jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
> I still, frankly, trust Google's Security more than Amazon's, but I don't encourage folks to use GCP the way that I used to.

I trust virtually anyone's security over Google's. I've never had issues with AWS. I've consistently run into serious Google security failures. Google has airtight security for its own data, but not for its customers.

Examples range from Chromebook and Android security update policies (tons of expired machines on the public internet, in the case of Android, usually without people knowing), to pay-for-security on GSuite, to really difficult-to-audit Google Drive security (there's no convenient way to track and audit what was shared with whom or where data went), to just a ton of other things.

I've never seen Amazon be callous with my data. I've seen Google do things that even nineties "we don't need security" Microsoft wouldn't have imagined....

The only people I know who really trust Google security worked for or are close to people who worked at Google. There's a reality-distortion field based on how much Google invests in its own security that people fail to notice very basic failures, like millions of expired Android devices, or a lack of audit logs if someone physically accesses your machine to rifle through your gmail....
Quite. I have no time for exaggerated singularitarian nonsense about strong AI being inevitable in a few decades. We don't even have the primitive fundamental concepts required to even begin to outline the actual design of such a thing. Therefore any attempt to estimate a timeline for its development is a blind guess.

On the other hand, just because we can't design or build one now doesn't mean we never will. Lord Kelvin was clearly wrong that heavier than air craft were impossible because birds. They are physical, mechanical systems that are heavier than air and yet fly. Therefore such systems are self evidently possible. So it is with strong AI. Physical systems that exhibit human intelligence or exist - us. Therefore physical systems like us are possible.

Here again the example of birds is instructive. Birds fly, but constructing a machine that flies I. The same way as birds is incredibly hard. Far, far harder than building rockets, propeller driven planes and even jets. There's no law of he usiverse that says our first strong AI will be designed along the same architectural lines as the human brain or that itse performance envelope will be similar to ours. At this stage, as the OP says, we don't know.
Wow! There is a lot there to read.
Seems like a non issue? I’m guessing Tesla has plenty of data about failures on those components to know whether the redundancy is needed. And there’s a mechanical steering connection anyway.

Sounds like the worst that can come of this would be Tesla has to retrofit the part into a bunch of cars for FSD.
I really want to like Haskell, there is great programs that I use and love in Haskell (pandoc, glirc, hoogle, hackage), but the ecosystem (cabal, stack, ghc) really drag you down, with libraries incompatibilities, slow upstream updates, too many language extensions and custom operators to decode the code you didn't write. But usually there is great documentation to compensate and usually good error reports from ghc.

Haskell is nice to write little programs with few dependencies to avoid incompatibilities. I personalty used, and continue to use it to write a small monolithic blogging platform with too many dependencies. It works really well, is efficient, and the code is really easy to update, even after not looking at the code for few month. But if I would do it again, and for a production system, I would split my code into multiple micro-services.
I might put those numbers at like 125 and 140, but your point is taken that there’s a fine line between reality and elitism, and I possibly strayed across it.

There is in fact a difference between chasing the latest fad in serving HTTP requests and trying to do serious computation, but it’s also so much masturbation if nothing useful is getting built.

I was leaning a little heavily into one side of the argument because the other side doesn’t seem to lack for advocates.
I've never signed up to a music streaming service, I distrust them immensely, I don't like the idea of algos picking my music, especially not, if you like that, then you'll like this, I think it's recipe for making everything sound the same

I also don't like the amount they payout to artists. I'm no saint, I used to be on napster and limewire, but now having a decent paying job, I buy albums again from services like Bleep. As I like a lot of indie stuff, I think it's important they get a decent cut because I don't think many of them are selling in the millions.

I still don't feel much guilt pirating the odd movie, especially as it's no longer possible to sign up for a single provider, I now have to sign up for multiple services. And twenty bucks is too damn much for a single VOD

But the media I use most, mostly video games and music, I really don't mind paying.
"try using any graphical application from inside a vm"

This is because said graphical applications are designed to be used with a modern GPU and they use stuff like OpenGL to render their components.

"but for gradients"

Maybe we can go without them. Modern UIs are too heavy, latency-inducing, battery consuming, and can turn your device into a heater easily.

"And 120, 240fps monitors are a thing now"

Re-drawing the window in every frame is a wasteful action that tends not to happen with applications designed for software rendering.
I understand the founders are Terry Pratchett / Discworld fans from the name of the associations.

For non french speakers, Deuxfleurs is the french traduction of the Twoflower character appearing in The Colour of Magic, The Light Fantastic and Interesting Times from Terry Pratchett's Discworld books series.
It shouldn't be the government's role to protect people from their own ignorance or bad decisions. There are unscrupulous people who would try to get people to invest in the 'next Google,' but there are also people that try to sell expensive and worthless things all the time. Government shouldn't be your daddy; adults should have the freedom to invest in whatever they want, regardless of the stupidity of such investments. After all, there ar plenty of crap penny stocks that have no hope of making a return. Wouldn't you rather people invest in our compani s than in some near-bankrupt biotech trading for .32 on the OTC who claims to be looking for a cure to cancer but in fact is nowhere near such a cure?

