skysight-inc/HackerNews huggingface dataset:
Show HN: Bite Ballot – Vote on where to eat
This is a web app for quickly settling on where to eat as a group. (Feel free to critique the landing page.)

Unique features compared to other polling apps:

- No sign-up step.

- Enhanced Approval Voting: veto/ok/prefer. You may vote for multiple restaurant options.

- Real-time ballot updates so new candidates can be seen and voted on immediately.

- Ties are always broken randomly.

- Implemented with HTMx + hyperscript + jinja, enabling SSR and HATEOAS.

If you want to test the functionality by yourself, you can start a ballot, then copy the join link and open it in a different browser (or device). Each browser will be recognized as a separate user.

But give it a try in an actual group if you're able to. I find it nice and satisfying to use. You can just trust that the ballot result has picked the best place to eat for your group. Let me know if you feel the same way.

Aside from designing and implementing a new voting system, the other part I'm most proud of is the join-ballot flow. The intersection of possible states creates a plethora of cases that need to be handled differently:

- The joiner may not have a user (name) -> ask for name.

- The joiner may already be in an active ballot -> confirm abandoning the current ballot to join the new one.

- The joiner may be in a completed ballot -> let them join without confirmation.

- The joiner may be trying to join the ballot they're already in -> tell them, and let them return to their ballot.

- The joiner may have clicked their own join link as a way to get back to the ballot -> warn them to check if it has opened in a different browser.

- The ballot they're trying to join may be completely abandoned or already finished -> tell them, then let them create a new ballot or return to their current ballot if they have one.

Just handling all these different cases was hard enough, but I think I was able to simplify the code down enough to keep it maintainable.

If I can get enough users and monetize this, maybe I can afford to add more features like maps, yelp stars, or menus by paying for Google Maps and/or Yelp Fusion API access. In the meantime, the next big feature would be persistent user accounts/logins so that a single user can sign in on different browsers/devices and have their restaurants and restaurant info (like links to Yelp pages) saved and synced -- while still supporting the original minimal sign-up flow (just name). But let me know if you can think of other good features to add.
They don't have to be admissions, reports are an option.
I have. I just haven't heard of them resorting to assassinations. Happy to be proven wrong, but I'll need to see at least one actual example assassination.
Microsoft's SignedXml implementation in the .Net framework fixed this 8 years ago so long as you are correctly using the GetIdElement which makes sure there are no duplicates.

https://coding.abel.nu/2016/03/vulnerability-in-net-signedxm...
I wonder if those websites as a response might start adding fingerprint code in the source to indicate whose user session it was.
> Sending money also increases the risk of nuclear war

In which way?
Why do you say that? I think it’s ugly, but it’s substantially simpler to understand than oidc. What parts of the spec (read: not just shitty implementations by developers) are bad?

I’m genuinely curious here, I’m not attempting to bait an argument.
I played with this at VCFMW last week and it was truly delightful.
Can confirm, I am from the EU (PL) and don't see such option.
But I saw one that mentions passing data to third parties for "social, economic, and workplace research" and I took the opportunity to switch that off.
Stop thinking about cloak and dagger shit and start thinking about things ordinary people could do if they had a psychotic obsession, and nothing better to do with 120 hours a week of their time.

Stalkers want to make it impossible to live a normal life. They try to make it impossible to go to work or school, to use phones, email, messaging services, etc. Already knew my contact info, and got new ones by asking mutual friends. Called the the landline and cell and work phone and hung up or heavy-breathed into the phone hundreds of times a day. Telco won't help with this or admit who's doing it w/o a subpoena, which I couldn't realistically get. They tried to get various online accounts, including employer provided, to be flooded/brigaded/spamed/banned.

You don't have to be a leet haxor to do social engineering, sim swapping, and other crying on the phone to customer service type of attacks on other people's accounts. You just have to be pissed off and risk tolerant.

Not saying tor is a good-fit solution to these problems, just saying that "Because your ex-spouse wants to murder you", and also you have a day-to-day practical necessity to find a secure, hard to block way to communicate on, or access, the internet is not actually an exotic problem.
Discriminating against a group of people on the basis of their religion can still be racist.

There's legal precedent for that in the US, Canada, the UK, France, the European Council on Human Rights, etc... Not Saudi Arabia though. Are you Saudi?
> air-tight

I gave up on that requirement and now use Wick 742s and 743s without the gasket or clips. Super simple, all glass lid. I use them 95% of the time. If I didn't work from home these would probably not work, but I love using them.
Because they have good PR. Mesh networks are a dime a dozen, some of them have existed for decades and do not even rely on a central server (see tinc for an example).

There are more lightweight projects that rely on native kernel mode wireguard (thus giving fantastic performance) and only simplify key setup, without the need for persistent daemons that have had their own high severity CVEs. If you're asking this question, you might be better served by something like innernet (again, there are tons of alternatives).

