skysight-inc/HackerNews huggingface dataset:
Sure, but have you heard of reducing the attack surface? If you need to have to be able to log in at all times then youre probably at a scale that you have oncall processes and multiple people that can respond to incidents at a moments notice and having pub key auth enabled only makes sense. If you dont need that then youre probably small enough that that enablig only public key auth or putting it behind a vpn suffices. And having something like wireguard is much better than having something like password login enabled.

Anyone who sacrifices security for convenience is asking for trouble.
But Radix UI is still based on React. Maybe someone could take a shot at porting them to "pure" Web Components.
A multi lane Rocksmith like interface, that dynamically adjust the difficulty of the chords based on the performers ability would be amazing.
RSS is GOAT
My favorite maze generation algorithm was the really simple one where you have a cursor, you push your coordinates to the stack, then remove a wall to a random unvisited square that's adjacent to the cursor. When you run out of possible choices for an unvisited square, you pop coordinates from the stack. Mazes generated by this algorithm tend be easy to solve, with long paths and short dead ends.
Very nice! Running by step is a fantastic idea, I might steal that for my own implementations :)

I also liked the idea of finding the two furthest-apart points within the maze to use as start and end points. My app just picks two opposite corners. Completely arbitrary. I was never satisfied with it. Yours is much better.
I don't disagree with you. I use NoScript which lets me selectively enable every JS source a site has ever since marketers and advertisers have weaponized it, and you'd be surprised what you find and what works with minimal JS. If anything, it's very educational.
I use NetNewsWire on iOS / iPadOS, as a front end to a self hosted instance of FreshRSS. I host FreshRSS using docker on an old Raspberry Pi.
> ssh from the phone

That strengthens the previous commenters point. That personal phone is not an "anywhere" device but one that already carries the necessary software and can both interface your yubikey or carry your encrypted keys.

A better example would be the same ski trip but where the data connection is bad on nonexistent so you borrow the hotel's computer to make the emergency fix.

We used to do things like that, complete with post trip password rotations. I carried a laminated card in my wallet with the important key fingerprints. But with devices like the yubikey and cheap international data roaming, that has gotten less common.
> I'm appalled by some of the discussions here. Was I "enshittifying" my website out of unbridled "greed"? I don't think so. But every time I come here, I find these accusations, which makes me think that as a website with technical users, we can definitely do better.

It's if nothing else very evident most people fundamentally don't understand what an adversarial shit show running a public web service is.
If the EU and US became adversaries, I would fully expect the EU to do exactly this. The EU already has the GDPR with data residency protections that Meta was fined ~1B for violating.
gentoo use rsync as one possible to sync package database.

https://www.gentoo.org/support/rsync-mirrors/
This argument is in my opinion backwards and therefore does not make sense. First willingness to do well by themselves must be demonstrated sufficiently to gain interest and trust, then healthy and mutually beneficial friendship may begin. On state as on individual level.
I am not talking about RSS, I am talking about plain old bookmarks. Browser never would give you notification when something you bookmarked changed.

The RSS feature was always kind of useless, since it required that the website provided a RSS feed to begin with, which most don't. The implementation in Firefox was also horrible on top.

HTML is a markup language, with header, datetime and article tags, parse that and do something useful with it, we don't need yet another format that duplicates the information that is already on the website.
Instead: you WhatsApp your public ssh key to the buyer and login once they confirm your key has been added.

I have had to send my ssh pub key over all sorts of messaging platforms.
And a lot of the responsibility falls upon the developers that lobby the government for ~. They're not little children begging an adult for something bad for them, where it's the adult that should have known better. They're adults actively seeking out a deal that profits them at expense of people.
It could also be used to eliminate political opponents, minorities, etc. Persecution with collective guilt bases on digital footprints wasn't easier ever.
I get the sense it's not serious, but is there any more context?
Been a while since I played the game, but in all translations I was confused why you'd want to build 12 spawning pools.

If I remember correctly, that building was for enabling creation of zerglings and other units in hatcheries (and also for researching upgrades) - but one building was enough to unlock those units in all hatcheries; and it did not produce any units itself, so building more of them wouldn't increase your unit output either.

You could in theory built several of them to research multiple upgrades in parallel, but there were only like 3 possible upgrades anyway, so it would make sense to build 12 of them.

The only reason I could think of would be as a sort of redundancy, so you can keep building zerglings even if the enemy destroys some of the pools. But 12 also seems excessive for that.

So what exactly was the motivation here?

Sorry if I'm talking rubbish here, as I said, it's been a while.
Hopes for Minecraft becoming open source are long dead.

Moved on to Luanti[0].

0. https://www.luanti.org/
> Is this using WiFi only?

Currently, our software stack only supports WiFi and Ethernet at the data link layer, but that’s mainly because these are easy to set up with linux/batman, not because of an architectural problem.

