skysight-inc/HackerNews huggingface dataset:
Hyperbole aside, they certainly haven't given as much as they've gotten, though.

E.g., remember when Heartbleed hit, and the world learned that OpenSSL was maintained by one person getting only $2000/year for it? Fixing Heartbleed was estimated to cost half a billion dollars world-wide.
DoH means that each application does its own DNS queries, instead of using the OS's functionality. Whether that includes reading /etc/hosts is up to the application, and it looks like high profile applications like Chrome and Firefox don't read /etc/hosts.

> The entire point of these technologies is to prevent your ISP and everyone else along the way from knowing which websites you visit.

More correctly, the point is to shift all that from one organization to another. Maybe you trust Google or Mozilla more than you trust your ISP, but I don't think it's the same for everyone.

You could even argue that your ISP can already see which hosts you connect to, so using it's DNS resolvers doesn't add much information for them. Using DoH means that both your ISP and another party can see that.
Rust's 1.0 was 2015. It's been 9 years.

It's been adopted for core components in Firefox, and Chromium/Android are likewise moving towards adopting Rust. In general, Rust has seen broad industry adoption from the likes of FAANG, M$, etc.

As far as I know, while alternatives like Zig may have their merits, they are simply nowhere close to Rust in terms of maturity and adoption. Not only would it take a decade for them to play catch-up, there's huge uncertainty around whether they will ever reach that point. So even if you assume Rust is approximately average on whatever technical axes, pragmatic concerns suggest it's the only real option.

Of course, one can always argue Linux has no need to adopt any new language. I don't think there is any serious concern that Linux will end up with no C programmers left to write kernel code.
you could completely respect the decision to deprecate some support, but the marketing speak comes across distasteful.

from a user's perspective, selecting a tool should be about what's "best" for you and not what is the "best" out there (from some arbitrary measure nonetheless).

pandas made sense and might still make sense for many, especially who are migrating from R and are already comfortable with dataframe paradigm. using the same paradigm and just saying "we run faster" does not solve the ergonomics or the reason why people adopted this way of processing data.

there are plenty players in the space going about this from the stack. would be nice to see more discussion on alternative generic data processing paradigms instead.
Loki and Clickhouse are not really excelling in what ES is. For example, full text search.

VictoriaLogs is very promising in this regard!
Video shows life-changing transformation of Parkinsons sufferer after new drug
No committee and motivated devs that need the result for their projects. Especially the FNA folks.
"Changing the license was a mistake, and Elastic now backtracks from it"

This could have been the entire article and it would make more sense than whatever this is.
The shared computers at our school (college equivalent?) were locked down in theory, that is, you had to get the IT guy to grant you internet access, otherwise you could only use things like Word and the like.

We found a workaround; if you opened up notepad, went to the open file dialog, then I forgot the next step but it would open up the file explorer, which turned into Internet Explorer if you entered a URL in the address bar.

Of course, we also had copies of Linux that booted off of CDs, but they were a bit too obvious.
I guess that’s possible, but I didn’t get the impression from reading the post that the author was being deceptive in that exchange. He just seems a bit shocked and still cares about someone that is/was obviously important in his life. That seems like a more normal reaction to me than assuming he had a deeper ulterior motive of trying to get her to reveal something via text (which was already in the video evidence.) To me the tone of the post is more shock and disappointment, not legal scheming.
That's splitting hairs. It's trademark statute which make trademarks enforceable.
Website Maintenance Packages: 19 Popular Plans Compared
> If you care about building a business that generates revenue

You missed the end of that sentence "... in the first world". The ignorance or arrogance to assume all businesses that are started are aiming for first world markets. You think entrepreneurs in Africa, South and Central America, Asia are all aiming to expand into Europe and the US? That Third World business problems don't exist and solely cater for Third World needs?

It never fails to amaze me at the absolute arrogance of these assumptions, as if the Global South isn't relevant in technology or entrepreneurship. Truly astounding.
Human exceptionalism has been waning for a few centuries now, and I think we will continue to find more, uh, animal culture that we previously dismissed as mere instinct.

Note that exceptionalism can be negative as well as positive, such those who (inaccurately) declare that humans have a unique capacity for murder or theft or war or whatever.
Rust needs to know the exact size, layout, and alignment of every argument passed to a function to determine how it gets passed(register(s) or spilled to stack) and used. For example PathBuf and String can both be turned into a reference to a Path, and while they have the same size their layout and implementation of `as_ref` differ.

As for `impl`,

fn foo(a: impl ToString)

is syntactic sugar for

fn foo<S: ToString>(a: S)

The reason the standard library doesn't use this is because the code predates the introduction of `impl` in argument position.

