skysight-inc/HackerNews huggingface dataset:
With IPv6, every device has multiple IP addresses. One or more addresses that are rotated* to prevent you from being tracked easily, and one that's derived from your device's MAC address so you can make your devices easily accessible from WAN by opening ports in your firewall if you want to.

You could disable the rotating addresses, or disable MAC-based ones by using DHCP, but there's usually no point.

As for why you would want something like that: a whole bunch of software and hardware breaks because of NAT. Consumer NAT has some monkey patching inside of it rewriting some protocols to make them work again (which also allowed random websites to open arbitrary ports to arbitrary addresses in some Linux routers a while back, because NAT overrules firewall settings to work) but there are still limitations.

For instance, if you're having issues with your Nintendo Switch, Nintendo will tell you to forward every single port to your Switch (https://en-americas-support.nintendo.com/app/answers/detail/..., hope that IP address doesn't get reassigned to an unpatched device later). Multiple Xbox consoles behind the same NAT requires tricking them into super-restricted-NAT mode to work, or enabling UPnP which allows devices to open ports in your firewall without any authentication.

NAT just kind of sucks. IPv6 wasn't ready for deployment when NAT gained popularity, but all of the reasonable problems have been solved over a decade ago.

*=default rotation happens daily, but your OS may allow you to pick a shorter duration. I've found out the hard way that setting this to five minutes will fill up Linux' route table real fast after a few days.
Algebraic effects: A functional approach to manage side effects
WASIp2 implies component model. WASIp2 is implemented using component model.
You care about debt, so why did you vote for the guy who increased the debt more than his successor

https://www.investopedia.com/us-debt-by-president-dollar-and...

Also it seems like you're confused by what a budget plan is for, it is what they want to do, not about the past.
They may have been SotA at the moment of writing
>Very true, but again, the RFC describes a completely different threat model with much stronger guarantees. The Kagi threat model:
>
>- Does not provide Issuer-Client unlinkability
>
>- Does not provide Attester-Origin unlinkability

If the Client, Attester, and Origin are all a single party (Kagi), then it follows from that threat model that Kagi does not provide Kagi-Client unlinkability, no?

Further, this is not what Kagi has advertised in the blog post:

>What guarantees does Privacy Pass offer?
>
>As used by Kagi, Privacy Pass tokens offer various security properties (§ 3.3, of [2]).

Kagi are explicitly stating that they provide the guarantees of § 3.3. They even use more plain language:

>Generation-redemption unlinkability: Kagi cannot link the tokens presented during token redemption (i.e. during search) with any specific token generation phase. *This means that Kagi will not be able to tell who it is serving search results to*, only that it is someone who presented a valid Privacy Pass token.
>
>Redemption-redemption unlinkability: Kagi cannot link the tokens presented during two different token redemptions. This means that *Kagi will not be able to tell from tokens alone whether two searches are being performed by the same user*.

As it stands, Kagi cannot meaningfully guarantee those things, because the starting point is the client providing a unique identifier to Kagi.

>That said, I will point out that this Issuer-Client unlinkability issue can be solved by introducing a 3rd-party service or when Kagi starts accepting Monero payments.

Sure, but at that point, there is no need for any of the Privacy Pass infrastructure in the first place.

>Also completely valid, but also not something Kagi claims to guarantee.

I disagree. Their marketing here is "we can't link your searches to your identity, because cryptography."

>They believe the extension should be responsible for guarding attainer issuance partitioning. I don't think it's implemented currently but it shouldn't be too hard, especially since they currently use only 1 keypair.

If Kagi is going to insist on being the attester and on requiring uniquely identifiable information as the basis for issuing tokens, then yes, the only way to even try to confirm that they're not acting maliciously is to keep track not only of distinct keypairs, but also of public and private metadata blocks within the tokens, and to share all of that data (in a trustworthy manner, of course) with other confirmed Kagi users. And if a user doesn't understand all of the nuances that would entail, or all of the nuances just discussed here, and instead just trusts the Kagi-written client implicitly? Then it's all just privacy theater.
That makes me think of the "complement system" of innate immunity, where a collection of free floating proteins trigger and catalyze and assemble-with one another in the presence of foreign material.

https://en.wikipedia.org/wiki/Complement_system
Trump firing FBI and DOJ staff for doing their job, deleting archives, all that stuff? If you just translated English reports on that, just translated some choice quotes and put it on page #1 Germans would probably be more shocked than Americans. And it's directly connected with upcoming elections, and the meddling with them. Media that don't find a coup in the US terribly noteworthy would probably enable the same here.
> Homomorphic encryption up next.

This might actually be a welcome side effect for those in power:

> https://en.wikipedia.org/wiki/Crypto_Wars
There is Rust support and there is a couple of small drivers, that's about it.

The decision being disputed is not going to be affected by the shenanigans of Hector Martin, the process is going to be followed as usual.

David Airlie summarized it nicely:

> That is the process we are committed to, everyone has a voice and gets to be heard, and we move forward in the appropriate manner with each maintainer. Bypassing maintainers is the last resort, not engaging at all with maintainers isn't a productive way forward either. Your below attempt is trying to create a technical solution to a social problem.

So the technical discussion is going to continue in order to attempt consensus and the leadership (i.e. Linus Torvalds) is going to step in only if no consensus is achieved. He is waiting for the discussion to play out.

Everyone is going to be heard, including maintainers who openly admit they don't want Rust in linux.
The great american problem is that American bureaucracy is broken. Whether it's lottery systems for hiking in national parks, fixing roads, healthcare, or hiring across federal employers, all of these require a functioning bureaucracy and there is not one. And so what do Americans do? The left complains the bureaucracy is broken and the right complains the bureaucracy exists. There is little room left for ever fixing the bureaucracy in this situation. It leaves lots of room for people to grab power and change things unilaterally to their own benefit.
Just the same as it works on amd64 or arm64 or any other architecture.
The article seems fairly clear that it is the security folks within Nvidia that are spearheading this. 50 engineers on the security team doesn't seem unreasonable for a company of that size.
I am always reminded by a critique of the Obama v Mitt Romney (2012) how if there is one thing the left and right are in full agreement on, it is to massively spend on the military. The left and the right can disagree on health, taxes, and the economy, but when it comes to the military they are in a full agreement.

This old video from rap news still ring very true. https://www.youtube.com/watch?v=WpMPu5p_QXU
s/non-technical users/technical users who are into docker and don't mind filling their computers with large files for no good reason/
Unfortunately developers cannot be blamed. Most customers give unrealistic deadlines that you can only meet if you use a framework. Convincing them to wait a little bit more time to do it right does not work, they will just hire somebody else. I am working for a customer who opted out from a properly working, fast website with a Go backend in favor of Wordpress, because Wordpress happens to have a WYSIWYG editor. So we comply and install an enormous pile of insecure bloat that loads for eternity... just so the customer can change colors and move blocks around the landing page. It sucks, but having no food on your table sucks more.
I just want to say that in 2024 there are _a_lot_ of hospitals doing shift planning manually and burning people out.

Also irrespective of the project itself, amazing wife!
> "Texas is a market leader in fostering a pro-business atmosphere,”

> and business-friendly regulatory agenda.

So whats the deal here? Something about taxes? Or looser regulation/oversight?
> Your main complaint is your team didn’t win and the other side gets to do things you don’t like.

Where did you get this from in their comment?
Lower tax bills for the rich. Proposed tax cuts would make the higher incomes less taxed and the not 1% incomes (or something around that 1%) more taxed
So you want coworkers who don't care much for the quality of their coding work?
> Your main complaint is your team didn’t win

Where did this come up?
I saw an interesting table the other day. Uploaded here:

> https://ibb.co/9kRrKs90

> Bourgeoisie's Tier One Cities vs. Avant‐Garde's Anti–Tier One Cities

> New York City, NY — Global finance, elite publishing,high-end corporate.

vs.

> Austin, TX — Indie music, tech insurgency, rebellious entrepreneurialism

The NYSE is apparently trying to tap latent cultural energy.
> why is Go compelling as a source language for WASM?

"Compelling" has nothing to do with it. People write Go code (or have already written it) and want to run in Wasm, just like they want to run it in any other environment. It's as simple as that.

