For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | more nicholasjarnold's commentsregister

Just adding a $0.02 here - I placed an order for the free/gifted-with-subscription Kagi shirt and received it about a month later. Worn twice so far. Largest complaint? It shrank quite a bit in the dryer on medium heat.

The search engine works great for me. I will almost certainly renew my subscription when it's time to. Glad to see them continually delivering user-benefiting features.


Same. Kagi has been a breath of fresh air after suffering years of enshittification with other search engines whom are much more interested in your clickstream than providing you with quality results.

Good job Kagi et al!


Exactly. The results of the US Presidential Election in 2024 show us that slightly more than 1 in 5 Americans cast a ballot in favor of Donald Trump.

assumptions: The publicly-available vote count numbers are correct and the US has a total population of around 341 million people.

The view that our Republican party got a "conservative mandate" and "won by a landslide" is an interesting one when considered with the above facts. They won by a margin of ~1.6% of the votes cast. The victory looks like a large one only when viewed through the distorted lenses of our Electoral College system.

> Maybe the real problem isn't who voted for who, but how we've all gotten so used to seeing each other as enemies instead of neighbors who sometimes disagree. Just a thought.

Exactly. Divide and conquer. Historically it's been pretty effective.


Agree with your Shelly-behind-the-switch model. My one hesitation going all-in with them has been perhaps reaching an eventual state of "too much 2.4Ghz WiFi traffic on a narrow IoT-specific WiFi network", but I suppose that's easily solvable by buying another AP. Currently I'm happily running a few of them behind the wall plate in my switches (check the space in your switch box first!)...no issues after many many months of continuous operation. Didn't know about the new gen supporting Matter, that's great.

Also, I too wanted to extend to you a really big THANK YOU from a very happy member of the HASS community. I came over from OpenHAB a handful of years ago and I couldn't be happier. Please keep up the good work! Good luck with all the hardware sales and Nabu Casa stuff!

edit: clarified that I used to run OpenHAB


I'd just accept that 2.4GHz is forever tainted :)

In real terms though, it not that bad. I've got about 25 such devices always online and the traffic really is negligible. Most devices aren't sending anything while nothing is happening except for the periodic heartbeat like once a minute. Its not noticeable, even on my 20MHz wide network.


I have like 54 devices running on 3 unifi APs...it's unnoticeable (either that or my phone/laptop etc. are just using 5ghz and happy about it - either way).


there are LOTS of complaints about > 50 IoT wrecking their U7 series

i'm personally avoiding wifi devices now and holding out for matter/thread variants


> Pedants (which let's face it, most of us are) will often describe what is done in practice as "RESTful" rather than "REST" just to acknowledge that they are not implementing Fielding's definition of REST.

Yes, exactly. I've never actually worked with any group whom had actually implemented full REST. When working with teams on public interface definitions I've personally tended to use the so-called Richardson's Maturity Model[0] and advocated for what it calls 'Level 2', which is what I think most of us find rather canonical and principal of least surprise regarding a RESTful interface.

[0] - https://en.wikipedia.org/wiki/Richardson_Maturity_Model


I was assuming that it's a loss-leader sort of business strategy at play before reading your comment. Do you care to share any insights/references to support this claim?


Nah that’d be a national security crisis.

But the presence of https://en.wikipedia.org/wiki/PRISM well over 10 years ago should be sufficient.


Gotcha. Yeah, I mean all of these platforms are certainly juicy targets for room 641A [0] shenanigans. I just wondered if there had been some public leaks or something which we might not all be aware of yet.

[0] - https://en.wikipedia.org/wiki/Room_641A


I'd also point out the following from Cloudflare CEO Matthew Prince's wiki page [1]:

> "Prince co-founded Unspam Technologies, which supported the development of Project Honey Pot [2], an open source data collection software created by Prince and Lee Holloway designed to gather information on IP addresses used by email-address harvesting services."

> In 2008, the Department of Homeland Security (DHS) contacted Unspam Technologies, asking, "Do you have any idea how valuable the data you have is?" The DHS' email served as the impetus for Cloudflare, a technology company Prince co-founded with Holloway and fellow Harvard Business School graduate Michelle Zatlyn the following year

> The DHS' email served as the impetus for Cloudflare

Emphasis mine. I love Cloudflare, their tech is amazing, but to bury our heads in the sand that it wasn't started from day one to be a government spying program would be extremely naive.