There are more alternatives that are fully open and self hostable (including all server components), have support for the native kernel module, while having the same feature set as Tailscale (like netbird, but it's not the only one).

But TS is an HN darling because their devs have a presence here, some of them very well known and highly visible, and the company places lost of advertisements in podcasts and such.
Berners-Lee Got Knocked Down to a Poster Session (2015)
> Doesn't sending weapons to a country at war ensure more death and destruction?

Well, if you send weapons, instead of killing people you have the aggressor's army just pumping cheeks and pretending to look fierce. No death, no destruction, just maybe threats. No?
Well, no, they don't _want_ you to be vendor neutral. But they allow and support you to do so - unlike DataDog.
I’m a tor novice, so please excuse the simplistic question…

Couldn’t a national security organization just modify a node to route traffic to other nodes it controls instead of uncontrolled nodes?
A core part of the Unix philosophy is being able to pipe standard streams between processes, files, sockets, etc, as the user sees fit.

Systemd, particularly journald, violates this severely by snarfing any stream you want to send to /var/log or wherever and locking it in a binary database somewhere, that you have to use journalctl to access.

I have no problem with journald as an idea, but the audacity that it knows better than the user what to do with stdout/stderr is insane, and 100% anti-Unix.
Actually I have, and you can too! All you need is a stereo microscope - even a cheap, sub-$100 will do :)

Now that being said, I would have never been able to record such a high quality video! The depth of field in particular is really amazing :)
Really cool camera and very nice set of soldering "demos", including without flux.
I wonder how this works if someone in a GDPR country got slurped up somehow. Could they demand the entire LLM be deleted?
[...] generous and heartfelt attempts [...]

With the support of the United Nations and violence Israel took half of the land from the people living in Mandatory Palestine and displaced hundred thousands of them. And then occupied the rest of the land when they were fighting back. And terrorized and killed quite a few of them in the course of it. They better make a generous and heartfelt attempt to make good for that.

And with that I can just ask a similar question as before, where are those attempts that failed for unreasonable reasons? And I mean attempts that actually had a chance of getting implemented, backed by sufficient power to follow through if an agreement could be reached.

[...] along with repeated statements that Israel should not exist.

A good part of the people in power in Israel - not all of course - would similarly prefer if there was no Palestinian state, from Ben-Gurion who hopped that Israel will eventually encompass all of Mandatory Palestine to Netanyahu who rejects a fully sovereign Palestine.
Well said, I’ll be taking that :)
SAML is absolutely insane. It’s three separate specs: one that defines what every XML element means semantically, one that defines multiple document models that you might want to combine those to use, and one that talks about network protocols you might want to use those documents in.

It’s insane and inscrutable.

I previously worked at the company that first created this gem. It was not written based off actually reading the spec. It was based off a loose examination of what other legitimate docs in the wild looked like, and built to parse those.

Which of course meant that early on it was vulnerable to everything since it was built to fit positive results and not negative ones. This isn’t even the first XML signature issue: early released versions didn’t even bother to check that the part being used was the part that was signed. If any part of the doc was signed and valid it was good to go.

Fun times.
I think it was 2007 when the vision of software, developers and resources was still limited. We didn't even have IoT and the first iPhone was seen as a novelty. Now it's clear that this is not the case. I founded a company in 2006 and started focusing on code review because I was interested in code and wanted to be the best. Since the advent of GitHub, I have reviewed thousands of repositories across many languages, worked on architecture, tried to create better code, developed several operating systems, hundreds of projects and dedicated 12 years to programming languages. In the end, I realized that the world is ruled by chaos and the simplest LLM AI is best suited for the task of code functionality.

For example, consider this analogy: when we make a car, we have one wheel and a multitude of parameters that change over time. The wheel is a derivative of these parameters. In car manufacturing, time is virtually unlimited for improving the quality of the wheel. But when we develop software, we always face time constraints and an enormous set of parameters. Thousands of car engineers spend decades improving a single wheel with a limited number of parameters, while a single programmer (or a couple of programmers) have only a short amount of time to release software with a randomly variable number of parameters (a service depends on Auth0 and its parameters change). As a result the programmer cannot be certain that all parameters have been correctly handled. This is why the programming process is similar to learning, and this is where LLMs are the best.
They have other options in practice. If they have the means to block Cloudflare, they also have the means to prevent Twitter domains from resolving. (DoH can be blocked too without a big outage)
>US Teslas don't fast-charge in Europe

This is going to be deeply frustrating when they finally build that tunnel across the Atlantic.
The point I tried to make is the getaddrinfo function is not sacred. It's not the way to do anything at all on Linux. It's just the function that glibc has, and most people use it. Whether it came from POSIX or something else seems like a minor detail to me. POSIX and glibc are not sacred either.

