skysight-inc/HackerNews huggingface dataset:
The major versions unfortunately have a dual role of dictating their release cadence and LTS support. They're not purely SemVer but also milestones and marketing versions.

This is unfortunate, because scheduled version bumps that happen to be SemVer-major bumps also give them excuse to regularly make actual breaking changes. When this affects npm packages, it creates churn and bitrot across the ecosystem.
> You can't trust code that you did not totally create yourself.

Which is a hint to the solution:
https://news.ycombinator.com/item?id=41368835
The mouse is the hard way.

OP could have solved their problem by rtfming... It is literally the first paragraph on DNS. We're talking about "turn it off and on again" style issues.

Before you reach for GPT, check the man pages and check the Arch wiki, you'll save a lot of time and get more information.

https://wiki.archlinux.org/title/OpenVPN#DNS
Just built an app to slap a pay button onto your weekend project
You shouldn’t consider just one day, you should at least look at a time frame comparable to the construction time of your power source of choice.
Keep in mind, what signing methodology you use is a function of who accepts it. If I can confirm "ArchiveTeam ripped this", that is is superior to whatever tlsnotary is doing with MPC, blockchain, distributed ledger, whatever (in my use case). Have to trust someone at the end of the day. ArchiveTeam's Warrior doesn't use tlsnotary, for example, and rips entire sites just fine.
No need - we only care about things going forward. Thanks for the kind reply.
I can accept the other issues, but archivebox needs be private and secure by default.

Sending everything to archive.org is bad default value and it erodes a certain level of trust in the project. Requiring "several important changes and security considerations" just makes a non-starter. The default settings should be "safe" for the default user, because as you mentioned in that post, 90% of users are never going to change them. Users should be able to run it locally and archive data without worrying about security issues, unless you only want experts to be able to use your software.

Also a contradiction between your statement and your blogpost, someone saving their photos isn't going to be want to worry about whether they configured your tool correctly or leaking all the group logs or grandma's photos.

>It's prominently mentioned many times (at least 4) on our homepage that this is the default, and archiving public-only sites (which are already fair game for Archive.org) is a default for good reason. Archiving private content requires several important changes and security considerations. More context

> Who cares about saving stuff?

> All of us have content that we care about, that we want to see preserved, but privately:

> families might want to preserve their photo albums off Facebook, Flickr, Instagram

> individuals might want to save their bookmarks, social feeds, or chats from Signal/Discord

> companies might want to save their internal documents, old sites, competitor analyses, etc.

I want the project to do well but it really needs to be secure by default.
The source wasn't open though, it was available, and it was provided in a sense that fully showcased that they did not understand what they were doing. Everything from licenses that were fully unenforceable and non-compliant with Github's license agreement to illegally distributing proprietary code to fundamentally misunderstanding how to use git.

It's one thing to provide a source available codebase. That's a choice, and it's fine for various definitions of fine. What they did was legally put themselves in hot water with the inclusion of proprietary dependencies, misrepresent what their intentions were, and likely irrevocably damage their reputation to a small, but vocal minority, who likely have a sizeable overlap with folks that know what Winamp is/was.

It's okay if none of that matters to you, or if it doesn't resonate with you, but the things that were done were comically awful in terms of sharing a codebase.
sorry, but this was a real shitshow. I dont understand: wtf makes people think spamming an repo in the way they did is in any way useful?
>> we have mastered the art of making really incredible tasting food.

Corporations have intentionally created incredibly addicting food.
there's a particular car rental company that I can't get off their list because it error 500's when I click the unsubscribe button
Taxes are also hyper local and can differ between dine in/out making it hard to show the final price up front.
> I think it was actually a Pentium III with less cache, i.e. basically a Celeron. Only third-gen Microsoft consoles onward use AMD parts.

Correct according to Wikipedia: https://en.wikipedia.org/wiki/List_of_Intel_Pentium_III_proc...
The banana curvature trope is a right-wing talking point designed to get people mad about consumer protection laws. It’s not an example of overreach:

https://voxeurop.eu/en/how-bonkers-brussels-went-bananas-the...
Advanced civilizations get good at using unusual materials like lead and mercury. Some of these come with unforeseen consequences. Plastic and oil are the two substances most like these for us in present day.
Optimizing the Ion compiler back end
They are much more flexible, you can e.g. edit the system's own responses rather than waste context on telling it a correction.
How a graffitied equation changed mathematical history
Sorry, That Isn't an FDE
Well you don't really need to get the auth to interoperate per se; the only machine that is allowed to connect to the FastAPI backend is the machine running the NextJS app, and it passes along the email address of the user making the request to the FastAPI backend.

