skysight-inc/HackerNews huggingface dataset:
Are you referring to open source BL2/BL31 for GL-iNet products, and/or for OpenWrt One? I’m not sure it’s possible with either, as haven’t looked into the One in detail yet, as I wasn’t aware it had launched until TFA was posted, though I was aware of it since January or so.

I’d like to run fully open source network stack if possible myself, though I’m not sure if that possible without moving the goalposts and virtualizing something or doing it in software, and even then I’d have to figure out some kind of boot attestation ideally, thought I'm not sure how that's going to pan out. Isn't Intel SGX/AMD SEV/ARM CCA required for that?

Some links I thought we interesting on that topic, as it's adjacent to the discussion:

> A comparison study of intel SGX and AMD memory encryption technology

https://dl.acm.org/doi/10.1145/3214292.3214301

> vSGX: Virtualizing SGX Enclaves on AMD SEV

https://ieeexplore.ieee.org/document/9833694

What do you suggest? How’s your hat fitting, by the way?

Here's the firmware for the OpenWrt One, if that helps you determine whether it does what you want:

https://firmware-selector.openwrt.org/?version=SNAPSHOT&targ...

If you find the answer to your/our questions, please let me/us know!

Sent from my iPhone in Lockdown Mode
I don’t believe you’re born as anything. You are shaped by your experiences. You’re a blank slate when you pop out. How do you have any frame of reference. How would you understand ANYTHING any concepts let alone murder. You’re shaped by society.
I’m not saying those things are safe but isn’t the attack surface pretty limited if you are behind NAT/a pretty basic firewall? The only connection to the internet should be the device reaching out to a server and asking for an update from time to time, it shouldn’t really be reachable from the outside. Unless the update server is compromised too, I don’t really see what can happen.
Seems like a solvable problem, the trivial solution is to have the dealership program multiple fobs identically.

I guess maybe not solved yet because:

- The trivial solution also means multiple cars respond to e.g. "unlock" if they are parked adjacent.

- Anything more complicated means custom electronics for a niche market.

By contrast every small town in the world has a fundi who can duplicate your physical key.
Bcachefs is literally labeled as experimental.
I migrated from gmail to proton then to fastmail and I can now really appreciate how much more polished gmail was.
My biggest pain is fastmail's ios app, e.g. clicking on an email notification will in 50% of cases result in fastmail's app to open in an unresponsive state where I have to forcefully quit the app and start again. It's been like that for close to two years now.
You care about google? Look at those links, they are loaded with critical government stuff. Omg
I have a rule in life: no summary statistics without showing the distribution.

Usually this goes for any median which might be in a sneaky bimodal distribution of, say, AI models vs humans. I guess it applies to leaderboards too though.
Caring about the leaderboards is the problem. Are you (impersonal) seriously doing AoC for clout or something?
> As long as the DOM is accessible in JavaScript, it can't be a first-class object in WASM.

I'm curious, why?
> problem with that analogy is that the cert issuer isn't a mere component of the car, but the entire car in this instance

I'm critising OP for castiglating a bank employee for not knowing who their CA is. That's not something a line employee needs to know. And that's not the appropriate way to ask that.

If I want to know who issued HN's certificate, I don't e-mail a YC associate. I look at my browser and see it's Let's Encrypt.
For-profit corporate interest trump whatever historical geopolitical disagreements countries may have.

That's why government always step in with regulations, because corporations only care about selling to the highest bidder for profit no matter how that would affect national interests.

And today China is the most profitable county you can sell to if you're in the lithography business. Banning sales of equipment to China is something all lithography companies hate.
I don't get this reply. They don't need a Ferrari or Patek Phillipe collection either. They don't need 10 bedrooms with separate in suite washrooms, and both an indoor and outdoor pool.

I live close to Toronto's Bridle Path. Nearly everything I see around the neighbourhood is not purchased out of necessity.
This reminds me a lot of my feelings for Wayland color management being ready to ship color management. https://news.ycombinator.com/item?id=42284035

A lot of software does take a lot of trying & stumbling through to get good.

