skysight-inc/HackerNews huggingface dataset:
VMS did, in fact have finger back in those days, although it might have not been a stock utility. In Claremont, we had the advantage of having Ned Freed (inventor of MIME) on the computing staff at HMC, so we might have had a lot of innovative stuff that wasn’t yet universal. JANET did have a gateway to the rest of the world. On interesting thing is that JANET addresses were the inverse of contemporary domain naming, with the highest level part of the domain name appearing first (kind of appropriate for an island where they drive on the “wrong” side of the road). There was also a tendency to use really short names, so a friend/colleague at Imperial College was something like mc @ uk.ac.ic (which was always fun to say out loud).

Most of Europe was on a network (EARN) based on the IBM protocols that undergirded BITNET. Switzerland, Austria and Germany followed a stereotypically teutonic and highly rational system of assigning domain names where the first letter indicated the country (D=Germany, A=Austria, C=Switzerland), the next two letters were the region, then two letters for the institution and the last three characters identified the individual machine which was making the best of the situation where there were only eight characters available to identify each machine on the whole network with a flat namespace.

BITNET names were a bit more freewheeling, but often were going to be something like institute+machine type, so UICVM for the IBM mainframe at UIC, HMCVAX for the VAX at Harvey Mudd College, etc. There was a Bitnet protocol for real-time chat.

Most Unix machines eschewed the Bitnet protocols for UUCP which, at least initially, often required explicit hops from one machine to the next, so you might have to address an email to something like drofnats!caltech!jarthur!dhosek to get an email from Stanford to Harvey Mudd, although by the late 80s, only the most obscure corners of the Unix world required a path with an explicit path.

The first generation of the internet did a lot to hide the disparate networking protocols underlying ARPA vs BITNET vs JANET vs UUCP, etc. (EARN and BITNET, using the same protocol effectively acted as a single network at that time), which meant that it was no longer necessary to do things like include gateways in email addresses (WISCVM was one machine that I recall being on both ARPA and BITNET and was a common path to route email between the networks). If you look at old issues of TUGBoat from the 80s, you’ll often see lists of email paths authors would provide to make it easier to reach them including some communication protocols which are long gone like Telex.
Llama-text-embed-v2, OpenAI embeddings dethroned
Signal (and basically any app) with a linked devices workflow has been risky for awhile now. I touched on this last year (https://news.ycombinator.com/context?id=40303736) when Telegram was trash talking Signal -- and its implementation of linked devices has been problematic for a long time: https://eprint.iacr.org/2021/626.pdf.

I'm only surprised it took this long for an in-the-wild attack to appear in open literature.

It certainly doesn't help that signal themselves have discounted this attack (quoted from the iacr eprint paper):

"We disclosed our findings to the Signal organization on October 20, 2020, and received an answer on October 28, 2020. In summary, they state that they do not treat a compromise of long-term secrets as part of their adversarial model"
Show HN: Egg Wars (my take on the 80s text based game Drug Wars)
Last night I took Trae.ai for another spin and it helped me launch Egg Wars.
The cruelty is the point. It's spelled out specifically in Project 2025.
Migrants, Deported to Panama Under Trump Plan, Detained in Remote Jungle Camp
Where has the adoption of ranked choice with single member districts resulted in a switch from a two-party system to a multiparty one?

It hasn't happened anywhere in the US as far as I know, despite being adopted by various local governments.

Ranked choice's major benefit is that it reduces the effect of spoilers. Third parties are the spoilers.
App View is a bit fuzzy of a term. To me it seems like a combination of frontend, backend, custom lexicon, and supporting services. There isn't really another place in the spec or design where clients or browsers fit in, which do in fact provide a view of the network via an app.
Naming only ones I haven't seen mentioned in other comments:

- Networking for Systems Administrators, by Michael W. Lucas. Its explicit goal is to teach you just enough about networking, from the electron up, that you can talk to an actual network engineer and not make a fool out of yourself. It's a phenomenally high-ROI read if networking isn't your strong suit.