And the user auth stuff in NextJS is incredibly easy using the standard Next-Auth flow: https://next-auth.js.org/

You basically just set up a new application in the Google Cloud console, enable the Google Plus API for the app, and create the OAuth keys, and that's about it. Just add the secret key and identifier to your .env file for the NextJS app and it "just works".
At my first house I built garden beads in the back yard about 4 feet from the house, each with an 8 foot tall trellis for peas and beans. Seeing that lovely green wall outside the window in the summer was the absolute nicest window treatment I've ever had.
Creating an image, video, or some other piece of content which convincingly and falsely represents another person, without that person's consent, is definitely crossing some lines. Doubly so if it's sexualized. Yep, it's not technically their body. If nobody can tell the difference, I don't think that's actually relevant though.
Bitwarden (and Lastpass, iirc) support passkeys a little longer than KeePassXC. I'm glad to hear they achieved full integration.

As a keepass database is used by various open source clients from different vendors, it just takes a little longer to get all this done. But I'm sure we'll get there eventually.
As currently practised, programming requires attention to way more "useless" detail than maths.
Does this mean it's now possible to write plugins that dismiss cookie popups, solve captchas, scroll web pages etc.?
The skillset to find a cofounder is similar to the skillset needed to raise money. Additionally, founders who try to hire for skillsets they have no experiance in, often find their money wasted.
> The default settings should be "safe" for the default user,

I 100% agree, but because private archiving is doable but NOT 100% safe yet I cant make that mode the default. The difficult reality currently is that archiving anything non-public is not simple to make safe.

Every capture will contain reflected session cookies, usernames, and PII, and other sensitive content. People don't understand that this means if they share a snapshot of one page they're potentially leaking their login credentials for an entire site.

It is possible to do safely, and we provide ways to achieve that that I'm constantly working on improving, but until it's easy and straightforward and doesn't require any user education on security implications, I cant make it the default.

The goal is to get it to the point where it CAN be the default, but I'm still at least 6mo away from that point. Check out the archivebox/sessions dir in the source code for a look at the development happening here.

Until then, it requires some user education and setting up a dedicated chrome profile + cookies + tweaking config to do. (as an intentional barrier to entry for private archiving)
Interestingly, trolling does not appear to be against the guidelines, but posts like yours suggesting someone might be (close to) a troll are. After all, the guidelines tell us to assume good faith, but do they say anywhere that you must post in good faith? It seems like our only recourse under the guidelines is to flag a post and hope for the best.
That really depends. Me and everybody else in my close family doesn't really need that.

And we short but not to that far from the average height.
> Only now every user of the software in Europe has recourse to sue you if you make a mistake, instead of just your paying customers.

Only if they somehow directly got it from GP, through some kind of commercial thing. I doubt downloading stuff from Github for personal use qualifies.

The way I read it, this directive wants to ensure that for any digital product sold on the EU market, there exist some entity that can be sued in EU jurisdiction; within the Union, that would be the vendor; outside - a vendor representative, or an importer. Which is a perfectly reasonable expectation to have, and it's how it mostly works with physical goods and services (aliexpress notwithstanding).
As a custom tool built to archive stuff for archive.org, why would you expect that it can also do a completely opposite task, saving information privately?

I can see why you would want such a tool, but it seems like a direct divergence from the core goal of the existing codebase.
Topiary – The Universal Code Formatter
The big problem with statement-based replication is that many queries are non-deterministic. e.g. Inserting a row with current_timestamp or random()
Well the thing is, you can get smart with OTel traces on both the client and the collector by implementing a smarter Sampler. Even something as simple as cached requests for the latest error rates that influence your sample rate can help you catch errors more effectively while limiting overhead and cost. These are things you could do in a logger but it's not part of the design as it is with tracing.

In general, logging is definitely easier and more ubiquitous, but there are a lot more "best practices" that you have to enforce vs simply having been built into the APIs like they've been with distributed tracing.
Awesome! It worked! Thanks so much.

Looking forward to being listed and considered for funding :)
No it doesn't do any forms stuff, but you can easily get the forms using your preferred UI framework from the data model definitions themselves using an LLM.
> not an unsolvable problem

I never said it was. In fact, I specifically said that there is work to do before making the rule about listing all prices inclusive of taxes.
it sounds like what happened is management simply did not replace the tipped wage with an appropriate flat wage. if management provided a satisfactory wage, nobody would complain.
If you spend 9 months learning to code, you get a junior engineer (at best).

If you sepnd 9 months getting a technical co-founder, you likely get a seasoned engineer + thought partner for all decisions going forward.

One is vastly more valuable than the other.
I suppose it could be done, like those plagiarism databases used for academic work. Security would need to be tighter though. It's a hard thing if the source code needs to be protected I suppose.
> (as long as Lina Khan stays on as commissioner)

She may not be around for long (a travesty in my opinion if so). Neither presidential candidate is stumping for her kind of activism, even the Dem one. And the big money wants her gone.