Your question is equivalent to "why do people want to write Go?".
I don't disagree that there are wild exaggerations being made, my point was just that the UK seems further along the path than its peers.

> Have you spent any time in the UK yourself? The impression of it that you’d get from reading HN is unrecognizable to anyone who lives here.

I lived in Scotland for a while and have been to London often enough. It's it's mostly just a normal country, but things can change slowly until all of a sudden it's unavoidable. The cops showing up to peoples houses for opinions tweets is certainly frequent and concerning.
> What makes you say it's a troll baiting with conspiracy?

Read the comment history. It's 3 comments long.

> To me it seems like (...)

To me it's obvious it's a troll account pushing conspiratorial talking points. People who see that in a post will downvote and flag a message.
All the above, Enron as a Market.
They should have included Plan 9's acme, which is also part of plan9ports (Plan 9 running in Unix userspace).
No. It's on DOGE (and you, since you also claim this) to show that what they cut was waste and abuse, and not the function of the agency they cut.
> Ruby doesn't come out of the box with the web app orientation of PHP, but then why choose Ruby in the first place?

It was and is absolutely possible OOTB to do PHP-style webdev with Ruby quite trivially with the Ruby-included CGI and ERB (a.k.a eRuby; which has an `erb` command).

The set up is hardly any different from any other CGI setup be it with Perl or PHP.

Here's a `foo.rhtml`†:

% cgi = CGI.new
<%= cgi.http_header("status" => "OK", "type" => "text/html") %>

<html><body>

<ul>
<% [1, 2, 3].each do |a| %>
<li>
Hello <%= a %>
</li>
<% end %>
</ul>

<%= cgi.params.inspect %>
<%= cgi.path_info %>
<%= cgi.script_name %>
<%= cgi.request_method %>
</body><html>

You'd configure the HTTP server with calling `erb -r cgi <script>` for `*.rhtml` and... that's it.

So we mimic a CGI server call:

env REQUEST_METHOD=GET PATH_INFO=/foo SCRIPT_NAME=foo.rb QUERY_STRING='foo=1&bar=2' HTTP_HOST=foo.com erb -r cgi foo.rhtml

There was even an Apache `mod_ruby` for a time.

It just didn't make sense very quickly as soon as Rack came to be a thing††, and then you're one step away from Sinatra†††.

Even then you can easily still use pure Rack (or even Sinatra) and ERB in extremely PHP-esque ways.

† `.rhtml` is the conventional extension for ERB files that generate HTML, while `.erb` is the generic one.

†† Bonus is that you don't even have to setup a whole Apache/NGiNX server on your machine; you just spin up the Ruby-included WEBrick so it's even more beginner friendly.

††† Which contrary to Rails is hardly prescribing about anything.
All the best in your start-up
They're trying pretty hard to kill a large part of the scientific research happening in the US right now. They're messing with NIH and NSF grants, the cap on indirect costs is likely going to decimate research at universities. And even if some or most of these drastic changes are reversed, the enormous uncertainty they're introducing will likely reduce future investments in scientific fields.
I would wager it's the latter. This will be the golden age of white collar crime, cons, and machinations. This is how this always ends.

Oh, your taxes will go up - someone will have to foot the bill.
This sounds very similar to Cuzz from Application Verifier for Windows:

https://learn.microsoft.com/en-us/windows-hardware/drivers/d...
Yes it's great!

There is also this great book on causality in ML, but it's a much heavier read:

Chernozhukov, V., Hansen, C., Kallus, N., Spindler, M., & Syrgkanis, V. (2025). Causal Inference with ML and AI.
I dunno, one thing is for sure the US has some amazing submarine technology. What makes you say they can't be made?
Crop as in "bird's throat", I think. Good goes in the kitchen, bad goes in the pigeon.
I can only dream of the EU snatching top talent from the US and kick starting a competetive European tech sector. Cloud computing, AI etc. Now would be a great time to take the initiative.
As an example of modelling packets, here's an example of modelling a complex packet which is a bit-packed tagged union. I don't think many other languages make such packets so easy to declare: https://gist.github.com/liampwll/abaaa1f84827a1d81bcdb2f5f17...
Incidentally if you are interested in doing a PhD the University of oslo has 64 open phd and postdoc positions currently. PhDs will get a competitive salary (typically something like 50-55k USD/year, this is much higher than anything in USA for example), free healthcare, pension, in the first year you qualify for cheap student housing if you have moved from abroad, and tbh, Norway is kind of nice to live in in my opinion as long as you pick up a winter sport and don't mind the darkness.

