skysight-inc/HackerNews huggingface dataset:
> You never check personal email on company devices? Participate in mailing lists? Bug trackers for personal projects?

no

there is no chance whatsoever that something as critical as my email signin is on any device not fully controlled by myself

the same goes for malware/Microsoft OS requested by employer, if they have need for it they need to provide hardware for running it

> Business hours is an obsolete concept in modern world, unless you work in an office with precise time tracking.

I charge per hour, I do a precise time tracking.
It's easy enough to come up with meaningless fluff:

Joe is great at unblocking me on day-to-day issues, but should spend more time developing the longer term roadmap for our product.

Joe is great at developing the roadmap for our product, but isn't always available to assist with day-to-day issues.

Joe is an expert on our current technology stack, but should research and introduce new technologies that could reduce our time to market.

Joe spends a lot of time researching new technologies and visions for our product, but isn't always able to deliver tactical fixes on a tight timeline using the technologies we have today.

Joe helps everyone on the team with day-to-day tasks and directions, but could spend more time working on career development and helping us network with other areas of the company.

I'm sure you get the theme... everyone's job is a tradeoff between many priorities, so it's easy enough to formulate unoffensive feedback about being great at one side of the tradeoff, but should do more of the other side.
Tailwind sure is a blight upon frontend maintainability.
I saw some headline the other day about an Elon Musk tweet where he claims that humans are evolving to be born via c-section only as our heads are getting to big to be passed naturally through a womb. Queue numerous reddit comments saying Musk is so stupid, insane, racist, etc. all with many upvotes. I search and find Reddit posts from about 10 years ago making the same claim about c-section births, and there are many comments saying yes that makes a lot of sense, all with many upvotes relative to the size of the community back then.

I just find the whole thing kind of ridiculous. I know people, probably at one point intelligent people, who are addicted to twitter, reddit, facebook etc. and always have the unnuanced opinion of whatever their online in-group believes. Thus its remarkable to me that Trump won seemingly by both calling one group's dogma into question, while simultaneously endorsing another's.
You're often not just building under existing things, but through them. We now have a lot under the roads. The Victorians built the subsurface lines of the London Underground with cut and cover, but Oxford is currently suffering overrunning works to lower a road under the station, because of unknown brick arches and utilities. Even the TBMs are building beside existing tunnels and basements.

What projects in developed countries have used cut and cover recently? In trying to find out, I see that HS2 under west London and the Canada line under Vancouver chose tunnels over cut and cover because it was cheaper.
Aha, I’m just not sure a stadium has the same level of developmental or economic impact as a high-speed rail line, power generation, airports or road infrastructure. It’s also usually far less challenging: build new structure on old stadium’s parking lot, demolish old stadium and turn that into a parking lot, done. None of those new stadiums in the US even have the capacity of say Maracanã or Azteca, both built in the mid 20th century.
You've introduced a new element here - the credit card. And if you did have the money and whimsy it'd still show up with (regulated, mandatory, industry-standardized) safety documentation.
Ask HN: What are some preventive fault tolerance tools
I'm looking for tools that integrate well with AWS Cloudwatch, Datadog and other telemetry logging systems and can predict errors in the infrastructure before they even happen. Possibly even integrate with Github to get PR data and asses if a deployment might have a high chance of failure. Basically create a time-series like representation of all actions in the infrastructure(Infrastructure As A Code). This means treat every action(Code change, Permission change, deployment, error log) as a first- class object and arrange them in a time series fashion. This will help feed the context to a ChatGPT model to predict what might happen.

Do you see the value in this? Or am I crazy? Because when something breaks down, all the teams can have a high level overview of what is happening in the system. The problem with existing logging tools like DataDog is that they have deep understanding of each metrics, but fail to assign severity level to error logs or present a birds eye picture of the whole infra.