How about used car dealers? Should we prevent non accredited investors from buying used cars? After all, a car represents one of the worst investments with no chance of capital appreciation. How about Rent to Own shops? Those prey on the stupidity of poorer people.

Let's support freedom and let adults make their own choices, good or bad. Unless we want to ban Keno, the lottery, pay day loans, penny stocks, and let the government manage everyone's money. Of course given the government's inability to manage their pocketbook, I would suspect that the average American is more intelligent in terms of investment screening than the U.S. government. Remember Solydra?

Freedom means even the freedom to be stupid.
First of all, physically restricting access to a local network pretty much makes the benefits of using Git redundant. Ignoring that though..

I don't think there are many companies who have the depth of info security knowledge that Github can draw upon. You might believe that running your own server and locking it down to your local network (as best your team can do that) is better, but I'd rather trust Github even if that means my code is available online. While the chance of being victim to a non-specific attack is far higher (Github is a much bigger target; I'm affected if they're attacked), the chance of someone targeting my code and actually getting it are far, far lower because Github is better at making things secure than I am, and they have people who are paid to make sure things stay that way.

A policy of only having your code on Github has it's flaws but making sure it's secure isn't one of them.
I agree with the author's sentiment 100%.

As others have stated, the reason that video is worse than text for learning is because

A. The rate at which you can read is faster than you can listen

B. Video technology is often a hassle when you need to skip around.

C. It's cheaper to write and revise text than video.

D. Videos consume large amounts of data.

But I'm going to add another point.

E. Lecturers most often don't know what I as a student am struggling with. They may focus on things I understand easily and spend a majority of time discussing things I already know. However, if I decide to skip a portion of a video I could potentially miss a really important detail necessary for understanding the subject matter.

With a book I can skim. Important information is often marked in a certain way to make it stand out from other data. It's also organized in sections and chapters so I can easily skip around. With videos this isn't possible.

Also, what happens when all of this information is outdated? Now you have a bunch of videos with outdated and potentially false information out there and nobody will know.

My ideal alternative would be to remove lectures entirely and to have interactive labs where teachers and TAs help students complete assignments based on assigned readings. The instructor for the course would be responsible for overseeing the teaching assistants and preparing the course outline. The TAs would help guide the students in completing the assignments or mini projects. Then a couple of time a semester there would be larger projects that tie together what the students have learned.
If you only want it for the colors (or maybe you dislike installing software from source):

Check out "ccze".
This tech proposes the use of LCD's, and I don't think a blackened LCD can provide the requisite protection from the radiation produced by welders.
Well, turns out I wasn't entirely correct for this picture. They rendered it to three bigass images:
http://translate.google.es/translate?u=http%3A%2F%2Fwww.sevi...

For some of the other massive Gigapixel photographs I've seen they've rendered it down to only one image file:
http://70gigapixel.cloudapp.net/index_en.html#3
... and why did you give your chat password to someone who will use it to turn off the crypto? >_>
That's a technique used to gauge your alertness/nervousness and truthfullness. He probably does know a lot about it.
Ok, this feels like we're quibbling. Would you accept a more liberal definition of marriage such as common law?

This policy is, of course, roughly equivalent to only dating people who are living with someone else.

Slightly more accurate but you know.... I'm going to claim poetic license. The underlying sentiment seems to be correct even if there is some room to argue the simile isn't 100% isomorphic to reality.
Transparently? Without anyone being the wiser?

The javascript is there for the auditing. The server-side code is not, but you're completely free to analyze the client-side code to verify that it never sends your password to the server. I've avoided minifying any of it (save jquery.js, which you can diff against the official release to make sure I haven't modified it) to make it more auditable.

It's true that you probably won't check the javascript every time to make sure bonchat.org hasn't started serving up a compromised version. Just like I don't tcpdump my network traffic every time I boot up my OS X machine to make sure FileVault isn't secretly beaming my password home to Apple. The point is that I could. More practically (hah), I can randomly sample.

Actually, it would be pretty easy to verify the javascript each time. As long as you're satisfied that any version of the js is secure, you can save a copy to your hard drive and write a script (curl | diff?) to verify the server's copy every time you load up a bonchat.

No, it can't guarantee that the server is free from tampering. Nothing can. But I believe it's the first web chat secure/transparent enough that you can protect your data even if the server is compromised.
Except you have to call first to verify that whoever you are calling is on wifi.