Alas many companies simply allow the rubble to build up around them, are on to new features, rather than figuring out how better to stitch their systems together after the first bad pass or two. Sure, X11 was there... it wasn't good. Trying to be more than haphazard takes work, and time.
> they only started to look nice when React moved to Hooks and functional components

Is this a widely held opinion? Call me crazy, but I really liked class components. It was nice to see the lifecycle stages in the actual method names, and encapsulate the behavior inside of a method block. To me that was really nice to read.

With hooks, everything is inside a function without clear delineation. The lifecycle stages are put anywhere in there with (to me) strange looking calls to useEffect and such.

Before, I used to love whipping up a quick UI in React, but since hooks I loathe doing that. I really don't want to upgrade my existing apps to newer versions. And for potential future project I'm looking for an alternative.

Perhaps I don't like it so much because I'm primarily a back and systems engineer, and only do small frontends on the side.
I love AoC. You don't have to care about the AI bots solving it or people waking up earlier than you, just solve it for your own fun. Either because you like the challenges, or to try it in a new language etc.

I like to do them in a functional style in Kotlin as far as possible, as that's different from what I do at work.

Edit: Here's mine from today, with my utils it's not exactly plain kotlin, but part of the fun is building a library of sorts with cool functions https://github.com/Matsemann/algorithm-problems/blob/main/ad...
The basic problem is that both licenses have a "you must redistribute under this license, and you can't impose additional restrictions"-type clause. There are some other differences between the licences, but that's what the incompatibility is about.

Some have argued that this may not actually constitute an incompatibility, but not many are keen to "fuck around and find out" with Oracle's lawyers. So here we are.
Live, laugh, love
Self-response: Stylus is useful here[1]. There is a list of already more readable styles than the default that the community has prepared.

[1]: https://github.com/openstyles/stylus
> regulatory compliance requires that devices which make unlicensed use of radio spectrum (such as Wi-Fi) must contain non-user modifiable software for their radios in order to comply with regulations

Couldn't one restrict the chip to only accept signed firmware and then publish the source with reproduceable build instructions? This would prevent user modification while still being open source.
I'm actually pleasantly surprised by the results. I like to think that despite problem 1 being easily solvable by LLMs, just about everyone (sans qianxyz) read the FAQ, and decided that they would forego a leaderboard spot for the sake of this coding tradition.

Either that, or there were hundreds of people trying and none were able to get it working despite the basic problem. I like to imagine most people reading the rules and being a good sport.
> That’s laughably wrong. Exclusive distribution rights are probably enforced more strictly in the U.S. than anywhere else in the world. They are governed by contract law.

But that’s an issue between the manufacturer and the distributors which can then sue each other for breach of contract, right? The “authorized reseller” thing shouldn’t matter to the end consumer, as soon as I have the product, it’s as legitimate as every other purchase.
I wouldn't call it a win. Web UIs plateaued about 10-15 years ago. It was never the state of the art in what is possible with user interfaces; it always was a huge compromise between having something that feels vaguely responsive shoehorned into a platform (browsers) not really designed for being a platform for implementing UIs. Mediocrity is the norm on the web. And react is just the gold standard for shoveling that shit out. It's not good, or great, or nice, etc. It's just that the rest is just more of the same level of mediocrity.

My feeling is that the core issues were never really addressed. Javascript was utter shit 25 years ago and it still is. CSS was an inflexible complex mess. And it still is. And the browser's DOM tree was more or less an accident that resulted from a brief industry wide obsession with things like XML. Hacking UI frameworks on top of that is basically what most frameworks do. But it's just not a very good basis for any of that. Design by committee stuff. All of it. The worst is that there's a lot of good UI out there on other platforms.

The web was awkward and painful 25 years ago and it has gotten a bit better but actually not a whole lot. There's nothing pretty about it. Or state of the art (not even close). It's just a lot of mediocrity and a culture of people confusing this mediocrity with "apparently this is how it's done" and not even questioning it anymore. It was easier to do some things with Flash twenty years ago than it is with web technologies today. People have stopped bothering to attempt to even do a lot of these things. Just not worth the pain. And mediocre is good enough. Slap a drop shadow on it and call it a day. Maybe a cheesy css transition here and there.