- The first 3 chapters of Mastering Regular Expressions. Regexes are up there with Vim keybindings in terms of sheer ubiquitous use no matter what stack you find yourself in. The rest of the book is excellent if you want to actually implement a regex engine.

- The Art of Unix Programming. Less technical. Gives you an idea of why exactly 'nix machines are like that, especially older commands. The 18 rules of design are worth committing to memory.

- The Linux Programming Interface. More technical. Pairs esp nicely with the above. Lots of practice C code one can run, plenty of short self-contained chapters.

- Not a book, but an online paper: https://how.complexsystems.fail . I see echoes of this everywhere I work, and it often helps me understand what kinds of "bad" things are secretly highly evolved resiliency measures.

- The Little Schemer. Just for the joy of solving problems.

Most of the others I can think of are too specialized to be of worth to everyone, but for what it's worth, William S. Vincent's Django for Beginners, APIs, and Professionals are a lovely triptych for anyone wanting to get into backend web dev.
People had long forgotten that mobile browsers handle wide content by zooming. If you are making a website but don't bother optimizing it for mobile, leave off the viewport <meta> element.
I disagree about misinterpreting them. But glad you're now identifying that others have also disagreed with your opinion about which was the best.
Very happy subtrace user here. Especially useful to possess the Server-Timing headers.
The decimation of science continues. I am sure the consequences of this will be seen in the future. And I truly feel sorry for people affected, people who sacrificed their lives, their pay, to work in science, and now are dealt with like garbage, and have their careers destroyed.
Why are they proposing to raise the debt ceiling if the debt is the real issue?

It's almost as if it's just a boogeyman they trot out when they're the opposition party, and not the thing they're actually concerned about.
> ... which again is not clear they have the authority to do

Those rules were passed in the 1970s. Has there been a Supreme Court decision on their validity? (Real question; I don't know.)

But if the president can decide to not spend the money, how does Congress have the power of the purse?
A frontend is (can be) part of an App View. It is quite literally the app you view the network through. There can also be headless app views and app views which have no backend
So you need to click pictures of random people in the subway to play this game?
Leader of cultlike Zizians linked to 6 killings held without bail in Maryland
Show HN: TOTP.fyi – debugging tool for app-based 2FA
This is a tool to debug "app-based 2FA", which almost certainly uses the time-based one-time password (TOTP) algorithm these days. This is the type of 2FA that shows the QR code for your phone to scan, commonly involving apps like Google Authenticator or Authy. The QR code contains a base32-encoded secret and some information about the website and if some other setting is used instead of the default.

The way the algorithm works is by dividing the current Unix time by the time step (commonly 30 seconds), and generating an HMAC from that. That's why most codes expire twice every minute at :00 and :30. However, to avoid clock synchronization issues, most websites will allow the codes from one or two time windows in the past or future.

This tool takes in the base32 secret and generates a bunch of OTPs, past, present, and future to help test those corner cases. By default, it uses the settings that most websites use: SHA-1, 6 digits, 30 second time steps, but those could be changed in the advanced settings.

Another use is when testing 2FA enablement repeated or creating throwaway testing accounts on apps that require 2FA setup, but you don't want to pollute your authenticator app with all the test accounts. You can just paste the secret into this tool and get the codes immediately.

You can also use this as a crude "authenticator app" since the secret is stored in the URL hash and you can bookmark that. This is probably more suitable for scripts that create test accounts with 2FA than a long term solution for your important accounts.

While it's a bit niche, I built this tool to address the pain points I ran into when testing TOTP, and I hope you'll also find it useful or fun to play around with. You can enter any random base32 string to see it in action. I find it quite fun to reduce the time step to 1 or 2 seconds and watch the codes scroll by with that overengineered animation...

This is a simple frontend JavaScript app and the source code is available at https://github.com/quantum5/totp.
At the same time I feel like a lot of companies grow much larger than they need to be simply because of bigger is better mentality. How many of Uber's 30,000ish employees are involved with making sure the app and backend database are working properly? Are they really doing 600 times more work than Craigslist at connecting sellers with buyers?
I could be wrong but don't think OpenAI wants to be opinionated about that, except maybe the OpenAI solutions engineers :)
Show HN: BeBlob – A Gitlab-Powered Comment Section for Static Websites
Hi everyone!