The reason the function takes `AsRef<Path>` instead of `&Path` is callsite ergonomics. If it took `&Path` all callsites need to be turned into `read(path.as_ref())` or equivalent. With `AsRef<Path>` it transparently works with any type that can be turned into a `&Path` including `&Path` itself.
Great and very emotional (at least for me) story. Thanks for sharing.

It's always nice to hear that internet is still fun for ppl
I'm many years away from such topics but I don't remember this being the case, moreover specs for net equipment was (is) on pps with the details stating usually 2-3 packet size categories. I'm interested on some reference on what you wrote
When GP said “most”, I interpreted it more broadly. Most applications simply do not require the guarantees of a non-GC language. When you expand that horizon, list of contenders becomes considerably larger - even when restricted to statically typed languages.
Similar experience. Thankfully, the link was not obscured in my case. However, I did not appreciate that it blocked every click even after quite a bit of time had passed.

In my case, this happened just as I had opened a utility bill. First instinct: fastmail scanned my inbox and I had made a mistake paying for a 5 year subscription extension earlier this year.
As you sample all pixels from all photos on a mountain, the pixels don't become the mountain.

The structure of a mountain is not a pattern of pixels. So there is no function for a statistical alg to approximate, no n->infinity which makes the approximation exact.

By sampling from historical pixel patterns in previous images you can generate images in a pixel order that makes sense to a person already acquainted with what they represent. Eg., having seen a mountain (, having perspective, colour vision, depth, counterfactual simulation, imagination, ...).

In all these disagreeably dumb research papers that come out showing "world models" and the like you have the bad mathematicians and bad programmers called "AI researchers" giving a function approximation alg an abstract mathematical domain to approximate.

ie., if the goal is to "learn a circle" and you sample points from a circle, your approximation becomes exact in n->inf, because the target is *ABSTRACT*.

It's so dumb its kinda incomprehensible. It shows what a profound lack of understanding of science is rampent across the discipline.

MNIST, Games, Chess, Circles, Rulesets, etc. are all mathematical objects (shapes, rules). It is trivial to find a mathematical approximation to a mathematical object.

The world is not made out of pixels. Models of pixel patterns are not their targets.
https://www.ray.io/
I use them as a kind of informal "to look at later" list. Not quite important enough to bookmark immediately, but things I'll peruse later when I'm not busy - either reading, bookmarking, or closing.
Thank you. Now that you mentioned it. Maybe it was a burnout.

If you don't mind sharing, what did you do to improve your mental health?
I have a work-in-progress theory that permissiveness for some level of misbehaviour is what is necessary for freedom.

For example, as Gibson put it, Singapore is Disneyland with the death penalty. Now, how many Singaporean artists can you name?

But you know who Banksy is.
Ask HN: How to securely expose an internal webserver to the internet
I would like to expose a web server such as the nextcloud to the internet. I want an authentication layer in front of it, as in the Cloudflare Access with ACLs. It will be on a custom domain and end to end encrypted with TLs. I prefer that the proxy in front is managed and secured by a company, since I am not an expert in security.

* Cloudflare Access: This is great, but Cloudflare terminates the TLS which is not acceptable (otherwise I will run the application in the cloud)

* Ngrok: The free tier is limited (doesn’t support custom domains and is too limited in bandwidth), and the pricing of the paid tier doesn’t fit

* A reverse proxy on a VPS with something like Authentik or Teleport in front of it. This would work but I prefer that I don’t configure and maintain the Authentik. It seems risky.

I am looking for recommendations.
Unrelated but that Wikipedia page seems to be a bit biased. What has capitalism specifically got to do with guard labor? Do communist and socialist societies not need guards, prisons and militaries?
(I research Aadhaar security, please reach out if you’re interested in collaborating and publishing similar research).
RPi Pico NAS at nearly 600Mbps!

What could go wrong?
I always do `<T, U extends T, V extends U>` etc for generics, but for lifetimes it's `<'a: 'b, 'b: 'c, 'c>` which always trips me up...
Does CC publish the methodology for how they determine what to crawl. More particularly, how do they determine what not to crawl.
I never said that you should only have one server on Hetzner. For the web servers and background workers, though, scaling horizontally with docker images on physical server is still trivial.

By the way, I was running my startup on 17 physical machines on Hetzner, so I'm not talking from marketing but from experience.
So your response to me is a question for the very thing that I asked you for, this is very bad discussion form when you throw such serious accusations around. Merely giving examples of Erdogan or Modi is obviously not good enough because Musk says that he follows local national laws. So according to that personal rule, all his behavior is consistent. You said that he breaks his own rules, so where does it happen? Are you assuming that disobeying the Brazil order is such a case? Then you have to say so and show why Elon's reason for doing so is wrong because yes, he has given reasons for that. I personally don't know them, I don't care about every single case that affects Twitter. I do care about the social media circus arriving at HN where people think that they can just throw these easy accusations and then not even bother actually touching on the core issue.
The rollout popup was extremely intrusive in my experience.
https is broken for the site
If a dolphin, a tiger, and an elephant walked up to a cinema ticket office, handed over some money, and said they wanted a ticket, it would be interesting to see how the cashier responds.