Disclaimer: We are a VC backed company who wants to pivot in this direction. Your input would be very helpful.
Docker by default modifies iptables rules to allow traffic when you use the options to launch a container with port options.

If you have your own firewall rules, docker just writes its own around them.
Again why bother reading anything from the WSJ. Before Murdock took it over it had relevant articles. Now it is just a propaganda rag.

I am sure it does not mention the US States that still enforces Net Neutrality and that court case did not restrict the States Enforcement. A couple of very large State through its enforcement will probably keep it active in the US until another admin comes in and brings it back.

This is the main problem with the US these days, every 4 to 8 years all consumer laws change nationwide except for ~40% of the population. What does that mean ? Nationwide companies probably stay with the more restrictive laws anyway because it is cheaper.
British Columbia just finished Site C:

https://en.m.wikipedia.org/wiki/Site_C_dam
That sounds amazing. And I bet you slept like a baby during those times! Nothing better for sleep than a hard day’s physical work!
That’s really great for you.

I have been mislead several times in very subtle ways when trying to ask specific questions to chatgpt and Claude.

It actually burned me at work. Made me look bad and caused my project to take an extra a sprint because of incorrect info about the web history API that came with working examples.

I just can’t ever trust information from these systems, unless they include sources to first party docs.
Everything is laid out on the page in a flow, according to DOM order. Think how a typewriter produces text on a page: top-down, left-to-right. This is the flow.

Absolute takes the element out of the flow while relative maintains it in the flow.
billion-dollar stadiums paid for by tax dollars for those poor billionaire sports team owners because their current stadium just doesn't work anymore :(. But think of all those jobs it will add to the economy from people selling beer and hotdogs.
The only reason I can think that this atrocity got deployed was from an engineering perspective, creating AI profiles to engage theoretically gives FB a powerful lever to increase engagement, because you'd have this entire new field to collect data, experiment and test people's responses. In other words, it would turn engagement into a form tractable to optimisation algorithms.
(2023)

Some more discussion then: https://news.ycombinator.com/item?id=37836889
They aren't medusozoa but they absolutely are jellyfish, as is plainly evident from the way they are. Incidentally, activists are also trying to rename those which you call jellyfish to be "sea jellies", part of a broad campaign to restrict the meaning of fish, traditionally a colloquial term dating back millennia, to mean only particular kinds of swimming vertebrates. It is unscientific political activism and consequently the best they can accomplish is a paraphyletic group which excludes tetrapods, even those that have fully aquatic lifestyles, while simultaneously excluding all manner of aquatic animal that has traditionally been called a fish without anybody confusing it for a vertebrate (jellyfish, starfish, shellfish, etc.) This linguistic prescriptivism can all be traced back to Carl Linnaeus.
To your point, guides don't warn too much about electrical wires because code and practices makes it really hard to do. Code requires metal plates where electrical wires go through studs so you can't drill into them, and every stud finder in existence these days also detects AC behind them.

We didn't make the guides better, we made the tradespeople make it so any novice can't burn down the house by not following a poorly written tutorial.
It just seems totally unrelated to this post.
If this is your website, as a heads up it doesn't work well on my browser. Firefox on Android, I believe I have a dark mode and the text is still black but on a very dark background.
Climate anger can lead to action – or curdle into despair. We found out why
"None of the database guides I followed had warned me about the dangers of exposing a docker containerized database to the internet."

Really? Nor any Docker guides warning in general about exposing a container to the Internet?
I probably used the wrong word. I intended to say "release the software to someone else under a different license". If you own the copyrights, you can release code to the general public under AGPLv3 and simultaneously allow some specific third party to use the software under completely different terms. Other people can't do that, they are stuck with AGPLv3.

Not a lawyer so I could be terribly mistaken about all this. Hopefully someone will tell me if I'm talking nonsense.
the profit motive informs a lot of this in the United States, and as capitalism enters its later stages one can be forgiven for expecting great works projects from the nation. the US is declining as a superpower and neither has the collective willpower nor vision to execute something like high speed rail. anti socialist propaganda prevents a lot of this as well but on the whole this is normal; nations rise and fall over time.