https://www.mn.uio.no/english/about/vacancies/index.html
> You can call it legitimate policy

Nothing is legitimate about this. Literally everything they are doing is both illegal and completely unconstitutional. They have thrown out the entire rule of law and it is a pure flex of power, a shock-and-awe meltdown that they hope to execute faster than the normal processes can react. They absolutely intend to abolish resistance and they know they can suffer no consequences for it.

Dark times ahead. We're aren't arguing government efficiency or saving money, they are smashing it all.
Trump's approval numbers do not suggest indifference, but more likely self censorship. I think most people were overwhelmingly opposed to all of this DEI stuff, but that can be disingenuously framed as saying somebody is opposed to e.g. diversity or inclusion, as opposed to them being opposed to what DEI amounts to - which is about pursuing equality of outcome, something that is in direct conflict with everything that the Social Rights Movement fought for and achieved.

I think there's also the argument that the government should not be pushing social ideology, period. Certainly not the federal government. In particular if they were just replacing the DEI funding with e.g. Jesus funding, I would be vehemently opposed to this all. But so long as they continue to just cut the funding without replacement, I'm instead vehemently supportive of it.
Poorly. The tooling is very bad. But to be fair, this is not specific to Go.
For now. Won't work for GTK at the next major release.
What is an appropriate false positive rate for canceling already approved research funding based on political motivations on a mass scale?
> Even those who love learning for its own sake will probably find it fulfilling to learn on the job provided they can get a job in a research-oriented company in the niche that interests them

The assumption that you'll be able to find such a job is exactly the big question mark.
While I agree with the fact that there is a lot of bloat in software development (I would even say that I'm part f the problem), these slides are completely useless.

While I dont't know the solution or even if there is a solution, I know that we didn't arrive to this point by chance, and it's not because the developers are lazy or even that companies are greedy (even it could have played a role)

I want to specifically mention a point: the author mention that in 1971 you could go to your super computer and everything was instantaneous. Well it was not. Very little people had access to these computer, and they were not only carefully selected but also had to have to train for weeks or months before being allowed to use them. Now everyone can click on a button.
Of course just mentioning the diagnosis will not fix the problem. That doesn't mean the diagnosis is useless. But using the diagnosis might take more effort than just telling engineers to fix it.

Same with a medical diagnosis. You don't expect to fix the issue by just mentioning the diagnosis to the patient and saying "fix it".
Show HN: MewtruCard – AI-generated animated SVG cards for Valentine's Day
After being laid off last year, I started exploring AI-powered greeting cards. My first attempt was a simple Birthday AI Chrome extension that just generated text messages - it wasn't engaging enough and I shelved it.

Then I discovered birthday.mewtru.com (credit where credit is due - this inspired both the name and concept). I realized that static messages weren't enough - what if we could create dynamic, animated SVG cards powered by LLMs?

Tech Stack:
- Next.js App Router + TypeScript
- LLM for card generation
- SVG animations
- Server-side rendering for performance

The cards are programmatically generated and animated, making each one unique. While it's perfect for Valentine's Day (running ad-free today!), you can create cards for anyone you care about.

Try it: https://mewtrucard.com

This is a solo project born from a layoff, inspired by another indie hacker, and built with modern web technologies. I'd love to hear your feedback and suggestions.

P.S. Usually there are ads to cover the LLM costs, but they're turned off for Valentine's Day. Consider it my gift to the community.
Haha, crypto is great while there is money for pure speculation. Only Gold will hold it's value.
Well, I'm glad my gf is not called Juliet, it would be a boring maze!

https://files.catbox.moe/xru330.jpg

Nice project, btw.
Actually that's my usual approach, but you should see the vector output from these. I tried doing it and than went back to cleaning up the raster images.
Oh but he has… he’s been deciding who get’s paid and who doesn’t, who get’s to keep a job and who doesn’t
Quite - that's my issue is that the reason given for gun ownership would make me think that persecuted groups would begin using their guns to prevent their persecution.

