the randomization bugs we have reported are specifically about stations, namely: mobile smart phone devices failing to randomize their WiFi MAC address.

As for the study this thread's topic concerns, I do not have reason to believe that there are bugs with MAC randomization in cards running as APs that would make the randomization of BSSIDs fail.

The probe responses and beacon contents appear to consistently use their randomized MAC address in the cards we have tested. There could be underlying actively triggered bugs an active attacker could uncover, to get the non randomized address, but I do not expect such bugs would affect the BSSID + Positional databases of this study.
That's crazy then. There are incentives to investors who renovate vacant properties, but high demand areas, such as Lisbon, are excluded. Crazy that there would be so many unused buildings - I wonder if anyone is sitting on them waiting for the land-value to go up, or just setting a high sale-price and waiting for it to sell. I would think getting them vacated should be the most profitable, but alas.
Horror stories of cryonics: The gruesome fates of those hoping for immortality
It's for the battery technology claimant to fill up, not for the commenter.
Interesting point. Would you please answer the question I was mentioning? :)
looking at the code side by side example: FILE0 does not provide authentication!? Everybody can upload files?
I thought this was an exclusively Hiberno twist, maybe not?
OranClick – Messages That Click
You know that Call to Actions are important but aren't aware what messages click.

Your signups aren't reaching targets because of friction in messaging.

Worse link analytics are frequently unavailable and don't provide feedback on copy.

OranClick - write, track, analyze and double down on messaging that works.

Get clicking.

https://link.oranai.com/K8SQ9
Yes, and think how much more convincing the argument would be if it relied on its merits (which are substantial) rather the what amounts to ad hominems.
>Why are people so desperate to cling to labels?

Because to exist in any society you need to figure out what you are in relation to that society. If you can't answer "who am I", how could you figure out "what should I do with my life".

Identity itself is neither good or bad, but it is inevitable. The labels are just short hands to communicate an identity.
Second-system effect is the replacement of a full production application with another full blown production application where the second-system has to replicate all (or at least most) of the features from the first-system into the second one while also adding new features into the second-system. Even worse are the cases where the first-system still has to coexist and keep being developed while the replacement second-system is in development, that usually leads to a never-ending catch up of the second-system trying to integrate all the changes from the first-system that happened after the start of the second-system project.

Have you read the book? I'd recommend it!
The JWT has some extra fluff for the client, but only the Bearer token is used for secure communication. And every call to an API validates the Bearer token with an identity service. There is no automatic security because you have a token. That Bearer token (not the JWT) must clearly be validated and also validated with whatever functionality (Claims) is potentially being requested.

The meta data in the JWT is sort of a short cut to let the front-end make assumptions, but it has no bearing on the actual capabilities. Only a valid Bearer token can determine if a call is secure (authenticated) and has the correct permissions (authorized).

So, you don't need a JWT, but without it, you're still going to need a way to send mundane meta data back to the front-end. This used to be (and still can be) a separate call for "config" or "permissions" data, but why bother. Just create claims in your identity server, mark your API's with those claims and token validation, and you're in great shape.
Well, come on. It's your responsibility as a client to check for fresh content in a manner that takes her posting patterns into account. It's not her responsibility as a server to provide content in a manner that takes her posting patterns into account.
Enough housing will make all housing affordable anyway.
SpaceX sets date for next Starship flight, explains what went wrong last time
They don't. Which you can easily check with any of the dozen web apps currently implementing the GPT-4o tokenizer.
Oh, I assumed most people were familiar with systems theory. It's one of the more useful math stuff to pick up. I strongly recommend reading Thinking in Systems if you haven't.

Flows are movement. Money in, money out. Heating. Leakage of heat. Turning on the water tap. Draining water. Mining oil. Selling oil.

Stocks are how much is there. Money in the bank. Debt unpaid. Temperature of the room. Water in the bathtub.

For some reason, we like to measure flow even though it doesn't help much and it's actually the hardest to measure. You can't measure economic health by taxes paid, and it's hard to estimate whether a room will be warm based on how hot the heater is.

Stocks are easiest to measure. And they're effective too. Most flows are based on stock. If you took a historical count of stocks or flows and tried to model the future, flows are not good because they don't take into account structural changes. You may have a steady expense and income and suddenly it changes - maybe you're on the brink of divorce, maybe you're moving to a new city. People are likely to worry about how much the new rent is but don't account much for how much new income they make from the move. Or vice versa - they underestimate new expenses and overestimate new income.

Flows are good at predicting near term, bad at long term, and terrible at figuring out a solution.

More likely, it's based on other stocks - you spend more when at certain health levels, or based on the amount of money in a bank account, or perhaps your perception of the economic climate. If I have a windfall, I pay debts until my balance is a certain number. Or I buy meals for friends and family. Or give to charity, etc.

If things are tight, I don't spend, even though most of the time not spending means I have more to spend. It's based on some other stock, like how many people are on Slack, indicating how likely I am to lose my job or get a promotion.

So the easiest way to monitor is by having a bunch of different money stock (bank accounts) and monitor whether they're going up or down.
I find that I have a browser open >90% of the time when I'm at the computer. And it's easier to open a new tab instead of opening a new application.

Also I prefer web apps because they are highly customisable. If I don't like something I can modify the source easily.
That's a fair summary of why the research is happening. Thanks.
A fair question. I see men my age (pushing 70) looking at their phones as they walk their dogs, and adults who are at least approaching middle age doing the same as they walk their dogs, push strollers and so on.
While not exactly the same, it will be close enough for Apple not to do it - it's called MacBook Air and it will be out with M4 soon enough (I guess).

Back in they day they had 11" MacBook line and I loved it, wish they'd bring it back.
The reason I tolerate the power over our infrastructure is that it's completely escapable.

Building and caching my blog can be done well and freely by a dozen services, and it can easily fall back to me on my server if all else fails.

If we were talking about edge functions and proprietary integrations, that might be a more significant issue, but static websites are insanely easy to push off to CDN services.
When you have implicit reasoners and you grok them? Well...
Absolutely agree. The ideas of 'publically accessible' files on S3 is so convoluted and the copy is not at all clear despite them adding all-caps in multiple places...

And then policies are an attempt (I think) at simplifying permissions to a bucket with one declaration, but in practice what I see are people copy-pasting decades-old (really!) policies from other projects because most of us just need to get a private file store up and running.

Platform exhaustion - I have to know so much about AWS to not make a huge mistake that it takes away from my actual product development work that my company expects out of me.
He did and so did I, you are just selectively ignoring them and gaslighting us.
Related: I tried to use Github Codespaces (Visual Studio in cloud) on iPad with a keyboard, using a browser.

It works very well, in theory. There is only a slight deal breaker bug. Safari does not properly support clipboard. So copy-paste does not work. It should be very simple to fix as Chrome, Firefox, do on desktop if Safari would care more about web standards. Also you cannot install any other browser in iPad that would have the required support to use copy-paste.
Ebb.
This seems like similar market conditions that led to First Republics collapse (over investment on long term bonds that lose value when interest rates go up)