It bears remembering that Chinas communist party works in five year plans along thoughts (deng xiaopeng, xi jinping, mao zedong thought) to advance the primary state of socialism in the pursuit of communism. climate policy is actively factored into chinas GDP by the party. Since the 17th national congress china has clearly articulated plans for advanced manufacturing and green energy during plenary and study sessions that align with marxist leninist thinking. So while it may be tempting to attribute these massive green energy projects to chinese manufacturing power alone, its absolutely under the continued guidance of the communist partys mass line and central leadership committee and aligns with the governments objective of building a modern socialist society by the mid 21st century.
I guess you did not read the link I posted initially. When you set up a firewall on a machine to block all incoming traffic on all ports except 443 and then run docker compose exposing port 8000:8000 and put a reverse proxy like caddy/nginx in front (e.g. if you want to host multiple services on one IP over HTTPS), Docker punches holes in the iptables config without your permission, making both ports 443 and 8000 open on your machine.

@globular-toast was not suggesting an iptables setup on a VM, instead they are suggesting to have a firewall on a totally different device/VM than the one running docker. Sure, you can do that with iptables and /proc/sys/net/ipv4/ip_forward (see https://serverfault.com/questions/564866/how-to-set-up-linux...) but that's a whole new level of complexity for someone who is not an experienced network admin (plus you now need to pay for 2 VMs and keep them both patched).
DEI is to blame for the lack of infrastructure projects in the USA? Please, do share how this could possibly be connected!
> Most progarmmers

Yes, definitely true.

> It is about doing unpaid work.

If someone does unpaid work on weekends and it is not done as hobby or something they are very silly, exploited or both.

> which is not ethical for them to ask

definitely, though I am highly confused why someone would agree to this (unless they are basically enslaved or something which would make it even blatantly unethical)

I guess that if you agree to sky-high wages with implicit agreement to work absurdly long hours, despite written contract being different?

> laws and ethics are often different but many fail to realize that.

not sure about "many", people in general I quite happy to break laws, especially ones widely agreed to be silly and not enforced at all
There are ecological effects for not doing it too, and in global scale this time. Hydroelectric energy is pretty clean, specially compared with burning oil/coal/gas to make an equivalent amount of energy. At least if the priority is to keep growing and not some massive worldwide degrowth agreement.
I think there will be lessons learned here as well for better agentic systems writing code more generally; instead of “committing” to code as of the first token generated, first generate overall structure of code base, with abstractions, and only then start writing code.

I usually instruct Claude/chatGPT/etc not to generate any code until I tell it to, as they are eager to do so and often box themselves in a corner early on
The routine is here https://youtu.be/jgcGEIfE9kE but I don't think that's the origin of the phrase and doesn't mention mailing candy ones to people
I remember working at a non-tech company and their firewall blocked anything not on port 22, 80 and 443. I got real good at port forwarding with ssh.
Use box-sizing: border-box on everything and your life with flexbox will be a lot easier.
How are Waymo managing this? None of their competitors appear to be even close.
I understand that… As long as they rate limit their own video call service at the same rate as they do the competitions. Which I somehow doubt they’ll do (unless forced by law / regulation)
In this case calling the root cause out of reach seems more like a form of learned helplessness than an actually true statement though.
AI's next leap requires intimate access to your digital life
If you look at it from a government project standpoint, there’s still the James Webb Telescope which is a monumental achievement IMO.

Outside of that, there’s plenty of private work having huge impacts like SpaceX and Starlink.
The feeling I'm getting is management took such a huge stance (the capex, the name change, etc) on it it'd be humiliating to turn 180 and ditch it now (they've spent 50 billion on Reality Labs so far). So they're quietly pushing it aside and one day when people aren't looking, they'll take it to the back of the house and shoot it in the head. Probably call it an "internal re-org" or something like that.
"Megaproject" seems to be used pretty loosely in this list.