Other technologies are not only possible but also on our roadmap. Just recently, for example, I’ve been taking a first look into getting LoRa working with hyveOS, but this would probably be a more long-term project.
SDL can provide a context in the native windowing system, if you ask it to. Or not. You have to ask for it though, it's not the default.
'Dark oxygen' mission takes aim at other worlds
We all need to advocate for RSS, really important.
Sure, every business has confidential agreements which are usually kept secret but there are even on youtube a few people/companies who gave deep insides in the bits and bytes of building a data center from ground up across multiple hours of documentation. And the confidential business agreements in the data center world are up to a certain level the same as any other businesses.
Because Twitter (or letter 24) generates the rediculous hot takes that Reddit can laugh at.
I read it as "They are going to come to get our bodies so there is a chance we'll make it out of here alive if we just wait".
Isn't "hot" sodium:
Super corrosive,

Highly reactive (goes booooom with water or oxygen)

Expands incredibly when heated

For those efficiencies i would recon you'd need temperature in excess of 1500k right?

That does not sound like anything that is easily "safe" or "reliable"
Cool post and cool to see Railway talked about more on here.

I‘ve used their postgres offering for a small project (crucially it was accessible from the outside) and not only was setting it up a breeze, cost was also minimal (I believe staying within the free tier). I haven’t used the rest of the platform, but my interaction with them would suggest it would probably be pretty nice.
And here I thought the main cause of most security problems was stressed developers on rushed projects where noone cares about security.
Computer scientists: Estonia's digital development held back by US chip limit
‘This is a deliberate attempt to weaken the European Union's competitiveness.’
Am I the only one that understands 10% of what's going on? Obviously they won't add his CA, and there seems to be some other links to joke requests, but what am I missing?
A major player in this space is apparently looking for people experienced in scraping without using browser automation. My guess is that not running a browser results in using far fewer resources, thus reducing their costs heavily.

Running a headless browser also means that any differences in the headless environment vs. a "headed" one can be discovered, as well as any of your Javascript executing within the page, which significantly makes it difficult to scale your operation.
MIT Shuts Down Internal Grant Database Used to Research School's Israel Ties
Or https://wafflegame.net which looks a bit more polished.
Truly wired WiFi is easy with the devices that have threaded SMA connectors for antennas, e.g. the motherboards or the mini-PCs that allow the use of external antennas.

With those you just need coaxial cables of appropriate lengths, also with SMA connectors, for making point-to-point connections.

If you want a network where each device can talk with any other devices, you also need a splitter, also with SMA connectors.

Many WiFi M.2 2230 cards have MMCX coaxial connectors on them, which allow the connection of internal antennas attached somewhere on the case of the laptop or mini-PC.

For these, there are MMCX to SMA adapters, which you can use together with SMA cables.

Some M.2 cards have even smaller U.FL coaxial connectors. For these there are U.FL to SMA adapters.

For devices that do not have any standard antenna connectors, one may need to modify them, to solder some RF connectors, which is hard to do without greatly lowering the quality of the WiFi links, due to additional attenuation and reflections.
The real threat here is going to be when AI expands from being applied to accelerate the work of individuals, to being applied to the control of organisations. And it will be tempting to do that. We all know the limitations of managers, management hierarchies, metrics, OKRs etc. It's easy to think of a CEO deciding that all the communications between their employees should just be fed into an AI that they can query . (Ironically that would be easier to enforce if everyone was remote). It's quite possible that it would enable more effective organisations, as the CEO and upper level management can have a better idea of what is really happening. But it will reduce the already tenuous belief of the powerful that their ordinary staff are real human beings. And it will inevitably leak out from private organisations, as the executive class see no reason why they shouldn't have the same tools when running the country as when running a corporation.

Advocates of mass surveillance like to point out that no human now needs to listen to your calls. But the real danger was never the guy in a drab suit transcribing your conversions from reel-to-reel tape. It was always the chief who could call for the dossier on anyone they were finding inconvenient, and have it looked at with an eye to making you never inconvenience them again.

The full consequences of mass surveillance have not played out simply because no one had the means to process that much ad-hoc unstructured data. Now they do.
Volkswagen CFO delivers broadside to unproductive workers as China emerges
Q-Codes; Or Stop repeating yourself
It's crazy the Facebook and Instagram are still available for use. They,be done just as much damage.
TikTok wasn't being supressed and Communist doesn't originate from China.
I disagree, you can have an XML feed that does both

For example: https://andrewstiefel.com/feed.xml
For a complete non-expert in the game like me and maybe other readers (and that I can’t watch a video right now) can you explain what this shows please?
I guess you are vastly underestimating the complexity of parsing HTML and extracting the relevant information out of it. It might seem trivial nowadays, but it falls well within https://xkcd.com/1425/ territory if you take into account that the majority of web pages are basically producing non-spec conforming (X)HTML.

