skysight-inc/HackerNews huggingface dataset:
Would it have been better if Firefox/Mozilla went under as a result of never compromising on their principles for income 5 years ago, as opposed to continuing to exist in this less than optimal form today? If the business incompetence of where to put all the existing money were resolved.

I feel like the people who understand Mozilla's true principles have long since moved on by this point, and the crowd of those unaware still use Firefox as a daily driver, for better or worse. That crowd might have just moved to Chrome without Firefox as an option anymore.

Although, as I understand it Firefox and Chrome will be closer to each other in terms of 3rd-party data selling from now on with this ToS change.
Yeah Russia started the war, but the NATO expansion pressured them, and that was the responsibility of NATO.

But what's your point?
And you think the top google results are not gonna be PR astroturf too? SEO is the whole reason I append Reddit in the first place, it just killed google.
Why? Energy density way beyond anything battery, and power headroom way beyond anything designed for frugal transport.

Short haul passenger flights are not about speed but about getting directly to the stopover, without the unpredictability of ground transport. A "powered glider" with separating assist for the climbout could be a great match for that task.

And the tug would obviously not really be a tug, but a winged battery directly attached to the aircraft it supports, with barely enough wing for a controlled return. An electric drop tank. Not exactly unheard of in military aviation (except for the "electric", obviously)
Visit a town in Eastern Europe and ask around. bald and bankrupt did, for example.

But if you consider the majority of the elderly in villages as outliers, then have at it.

It does not change the fact that many of them said that life was better in Soviet Union.

How am I objectively wrong? All I claimed was that some people preferred their life in Soviet Union. I think you read too much into it.
Even when I have I often just use my 14" laptop screen when I work. If that's not enough then you have a shitty UI.
excellent! as soon as i open the site i find something i really like, video games
-Wall + -Wextra doesn't actually enable all warning, though. There are quite a few others that you still have to enable manually.
In any security setting, it’s usually good to have both controls and detection.

CAA records help prevent unexpected issuance, but what if your DNS server is compromised? DNSSEC might help.

Certificate Transparency provides a detection mechanism.

Also, unlike CAA records which are enforced only by policy that CAs must respect them, CT is technically enforced by browsers.

So they are complimentary. A security-sensitive organization should have both.
Oof. I already have enough stress of my own autoupdating, single-file remote access tool I run on all of my computers, given at a small part of the custom OTA mechanics' security is by obscurity. Would make sleeping hard owning something as popular as this.
> But as they get larger you often can't keep track of every last piece simultaneously

Sure, but then you divide the larger system into smaller components where each team is responsible for one or few of these individual pieces and the chief architect is responsible for making sure of how the pieces are put together.

> At least in theory the tests are supposed to cover the observable behavior that matters. So I figure if the tests pass all is well. If I still find something broken then I need to add a test case for it.

But you sure as hell hope that the engineer working on implementing your database has a decent mental model for the thread safety of his code and not introduces subtle concurrency bugs because his tests are still green. You also hope that he understands that he needs to call fsync to actually flush to data to disk instead of going yolo (systems never crash and disks never fail ). How are you supposed to cover the user observable behavior in this case? You cut off the power supply to your system/plug off your disk while writing to the database and assert that all the statements that got committed actually persisted? And how many times you repeat that test to really convince you that you are not leaving behind a bug that will only happen in production systems say once every three years?

I am only giving database and multithreading as examples because they are the most obvious, but I think the principle applies more generally. Take the simplest piece of code everyone learns to write first thing in uni, quicksort. If you don't have a sufficient mental model for how that algorithm works, what amount of tests will you write to convince yourself that your implementation is correct?
I’m no longer using Firefox. They have stated clearly that they sell your data.
Seems unlikely. They had their window of opportunity when they had an active Western marketing arm, Russia wasn't a sanctioned nation, COMAC was barely getting started and the early reports of the Superjet were quite positive. Suffice to say the airlines that passed on the opportunity aren't regretting it and the couple that bought them did regret it.
They're doing different things, and you should do both.

Setting CAA records primarily serves to reduce your attack surface against vulnerable domain validation processes. If an attacker wants to specifically attack your domain, and you use CAA, the attacker now needs to find a vulnerability in your CA's domain validation process instead of any CAs validation process. If it works, it prevents an attacker from getting a valid cert.

Monitoring CT logs only detects attacks after the fact, but will catch cases where CAs wrongly issued certificates despite CAA records, and if you monitor against a whitelist of your own known certificates, it will catch cases where someone got your CA to issue them a certificate, either by tricking the CA or compromising your infrastructure (most alerts you will actually see will be someone at your company just trying to get their job done without going through what you consider the proper channels, although I think you can now restrict CAA to a specific account for LetsEncrypt).