Sure we can vote, but it seems big money has more influence regardless.
With 10 direct reports per manager, you can have 100,000 people with 5 layers of management. That’s a lot of people. Is that too many layers of management?
Is there a requirement in the EU laws that the popups need to be in a specific language? I've seen plenty of websites in the EU that uses a non-english language in the popup and there is no option to switch to another language to understand what you are agreeing to.
Ask HN: Stripe vs. Chargebee vs. Recurly?
Hey folks, I’m evaluating payment platforms and looking for real-world feedback from anyone who has used Stripe, Chargebee, or Recurly. Each seems to have its strengths—Stripe for payments, Chargebee for subscription management, and Recurly somewhere in between—but it’s been tough to decide which fits best for long-term scalability.

I’m curious about:

Which platform handles churn and dunning more effectively?

How does the billing flexibility compare across them?

Any unexpected challenges or limitations you’ve faced?

How reliable is their customer support when things go sideways?

Hidden fees or surprises I should watch out for?

If anyone has insights, comparisons, or tips, I’d love to hear from you! Bonus points for examples of how these platforms impacted your revenue, growth, or headaches down the line.

Thanks in advance!
If there's one thing that engineer engineers have considered standard practice for ever and ever, but software engineers seem to still not entirely grok, it's destructive testing.

I see this a lot with performance measurement, for example. A team will run small-scale benchmarks, and then try to estimate how a system will scale by linearly extrapolating those results. I don't think I've ever seen it work out well in practice. Nothing scales linearly forever, and there's no reliable way to know when and how it will break down unless you actually push it to the point of breaking down.
Lame the Watch still can't be managed with an iPad or else you could go all in on this idea.
In my regressions, i make sure i include an "always fail" test, to make sure the test infrastructure is capable of correctly flagging it.
I understand and might agree with Ahrens that it might not be good if ideas coming from universities were not able to be actualized (he called this power, or ideas coming together with power).

What I don't agree with is his claim that these ideas have to come only from a conservative stance.
Related: https://news.ycombinator.com/item?id=41662105

Winamp contained modified GPL code, violating the GPL (github.com/winampdesktop)

18 points by mepian 19 days ago | 6 comments
This.

Until a clear, precise answer to this question is available, it is unreasonable to expect individuals to take risks and seed.

It is one thing if an organization like IA gets in trouble with the law. They have money, lawyers, name recognition and are big enough to at least fight a lawsuit, even if they lose. Who is going to help an individual if he/she gets in trouble with the law, unknowingly? Am I expected to read through tons of complex copyright law and interpret it, just so I can seed a handful of items? No thanks.
You should check out the PocketBook Era. It's what I moved to from the Kindle Oasis and I've really enjoyed it. The device isn't as svelte as the Oasis since it isn't subsidized by Amazon, but has an assymetric design and even more physical buttons which you can fully customize the control scheme. Also like the Oasis it gets amazing battery life with it's light weight OS compared to the Android based e-readers.

The PocketBook cloud is just as seamless as the syncing with Amazon if that is something you use. Only time I notice problems is during the weekly maintenance window which just looks like an outage. It has bidirectional sync for your progress as well as syncing new books and has a web interface and a phone app. Also offers the same email endpoint service as Kindle and you can set up Adobe DRM to use with library borrowing as well as other places that distribute ascm. The builtin store probably doesn't have the same availability of titles as Amazon but I haven't used it since I manage my library with Calibre and buy my books from various stores.

Best of all is the customizability. Don't want to use their store or cloud? You can turn off (really just not setup and hide) all the features and integrations individualy to make it an "offline" reader but still bring it online for things like Wikipedia lookup and web searches. You don't even need an account to set it up. You can also load additional dictionaries, fonts, and even applications on it. It has a healthy if small development scene.

There is a new color version but if you don't read things that require color I would get the original; Based on reviews it has the the same downside as Kobo and others that use the Kalaido screen where it's relatively dimmer in ambient light compared to the B/W one and so needs a higher average backlight level to compensate.

Overall I've been really happy with my switch and can't see myself going back to Kindle.
India basically has this - when creating subscriptions, merchants typically create "mandates" which specify max amount permitted per month, frequency, and duration.

Afterwards, 1) if per month amount is greater than a regulated threshold, manual confirmation is needed. [ This is friction ] , 2) cancelling can be as simple as going to your bank's website and deleting the "mandate".

In all honesty, this is probably a really balanced approach, but the roll out was a real pain, with banks and merchants collaborating on who supports whom, etc. International payments got screwed completely - to this day, I can't subscribe to nytimes, after almost 2.5 years of this.

