Hacker Newsnew | past | comments | ask | show | jobs | submit | midtake's commentslogin

Duolingo does this, but only for a few languages and it needs some improvement.

Thanks for your feedback. Yes it definitely needs improvement.

Yes. That is far more harmonious with nature than using machines of industry to enslave animal species and slaughter them on profit-driven schedules.

Don't get me wrong, I eat meat, but I also understand that the grand majority of fellow meat-eaters have never hunted or reared livestock. Instead they are complete soyboys (ironic isn't it) who merely consume the output from the machine. These same beta cucks will open their mouths to screech "but animals eat animals in the wild!" Completely missing how unnatural an industrialized slaughter machine is.

The only reason they are enslaved is that they lack organization and understanding. Had they those two, they could kill us all.


Just use milk bro

Most middle managers will either not require this, or require it but find ways to themselves avoid being tagged as logging into their home wifi. The prevailing culture around middle-management is one of inefficiency and rule avoidance. Middle managers need to be replaced by AI already.

Absolutely based. Middle managers just get in the way. Middle management is the quintessential bullshit job.

The advent of AI should be making deeper cuts in management areas than in engineering.


36,500 seems awfully high. Did they just stand there? Those are numbers you'd see in a war, not a 2-day crackdown on protestors with small arms.

In 532AD the Nika riots[1] in Byzantium ended with 30,000 dead. That's with hand to hand combat at close quarters.

So while the source is biased the numbers are not intrinsically unlikely.

[1] https://en.wikipedia.org/wiki/Nika_riots


There are ways to use AirTags that are true stalking methods and these aren't currently mitigated by Apple. If anything this is a false sense of security. Nerfing their product seems more like corporate CYA than concern for public safety.

What do you mean? This is very much true. We are economically compelled to buy food from supermarkets, for instance, because hunting and fishing have become regulated, niche activities. Compared to someone from the 1600s who could scoop a salmon out of the river with a bucket, we are quite oppressed.

Most people lived on the knife's edge of starvation before the application of fossil fuel energy and nitrogen to agriculture in the 20th century. That's why the global population exploded after the introduction of these technologies. Read "Energy and Civilization" by Vaclav Smil. For most of history, it was an open question the crops you grew would even contain more calories than the physical effort it took to grow them. This means you were spending ~90% of your time (or money if you were in a specialized trade) just on getting enough carbs in grain to avoid keeling over. And, your diet was 90% grain with almost no variety.

Were there a lucky few who found an unoccupied niche where there was some surplus for a generation or two? Sure. But pretending like this was commonplace is like pretending that everyone in the 1600's was a nobleman.

> Compared to someone from the 1600s who could eat a gourmet meal prepared by their 10 cooks every night, we are quite oppressed.


and then the population exploded such that it could only be sustained through modern agricultural methods. We are married to the technology more than before

On the flip side, fishing quotas are the reason there are some fish left. However you are free to grow your own vegetables.


It was interesting to me finding out how many "urban farms" are nestled in our own cityscape, and how many of those "farms" are actually selling their produce, meats, and even livestock.

Until very recently (like 6 decades ago) the area where I live was right up against rural countryside, with sheep grazing, cattle farms, vegetables grown and everything. And those farmers sold out to real-estate developers.

But there are literally homeowners in SFHs with chickens out front and roosters crowing in the morning. And some of my colleagues own chickens and harvest the eggs every day for their own kitchens and families.

But just going through a few urban neighborhoods on Google Maps, it was not long before I found little farms. And these farms sometimes have websites where they advertise that they are selling produce and dairy: raw milk, fresh eggs, fresh fruits & veg, mutton and even live sheep or goats. And they may be doing it on the sly or under the table, and "raw milk" is especially a controversial marketplace right now, but they do it and seem to do alright.

These "urban farms" are often real close to tactical supply shops running out of some guy's garage, and other little "cottage industries" where people who purchased "McMansions" are recouping their investments, basically by skirting the city's zoning laws and tax regulations around businesses.

So yeah, if you've got a brown thumb like me, you can go shop at a farmers market, or you can look up one of these "urban farms" and buy direct, cash in hand.


... provided you own land that the government allows for agricultural use. And most people can't afford to own enough land to be self-sufficient.

So you're not free to grow your own vegetables either; just like fishing, farming is regulated to manage limited resources. Things get ugly fast when you start raising pigs in your city apartment, or start polluting with pesticide runoff, or start diverting your neighbour's water supply...


>.. provided you own land that the government allows for agricultural use

Gardens are a thing, and you do not need your house to be on agricultural land to grow a garden, at least in my state.


You can grow some amount of produce, if you have a garden, but a lot of people don't have their own garden, and if they do it's quite small. To be entirely self-sufficient, you need quite a large area of land just to grow enough food for the entire year.

Most people don't have that, and can't afford that, hence why they take the route of earning money some other way, and using the money to buy food made by others, from supermarkets. They can supplement their diet with home-grown fruit and veg, but few can sustain their family on home-grown produce.


Why 6 day and not 8?

- 8 is a lucky number and a power of 2

- 8 lets me refresh weekly and have a fixed day of the week to check whether there was some API 429 timeout

- 6 is the value of every digit in the number of the beast

- I just don't like 6!


> 8 lets me refresh weekly and have a fixed day of the week to check whether there was some API 429 timeout

There’s your answer.

6 days means on a long enough enough timeframe the load will end up evenly distributed across a week.

8 days would result in things getting hammered on specific days of the week.