[1] https://en.wikipedia.org/wiki/Matthew_Prince

[2] https://en.wikipedia.org/wiki/Project_Honey_Pot


https://blog.cloudflare.com/cloudflare-prism-secure-ciphers/

> At CloudFlare, we have never been approached to participate in PRISM or any other similar program.

> To date, CloudFlare has never received an order from the Foreign Intelligence Surveillance Act (FISA) court.


Overly specific weaseling. (Not by you, by Cloudflare).

The questions are not about if they were approached or participate in any programs, it's what they do and if they provide the data or not.


Again, an offhand comment about an email from the DHS is given all the weight in the world while a direct statement from Cloudflare is nitpicked to death.


The whole point is it's not a direct statement. It is a lot of words which fails to answer the core question: is cloudflare syphoning data off to any of the Five Eyes (and I almost wrote Five Guys . . ) government intelligence agencies or their allies?

For example, in your link: "One of the ways we limit the scope of orders we receive is by limiting the data we store. I have written before about how CloudFlare limits what we log and purge most log data within a few hours. For example, we cannot disclose the visitors to a particular website on CloudFlare because we do not currently store that data."

So if they are MITMing everything they totally could just send everything out straight away and not contradict what they're saying at all. Them storing the data or not is completely beside the point.


US based companies (like china and europe based ones) are not allowed to talk about it, when state actors implementing their spying tools. It is just naive to think that cloudflare doesn't give access to state agencies. As others have said, it is more likely that cloudflare as a company is entirely built around the idea to provide a singe point of surveillance to US agencies.


Love the double standard here. An offhand comment about an email from the DHS is considered strong evidence that Cloudflare was "started from day one to be a government spying program" while anything Cloudflare could say to deny it is brushed off as not strong enough.


I'm not judging the evidence FOR Cloudflare being a spy.

But it's a natural double standard that when your potential spy says "I'm not a spy!", well it's no evidence AGAINST.


>> At CloudFlare, we have never been approached to participate in PRISM or any other similar program […because we approached them]

>> To date, CloudFlare has never received an order from the Foreign Intelligence Surveillance Act (FISA) court […because they never had to ask in the first place]

My paranoia was cemented by the book When Google Met Wikileaks. Silicon Valley types do not have to be coerced to share data with 3 letter agencies, they have aligned incentives to ensure American dominance. Which is fine with me, as an American, but I won’t pretend there’s some rivalry where Cloudflare won’t comply without a court order.


Oh, well, that's alright then! If they so it must be true!


Post Snowden, I think the assumption has to be any large US hosting/service provider is compromised in a similar fashion.


"Our Free plan gives Cloudflare access to unique threat intelligence"

https://blog.cloudflare.com/cloudflares-commitment-to-free/


Nobody remembers the "SSL added and removed here :)"?

https://www.agwa.name/blog/post/cloudflare_ssl_added_and_rem...


How else would a cdn work? Or an l7 ddos protection?


One half of the NSA's mission is defensive, dedicated to improving the security of US systems and infrastructure: https://www.nsa.gov/Cybersecurity/


SELinux is a great example of that end.

Of course, I know an embarrassing number of people that won't touch it because they're convinced it's an NSA backdoor into your system.


> When most money exists in digital form in a database somewhere, over time, the concept of real paper money gets that assumption of wrong doing.

It's already happening, and it probably just depends on the teller you get. I have no idea if it's policy or not, but I've been questioned pretty intrusively for cash transactions even under the reporting limit of 10k (see: BSA, CTR).


That limit was reduced to $500 and then back up to $2000. It's a multifaceted thing, now, that triggers a SAR.

https://www.fincen.gov/fact-sheet-industry-msb-suspicious-ac...


You are probably questioned more about cash transactions under the reporting limit. Over the reporting limit they file a form. Under they have to determine if they need to file a form.


Over 10k in a day of cumulative deposits will automatically trigger a CTR (currency transaction report). Amounts over 3k can trigger a SAR (suspicious activity report) but those are typically at teller discretion unless its a very specific circumstance like a customer buying $2500 in traveller cheques but has a typical average balance under some low threshold.

All those reports go to the banks AML (Anti Money Laundering) group who have to follow specific reporting guidlines from big brother. Lots of data is used to determine your risk level, which gets assigned tonyou when you open an account, especially a business account. Depending on the sic codes you choose determines how heavily you are scrutinized by the banks interal risk structure.

I could go on but you get the gist.

Source: too many decades in financial services orgs


The EU literally got rid of the 500 Euro bank note because it was primarily used by criminals for evading the law.