(A good summary - https://support.stripe.com/questions/rbi-e-mandate-regulatio... )
To quote Zuck:

>Why Open Source AI Is Good for Meta

>Meta’s business model is about building the best experiences and services for people. To do this, we must ensure that we always have access to the best technology, and that we’re not locking into a competitor’s closed ecosystem where they can restrict what we build.

I guess that would translate to

1. Spend billions on AI, give away open source version

2. Use AI to get people to click on ads in their "best experiences and services for people"

3. $39bn profit in 2023

It's a bit like the real Underpant Gnomes business. Phase gnomes one collect underpants. Phase two Parker and Stone sign a $900m deal with Paramount. The money is made by an associated business.
I'll bite: what doesn't make cats a smaller form of a giraffe? We just have to squint a little on the spiney level
Very cool, what do you use to generate the podcast? Elevenlabs?
I was wondering this too.

LA Fitness wanted me to mail something to their headquarters, which was intentionally onerous. I filed a complaint with BBB and cc'd LA Fitness on them, and they ended up cancelling it for me.

Still, I did originally sign up for the gym in person, so I wonder if they'd be allowed to force the person to come back in person to cancel. This still seems like too much work, especially for when people move.
Can confirm. I own a Poke 5P and the ghosting is really more obvious until you've fiddled with the settings enough - and I do mean fiddle here. Might take a while.

Other than that I'm a real fan: latest update delivered dark mode (black background, white text) and like I said above: no ads, no Amazon-DRM, all formats, cloud storage (if you want to), TTS, annotations that are really comfortable to handle, bluetooth.
there would be a rough transition period, but i do believe that in countries where tipping is not the norm, places just pay more to get better stuff the way non-tipped labor already works.

one of the breweries i live by recently moved from non-tipped to tip, and it's generally a disliked change from what I hear because most of the time the brewery is open it's not busy enough to make up for the loss in wages, and then people fight over the really busy shifts.
In my area the homeowner can do all electrical work. Still needs inspected.

Are you sure you need to hire an electrician in your jurisdiction?
US policymakers want this. Euro/Asian policymakers have moved beyond this - whenever you travel you pay the sticker on the tin.

It's a solved problem but we can't make it happen here. Why?
Sure. But we also shouldn't assume they will be successful at grid-scale either. Planning a grid assuming that some future storage technology will be a silver bullet that solves grid storage is a massive gamble.

Hydroelectric storage is the only grid-scale energy storage system available to us, and it's geographically dependent. And the places that are suitable for hydroelectric storage usually don't need it because they can just generate electricity via hydropower anyway. Until your hypothetical breakthrough in power-to-gas or giant flywheels actually happens, this is the state of grid storage.
You're not wrong, but I think there's at least a couple of orders of magnitude of awkwardness between the Airpods and the the Vision Pro that will have to be overcome, before the VP becomes mainstream.
They are designed to be heard at a distance and through automobile glass, not walking beside it on a sidewalk. Besides, the siren is not a meaningful signal to me: I’m not on the road.
They're also old enough to have drank tap-water from lead pipes daily for decades (I learned on HN that it was mandatory for building companies in Chicago to install lead pipes until the 70s).
What I have noticed companies do is resume emails after a year or so. They probably think people would forget about unsubscribing them after a year, and for the most part they are right.

If I catch any of these email lists not respecting my unsubscribing, I immediately mark them as "spam".

Gmail then doesn't send them to my inbox anymore. I don't think just one person marking them as spam hurts them, but at least I feel gratified and my ego is satisfied.
You clearly have not worked at global companies with concerns that go beyond “can I do it?”. I’ve used percona and I’ve used these tools before and percona is great. But when you’re at scale something as trivial as a table name change is not something you ever do because it’s not worth the risk of taking your entire site down. Just use the existing name no matter how bad it is.
In the simplest analogy, it's just the TV rabbit ears with two wires in opposite directions, except much longer wires, because the frequencies are lower and therefore the wavelength is larger. Those classic rabbit ears are effectively a dipole antenna, which is basically: "stretch a wire out in a line so it's half the wavelength of the frequency you want to receive or transmit on, cut it in half, and send the signal from the middle, out both ends of the cut wire".

https://www.aa5tb.com/dipole.html

Picking that length of wire results in the lowest impedance (kind of analogous to friction) at the radio for pushing signal out to the antenna, but various lengths work with more or less efficiency, and you don't have to send the signal from the middle either if you have appropriate inductors and capacitors to adjust the impedance (it's just the simplest way).

As with most things on the internet these days, it seems the best content is in the form of YouTube videos, so amusingly, this is the best written information I came across after some quick searching:

https://apps.dtic.mil/sti/tr/pdf/AD0684938.pdf
Is this a misleading claim? Wouldn’t it take a lot more time to acquire racks, cables, other computer components, install them all, supply power, cooling, etc? Or is it more like they got all that lined up ahead of time and then just did the GPU portions of the overall project in a short amount of time?