I love brutalist websites like HN calling bullshit on this crap. Dang and his friends don't even attempt to dress it up. It's orange! Forever! Enjoy. It looked dated ten years ago, the same it does now. But it's also a major news website running circles around most of its competition. At best they might weak 1 CSS color around Christmas or so from orange to red. That's about the extent of "web design" that happens on this website. It doesn't need it. It would be just window dressing.
Does this come under the US controls on high tech equipment that use IP from US companies?
"So now I use a pair of really good ear plug",What earplugs do you use to sleep? I would like to know them. Thanks.
All the people I know already participate on private boards. AI enshitification will only speed up the process of moving there.
That's like going out for a run and taking an electrical scooter around the park instead. The point isn't finishing, the point is doing the activity.
Creating an interactive UI with rapid development is a fundamentally difficult problem. Its no wonder that people spend billions on creating UI (collectively) and I haven't any good ones yet (performant, interactive, efficient).

Why not just drop the requirement altogether? All I want is an internet of links, images and texts? Whats so wrong with Facebook that looks like this website? Just a bunch of links and texts.

I don't give a shit if the button is a square or round. Why do you get to decide what is "best" for me anyway? Let the web be the web and the user decide how to present them.
I've been eyeing the BPI-R4 as an eventual replacement for my aging ER4.
>Tech will always be the domain of smart

I wasn't talking about tech but more on general tech know-how. Back then almost everyone had to have it to use a computer.

Now you don't need it, so people are less likely to find themselves going it it the weeds and falling in love with this as a hobby.
I have used Stylus for CSS tweaks: https://addons.mozilla.org/firefox/addon/styl-us/
How do I put this?

First, the rich/wealthy are not paying for a “Free Photo Editor” that’s an alternative for Photoshop. They are also not paying for Photoshop. That’s not how you get and/or stay rich/wealty. Instead they pay someone else to use Photoshop on their behalf.

Second, building a better mousetrap is not how you attract the rich/wealthy; in an extremely small minority of cases building an actually better mousetrap is how you become rich/wealthy, specifically by selling it to the not rich/wealthy. In most cases you become rich/wealthy by already being wealthy (see PoNeWo), these days mainly because your forebears are rich/wealthy or, rarely, talented (see PoNePo).

If you want to sell to the rich/wealthy, the key is to give them someone they can hunt without consequences; for your purposes, ideally, that’s someone else, but it really depends on how much money you want and how fast you think you can run.
> ... and don't require docker because on Windows you can run many apps side-by-side without issue

As opposed to Linux which would have issues when running apps side-by-side?

Linux took over the entire world and now run on billions of devices and there has to be a reason for that.

One example of devices running several applications side-by-side that we all use would be smartphones: Android or iOS. No Windows to be seen.

If a part of the world moved to containerization, it's not because OSes had issues running applications side-by-side.
This Month in Ladybird – November 2024
I used ZFS with DKMS on CentOS back in the day, and I found it a pain. It took a long time to compile, and I had some issues with upgrades as well (it's been a few years, so I have forgotten what the exact issues were).

When it comes to filesystems, I very much appreciate the "it just works" experience – not having a working filesystem is not having a working system and it a pain to solve.

Again, all of this has been a while. Maybe it's better now and I'm not opposed to trying, but I consider "having to use DKMS" to be a downside of ZFS.
VLAN for WiFi is practically a second WiFi, right? Or is there a way to partition the networks with only a single SSID?
I’d call it faux humility, given the second half of the comment — which is a huge assertion.
Note that regarding the outliers, in 2015 and 2016 the puzzles weren't as widely known, and in 2020, AWS' load balancers crashed and the puzzle was unavailable to most people for 6 minutes, then solved in a few minutes. https://adventofcode.com/2020/leaderboard/day/1 -- postmortem: https://old.reddit.com/r/adventofcode/comments/k9lt09/postmo...
> React performance concerns in the real world are typically measured in, at worst, hundreds of milliseconds.

This is not my experience on real react sites. Loading the pages on mobile (say 4G) takes seconds to load with a partially rendered page which is slowly constructed. Loading the equivalent pages in HTML rendered server side would reliably be under 100ms (excluding assets). This is somewhat disguised by better connections and large images taking up, but all that js and json does have a cost.

You're probably trying to talk about the overhead of the framework, but what is the true overhead of a framework which encourages you to introduce bloat and create a separate component file and sometimes a separate network connection for every single component on your web page?

Here is a real case study with comparison of approaches from this author:
https://infrequently.org/2024/08/object-lesson/

>The second reason the author says is that it’s based on a legacy eventing system which supports IE.

There are lots of horrible bits of react which are based on solving problems which aren't really a problem on the web any more - from manipulating the dom (pretty easy without react) to dealing with IE polyfills, and lots of bits that you really don't need the client to concern itself with (i.e. routing code). You may not care about that code but you are importing it and forcing your users to download it. It all adds to overhead.

There are also a ton of other points in the article which you've elided, which go into the multiple failings of React as a tool, and primary among them is that it encourages you to use react and only react, the ultimate in lock-in.

> Finally, the author doesn’t actually give a prescription as to what to use instead of React.

You want them to choose one framework instead of react, they're explicitly rejecting that choice and saying you don't have to become a follower of react or any other religion, instead they're advocating choosing tools based on the evidence they have presented, so they are IMO presenting a clear choice:

Server side rendering with a bit of js as required to load dynamic data

React or similar frameworks which try to push everything to the client
other advents are available…

https://raku-advent.blog/2024/12/01/day-8-rendering-down-for...

https://news.ycombinator.com/item?id=42286954
Waiting for "I made a WiFi transceiver".
awesome stuff. keep it up!
Only if that attack surface doesn't include employees, household members, contractors, shared spaces, etc. That is, a small business may be fairly safe if they're no cohabiting. A corporation probably isn't.
Careful, you can still be sued by your past employer even after you quit.
> on an old or cheap Android device.

My Core-i5 24GB of RAM desktop PC that's 8 years old can pretty much do anything I used to do in 2016, except smoothly run React websites, some of which are verging on becoming unusable.

This is nuts. People should stop using their M3 Pro Macbook as a benchmark for what's 'fast enough.'
Sorry “low poly”
Can you show an example where you have 4 possible fields to filter on, and then one more where the sorting field is dynamic? (Not the value, but the column)
Thanks for this recommendation. I've started with their Atomic Habits episode which is excellent. Critical thinking skills are an essential foundation before picking up this type of book. I'd be pleased to hear of any good books on critical thinking for teens.
Wrappers can be zero-overhead, so any claim of better codegen vs the underlying intrinsics sounds dubious. "best result for the [higher] effort involved" also contradicts my experience, so I ask for evidence.

One counterexample: our portable vqsort [1] outperforms AVX-512-specific intrinsics [2].

I agree that high-level design may differ. You seem aware that Highway, and probably also other wrappers, supports specializing code for some target(s), but possibly misunderstand how, given the "additional layer of indirection" claim. Wrappers give you a portable baseline, and remove some of the potholes and ugly syntax, but boil down to inlined wrapper functions.

If you want to specialize, that is supported. And what is the downside? Even if you say the benefit of a wrapper is reduced vs manually written intrinsics (and reinventing all the workarounds for their missing instructions), do you not agree that the benefit is still nonzero?

[1]: https://github.com/google/highway/tree/master/hwy/contrib/so...
[2]: https://github.com/Voultapher/sort-research-rs/blob/38f37eef...
I thought of something similar, but less intrusive.

An app that uses your chosen or GPS location to point out nearby Michelin rated and other high end restaurants and amenities.