In Europe where wifi is something you have to search for and 3G is something which is everywhere, this renders the feature absolutely useless.
An unintrusive page-load timestamp would help us self-limit obsessive reloading to decrease load on the server.

Edit: Also, it would give "n minutes ago" a reference point.
I fired up Chrome and here is what I saw: http://dl.dropbox.com/u/4073000/chrome.png

They seem to do some evil browser sniffing (I have no confirmation but that’s how it looks) and indeed use QuickTime as a fallback if you use any other browser than Safari.

Apple, listen: Thou Shalt Detect Features, Not Browsers! :)
Or, "an iPad that is quarter the size, has two cameras and a 3G modem!" Exciting!
Does anybody know about a roadmap for GraalVM and especially native-image? I've only recently used it (after having just played with it when it was new) and was surprised how mature it is. But AFAICS GraalVM (the language features supported by the compiler) is still at JDK 11 language level, even though it can be build on top of JDK 16. Also, GraalVM's options for garbage collectors is very limited and doesn't include ZGC (or CMS for that matter), which I found to work particularly well out of the box for a variety of workloads, including batch/non-interactive ones which aren't even the primary use case.
Have not started investigating yet. These are completely new tests. crypto does not have to deal with randomly changed IV's. But when you do, you should expect better than these. Could be tomcrypt artefacts also, because only they are affected.
I totally agree with you but OP asked about how things are, not about how things should be.

https://example.com/{en,fr}/page.html is indeed much better—and widely recommended, for that matter—but lots and lots of sites don't do that for one reason or another. If those sites use a cookie to store language choice, then it is IMO quite reasonable for the site operator to consider such a cookie as "required".
You are right. I made a mistake submitting this.
Sorry, but no. First there is the question of licensing. The users are posting (and site is hosting) images that they (presumably) don't have licenses to use or permission to post to that site. A photograph being publicly available does not put it in the public domain, and certainly doesn't mean that a site is licensed to run ads on it (though even without financial gain it would still not be legally ok).

The very first site rule is "uploading copyrighted photos is forbidden unless you have permission from the copyright owner" which I presume is supposed to shield the site owner from this legal issue, but I think we can all agree that the vast majority of photos on this site do not meet this requirement.

And secondly there is the question of context. I may give my employer permission to put my photo on their "About Us" page, but I would not be amused if the later transferred it to a "Consultants who we will never work with again" page.
Yeah, I hope this is one of the issues Microsoft address some time because although CreateProcess is a slightly nicer API in some regards the cost is very high. It may not be possible to fix it without removing backwards-compatibility, but maybe we could have a new "lite" API.

The bit about Windows Defender being hooked into every process is also infuriating. We pay a high price for malware existing even if we're never hit by it.
There are cities in the US with more people in them than all of Finland; I am not sure a direct comparison of the situations makes sense.

When you only have 6 million people in the whole country, a handful of banks, and 3 supermarkets, it might make sense to set the lever differently, although even that is open for some debate.

I think both Finland and the US are weird places. :)
"Paying higher prices for energy that provides guarantees that it won’t be interrupted during a cold spell" is effectively a subsidy for fossil fuel power plants and coal in particular - and a real subsidy too that actually gives it a financial advantage over renewable power, not the inflated fake "subsidies" that articles like this quote which usually turn out to be things that are available equally to all power sources or even all businesses.

There's some controversy over capacity payments to power suppliers (effectively, payments for being able to offer a guaranteed supply of electricity on demand) here in the UK for exactly this reason. They're seen as unnecessary subsidies to coal and other unclean fuel sources. The US media coverage blaming this outage on Texas not having capacity payments because it's supposedly run by right-wingers with a delusional belief in the free market above all else didn't mention this, but you can bet that if they introduced such a thing the press would be all over the Texas Republicans subsidising dirty fossil fuels angle.
Yeah, huge thanks so much for a really phenomenal tool! In my group of (admittedly fairly technical) friends, "download thyself a traffic cone" is a fairly common thing to hear when encountering an AV issue :)
Most likely, you had a single line break between the two footnotes, but you need two to actually start a new paragraph. And if you started your second footnote with two asterisks, that gets read as an empty italicized string.
- I've been using the Microsoft Natural Ergonomic Keyboard 4000 for however long its been since it replaced the 3000 or whatever predecessors. Probably close to 20 years now.
I use this same keyboard at work and at home.

- I keep a small stack of napkins(between 10 napkins to about 3/4" of napkin) under my left elbow. For some reason the elbow hitting the hard desk hurts, and having a stack of napkings is both useful to use napkins from (and occasionally replace to re-up the stack). It helps a lot on the left elbow.

- I use a Razer Deathadder mouse both at home and at work.

- I use a foot rest both at home and at work (they are quite a bit different, due to different desks/chairs).