(I'm not trying to advocate gun ownership - I'm generally against that)
I'm curious how they plan to fund the company?
> only learning from catastrophe.

Worse. 1.1 million people died in a deadly plague and there's no national mourning, just straight back to the culture war and polarization.
Show HN: Flight Simulator for Devs
WDYT - a stupid idea or a fun and useful way to acquire new skills?
Or switching back to desktop apps? Also no DOM manipulation there. :-)
It is clear that people flagging these posts have a ulterior agenda. While the other posts have plausible deniability cover for being "political", this is as relevant to hacker news as anything.
In the end we just discord in one function: what to do in case of doubt? Cut or keep. Recent examples (Milei, Bukele) seem to favor the "cut" option.
> I don’t need to vote for the lesser of two evils

One of them is promising that you won't be able to vote again. And are you doing anything to fight foor the changes needed to dismantle the two party system?
Europe's Ailing Defense Industry Faces a Reckoning as Russia Threat Looms
It’s certainly looser regulations. NY State and NY city have realized they have power over Wall Street and most publicly listed companies because they are the laws that govern most American stock exchanges. They’ve started to use that power.
> The main reason for bloat not mentioned in the article is that most developers are not interested in the business domain of the company they are working for. They just want to do stuff with computers and software.

Well, at the several investment banks I've worked for, the highest paid developers were those that also had the most knowledge of the bank's business. Of course, if you don't care about pay and just want to do "stuff", that's up to you.
I'm sure this particular example will be gladly rolled-back. This "aggressive" stategy is working wonders in several quadrants. I recall Milei and Bukele.
If you were looking for the configuration like I was[1][2]:

{
"show_edit_predictions": <true|false>,
"edit_predictions": {
"disabled_globs": [<globs>],
"mode": <"eager_preview"|"auto">
},
"features": {
"edit_prediction_provider": <"copilot"|"supermaven"|"zed"|"none">
}
}

[1]: https://zed.dev/docs/completions

[2]: https://zed.dev/docs/configuring-zed#edit-predictions
The "American oligarchs" is already a term we use here.
Oh, I do that too.

But to your point about not cheering on NAT, well I will because I see NAT as useful tool.

It is not an opinion well aligned with the preferences of the IETF. But the purist model of transparent end-to-end networking has never sat well with me. It’s just not a thing we want.
Amazon is closing USB access in Kindle that made it easy to remove DRM
Yeah, string """ blocks I also have to do manually. Though that example never interfered with AI autocomplete in my experience.
Too optimistic. President Camacho listened to the smartest person in the room and allowed them to improve everyones situation the best way he could.
> Wilful ignorance equates to evil in this case.

The media are absolutely craven, too, constantly normalizing insanity and pretending like even idiotic things are legitimate proposals that should instead be laughed out of the room. Like, maybe the Earth is flat? Let's HAVE THAT DEBATE!!
I was expecting someone to chime in with this.

It is new in living memory. The scale and sheer audacity of it is staggering.

Prior to this year, you could say with a straight face that the US is mostly a low-corruption, rule of law sort of country. Even the veneer of that has been thrown completely out the window, in favor of rule-by-law. This government is petty, vindictive, and is openly peddling access to groups that are passing loyalty and purity tests.

Meanwhile, all the watchmen have been fired, and replaced with party loyalists.

I present Exhibit A: The shitshow around the cessation of the prosecution of Eric Adams. It's literal quid-pro-quo political horse trading, where he'll be shilling for Trump, in exchange for not going to prison.

I also present Exhibit B: Every tech firm literally tripping over itself to virtue signal and comply with whatever nonsense is coming out of the White House. Showing up in person to kiss the ring helps too, see, in particular - TikTok magically getting a stay of execution, in exchange for some secret, undisclosed backroom deal.

If your boss at work behaved this way to you, anyone here would be livid.
Self-censorship about their opinions on cutting grants that mention forbidden keywords, even if the grant outcomes have nothing to do with said keywords?