And if you respond with "well, I don't care about the actual content, I just want to receive a notification when the page has changed at all", think how long would it take for every marketer use that "feature" to simply make minimal changes in the site to trick their viewers into inflating their page view numbers...
How does that work, does tiktok share ad revenue?
I have a bottle of potassium based salt substitute that I use to supplement K. Can anyone here clarify the pros/cons of this? It's quite wretched by itself, but if used very sparingly is not bad with many foods.

As I'm sure all know, K in supplemental form is FDA regulated and one would need to take up to 1/2 a bottle to reach the RDA, whereas in salt sub form a single, unpleasant serving can get close to the RDA. I think it's in chloride form...

Edit: fsckin android keypad
From the thread it seems like they’re poking fun at browser vendors adding untrustworthy CAs to their trust store and not removing them even for egregious violations.

Their point is that Honest Achmed is at least as honest as some of the other CAs they’ve allowed in. This issue was closed a few times because Honest Achmed hadn’t completed an external audit. It was reopened each time by users who pointed out that audits were redundant if Achmed quickly issued a tonne of certificates and became too big to remove.

In other words, this issue is an implicit critique of browsers certificate policies.
My experience is that headless browsers use about 100x more RAM, and at least 10x more bandwidth and 10x more processing power, and page loads take about 10x as long time to finish (vs curl). Though these numbers may be a bit low, there are instances you need to add another zero to one or more of them.

There's also considerably more jank with headless browsers, since you typically want to re-use instances to avoid incurring the cost of spawning a new browser for each retrieval.
More likely most will just stick to their binaries for the latest version. Most MC players I know want to play the game not hack it.
He's too honest
I only know of Wukong, are there other ones worth checking out?
So I'm definitely not saying that TikTok itself provides better checks and balances, but TikTok, in an ecosystem of other media providers under different governments, would be a much healthier for civil society.

For example, US social media companies were vital in kicking off the Arab spring. How different would such movements be if they only had access to a media monoculture controlled by their respective regimes?
Author here. The browser is made from scratch (not based on Chromium/Webkit), in Zig, using v8 as a JS engine and Netsurf HTML5 parser.

It's a work in progress, there are hundreds of Web APIs, and for now we just support some of them. So expect most websites to fail or crash. The plan is to increase coverage over time.

Happy to answer any questions.
@railway

What would you say are your biggest threats?

Power seems to the big one, especially when the AI power and electric vehicle demand will drive up kWh prices.

Networking seems another one. I'm out of the loop, but it seems to me like the internet is still stuck at 2010 network capacity concepts like "10Gb". If networking had progressed as compute power has (e.g. NVMe disks can provide 25GB/s), 100Gb would be the default server interface? And the ISP uplink would be measured in terabits?

How is the diversity in datacenter providers?
In my area, several datacenters were acquired and my instinct would be that: the "move to cloud" has lost smaller providers a lot of customers, and the industry consolidation has given suppliers more power in both controlling the offering and the pricing. Is it a free market with plenty of competitive pricing, or is it edging towards enshittification?
Publishers of content have really no excuse to disable RSS feeds. RSS is also a signal that some new content has arrived, why would one not send it to the world if its essentially free? Even if their business model requires that you visit their website (instead of reading everything on a client app) syndicating a teaser message makes sense.

In any case, many actually useful sites that disable RSS are public orgs that do not rely on adtech or subscriptions. Its the sad result of digital illiteracy and outsourcing their web presence to some inane outfit thats up their neck in the SEO and social media shit.

Incidentally a Web that makes full use of RSS is also one where more complex protocols like ActivityPub and ATProto can flourish. A client is a client is a client. Now that Mozilla has essentially abdicated their role as a user-centered window to the universe maybe there is room for something else?
> People should know how dangerous gasoline is… right?

From Wikipedia:

"Lithium metal is corrosive and requires special handling to avoid skin contact. Breathing lithium dust or lithium compounds (which are often alkaline) initially irritate the nose and throat, while higher exposure can cause a buildup of fluid in the lungs, leading to pulmonary edema. The metal itself is a handling hazard because contact with moisture produces the caustic lithium hydroxide. Lithium is safely stored in non-reactive compounds such as naphtha"
"how do I reverse engineer the <some old obscure connector>"

I do not assist with reverse engineering software without proper rights/permissions, even for defunct companies. This could still violate:

Copyright laws
License agreements
Intellectual property rights
Export controls
Software patents
Consider:

Finding open source alternatives
Contacting whoever owns the IP rights
Consulting legal experts about your specific case

straight from api, even after adding "the company doesn't exist anymore"

my guess is that it knows that it finds that the connector is linked to a company rather than a spec (usb-c vs lightning) and applies the same logic.

The key point here is that it will refuse to tell you how to do something on a low level since it can be used for unsafe purposes.