> Any OS will always have something beyond POSIX to differentiate it.

Linux is no exception. We should all be enjoying those exclusive features to their fullest extent. Not restricting ourselves to the lowest common denominator between them. Portability is a trap.
Yes they should, they should also be forced to unlocked the bootloaders and release specs to the hardware so that 3rd part OSes can target the devices. Hardware recycling is a joke. I have first gen ipad that would make a great photoframe, video play and ebook reader but instead it is a fully functional paper weight.
Honest A, an investor and/or the financial market does not care what the similarities or differences are between companies, but how investments in those companies do. Microsoft and IBM were major players in the personal computer business, and subsequently both have had a heavy presence in enterprises and data centers. IBM is gone from personal computers, although Microsoft's products probably figure heavily in IBM's consulting.

could easily compare IBM with other companies; google didn't have a presence prior to 2000, Apple pre 2000 and post iphone are entirely different businesses, nothing else came to my mind. Amazon? they were around in early days of the dot com (1994!) but I'm not really that familiar with where they stood back around 2000 and didn't want to sample apples and oranges. IBM's other competitors like Digital disappeared, but not because IBM gobbled up their share.

IBM compared to itself has not grown. Other companies have grown, through survivorship bias if no other reason.
SEC Adopts Rules to Amend Minimum Pricing Increments and Access Fee Caps
School kids would seem less disingenuous about their virtue signalling though.
Real-time Linux used to be a joke, but apparently now it works.

When was that? I used it over a decade ago, and it worked pretty well even then.
pocket the money in secret, not in public. red or blue, they both do it. They won't call each other out because they would both lose.
Speaking as someone who holds six patents: This is only making bad problems worse.

We need to be reducing patent terms and making it easier to invalidate bad patents, not helping trolls.
But there are always innocent bystanders killed in war? They are directly targeting Hezbollah members. It sounds like that might not be the case with these radios though, it seems like a much weaker case than with the pagers.
OP, you may find this [1] “trick” useful. It allows you to dynamically determine the correct byte order for the various IPv4 headers for the platform and thus avoid the need to statically decide on the byte ordering for each platform you intend to target.

You may also find this [2] table useful, it shows which platforms allow the combination of IPPROTO_ICMP + IP_HDRINCL so it may be used without elevated privileges.

In general, my experience of raw sockets is that they are not very “raw” at all, the OS can and does still perform a variety of modifications and additions to what you send and receive, in highly platform specific and often poorly documented ways. In particular, TCP and raw sockets should generally be avoided.

[1] https://github.com/fujiapple852/trippy/blob/master/crates/tr...

[2] https://github.com/fujiapple852/trippy/issues/101#issuecomme...
Yes, I'd exclude anything on the secondhand market, especially things you have to buy from overseas sellers where there's no possibility of support or returns. This is not like a normal new part where you can purchase it firsthand and expect it to perform as advertised or else get a refund. Furthermore, the (Intel) chipsets on motherboards sold to consumers don't normally support ECC either, so it seems you'd have to get something that's not designed to Intel specifications, probably on Aliexpress, so it's questionable if ECC would even work, and you can certainly forget about any warranty or returns.

Seriously, if you can't just buy it at Best Buy/NewEgg/Amazon (not from 3rd-party overseas sellers), then it's not applicable to this discussion at all.
Software copyright law should acquire a concept of defense: if it's no longer profitable for you to maintain it, that should delimit the end of the copyright term, with a short grace period of (say) one year.
> throws its weight to take patented technology without payment

This is called "begging the question": assuming what is in dispute and needs proving.

"Patented technology" assumes that the "invention" was indeed worthy of a patent. If you want to take some example patents whose claims were thrown out in IPR, I'll be happy to debate them with you.

> Ex Parte Reexamination simply makes it easier to avoid patent claims since it provides another opportunity to throw out claims, some of which may have stood in a full trial.

Again, you are begging the question. I've actually watched a mock jury debate patent eligibility. Their assumption is that the PTO wouldn't have granted the patent if it weren't valid. I actually heard a member say about a piece of invalidating prior art (paraphrasing), "That's so obscure! It's not fair to expect the PTO to know about that!"

> The PTO reviewers are hardly more knowledgeable about technical fields than juries.

You can't be serious. Technical knowledge is not expected from a jury. PTO examiners are accustomed to doing this.

> Is this not depriving people of their right to a jury?

Not an unconditional right. A jury trial costs anywhere from $500,000 to $1,000,000 a day. Demand for a jury trial by an NPE is basically extortion.

> Somehow 64% of reviews end up with changes, is this not a sign that the PTO has been all to regularly changing its mind about valid patents?

For the third time, "begging the question." Find some patents that were modified and we'll talk about them.

> Google has settled many patent cases over the years, surely some of them were valid patents.