I'm happy to introduce BeBlob, an open-source widget that adds a comment section to any static or dynamic website—without needing a dedicated backend—by leveraging GitLab issues. Inspired by my personal journey hosting my blog (belev.me) on GitLab Pages and noticing existing GitHub-backed solutions like utterances (https://github.com/utterance/utterances) and giscus (https://laymonage.com/posts/giscus), I wanted to create a similar tool for GitLab users.

BeBlob automatically maps each webpage to a GitLab issue and uses GitLab OAuth for user authentication. It supports emoji reactions, markdown comments with live preview, code-highlighting and a set of customizable themes—four in total—that match the Hexo Cactus (https://probberechts.github.io/hexo-theme-cactus/) theme I use on my blog.

The solution is far from polished, but I wanted to get it out there and receive feedback from real users as early as possible. I’ve already integrated it into my personal blog, so I’m the first real user!

Source code: https://gitlab.com/antonbelev/beblob
Demo page: https://antonbelev.gitlab.io/beblob-demo/

Looking forward to your feedback!
moderately off-topic because we're here discussing acoup.blog, but i just finished the fall of civilizations podcast episodes on the rise and fall of the mongols. it's really fascinating and sheds quite a bit of light on some things that have been mythologized about chinggis khan
Oh, wow, that UX is clear as mud. Thanks!
You didn't specify what kind of federated servers you were thinking about
Discussion: https://news.ycombinator.com/item?id=43103333
This is great. I've had some (probably naive) imaginings about extremely short term multi-player interactions in public spaces/public transport like this but always got stuck at the "how will they know it's there" part
> I can't see any _technical_ reason that wouldn't be possible

Every additional route and its ASN takes up RAM in nearly _every_ router that has a DFZ (default-free zone) view. This RAM is not cheap, so regional registries are incentivized to keep the number of new registrations down.

For IPv4 there are about 1 million routing entries right now, and for IPv6 about 200k. The IPv6 routing space can reasonably scale by about 5-10x before requiring serious changes in the core routers, but that's just not a lot of entries.
Nobody cares about this unless they deal drugs or something.

What some people care about is not giving all their private conversations to masculine energy zuck - but don't expect any major wins.
Discussion: https://news.ycombinator.com/item?id=43103536
It's a bit more complicated than that. Militarily, we rather consistently win (or at least not lose). The trouble is that the new regimes we establish end up reliant on us for defense, and unless we're willing to be said regimes' military for decades on end (like we were with Japan) or at the very least maintain permanent military presences (like we did with West Germany until its reunification with East Germany, and like we're still doing with South Korea and Japan), those regimes prove incapable of defending themselves from the adversaries we defeated to establish said regimes in the first place.

That's exactly what happened with South Vietnam, Iraq, and Afghanistan: as soon as we pulled out "victorious", the newly-established allied regime was unable to defend itself against North Vietnam / ISIS / the Taliban (respectively).
Smog checks, brake replacements and all the fluid/filter replacements are nontrivial regular costs. EVs have only wiper fluid, 12v batteries and air cabin filters to replace regularly. Brakes literally last the life of the vehicle.
How is agreeing not to put tolls on roads built with money that was not yours a dumb technicality? That's literally the interstate system and how the federal government can even attempt to enforce a national speed limit.
Earlier: https://news.ycombinator.com/item?id=43105109
This isn't about white lies. This is about purposeful, blatantly false things to manipulate witnesses/suspects into giving confessions. Often false confessions - the article lists as one of the law's justifications that in the cases they looked at, 34% of minors reported giving a false confession (50% for under 14), but the adult rate is 8%, which is still appallingly high - if any other profession had a "vital tool" that ruins incorrectly someone's life 1 in 12 times, there would be major outcry and regulation.
> Should a defendant walk if it they can prove at trial that the cop said something that wasn't true?