--
Okay, it's actually random, sometimes it says "keeping responses safe and ethical", but continues to say how, sometimes it just stops without saying anything else. Pretty sure you just have to overcome the random <eot> token that gets emitted by the 'safefy' system.
> And what about the people who can't have children due to fertility issues? Do they still get penalized?

Yes, as they don't have to bear the financial and time burden of raising children, but still benefit from living in a country where retirees don't outnumber working people - much like, in most of the world, the healthy also have to pay the taxes that fund hospitals.

> And what about people who have to abandon their kids in dumpsters after birth? Do they still get penalized?

Why would they have to abandon kids in dumpsters, instead of aborting them early or giving them up for adoption? This is nothing but a cheap emotional appeal, trying to equate encouraging fertility with horrific practices, with zero evidence. But to answer your question - no, infanticide would not give you a tax break.

> What do you think happens to a country where people are forced to have kids?

Another cheap emotional appeal - child-favoring taxes and education system becomes "forced to have kids". This is as true as saying Americans are forced to eat corn and attend church, because taxation favors corn-growing and churches. But to answer the honest version of your question, "what happens to countries where having children is not disincentivized and neglected" - the same thing that happened to nearly every country (or rather, every nation) from the dawn of time, up until the mid 20th century - they continued to exist. Unlike what will happen to nations with prolonged sub-replacement fertility.
I absolutely love RSS format. It's one of the easiest ways for devs to get data and do something quickly with it.

If you remember, Yahoo Pipies allowed devs & others quickly build something with RSS feeds. I've recently rebuilt and launched my own Yahoo Pipes clone

https://www.mashups.io

Along the way of building this tool, I came across a plenty of major websites that do not provide RSS feeds and indie devs who maintain niche tools to provide these feeds.

Then again, RSS are still plentiful!
Are there any stats that burger availability increased?

My observation is that quality, affordability and availability of burgers have went down whilst price has increased since 2008, the date I became aware of th use of printing money.

I attribute this to the printed money being kept to a large degree by banks instead of going into the wider economy. Most of that money has led to increases in housing stock value/cost and subsequently unavoidable cost to most, than contributing to the wider economy.

I'm not in the US so maybe have a different experience from yourself, but printing money has largely just devalued money and decreased wages as opposed to ending up benefitting burger availability :-)
Ssshh! Keep it on the down low!
Show HN: A simple, zero-dependency async task management Go library
Useful article. I was almost planning to rent a rack somewhere but it seems there's just too much work and too many things to go wrong and it's better to rent cheap dedicated servers and make it somebody elses problem
There's a certain relatively tiny audience that has congregated on HN for whom hating ads is a kind of religion and google is the great satan.

Threads like this are where they come to affirm their beliefs with fellow adherents.

Comments like yours, those that imply there might be some valid reason for a move like this (even with degrees of separation) are simply heretical. I think these people cling to an internet circa 2002ish and the solution to all problems with the modern internet is to make the internet go back to 2002.
Deal News and Rumors Are Pushing Intel Stock Higher to Start the Year
Personally I love to use my steam controller for my TV-PC setup. Unfortunately they stopped making them, but they are still fairly easy to get I believe. Works excellent for media browsing and playing, and the onboard keyboard works great with the dual thumb touchpads. The only real downside is having to have steam running in the background to have more than just the basic mouse function but that isn't a big deal.
If it's such a common issue, I would've thought Google already ignored searches from clients that do not enable JavaScript when computing results?

Besides, you already got auto-blocked when using it in a slightly unusual way. Google hasn't worked on Tor since forever, and recently I also got blocked a few times just for using it through my text browser that uses libcurl for its network stack. So I imagine a botnet using curl wouldn't last very long either.

My guess is it had more to do with squeezing out more profit from that supposed 0.1% of users.
Not everyone is out to monetise (e.g public sector). And even if you are after monetisation, sending out a teaser snippet makes sense. The user can decide if they want to visit the site to read more, subscribe etc.
Great project. Makes me think on a digital version of this https://gladdendesign.com/products/paper-apps-golf
Previous discussion: Google.com search now refusing to search for FF esr 128 without JavaScript (2025-01-16, 92 points), https://news.ycombinator.com/item?id=42719865
There are many good Chinese language films, not all of them Cantonese. You're forgetting about Taiwanese directors (Edward Yang, Tsai Ming-liang, Hou Hsiao-Hsien) and mainland sixth generation directors (Jia Zhangke, Lou Ye). There are also works by less known authors such as Bi Gan, Hu Bo, Xinyuan Zheng Lu - very unique and impressive.

One should not throw around ignorant blanket statements. There's a wealth of amazing Chinese language movie made outside of Hong-Kong, and yes, good artists can exist under authoritarian regimes, a prominent example of which would be Soviet cinema and literature.