Pretty weak reasoning. Settling is not an admission of guilt.

> I do agree many software patents are not applicable and are often spam, but there are real costs to decreasing patent rights outside of software.

At last you've hit on something reasonable: take software out of the patent field entirely, and we can make some good law.
It's the AI where 996 or 80 work weeks are the norm.
I don't see any currently-sold CPUs there. Everything is years out-of-date, maybe even a decade.
Why didn't Musk attempt the same when India and Turkey did their version of it? Is Brazil worse than them?

>In India, which is immersed in an autocratic drift that for months has been choking the media, journalists and critical voices, Twitter has also seconded government bans. To justify the consent, Musk said: “The rules in India for what can appear on social media are quite strict, and we can’t go beyond the laws of a country,” and in doing so put his staff at risk, he added. “If we have a choice of either our people going to prison or us complying with the laws, we will comply with the laws.” This justification came after Twitter removed content related to a BBC documentary that was highly critical of Prime Minister Narendra Modi, which was blocked in January by the Indian government.

https://english.elpais.com/international/2023-05-24/under-el...
I really like his Codelia font; but I just can't justify spending that much on a font when there's so many free alternatives. Wish the was a cheaper non-commercial license.
It should be illegal for providers to override the location information provided by the owner of the IP. Hopefully the FTC will look into this abuse.
In the real world this would be the equivalent of me putting my shipping address on an order but the store deciding to ship it to some random place because they “believe” that’s my actual address.
Ad blocker. Even just putting https://12ft.io/ in front of your link gets you pretty far.
Think of it another way, the US is only 5% of the global population. That means that 5% is benefiting at the expense of the other 95% due to this hegemon and the other 95% is trying to chip away at this and seems to be failing (as far as we can see but there is so much BS on both sides who really knows)

But wait, of that 5% we can clearly see many negative indicators among at least half (if not more) of the population.

If you are not in tech or part of the asset owning class then your wages have been flat or in decline. With the ever increasing amount of inflation in most goods, your lifestyle has been in decline.

So really only a subset of that 5% has been the beneficiary of the hegemon. Does that look like a thing to be proud of? A small in-group of people have got it going while everyone else is trending negative either now or going in that direction in the future.

It begs asking the same question I mentioned in my original post: Who are we really fighting for? The answer to this question really depends on if you have empathy for others or if you just care about yourself or your "tribe".

>practically all of us would be impacted.

To be fair, I did also point out that I hope that people in this bucket at least receive some crumbs from the top. Thats all we could hope for. But if you continue on that thought process, if the hegemon dies at least there would be some justice if it took out the top with everyone else.
Jokes on you because nobody else’s content is intelligent either.
This kind of relative comparison is the correct analysis.

Companies with 100B+ market cap don't die away. They just fail to continue to innovate and stay relevant - thus robbing their shareholders of even more returns.

This is why companies like sears were considered failures despite lasting for 100 years. Somewhere along the line they lost the plot and forgot how to stay relevant.
There is a startup whose product is better search. The killer feature is that you pay for it, so you aren't the produdct. https://kagi.com/welcome
I need to buy a vowel, Pat.

I can't solve the article.
I will look into it even if I end up writing my own. Reading source code is always helpful. Thank you.
A minimal protocol to write typst plugins
They say the internet is just someone else's computer. With Tor it's the computer of a person who wants you to think it's not their computer, and also that they aren't paying attention to (or somehow can't see) what you're doing on it.
It is reasonable to assume a Mossad agent would have pagers as potential way to communicate. Pagers work on separate networks from cell phones and usually do not have the same location tracking.

It is also fair to assume that Mossad would want the ability to remotely destroy an agents pager. If it was captured, etc. So very likely these were already a standard part of their equipment and then distributed to Lebanon.

It is also interesting how fear of cell phone tracking drove them to pagers, which was then exploited in response.

It is different from Stuxnet and a form of terrorism. Same as all the assassinations. They are crossing all of these lines that can be a double edged sword in the long run.
I wish someone would measure the bang-for-the-buck without considering politically correct metrics.
I was scripting on a windows machine which didn’t have WSL setup and decided to learn PowerShell. After a week or so of scripting with PowerShell and seeing how intuitive and robust the syntax is, something changed in my brain and I decided I never again wanted to deal with bash and its endless quirks and brittleness. It’s unnatural to have to wrap every variable access with “${}”, that unnatural key sequence always caused a break in my flow. Anyway I reach for Python sooner and really hunger for a clean, robust nix shell. I hope powershell has instilled this in many people and it drives adoption of something better
No!

The client controls path selection, and each hop is verified using its encryption keys.
It's super cool how they generated the 3D model on the fly, I'd love to spend some time playing with the microscope they used in the video.
This font looks so nice, but so expensive! Wish there was a cheaper personal use option.
Cool, is there a demo?