Since CT is required now by browsers, an attacker that compromises (or compels!) a CA in any way would still have to log the cert or also compromise or compel at least two logs to issue SCTs (signed promises to include the cert in the log) without actually publishing the cert (this is unlikely to get caught but if it was, there would be signed proof that the log did wrong).
take my angry upvote
Great stuff! I used both LiteLLM and Langfuse for a recent project at work — both tools were instrumental in development and deployment. Looking forward to seeing how this collaboration develops.
Yep... it is hard to build a competitive jet engine.

If the Russians manage to do this, it would be another example of the stupidity of the sanctions.

I bet COMAC is cheering them on too.
>>The one who lacked tact was Zelenski, not Vance

Hard disagree. The way he treated Zelenskyy who was their guest is unacceptable and completely tactless. He acted as if he was scolding Zelenskyy. The entire comment from Trump "look he dressed up!" was juvenile, showing zero respect. But then he called him a dictator not long ago so I don't know what I expected.

>>The sanctions imposed were immediately sabotaged by buying russian gas.

Because it wasn't possible for EU to stop buying it on a dime, not without letting its citizens freeze and go without electricity. You can argue that well, they should have gone cold if they care about it so much - I'd argue that the EU countries have stopped buying Russian gas and resources as soon as they possibly could.

>As for aid, the arrogance in assuming the aid was mandatory

That's not what I said - I said if the aid was provided when it was requested the war would have ended already.
What? This makes no sense, and your baseless assumptions add nothing. Perhaps you misunderstood my question.
Usually it's the sponsor who decides. Because, for example, it's pointless to show Walmart ads in North Korea. (I'm not a mz insider)
No. CT is only required for public CAs. You only need those browser policy settings if you’re using a public CA without CT.
expect nothing more from a president who rug pulls his own people
I understand your question's fairness, but consider what's actually being exposed here: geospatial data on undersea cables, ports, and "critical minerals" - precisely the vulnerable infrastructure points that would interest foreign intelligence services, particularly Russia.

This isn't mere incompetence - it's a clear alarming pattern. The Trump administration has consistently mishandled classified information while simultaneously adopting positions that align perfectly with Russian strategic interests regarding NATO, Ukraine, and European security.

When a DOGE staffer carelessly exposes sensitive infrastructure data that maps America's strategic vulnerabilities, and does so while the administration pushes policies beneficial to Russia, the connection becomes impossible to ignore.

This incident isn't separate from Russian influence - it's another manifestation of how this administration's OpSec is compromised at the most fundamental level, creating opportunities for exploitation by the very foreign powers they seem reluctant to oppose.
Russia is basically not a major player anymore. It's a vassal state of PRC. Thinking it would be a useful ally against PRC is a complete misread of the situation. Sacrificing a state and alliance with EU for this is doubly insane. US and West was doing absolutely fine and held ground and the values (freedom etc) against oppressive dictatorships right up until this year. It's distressing.
I'm not sure why this is framed as an issue for security teams. Transpiling software has been a thing for ages. Especially in the JS world. Decompiling has been a bit harder without automation, but unless you have black box tests, this process will take ages to verify that the result has matching functionality.

So why would the blue teams care beyond "oh fun, a new tool for speeding up malware decompilation"?

Edit: To be clear, I get the new reverse engineering and reimplementation possibilities got much better and simpler. But the alarmist tone seems weird.
400 reasons is impressive but the real test is what number could you get up to compiling a similar list for GCP or AWS.
I make comments like this all the time because I write code for people to read, not robots. Well-commented code allows you to skim very quickly, and gives a sanity check, allowing others to ensure a line or block of code does what it is expected to do.
A bit tangent, and since I’m an outsider who doesn’t live in the states and have no skin in the game — my understanding is, they will do literally anything to make sure DOGE succeeds, because a failure is basically unacceptable. I can’t even imagine how you can backtrack this, and fix stuff up. They obviously prepared for it months in advance. Targeting ex-employees of successful product companies and putting them in charge (especially the ones with a lot of money, but a bit lost because they want can’t find meaning in life) is also kinda funny.

That being said, if it doesn’t succeed, they will start doing the usual — pretending that it was successful. And that’s when the team-sports based politics come into play. If you’re so deep into supporting one side that you can’t objectively see failures, the narrative pushers will keep winning. It applies to both sides, by the way. But burden of proof lies on the government in power.