- I use monitor arms at home and at work. Also I keep my monitor up higher than most people do. Most people keep them WAYYY to low(at minimum, enough for my keyboard and typing to be able to go under them). It really makes a big difference when you can look straight on most of the time.

- I primarily only use 2 monitors. I've had up to 3 and 4 at one point, but noticed slight neck strain. But 2 does well enough for me. I use 2x 27" 1440 resolution 144hz monitors at home. And 2x 27" 4k monitors at work.

- I am super picky about chairs. When I last replaced my home one, I sat in probably 150 different chairs in 10 different stores. Ended up ordered some high end chair($1000) and it didn't feel quite right. So I returned it and ordered another a different make/model(About $600) that works for me. Extra wide, proper butt cushion(no cross bar if pushed on hard) and works for my back and neck. I don't mention name/brands here, because everyone's body is different and you just need to find something that fit/works for both your body and price ranges.

- I am also super picky about the settings on the chair. Again, personal preference.

- Lastly, at home I have a large mousepad (approximately 20"x18") and at work, I have slightly larger.

I am on either my work or home desk/computer probably 14+ hours every day of the week. And haven't had any back, neck, or joint pains since about 20+ years ago, when I first started customizing setup, finding what worked, and switched to split keyboard and stuff.
If something even feels SLIGHTLY off. I make sure to change it, a lot of people can get used to things 'slightly off' but don't really quite notice how much it can wear on you after a long time.
Very cringey stuff.
> Remember, the free market model comes from an era when chemistry was modeled with the 4 elements !

I fail to see how the age of the model has anything whatsoever to say to its validity. Not everything old is stupid; not everything new is right. If you want to disprove the free market model, you have to do a lot better than pointing out that it's old.

It is true that perfectly free markets don't exist in the world. That doesn't mean that the model isn't useful as an approximate ideal.
Ok, got it: https://www.pika.dev/cdn

I'll start using this thing.
What are the issues with NPM? (genuine question)

From my (admittedly not super deep) experience with multiple package manager (Maven, Gradle, LuaRocks, Ruby gems, the abominable circus of tools they use the Python environment, ...), I found NPM to be by far the most reliable/easy-to-use tool.

That being said, being the best is not necessarily the end goal when the competition is terrible.
Yes kind of -- except not in between the application and the service mesh, it's between application and application.

Imagine that for every application there is one small binary that runs and serves all it's traffic, like a chauffeur. Your application stops talking to the outside world completely and sends all messages to the small chauffeur binary -- which then talks to other chauffeurs, over the network.

Keeping with the chauffeur analogy, there is a "head office" which calls the chauffeurs on CB radio at regular intervals that lets them know which cars go where and how to start them/etc.

"head office" => "control plane"

"chauffeur" => "side-car proxy"/"data plane"

In the end what this means for your application is that you just make calls to external services (whether your own or others) and since all your communication goes through this other binary, you get monitoring, traffic shaping, enhanced security, and robustness for free.

Another interesting feature is that if the side-car proxy can actually understand your traffic, it can do even more advanced things. For example you can prevent `DELETE`s from being sent to Postgres instances at the network level.
That’s super impressive. I guess Pixar is going to have to make a ratatouille sequel now.
HPU isn't really much of a "new technology". It's just a custom coprocessor, not all that different from the motion coprocessor in the iPhone (except designed for video processing, so presumably a lot more powerful).
Not sure how accurate this list is. For example, .al is sold for $16.49/year by dot.al vs what they have listed for which is $395/year with gandi.net
Link: http://www.longbets.org/382
No downvote from me. :-) Just the comment, which I almost didn't make except that the punctuation had not previously been noted and appeared to be the cause of the misunderstanding.
Am I correct in stating that Apple does not need to be a full monopoly to be convicted of anti-competitive behavior? After all, we have both Anti-Trust and Anti-Competitive behavior laws on the books. AT simply gets more press as it is usually a populist movement.

I wonder if the FTC would be willing to investigate this.
The same HP Windows 7 Slate that was killed off in April? (http://techcrunch.com/2010/04/29/hewlett-packard-to-kill-win...)
The iphone version is a bit more interactive in that you can edit the list of words. Is that what you mean?

And since the iphone has touch input, you can spin the wheels with your fingers, they have some inertia and keep going for a bit. The flash one doesn't have any inertia when you are dragging.
Why the hell would someone leave a script like that exposed on a public-facing site, with no access control or at the very least rate-limiting?!
"A GUI is earier to deal with than an unresponsive terminal just Spanish is easier to learn than Chinese."

I don't think you're making the point you want to here.
Spanish is easier to learn than Chinese for English speakers, certainly, but it's not inherently more intuitive than Chinese. Spanish is easier to learn for English speakers because it is more similar to what they have already become familiar to. For a speaker of Japanese, Chinese is probably easier to learn than Spanish.