Should a defendant be found guilty if they were lied to by the cops? Explicit lied that are used to extract and manipulate confessions.

Remember, people are innocent until proven guilty. We don’t presume someone on trial is guilty. If they weren’t properly prosecuted, we shouldn’t assume the guilt is proper either.
It's on DirectX's wikipedia page with citations. Indeed, the way DirectX got received caused Microsoft to change their stance, but it really was the work of three engineers who didn't take no for an answer.
The statement "any federated servers interacting with Bluesky" is ambiguous, because Bluesky's federated model means there's many different types of servers, and one user's view of what a "federated server" could be vastly different from another.

Federated PDS-s (which is probably the closest to what people mean when they say they want to federate on bluesky) would not need to reconstruct timelines if their users use the bsky.app appview.
I run a hobbyist open source hardware project that is user-assembled (PhobGCC) and even though our early boards had bad thermal relief a basic Pinecil is good enough to desolder SAC305 or SN99.

But most of the issues with soldering came from people using uncontrolled irons that were either too hot, instantly burning off pads, or too cold thus not letting the flux punch through the oxides.

When you get to big copper fills, SN63 helps, but ChipQuik helps more. So does a Thermaltronics TMT-1000S which is coming next month at $125.

(love my TMT-2000S but the 1000S looks to be a steal)
I agree. I would add that it’s best if those 3 years were spent growing a product rather than bouncing around the company (or companies) doing whatever comes.
You realise you could use that phone number to...call them and let them know? Also - in what situation are they giving you a phone number and telling you they use WhatsApp but you having no way to respond when receiving that info? If it's in person you can explain at the time. If it's taken from a website, call them. Or you can even fall back on SMS.
> A bit weird that it uses "our own preliminary data"

I think potential of LLM based analysis is sky high given the amount of concurrent research happening and high context load required to understand the papers. However there is a lot of pressure to show how amazing AI is and we should be vigilant. So, my first thought was - could it be that training data / context / RAG having access to a file it should not have contaminated the result? This is indirect evidence that maybe something was leaked.
Discussion: https://news.ycombinator.com/item?id=43083976
Is this serious?

It raises questions about smartphones being standard equipment for soldiers, but they do give every soldier an effective, powerful computing and communication platform (that they know without additional training).

The question is how to secure them, including against the risk described in the parent. That seems like a high risk to me I would expect someone is working on how to secure them enough that even Russian intelligence doesn't have an effective exploit.

The solutions may apply well to civilian privacy too, if they ever become more widespread. It wouldn't be the worst idea to secure Ukrainian civilian phones against Russian attackers.
It was open source (except the Scylla database layer) from the beginning, AFAIK - that blog post just says that they haven't set it up yet, because that's the hardest part to run
Come along :)

https://lu.ma/sync-sf
> end up suffering US state censorship at some point.

You had a higher risk for that with the democrats, remember the AI videos that upset Kamala and Gavin?

European countries have a far worse track record of censorship.

> Still, I would flag use of US services as a major risk for non-US businesses right now.

> Given the current state of things, I think it's entirely plausible that US services are either hit with things like tariffs, or end up suffering US state censorship at some point.

Who made your phone, your computer and the OS your computer is running?
Remember when Apple patented a "ornamental design for a portable display device" and tried to sue Samsung? I'm sorry but the idea that you can patent a shape is just super depressing.

https://consor.com/apple-patents-a-rectangle
From the article linked above:

> With the blessing of competitors, Apple is about to change the Qi wireless standard itself. It’s contributing to a new version of Qi that works much like MagSafe — magnets, authentication, and all.
There is a big range in both automation capabilities and prices.

We have a couple automation systems that are semi-custom - the robot can handle operation of highly specific, non-standard instruments that 99.9% of labs aren't running. Systems have to handle very accurate pipetting of small volumes (microliters), moving plates to different stations, heating, shaking, tracking barcodes, dispensing and racking fresh pipette tips, etc. Different protocols/experiments and workflows can require vastly different setups.

See something like:

[1] https://www.hamiltoncompany.com/automated-liquid-handling/pl...

[2] https://www.revvity.com/product/fontus-lh-standard-8-96-ruo-...
I'd love to see someone make a kind of response to 300 based on the Battle of Leuctra where the Spartans got their butts handed to them by the Thebans
THIS is what your “disruptive” heroes have bought & paid for. Yes, I’m talking specifically about paulg and his buddies in the VC world, who’ve stepped up their funding & lobbying to levels matching folks like Adolph Coors and Richard Mellon Scaifie. They’re on an ideological vendetta to DESTROY functioning government and leave themselves with near-dictatorial private power, unconstrained by governments anywhere.

These are the folks so many commenters here worship & wish to emulate.

This is the mindless destruction you’ve all been cheering for.

May this be an opportunity for you to reconsider your goals and priorities.
This is mostly broken window fallacy but if it goes over 50% can you imagine what kind of spending/actions this will instigate? It'll make covid look like a pushover. If you're interested in Space funding that is - that money will come from somewhere so someone's walking away unhappy.

Still, I like space funding. I think given 4 or 5 years and a butt load of cash a mitigation scheme can be developed. The spin offs would be tremendous. The potential impact locations could be better placed though.

I'm not saying bring it on but ...
It unfortunately doesn't matter how good of policy it is, it's a culture-war issue.
I am not sure I'd even remotely compare Source to Godot, never touched the other ones though.
Agree. Why would I buy Apple M4 macbook when I can have Majorana 1 running Windows 11 and install MS Teams to be extra productive.
In a similar vein, I recommend checking out Bo Hansson's Progressive Rock/Space Rock album interpretation of The Lord of the Rings from 1970:

https://en.wikipedia.org/wiki/Music_Inspired_by_Lord_of_the_...

https://www.youtube.com/watch?v=rs0AmruS8Ro&list=PL9DD02F58F...
The Battle of Marathon is much cooler. The Athenians were winners too.
He incited an insurrection his first term, that came down to a few people doing the right thing. He learned from that so he's quickly firing everyone he can. He's dismantling the FEC and people who prevent foreign interference in our elections. He even removed the foreign bribery law. If he doesn't topple democracy this time, it won't be for lack of trying.
standards ftw!
>Do you dare help the police, when you never know if they consider you friend or foe.

No, never. Give the minimum required information and try to exit the interaction as soon as possible. You are always considered foe, and likewise, should nearly always consider the police your foe.

The only exception is when you're the victim of a violent crime and need their assistance to pursue justice, but even then you have to be judicial in your interactions.
I don't think it is a tricky issue. Lots of other countries have "no lies during interrogations" laws and manage just fine.

If a police officer makes an honest mistake then that's fine. But if a police officer is repeatedly stating things during interrogations that they've misunderstood then they're grossly incompetent for whole different reasons than lack of honest character. Just like if a developer kept pushing broken code without any unit tests, you'd have a quiet word with them that they need to put more due diligence into their work.
OpenTelemetry Collector in Rust for Cloudflare Workers
NASA landed a probe on an asteroid this past decade and returned with samples.

They should be able to land nuclear weapons on it if necessary.
Still, seems like it's his responsibility to explain that in the meeting. That message has infinitely more weight if he's the one saying it, otherwise you can just point to his absence and claim its only covering his add
I've been advocating mandatory shower-helmet laws for many years now; it would make as much sense as a lot of the other nanny-state regulation does.
Electrolysis is actually around 80% efficient. The main issue is infrastructure, you're right about that.

But the comment I initially responded to said there's energy loss as though that's not the case with literally every type of energy storage.
Is Hallucination a Vehicle for Creativity?
Brittle, Angry, Defensive People
This has nothing to do with politics. Popping Signal is quaint because it's a channel, not at asset. You don't need to compromise the channel if you have alternate routes to acquire the assets.

edit: I will not reply further. What I said would be true regardless of the economic policy or partisan identification of the administration.