Ants may not be taken seriously if they were to offer to pay, but then again nobody will stop them just walking in to a theatre without a ticket either.
What's Rattlesnake? I can't find anything at all online.
just leaving this here for reference

https://opensource.google/documentation/reference/using/agpl...
IMHO the mentioned examples of complexity like multiple type variables and lifetimes with bounds are for who "really" wants compile-time contracts. These are mostly opt-in so higher level use cases(like writing backend business logics) should not care about that, just wrapping everything with Boxes and Arcs.

Of course Rust is not perfect; there is some 'leakages' of low level aspects to high level like async caveats(recursion, pinning, etc.). I'm not sure how these can be avoided. Maybe just trial-and-errors for all..?
Wanted to say the same. He straight up conjured a good looking code in CrabML as an example of similar level of "ugliness", while it has about three times less syntax noise.
I don't know if this was part of the issues but adding authentication to Elastic APIs and Kibana is so confusing and complicated that it is almost impossible to do unless you go for a managed solution. I'm sure that one factor alone motivates a lot of users to buy the service instead of hosting their own using the available source.
> I believe the biggest increase in security since 9/11, is that passengers are no longer expected to sit down and behave.

While that may be a factor, there's never any news about this happening, except maybe shortly after 9/11 with shoe or underwear bombs.
Bit hard to trust - plus OpenSearch would continue to go strong because lot many companies have built business on top of it. Most of the centralised logging providers come to mind.

Grafana and Elasticsearch with their AGPL, are not deployable for teams that don't even want to provide a competing service because even basic security features (group membership via external OAuth source for example) are only available in Enterprise Edition (TM)
I think much of the recent complexity comes from resume driven development in an over saturated job market. It's also seemingly popular to use shiny tech as a sort of distraction to keep investors from realizing you don't actually have a business plan written down anywhere.

There are still some dark corners in B2B software consulting that very strongly embrace the simple solutions path. Many in boring, overlooked industries. Oftentimes these areas are so inherently complicated you would get laughed out of the room for pushing shiny tech. For instance, back office accounting tools for a bank that manage critical make-break decisions around customer relationships. Go ahead and pitch your bespoke sql db and AI integration to these people and see how their due diligence team responds.
I think he's referring to Python, just like other made up names probably refer to Java, Js, C++ and OCaml.
It actually blows my mind how long this went on without any medical practitioners suspecting poisoning. The inexplicable vitamin D coming out of apparently nowhere? He had amounts in him that are basically impossible to have by any diet. I'm glad the culprit was "caught", but wow.
Rust target user is C/C++ developer. not using brace is out of options.
Basically, we got played, Eich made a private political action, someone used that to get rid of him and then Firefox starting paying 10x as much to their CEO, doing all sorts of anti-user stuff, acting in advertiser's favour (but not too overtly), and ultimately ditching their engineers so they could maintain the CEOs stupid pay. All while begging users for money.
So I guess the lesson here is: if you want to poison your spouse, make sure you live in Sweden. If you succeed, then great! No one's the wiser, and you can keep everything. If you fail, it's not that bad: you sit in jail for a short time, and then are released without a criminal record and just have to deal with a divorce, which you would have eventually had anyway without the poisoning.
Purchasing power adjustment doesn't take into account cost of housing sufficiently. Those poor countries you compare NYC to have vastly cheaper housing. Also poverty is not just about absolute measures. Inequality is also a huge factor. When everyone's poor property crime is somewhat lower than what you'd expect it to be. Another thing is that those poor countries have societies and infrastructure adapted to the poor. NYC would even ensure that some infrastructure is hostile to the poor.
The thing with this hack though is that it seems to be able to greenlight someone pretending to be staff to enter the cockpit as a passenger.
They had legal advice that what they were doing was not lawful and they did it anyway.

So at scale fraud and gross negligence, for a start. And jail is a perfectly suitable punishment for knowingly sending fraudulent invoices to the most vulnerable people in our country, driving several to suicide.

Instead, they got cushy jobs.
It's not just Elon who is punished. It's easier to track exposure to Brazil than exposure to any high level official in a company or stockholder who may be punished for activity in another irrelevant company.