They literally did not. 500s are still currency, they just stopped printing them.


I think that’s what was implied. Canada “got rid of” the $1000 bill but it’s still legal tender. Canada also got rid of the penny, but it remains legal tender. Banks will take them if vendors don’t.


German Marks can also still be swapped for legal tender. That doesn't mean it is possible to use them like the Euro.


By making the Mark convertible to Euro indefinitely, Germany decided that it would be the only Euro-zone country that wasn’t going to participate in the confiscation of what turned out to be billions from their own citizens. It’s called seigniorage and has been a thing since Roman times or even before.


This is simply wrong.


So not like the 500 euro note either, which is legal tender already.


I run Planka in an LXC container on Proxmox, but this looks useful (despite being 'beta') for anyone who just wants an absolutely no frills local-first GUI for simple task management.

The README mentions that "Trello wasn't bad", but storing this type of data in the cloud wasn't desirable. Well, Planka is the answer to that.


tl;dr No barn doors were actually locked. A series of protocol changes are suggested to specifically address listeria bacteria in food processing plants.

Also, conjecture: Closing a barn door would likely not solve any actual food safety issues, but it might keep the livestock in place.


I might be missing a joke, but if not, there is a saying ‘closing/shutting the stable door after the horse has bolted’. It’s used in a context where someone has acted too late.

https://english.stackexchange.com/questions/104948/english-p...


Full agree. My wife is a physical therapist (DPT, Northwestern) and the owner of a PT practice. I say this with some (very limited) authority, repeating things she has said to me:

1) Absolutely seek the advice of a good PT. It's not like going to a chiropractor where you'll get signed up for the "forever plan". You go, pay for a few visits or even just 1 and they will evaluate and give you things to do on your own. You're empowered directly to change your trajectory vs being reliant upon them week after week. In many states PTs have what is called "direct access" meaning they can see and treat you without any MD referrals being required. Also if you can afford it (HSA/FSA accounts are fine here), try to go to a "cash pay" PT that isn't burdened by death grip of our insurance system. You'll get better 1:1 attention and probably a much less overburdened PT.

2) Stand up and walk around at least a couple times an hour (I know, not practical for many of us) for 5 mins or so.

3) Sit on an exercise ball while at your desk and simultaneously think about your posture on a background thread. This will help you with core strength quite a bit over time. This is something most of us with desk jobs (and even most of us period) could use improvement on. She sees serious athletes who even have weak <random latin word> muscles hidden in spots they'd never think about.

4) Sometimes, like when it comes to pain in hands/wrists, you would want to seek out an occupational therapist (OT) instead of or in addition to a PT, who don't specialize in treating those types of dysfunctions.

Good luck getting/staying well!

disclaimer: This is not medical advice and I have zero formal training in any physical or medical science. Consult a professional. :)


> 2) Stand up and walk around at least a couple times an hour (I know, not practical for many of us) for 5 mins or so.

This is the easy bit. Just drink A LOT. Pick a drink, any drink. Caffeinated or not, carbonated or not. Whatever you like drinking and fits your diet. Keep drinking it at the appropriate temperature. You can geek out on the drinkware, I got a Stanley Stein, which will keep an iced beverage cool for 8 hours easily.

Nature will make sure you have to get up more than once during the day =)


For those of you who don't have 2 minutes for some balance and proprioception work, I practise putting on pants and other stuff in the morning with one hand, usally my non-dominant, whilst brushing my teeth. It is hard at first, don't kill yourself with your toothbrush in case you fall over, but it gets easier after a few weeks.

Come to think of it, I should start practising brushing my teeth with my non-dominant hand, but it might take 30 mins instead of 2, and waste a lot of toothpaste.


If you don’t have two minutes free, the best thing you can do is find two minutes to have free. The mental improvements you’ll see are incredible.


Last time I saw my physio, I asked about the exercise ball sitting thing because it had come up in a recent conversation. She smirked, got a ball from the other room and then proceeded to sit down on it with the biggest hunch I've ever seen. You can have bad posture sitting on anything, for most people having the option to support their back is better, because then you're not screwed once your back inevitably does get tired.


> 3) Sit on an exercise ball while at your desk

I bought an exercise ball for this purpose, but then learned that exercise balls can rupture under you with disastrous consequences. It may happen rarely, but I would rather not risk it.


The swopper stool is a great alternative.

https://ergify.com/aeris-swopper/


+1 - Shared with my wife, who is also a DPT(Southeastern US) and she agreed with all of these points.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You