In my mind, renovating some airport terminals or adding extra lanes to a highway over a 10 mile stretch is not an ambitious "megaproject", just a typical infrastructure project. Certainly most of this stuff would not be considered megaprojects in China.
I would love to read a write-up on that! Are you doing something like https://tailscale.com/blog/docker-tailscale-guide ?
https://archive.ph/EVxOp
On other browser/platform combinations I use fullscreen mode, which gets rid of the issue entirely. But it isn't supported on iOS Safari as far as I can tell.
not wrapped in plastic but sprayed with "stuff".

"how many apples are thrown away" is not just a question of personal responsibility and brains but how the public was "raised" over generations of mass production and cheap methods.

"even" in Germany ( I don't know why I keep saying this ), and in upper class super markets, fresh produce rots much quicker than anything we produce in our gardens. mid-priced frozen stuff triggers unhealthy/gassy reactions in stomach and guts that are not triggered by higher-priced frozen stuff but again, the crowd doesn't care because it was raised that way or does not know.

cheap liquor produce triggers worse reactions in body and brain, short-, mid- and long-term because the production methods are not as clean because producers are OK with the negative outcomes because they were raised to believe that their customers are "fucking stupid".
Even as just a meme, no-hole surgery and the technology that makes it possible may have sufficient potential to perform a valid service to medical research simply by sparking the imagination of students: reduced invasiveness is a time-honoured aim in surgical procedures, so taking it to the next (or ultimate) level does look like it's worth encouraging: a key question to some extent becomes one of language: do we still call it surgery when nothing constituting an incision is involved? Yes, we make a (very small) hole when we inject the 'ink', but injections are never referred to as being surgery. So if no-hole surgery is not a type of surgery, then what the heck kind of thing should we call it?
I remembered there was some analogy about a person doing some work walking, with an average diet, versus using an internal combustion engine. In terms of carbon emissions.

The engine came up more favorably.

Turns out, eating any meat and industrial agriculture transportation are really heavy.
Brevity, only a few lines back and forth, simply didn’t acknowledge my chatty inquiries. He’s an old timer, who seasonally habituates a Latin American remote location. I tried calling a number I had, though didn’t get ahold of him until after things unfolded. He said he got a lot of messages from old friends!
The direct post on X: https://xcancel.com/FarawoTinashe/status/1875080841011081602
I’ve thought about it, and my comment is very unfair to Fisher-Price. Their toys may be plastic, but they are well-made, easily can last multiple generations of children, and are ergonomic for their intended users.

Dell peripherals however, remain utter garbage.
I'm sceptical of this story. This is a huge market and it was a huge market 20 years ago.

I participated in studies with prototype devices to measure blood glucose and nobody I talked to mentioned patent blocks.
Your original solution of binding to 127.0.0.1 generally seems fine. Also, if you're spinning up a web app and its supporting services all in Docker, and you're really just running this on a single $3/mo instance... my unpopular opinion is that docker compose might actually be a fine choice here. Docker compose makes it easy for these services to talk to each other without exposing any of them to the outside network unless you intentionally set up a port binding for those services in the compose file.
Same here, but with Claude. I often just ask it to rewrite the CSS to fix issues & make it look the way I want, and it does it for me much faster than going through the docs.
For the style of reading I normally do, this particular width is actively harmful to my reading comprehension. I would prefer just a bit wider text generally. This is something which the site does inflict on the reader. I agree that many sites are too wide in general, but this feels is too narrow by about 33% for my liking.

Additionally the way that the background degrades to a border around the text when using dark reader also causes problems in a similar way (due to the interaction between jagged text and a strong vertical line.

These are subtle points though, and I appreciate the many annoyances that are not there when reading Rachel's stuff.
> It has been a while since the US or other western countries have done a major public infrastructure project (compared to what have been done before)

how you define "major" here?
Interesting reading on the “snail darter” that “environmentalists” used to oppose a U.S. project:

TLDR: so-called environmentalists will use any excuse to oppose infrastructure projects

https://reason.com/volokh/2025/01/04/there-is-technically-no...
Windows NT did this too. And it was the work of one engineer. (although that engineer was Dave Cutler…)
I saw this site in one of the comments on https://hackaday.com/2025/01/04/button-debouncing-with-smart...
The square pattern enemies are a bug (well, level design mistake) back from 2004, where they would move outside the range of the laser but would still be within reach of other weapons.

I must admit, since I no longer have access to the level editor, I edit the level files with HxD :-)
More information on cut and cover:
https://de.m.wikipedia.org/wiki/Neue_%C3%96sterreichische_Tu...

(better translate from the german version, as it has more information and examples)
Half-OT:

What's the most resource efficient way to push data to clients over HTTP?

I can send data to a server via HTTP request, I just need a way to notify a client about a change and would like to avoid polling for it.

I heard talk about SSE, WebSockets, and now long-polling.

Is there something else?

What requires the least resources on the server?
I feel this. Recently implemented a very trivial “otp to sign an electronic document” function in our app.

Security heard “otp” and forced us through a 2 month security/architecture review process for this sign-off feature that we built with COTs libraries in a single sprint.
Related:

U.S. appeals court strikes down FCC's net neutrality rules

https://news.ycombinator.com/item?id=42578237
"anything anymore" is blatant overestimate and mistating the problem. See from space telescopes to Poland catching up after Russian occupation.
Make sense but 60k for 600k in revenue with a pipeline to 1m or more it's quite small.

I'd try to negotiate at the very least and keep like 5% instead of 1%
Creator of Wildcard here! Neat to see this pop up on HN after several years. As others have noted, this project isn't under active development anymore.

One reason: while I still think there's great potential in browser extensions, I ultimately felt limited by scraping and fetching bits of data from a server, and grew more interested in a deeper overhaul of how we build applications in order to locate more data on the client. Eg: check out this demo [1] of a Wildcard-esque data manipulation but in an app that stores all its data in a client-side database. I'm still continuing this work today, exploring "local-first" architectures at the Ink & Switch research lab, in support of malleable customizable interfaces.

It would be interesting to revisit Wildcard now that LLMs exist—I suspect that many of the scraping parts (building "site adapters" in Wildcard parlance) would be far more possible to automate now. A few years ago we explored some semi-automated programming-by-example interactions for scraping [2] but the friction was always really noticeable without any AI support.

[1]: https://riffle.systems/essays/prelude/#data-centric-design-e...

[2]: https://www.geoffreylitt.com/wildcard/Joker-LIVE-2022.pdf
If I were an Indian resident living downstream this river, I'd relocate
While that is true, OP grounded their question specifically in the context of YC telling founders to avoid tarpit ideas.

https://www.ycombinator.com/library/Ij-tarpit-ideas-what-are...

The title of that post is (emphasis mine) “what are tarpit ideas & how to avoid them”. OP’s point seems to simply be “YC has data on which ideas are tarpit ideas and tells you to avoid them, so why don’t they help you identify them?”
I guess that DEI add some % of paperwork and costs, but it hardly a main problem or cause.
It's also common practice to do what everyone here recommends and out things behind a firewall.

The seperation of control and function has been a security practice for a long time.

Port 80 and 443 can be open to the internet, and in 2024 whatever port wireguard uses. All other ports should only be accessible from the local network.

With VPS providers this isn't always easy to do. My preferred VPS provider. However provides a separate firewall which makes that easier.
The author mentioned closing their VPN port so people would stop trying to break in, but this also cut off the author's access.

Tailscale allows you to connect to your home network without opening a port to allow incoming connections.