Good luck to you, guys!
But the votes you cited have 3, 9 and 7 republicans? How do you arrive at "the party is very much pro russia" if for all this time republicans have always voted for Ukraine military aid? What about the other almost 200 people? The pro-Putin freakshow has the White House sure, but can he really turn the entire republican party to side with our enemy? Against all the interests of the military industrial complex that pays for all their campaigns no less.
I guess RFKJr will put a stop to this fake advice from "Texas officials". Measle parties are good, didn't you know.
Not at all! Google sucks even more. All I’m saying is I wouldn’t trust Reddit either.
Because we don’t want to be told who to voluntarily take into our alliance by an opponent? Are you going to give china everything they ask for next because they take Taiwan if you don’t?
You made an account just to insult me? Judging by your comments, it seems like you are fueled by rage, chill.
Way better than anything made by Atlassian, but that's not a high bar.
It's serviceable...?
They have their own custom languages for deployment which is disgusting but seems to be the norm

It works, but as with all Microsoft products it's in desperate need of some love and polish
You can buy soil fertilizer and other things online, but with a specific combination of purchases 3 letters agencies will think you're building a bomb.

The same way, an agency who is led by a pathoilogical liar, who is not following pre existing guidelines to make the state apparatus more efficient, (and i could go on for hours) who has a worker who compiles an extensive list of sensitive infrastructure, even if publicly available, makes my spider sense tingle
Of course, majority is not very cleanly applicable yous politics. Less than half (which according to Mirriam Webster is the definition) of the votes cast in the last election went to Trump/Vance, and with such a poor voter turnout it was even further from a majority. Meanwhile the electoral college is working against the idea.
I think you misinterpret peoples sentiments. They are mostly against war. Putin started this one so if you don't like war you want to see him stopped.
English is not my first language, government workers would have been more apt
Comparing silly “CHINA COLLAPSE IN THREE DAYS” YouTube videos to economic analysis of observed facts, some of which I’ve pointed out, is not really a comparison, is it.
cloud services are great when they work. but in case something isn't you have no way to debug anything except maybe restarting the service if it's even possible.

we had one customer that needed IPsec tunel to vpc where production servers were living, we didn't want to maintain such setup just for single customer so we check Aws offerings. and look at that they have managed IPsec solution, great.

until client called that tunel is down and solution wa that they need to restart it on their end to resume connection. why? you can enable some logging to S3 but according to them everything should work. what we should do next?

but even if you stick to just ec2 thing can go weird. our recent incident: ec2 instance stopped responding but ASG didn't replace it, any action on it throwers error that instance is not running but it was in running state.
Some more:

* Librewolf, Palemoon, Falkon.
This. There’s obvious differences in salvinorin and psilocybin effects and both are well represented in the data. But keep in mind the current paper only looks at existing categories of visual effect. The second study might include a finer taxonomy.
> where is GPT 5 going to scrape the next set of answers for new libraries and frameworks..?

The bottom line is that it doesn't matter as long as you have a large enough sample to learn the format, which is already there with existing data. There isn't an SO answer for everything anyone needs even about current tech, and the reason models can still answer well in novel cases is because they can generalize based on the actual source and implementations of the frameworks and libraries they were trained on.

So really, you only need to add the docs and source of any new framework during pretraining and bob's your uncle, cause the model already knows what to do with it.
Im an engineer working on Azure(mainly AKS related) ill try to get some of these issues attention and hopefully get them fixed asap.
The compromise is absolute and total.

"Hegseth orders Cyber Command to stand down on Russia planning" - https://therecord.media/hegseth-orders-cyber-command-stand-d...
I hope you shared this comment on the site.

Not saying you're doing this, but I feel we've turned into a critical culture and not a supportive culture more and more. Criticism is not as helpful as people pitching in to help build.
So you actually have no answer to why you believe Orbán, or even the people (allegedly) of Hungary pro-Putin?
I agree in principle, but I'd like to see more EU countries get nukes
It's very easy. To not get dragged in the streets as a dictator, you need a) nukes and b) chill in your dacha.

Putins actions now actually exposed himself to the dragged-in-the-streets treatment, by his own people. But it's all worth it, because of Ruski Mir.
I am getting paid significantly more than a year ago, but definitely not 4x as much. However, I have a lot more free time than I did before. And this while working on my own side projects as well; which are slowly growing into ramen-profitability. There are also other things to factor in, like living in South East Asia at a low cost of living and billing US and EU standard rates.

> why are you doing this?

Because I love doing this? Both web and software development are passions, AI feels like a lever; and making my money with this is nothing short of a dream come true.
It took me several minutes, but you're talking about foot guns - brilliant reference. :-)
Further to this point, what people call "free trade" is in many cases actually not free at all. A good example of this is the bilateral relationship with Thailand, they put tons of tariffs on US imports, and the US puts very few tariffs on Thailand. Why? The rationale for this is ostensibly that the US would like to have more political influence in Southeast Asia, or hasn't totally internalized that the Cold War is over, or something.

(It also so happens that Thailand places very low tariffs on Chinese goods - and their government has been currying political favor with Beijing for a long time - they are happy to enjoy unrestricted access to US markets and seem quite confident that the status quo will endure so if we are trying to buy political influence with them, we seemingly have been so toothless that it isn't even working!)

The US has deals like this all over the planet where it gives other countries unrestricted access to its markets, in return for what is not clear. A lot of these deals contributed to the movement of US manufacturing to places like Thailand, which hit the US working class in the wallet very directly. Sure there are also good deals that we should preserve as-is but it doesn't seem unreasonable at all to me that some of these be subjected to scrutiny and revision.
It's something the US patriotic wing cares about a lot.

It doesn't take much to satisfy their need (basically just nice words about the US), but they'll absolutely burn bridges if they come to the conclusion that you're unwilling to show the US this courtesy.

Trump very obviously being part of this wing, is one of the reasons that gave his campaign for the first term such a huge boost. People were convinced that he wouldn't betray the US, like they were betrayed by nearly every politician before (but maybe Bill Clinton, although, in hindsight, he absolutely screwed over Europe by continuing the Russian shock therapy and not supporting Russia in updating the CFE treaty).

Vance is somewhat part of this wing, too, but to a much lesser degree than Trump. E.g. he acknowledged in his speech at the MUC SecConf, that the US made what he considers to be past mistakes, but Trump pretty much never acknowledges what he blames on Biden and Obama to have ever been official US policy (even if he doesn't outright deny it).

.

Hence when Zelensky suggested the US will "feel it", too, in a slightly threatening way (due to the language barrier, I guess), Trump literally blew a fuse. You could see his head changing color in real time. I'm surprised he had the patience left to toss out the media semi-politely.

IMO, Zelensky should have picked up on Vance's hints to present himself grateful and stop trying to get commitments from the US infront of the media. Next time he should negotiate in his native language and bring a very capable translator, because picking up on such nuances is anything but easy if you're quite inexperienced in a language.

.

Trump is not really vindictive, despite his talking points (see him refusing to retaliate on Iran for shooting down that $150M drone, him not going after H. Clinton at all once in office, selecting Vance as his Vice, meeting with Scarborough and Brzezinski, ...).

So Zelensky got a good chance to set things straight, but Trump has also made clear that how the US progresses from here is up to Ukraine making the next move.

Knowing Trump a bit, he will push ahead with talks with Russia and keep increasing pressure on Ukraine until Zelensky agrees to a ceasefire and joins the table by making talks with Russia legal again.

.

Also Zelensky should take that "minerals deal". Despite being sold as such, it doesn't give any minerals to the US, but establishes an Ukrainian semi-sovereign fund with the focus of rebuilding Ukraine, financed through the Ukrainian government's revenue from natural resources and financial injections by the US.

Over time it'll also turn into a fully sovereign fund for Ukraine (unless the US keeps pumping absurd amounts of money into it) and Ukraine can withdraw money from it if they need it elsewhere.
> globally, security will erode everywhere.

Just a day or so ago, Trump was asked about AUKUS, the closest military alliance that the US is a part of. He didn't know what it was.

For some months now, the Australian Liberal party has been going on and on about building nuclear power plants.

It's not about the electricity generation -- when pressed they'll admit that it might be as little as 4% of the supply -- but secretly it's about giving us the option of building nukes to defend ourselves in case our relationship with the US falls apart.

We can't be the only country thinking like this. South Korea, Taiwan, Japan, Singapore, and many others have the industrial base and most have nuclear power plants already, nuclear engineers, etc...

I just checked: Singapore has started talking about building nuclear power plants also.

Sigh...
I get that people are hung up on the "licensing" clause, but for me it is not the most egregious part. They say elsewhere,

> Mozilla can suspend or end anyone’s access to Firefox at any time for any reason, including if Mozilla decides not to offer Firefox anymore.

This is a direct contradiction of Freedom 0, and is at best a meaningless clause (very bad in a ToS) and at worst a reframing of Firefox to be non-free, either by casting it as a service or something else.
Absolutely.

I was a manager for over 25 years, and this was exactly the type of thing that I looked for.

LeetCode tests actually tend to bias against that kind of skill.
Cognito and Auth0 are so popular because 1) somewhere in the past 5 years developers got bullied into believing that doing authentication is now hard, high risk, dangerous, hard to get right, and all kinds of scare words in the name of the security theater, and, 2) there are a lot of incompetent people who somehow don't understand that you should not put your database on the public internet without authentication.

Just outsource all of that to us, we will all take care of all that very hard work for you, really, just 5.99$/month at first, and when we inevitably get hacked, because actually it's us that have no fucking idea what security is, since we only understand security theater compliance language, you can point your fingers at us so you don't get fired, and we will wash our hands with some vague PR words. Win win.
My grandparents were terrible at smartphones. To them, it's like a landline phone, but you have to charge it every 1-2 days. Yet my grandpa was decent at PC, and email, and so on, as it was in "a place" and easy to drive.
That moment seemed to me to be when Zelensky realized (or accepted) that it was a 'bullies ganging up' setup, and started pushing back.