Also, imagine we realized that Sundar Pichai also had a major position in Costco. So then we started to crash Costco to make Sundar Pichai direct Google policy. And the stakeholders in both companies who don't care and are just using this as retirement strategy are exposed.
Thank you. I wrote it as I was inspired by the Silverwash from Witch Hat Atelier, a disease that causes the eye to see grayscale. Its also because silver is a symbol of money, and as an adult; the responsibility to provide for our family, pay here and there, taxes, tuitions, mortgage, etc - can make life feels bleak.
tbh, many of the main browsers have marketing companies as their main customers
Glad you see the potential! We do have an existing function "call graph" view that uses traditional static analysis methods with LSP calls. Augmenting this view with LLMs seems very promising, and we are very much headed in that direction! Are there use cases you can see this being helpful for?
You forgot the "simultaneously opened" part.
Not to mention international cooperation, like the Dutch secret service having agents or contacts in Ukraine after MH17 that tipped off the CIA about a possible attack on the Nord Stream pipelines.
I can't answer your question, because I don't know about such an HTML framework, but Django-distill (https://django-distill.com) is a fantastic SSG. You just write whatever Django you want, and then it compiles that into a static site.

Much more flexible to just write your own code than trying to configure Hugo or Jekyll.
I agree they shouldn't have written it in such a "now let me embarrass you and show how right I am" way (and they also should have shown a lot more awareness of how embarrassing this was and, also of how: while infosec is super important, there are other priorities that need to be protected in how this is disclosed, too -- especially if they are hoping for constructive engagement with the orgs involved which, like it or not, is what practical security requires, if your point in disclosing is to make a meaningful positive difference, which is really important given the scale/scope of this vulnerability), but I don't think it worked out bad for these two judging from their Twitter feeds. I don't know them, but:

Two guys from (or based in) the Midwest:

Ian did his first DEFCON talk a couple weeks ago (https://x.com/iangcarroll), and Sam (the other author), was the guy that a couple years back Google accidentally sent 200K USD to, and has 81K X followers, and was recently singing the praises of that much lauded recent PHRACK article on "Hacking means understanding the world" (that was also popular round here): https://x.com/samwcyo/status/1823571295189008601

They both seem like legit security researchers from their X feeds.

I guess that petulance-tinged adolescent attitude is like the secret handshake of the security researcher world, which sounds too disparaging -- but it's not meant to be...only that probably that's what you need to expect from folks who "understand the world", where they're smarter, what's broken, and should be fixed.

I get how that attitude rubs people the wrong way and causes more harm than good - but I don't mind it much myself - I guess I just set high expectations for the kind of impact such folks could have, and I think they could have more impact if they adopted a more professional, collegiate attitude in their way of working.

But I guess that comes with the territory. Because it's really only the "outsiders" who will sit around poking at things to figure out how they work, and how to fix em, make em better. Those who feel themselves to be "rejects' from the normal world, in sense, are always gonna carry a bit of the tinge of that perspective with them. But, whaddayagonnado? Those are really only gonna be the ones who "understand the world", so you have to rely on them. Odd couples, that pairing. Between industry and these hackers.
Every time I want to have that good old feeling, I create three files in a new directory on my home server: index.php, index.css, index.js :)

I would have done everything in Perl for maximum creativeness but didn't have the time to bring myself up to date with the current version.
Yes, for images I just do !gi
My guess: as I wrote in another comment, Elasticsearch had significant evolution in the area of "search engine", while OpenSearch trajectory (to use the wording of the press release) has been in the direction of APM/monitoring.

When Elastic changed the license, all vendors of APM products based on Elasticsearch jumped to OpenSearch.

Maybe, they want to pass the message that the fork, OpenSearch, is enough different to not represent real competition, and in any case, now that it exists, after the investment done, AWS will offer that as an alternative to Elasticsearch and not Elasticsearch itself but managed by AWS as it used to be before the license change.

Now, who wants a managed Elasticsearch service will only buy it from Elastic.
It's like saying "don't be sad" to depressed people. Helping oneself with environment tweaks and tools like this can help make permanent improvements for neurodiverse folks.
You mean like MS does?

Windows, Teams etc.

Not to mention the teams in Teams.

Or Musk's rebranding of Twitter to X.

Seems after flattening the logos they flat names too.

Generic and hard to distinguish.
Ahh I see, I didn't notice that name in the article, thank you.
Thing is, terrorism makes people afraid, even if no attack actually happened; one theory I have is that foiled plots are not reported on. Maybe in 20-50 years some of the records will be unsealed and we'll hear about loads of foiled plots.

But the counterpoint to that is that a gunman almost succeeded in killing Trump despite showing the behaviours online and offline of your stereotypical amateur assassin.
"By the fourth day, she had weakened further and no longer felt hunger or thirst..."

So, the feeling of hunger disappears after a few days of fasting or semi-fasting? I would assume that hunger will increase. You'll start to dream about nothing but food.
Puppy Names That Never Go Out of Style
How are people still learning about basic MD5 for security twenty years later? Are the resources people use that old?
I doubt many people know the correct full forms of LED, LCD, USB, HDMI, Wi-Fi, HTTP, URL, etc. either