When with a group of other likewise wealthy people using the same app, you all "swipe left or right" the suggested food styles (pizza, Japanese, French, Michelin Starred, etc), and it returns info and links to the restaurants that fit what most of the group agree upon.

Of course everyone gets to rate the experience after. Something that is valuable to the businesses as well. Maximize!
These pseudo humble tirades are getting tiring. Just grow a backbone and own decisions that you make, Jesus.

And I do know how to build software. Whatever narrow definition I have of it.

And no, this is not coming out of defensiveness but frustration.
https://www.alpine.nl/products/sleepsoft-custom-4d

Custom made specifically for your ear shape. They provide the highest level of isolation that I've seen.

Sometimes that by itself is not enough, and so I also wear a Sony noise-cancelling headphone. The ones by Bose are also good.
And the timeless tradition of criticising perfectly valid concerns. Not everyone wants to be a member of the dark mode lobby.
You are not thinking at all carefully about what it is to measure something and how much meaning you get from that. Metrics need to convey a lot of useful meaning, and measure something that is worth measuring, otherwise they are worse than useless. I’ve seen otherwise-intelligent people led totally astray because of this totally blinkered fetishisation of metrics over everything else. You cannot meaningfully reduce even a small complex system to a handful of graphs. There is a place for metrics, but responsible use demands humility, not supremacy.
And the timeless tradition of HN commentators contempt
Ask HN: What's the one feature you'd want in a GitHub productivity tool?
I’m building a tool that analyzes your GitHub activity to boost productivity.
Before I start developing, I’d love to hear from the community:
What’s the one feature you’d want most in a GitHub productivity tool?

Drop your ideas below, and I’d really appreciate your feedback to help shape the tool!
For me I use Nest cameras with Home Assistant.

I went through various brands of cameras and the Nest ones were the only ones that I could actually rely on. I didn't spend Megabucks but even mid-range local IP cams were very unreliable for RTSP (randomly going offline, super-sketchy partially translated apps for set up/config, frozen streams etc)

I am not concerned about Google's use of my data. I'm not important enough for anyone to want to spy on me specifically. Of all the cloud solutions/providers, I probably trust Google to have the technical know-how but also the public scrutiny pressure to do a general decent job (way more than some random rebadged Tuya service or something "in-house" thing). By that I mean things like e2e encrypted, there won't be employees with just random read access, decent engineering practices, proper security, SREs for uptime, and won't have default passwords/no passwords on some random world-readable S3 bucket etc.

And even if someone did manage infiltrate Google, they'd very likely target someone high-value before me - I doubt anyone would be able to exfiltrate all the data for practical reasons of where to put it but also someone at Google noticing additional exabytes of suddenly outbound data before getting shutdown. I'm working on the (perhaps flawed) assumption that a successful & undetected Google hack would be short-lived. You'd go for someone rich and powerful first, not video clips of me taking the rubbish out.
I don't think that is what was meant by the phrase. Ultimately it refers to how natural selection works.

The adaptability of an organism might be an important fitness factor, or it might not. There are organisms which have survived largely unchanged for millions of years.
If the government says you need to use their CA, you may feel the feelings, but you will still use them
I had a flat file blog hobby project that would take ATOM documents and run them through XSLT to render the whole website, all on client side.
> That's not entirely true. ON UPDATE CASCADE is a thing for foreign keys, at least in PostgreSQL (which this article is talking about), meaning that the foreign row referencing the row gets updated.

For this to work with soft-deletes, wouldn't you have to include the soft-delete column in a compound foreign key? That sounds funky indeed.
If vacuum runs at least once per day, seems pretty GDPR compliant to me. Even if it runs once every two or three days.

Now if your database runs vacuum once every 6 months, yeah, DELETE might not actually be a delete. But is it really a GDPR issue? What's really going on in this system?

I don't think any EU agency is going to fine your company if the data you say you deleted survived 6 or even 60 hours after deletion, if that is the end of it.
Reposting a comment below: I used Stylus[1]. There are already some considerably more readable themes by the community.

[1]: https://github.com/openstyles/stylus