michh

I don't know what the percentage would be, but we do have some historical precedent that could give us a clue.

Best one I can think of is when bigger websites started actually dropping SSLv3 and TLSv1.0 (and later TLSv1.1) support, cutting off older browsers and operating systems. Google and Amazon still support TLSv1.0, but plenty of others (including Microsoft) have dropped 1.0 and 1.1. HN itself doesn't accept 1.1 anymore either.

Then there's browser support. Lots of websites - big and small - cut off support for Internet Explorer 6 when it was somewhere below 5% marketshare because the juice was no longer worth the squeeze. Of course, few of those actually fully cut off the ability to browse the (now broken) website fully but it's a datapoint suggesting trade-offs can and will be made for this sort of thing. Or to put it in the present: a significant amount of webapps don't support Firefox (3% market share) to the extent their product is completely unusable in it.

Okay, but is being present at a protest where others push through a barrier enough for the first amendment to no longer apply or do we know he was one of the people doing the barrier breaking? The original post implies he bailed out after only 5 minutes - quite possibly because he wasn't on board with the (relatively mild) escalation. At this point, we don't know. But if he did cross that line, he should be criminally prosecuted like the students with American citizenship (if they even are...) and not presumed guilty being punished via the immigration system without any kind of trial.

I mean, given how the site performs on average I don't think they've optimized so much that the extra cpu cycles of ANDing with the fixed constant of 2^64-1 and then looking up or hashing a 16 byte integer - whatever they do - rather than a 4 byte one would increase the load significantly. Let's be pessimistic and say it's 20 extra cpu cycles, that's not gonna be much of a problem if their load balancers were made in the past 20 years.

Perhaps a little tin foil hatty and definitely not the only reason but Microsoft owns Github and also makes a boatload of money off of Azure. Incumbent cloud providers like Azure have a major advantage in terms of having plenty of IPv4 addressing available whereas a new entrant to that market would have to buy or lease that space at a premium. Thus, these companies have an incentive to keep IPv4 a necessity.

I think there's an important distinction in making money off of a tragedy your investment had no part in causing and happily announcing you did so.

To use a slightly hyperbolic example: A company that makes body bags is always going to be making cash when a massive amount of people die in a tragedy. That's fine, without that we wouldn't have body bags which is a thing we need. But they're not gonna do a press release on September 12th 2001 about how their sales volumes have spiked and are expected to continue to rise as victims are being pulled from the rubble. I would hope their execs are not watching CNN and rubbing their hands in eager anticipation when they see the second plane hitting the towers.

mm, if i can't get it to work with the dc-dc converter i'll definitely go that route, good idea

Coincidentally, I bought a 12v car horn yesterday with the intent of wiring it into my ebike's power supply with a little button on my handlebars.

Not because of other cyclists or pedestrians wearing (anc) headphones but because modern cars are so heavily sound-proofed they don't hear a bicycle bell anymore. A recent incident with an inattentive taxi driver in a brand new EV nearly flattening me prompted me to want to pursue this.

I'm still waiting for my cheap AliExpress dc-to-dc step down converter but otherwise I have everything I need and I think it should work. The horn module itself is definitely loud enough: I connected it to a 12v power supply at my desk and jumped out of my chair.

cause a lot of lives have been lost! they even thoroughly blew up a school. it's generally considered to be in somewhat poor taste to celebrate your personal gain in situations like that. it's like openly celebrating a massive passenger airliner crash because you happen to hold stock in their biggest competitor.

increasing the (social) pressure on maintainers to get PRs merged seems like the last thing you should be doing in light of preventing malicious code ending up in dependencies like this

i'd much rather see a million open PRs than a single malicious PR sneak through due to lack of thorough review.

You're right, I misremembered the order in which I learned about these things as the order in which they were announced.

(lol, I sound like an LLM apologizing for getting something wrong but I promise I'm human :) )

yeah, but I got the impression that the EU is very much doing it as a retaliation to the US and UK doing it. Tho they could have limited it to just those countries.

Congratulations, you're a lot smarter than the average person. I understand this is sometimes a bit annoying, but at the end of the day it's probably something to be grateful for.

table stakes, but people still mess up on it constantly. The "yeah, but that's only a problem if you're an idiot" approach to this kind of thing hasn't served us very well so it's good to see something actually being done.

Trains shouldn't collide if the driver is correctly observing the signals, that's table stakes too. But rather than exclusively focussing on improving track to reduce derailments we also install train protection systems that automatically intervene when the driver does miss a signal. Cause that happens a lot more than a derailment. Even though "pay attention, see red signal? stop!" is conceptually super easy.

I flew out of the UK twice in relatively short succession in ~2018 and the first time was out of London City: did not have to take off my shoes. I was pleasantly surprised by this and concluded common sense had prevailed and it was no longer necessary. The second time was Gatwick, and based on my prior experience I did not take off my shoes. I got yelled at because "everybody knows you have to take off your shoes at the airport!". Then got subjected to an extra search of my luggage as punishment. Of course there was a razor in my bag of toiletries (one of those Gilette cartridge ones with a million blades - not an oldschool safety razor) and promptly 'got got' for that as it could have potentially injured the person searching my belongings. 0/10 would not recommend.