> 6 days means on a long enough enough timeframe the load will end up evenly distributed across a week.

people will put */5 in cron and result will be same, because that's obvious, easy and nice number.


I'd have it renew Monday and Thursday to avoid weekend outages.


If they put */5 in cron, a single error response will break their site and the beginning of March will also break their site.


and they will replace it with * and just do it every day just in case


Running an update script every day is good. Certbot defaults to running twice a day. Just use something with similar logic, waiting to renew short-lived certificates until halfway through their validity period. That way the actual load is nice and spread out. And you should get that logic by default if you do a normal setup.


I’d expect most will do this. I wouldn’t be surprised if LE expects this.


If I would use short-lived certs I would make sure to choose an ACME client that has support for ARI (ACME Renewal Information). Then the CA will tell the client when it’s time to renew.


ACME doesn't renew certificates when there's enough time, so it'll always renew around 6 days, even if you check more aggressively.

Currently ACME sets its cron job to 12 days on 90 day certificates.


Which ACME client are you referring to?


I thought people generally run it daily? It’s a no-op if it doesn’t need renewal.


so now people that want humans around will now renew twice in a week instead of once?


Oh definitely not. They don't want humans doing any renewals.


Worry not, cause it's not 6 days (144 hours), it is 6-ish days: 160 hours

And 160 is the sum of the first 11 primes, as well as the sum of the cubes of the first three primes!


Mr Ramanujan, I presume?


I was hoping Wolfram|Alpha would spit out the above, but on just entering 160 [1], we get

> A regular 160-gon is constructible with straightedge and compass.

> 160 has a representation as a sum of 2 squares: 160 = 4^2 + 12^2

> 160 is an even number.

> 160 has the representation 160 = 2^7 + 32.

> 160 divides 31^2 - 1.

> 160 = aa_15 repeats a single digit in base 15.

[1] https://www.wolframalpha.com/input?i=160


Every K-Paxian knows this.


Because it allows to you to work for six days, and rest on the seventh. Like God did.


² By the seventh day God had finished the work He had been doing; so on the seventh day He rested from all His work. ³ Then the on-call tech, Lucifer, the Son of Dawn, was awoken at midnight because God did not renew the heavens' and the earths' HTTPS certificate. ⁴ Thusly Lucifer drafted his resignation in a great fury.


I just got home from a stressful day in retail (oh who am I kidding; every day is stress in retail) and this gave me a chuckle I really needed. Thank you.


Is this the TLS version of the Bible?


I’m pretty sure that has been hidden from our eyes


I misread that as the LTS version of the bible


Gilfoyle?


This made my day :D


I don't think He worked after the 6th day. Went on doing other pet projects


6 days to write a prompt. One day to unleash the agents in yolo mode


Didn't the Garden of Eden have a pretty massive vulnerability where eating one apple would give you access to all data on good and evil?


Standard memory disclosure: the apple when eaten would be freed, but it would still be read, leaking its contents. Luckily its volume was low, so they couldn't exfiltrate all of it. But still, the heavens are closed for maintenance, pending a rewrite in Rust.


Not my god. My god meant to go into work but got wasted and eventually passed out in the bathtub, fully clothed and holding a bowl of riceroni.


It's actually 6 and 2/3rds! I'm trying to figure out a rationale for 160 hours and similarly coming up empty, if anyone knows I'd be interested.

200 would be a nice round number that gets you to 8 1/3 days, so it comes with the benefits of weekly rotation.


I chose 160 hours.

The CA/B Forum defines a "short-lived" certificate as 7 days, which has some reduced requirements on revocation that we want. That time, in turn, was chosen based on previous requirements on OCSP responses.

We chose a value that's under the maximum, which we do in general, to make sure we have some wiggle room. https://bugzilla.mozilla.org/show_bug.cgi?id=1715455 is one example of why.

Those are based on a rough idea that responding to any incident (outage, etc) might take a day or two, so (assuming renewal of certificate or OCSP response midway through lifetime) you need at least 2 days for incident response + another day to resign everything, so your lifetime needs to be at least 6 days, and then the requirement is rounded up to another day (to allow the wiggle, as previously mentioned).

Plus, in general, we don't want to align to things like days or weeks or months, or else you can get "resonant frequency" type problems.

We've always struggled with people doing things like renewing on a cronjob at midnight on the 1st monday of the month, which leads to huge traffic surges. I spend more time than I'd like convincing people to update their cronjobs to run at a randomized time.


I have always been a bit puzzled by this. By issuing fixed length certificates you practically guarantee oscillation. If you have a massive traffic spike from, say, a CDN mass reissuing after a data breach - you are guaranteed to have the same spike [160 - $renewal_buffer] hours later.

Fuzzing the lifetime of certificates would smooth out traffic, encourage no hardcoded values, and most importantly statistical analysis from CT logs could add confidence that these validity windows are not carefully selected to further a cryptographic or practical attack.

A https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number if you will.


There is a solution for smoothing out the traffic: RFC 9733, ACME Renewal Information (ARI) Extension

https://datatracker.ietf.org/doc/rfc9773/


That only addresses half the problem and is just a suggestion vs something clients can't ignore.


It's less than 7 exactly so you cannot set it on a weekly rotation


biweekly rotation?


We say pan-weekly these days


Or is it semi-weekly?


Six is the smallest perfect number. Perfection is key here.


Why not refresh daily?


The are some great points


I just canceled Plus.


Ditto!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: