skysight-inc/HackerNews huggingface dataset:
This is what I can gather from skimming some articles in a lazy research attempt:

* Almost all evidence shows multitasking is not actually possible

* Some evidence shows attempting to do so anyway results in IQ reduction and loss of ability to focus

* Some evidence shows this reduction lasts even after you are done

* Some evidence shows this reduction is due to permanent physiological changes in the brain

'Brain damage' might be going to far.
I'm not quite sure what you mean. And often there's no reciprocal "combo-hunting" because of labor rates. India in general does not want "reverse" H1B's, for example. The US pays more than India such that Indians are more likely to want to participate in USA's labor pool than vice versa because Indian wages would be small if exported/returned to the USA.
It’s hardly racist to express personal preference.

It’s also not the same as saying “I don’t want any old white people in this town”.
What's cross-platform experience for packagers/builders? Seems like you can't do cross-compilation, so expecting upstream to provide flatpaks for users is expecting upstream to manage virtual or real machines for every [desired] CPU architecture with all the annoying host distro installation/management, networking stuff, etc.?

At least with the current model, upstream developers can offload most of that to distribution packagers.
FYI, due to the complications involved with dosing anesthesia at small weights, surgery was for the most part done on babies without anesthesia prior to 1986.

Obviously I think it should be done, but it brings up a fascinating philosophical debate and shows how different surgeries on babies and those and the womb can be. Many of those who’ve had surgery as a baby no longer recall the pain. Does this make what happened okay? Some ppl argue circumcising causes a great deal of pain, but there is no society-wide memory of searing pain from that procedure.
For political reasons it can be easier to justify defense spending. Then you just make sure that it's _your_ pet project that gets the spending.
Just an FYI: The enterprise MSP password management service "Passportal" allows you to disable MFA over the phone with zero authentication.
But anyhow of course the issue is just discovering a technology to enable years of 1g acceleration. And while that may be far away, I think few would argue it's something that will ultimately prove to be impossible.

Why do you think this is possible?

The argument in favor seems to be something along the lines of "well we can sustain 1G for a few hours, we just need to extend that". But right now there's not even a roadmap to building such a device... and when you factor in all the other issues (life support, materials longevity), it seems to be constructed of pure optimism.

"It's not possible" seems like a perfectly plausible explanation for Fermi's paradox. The alternative seems less plausible - that's why it's called a paradox.
Way to go, Austen and team! Still hoping I can find a way to help your mission one day.
Reminds me of the time my friend lost his single character Twitter account due to Godaddy social engineering. https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...
I was thinking why are they fading, have they been replaced with Free Applicatives!
It's almost like listening to a captive cult member decry the "evil that lies outside of these walls". The idea that people who criticize an advertising/surveillance corporation worth several hundred billion dollars are "evil" is delusional.

I always knew the kool-aid was potent at Google, but not that potent.

I have pretty low expectations of HN in general, but seeing this on the front page is still kind of confusing to me.
They so don't deserve CoreOS. Pity they were able to acquire it.
SoftBank Discusses Taking Majority Stake in WeWork
This is awesome! I fully believe that government procurement needs serious reform, which this article and effort is clearly attempting to address. So, props to David Block-Schachter (the CTO).

There are far too many large, bloated consultancies that specialize not in delivering quality products and services, but rather in "surviving" the government procurement process.

Props as well to the Swiftly team - I had a change to take a peak at some of the APIs they expose to their customers and it's quite valuable. In particular, they roll up stop-pair segment performance on routes by time of day, which allows someone to query for bus performance by discrete route-schedule-segments.

Gathering this type of data is quite labor intensive and a significant technical lift (I was once part of a project doing this with GTFS-RT data from the NYC MTA). This type of information, and the broader ecosystem of performance related API services they provide to their users (based off the limited amount I have seen), can enable operators to extract highly articulated performance statistics about their fleet, on their own.
The other way of looking at it is that it can boost publication revenue... by driving more traffic

The same argument has been made in defense of software piracy for over a generation.
After installing the flatpak of Sublime Text from the flathub maintainers, here is the result of looking for "git":

wbond@u1804:/var/lib/flatpak/app/com.sublimetext.three$ find . -iname 'git'
wbond@u1804:/var/lib/flatpak/app/com.sublimetext.three$
1. Frankly, no, but I think it might enable me to be better at and have access to work that I would like to do in the future.

2. Work life balance seems good.

3. Tough to say.
A study by the University of Sussex found that multitasking (specifically, consuming multiple media sources at the same time) is _associated_ with reduced density in the grey matter of the part of the brain associated with empathy, cognitive control and control over emotions.

The study doesn't say whether one thing causes the other.

http://sro.sussex.ac.uk/50361/
Convenient, but "super fast"?

And though it's a matter of opinion, I disagree. The GPU is easier for me to use for things like screen-space shading, alpha blending, sprite transformations and distortions, and it all performs much faster than the equivalent CPU render code.
> It’s hardly racist to express personal preference.

I mean, it's a racist personal preference. Caring about whether the expression of it is racist seems besides the point?
My point about the iPhone is that the majority of it's customer base buy iPhones to replace existing, working iPhones without much motivation in new features. There's a substantial social pressure to stay on the newest phone.

What features justify replacing a 2 yr old phone with a new one? For $800-$1000?
I think you're still seeing these companies as startups. They're in incremental innovation mode now. I'm biased, because I was hoping Amazon would come in and wipe the floor with Australian retail, but it's been kinda lukewarm.

We also missed out on Google Voice, will miss out on whatever TV play they're making with YouTube.
Isn't the point of the infrared mapping that Apple does on the iPhone that it is significantly more difficult to fool than camera-based solutions? Android has had face unlock for years but you can fool it pretty easily. Anything Apple introduces to replace Touch ID must be more secure than that.
I would have agreed with you about apathy in the general population, but The Information had an interesting data point a week ago:

"According to a Pew Research Center study, 26% of Facebook users in the U.S. have deleted the app entirely and 74% have adjusted their privacy settings in the past 12 months. User growth on Facebook is slowing."

So there is hope after all.
> but does it really make sense to classify it as an internally discovered security problem instead of a potential-or-real-breach

Literally all security bugs can be described this way. "Company closes security bug" is not really news, nor should it be. How many XSS bugs have been closed at your place of business? Those are literally all potential breaches. Should each one of those get published in the news? Or does this requirement only exist for the major companies?

I'd wager that FAANG companies are closing thousands of similar bugs annually. The only reason this one is treated differently is the chosen narrative by the journalists.
Interesting experience and thank you for the first-hand perspective!

I do have to disagree about the competency of Bloomberg, though, they publish a lot of speculative, low-tech AI/ML scare articles that can be described at best as "inaccurate" and, more realistically, as "making stuff up". They used to have a good reputation, probably from their financial journalism, but their tech work is not good but any reasonable measure, in my personal opinion.
The wording of this is really pushing the boundary of plausibility.

Maybe Google is running short of disk space.
One thing I couldn’t do through the UI is change the expiration of JWT tokens as issued from ActiveDirectory, I needed to do some Powershell for that. Things in preview often times end up Powershell only first, which I’m OK with.
> I just wonder why the author of this page does not disclose his name...

> And even hides this from the whois info.

The registrant country is listed as France and the registrar is OVH. They are simply adhering to the GDPR. I have domains that have been like this since May, even though I would be quite happy to have everything public.

> This could have been written by a person with a grudge for all I am concerned.

Your comment could have been written by somebody with a grudge against the person you are claiming could have had a grudge for all I am concerned. A vested interest can make a difference, but I don't really see how any of the points are hard to verify.

Does this being written by a person with a grudge really negate the points made?

- Flatpak is claiming to be secure

- Flatpak is sandboxing apps with full access to your home directory.

(What is the worst thing that an app can do? Nuke your home directory or run malicious software. The sandboxing here does little to mitigate this.)

- Apps are not being updated as quickly as their distribution repository counterparts.

- At some point in its past, a (presumably) privileged component with permissions to setuid did not check that it wasn't blindly copying setuid.

It seems to me that this is more about easy delivery of software with a security claim that is arguably pretty weak at the moment against likely attack vectors. I can't see that changing without first thinking of what you're actually sandboxing for.

There are already software delivery systems, such as 0install and appimage, that do not make claims about being sandboxed and yet provide a similar (or greater in the setuid case) level of security for the main threats.

I find it hard to understand who the project is for. If you're a developer on your own machine then using your distro's package manager is probably more secure. If you're a sysadmin, letting users use flatpak serves only to increase the attack surface for privilege escalation.
Looks like the infosec cold war is in full swing.

All secrets eventually leak. All secrets. No exceptions. Not even nation-state players with unlimited budgets can prevent leaks. This is reality.

What's a hacker (in the original sense: programmer, not cybercreep) to do?

Our task as custodians of secrets for our end-users is to reduce the attack surfaces on our systems, slow down those leaks and mitigate the effects of leaks when they happen. We must do these things to the best of our ability. We must do them whether we rig systems for large organizations or for our grandmothers.

Who's trustworthy?

Apple? Probably. They're pushing security as a major component of their brand.

AWS? Possibly. They have a lot to lose if they're compromised.

Microsoft? Possibly. They too have a lot to lose.

Seventeen well-placed but unnamed sources in the US security apparatus, babbling to journalists? Possibly.

Journalists? Their trustworthiness is eroding.

Cryptographers Whit Diffie, Martin Hellman, Ralph Merkle, Bruce Scheier, Ron Rivest and colleagues? Likely.

Motherboard vendors? Probably not.

Router / switch / firewall vendors? Probably not.

Nation-states? No. (They could change this by abolishing "security by obscurity" in their work, but that would require major changes in mindset.)
Should? They are in all but legalistic terms. I had my Rockstar account stolen years ago shortly after their auth db was leaked, Rockstar support was of no help and I lost access to all my Rockstar games -- some of which are tied to third-party services (Steam) that don't permit repurchase (or otherwise generating a new serial code) and won't refund my current copy.

Piracy is the only way I can play my legally-purchased copy of GTA V or Max Payne III. (Most of their older titles did not have mandatory Rockstar DRM like the new ones, so they are OK)

How is an account not property?
I can have a conversation with someone while driving a car. Is that not multitasking?

To anticipate an objection, I would agree that the competence of both tasks diminishes somewhat. However the overall competence of both is sufficient.

My brain also seems capable of detecting when more attention is required, and automatically stopping the lower priority task. For example, if I had to quickly merge across many lanes on a busy freeway, then I would likely cease conversation during that maneuver. I don’t have to think too much about this consciously. The brain understands that driving is paramount and it will automatically preempt anything lower priority when more cognitive attention is required.

I would be interested to know what the research says about phenomena like that. There must be research like this supporting aviation, space flight, and nautical activities.

It seems easiest to multitask across different modes, e.g., I can work with my hands or drive a car while listening to an audiobook. I can have a social conversation with friends over voice chat while playing a video game.

Maybe the degree to which you can multitask depends upon the type of task and to what extent your brain can perform it automatically. The rote tasks involved in driving for example require very little attention to perform safely and correctly.
Also, the economy in college towns is very seasonal, plus if they are located in geographies with harsh weather, retail businesses are going to see a lot of peaks and troughs in foot traffic. Not all businesses are equipped to handle this type of fluctuation. Inventory forecasting becomes really hard, and business risks are increased.

Restaurants that serve cheap-eats (e.g. Chinese restaurants) tend to be ok since they have low overheads and are designed to handle peaking volumes easily (stir fries are easy, and most are family owned). But shoe, book retailers etc. will suffer in the summer when school's out, and in the winter when nobody's out and about.
I wasn't saying it was, I was saying maybe said person has figured to himself his event clicking patterns are worth giving up in exchange for the service fb provides that they clearly find of value.

If they add nothing to their profile, and don't browse the web with facebook cookies aren't they not really losing much of worth? If they've made the conscientious decision that event data is worth the events calendar?
> selinux or any of the other security mechanisms are completely ineffective if users or developers are largely ignoring them

SELinux works by default on Fedora, and even has a nice GUI popup that explains to you what happened when an SELinux policy blocked an action (so that you can reconfigure it). It's pretty neat, and is massive improvement to SELinux of old -- I would recommend trying it if you haven't recently.
> I'm assuming with "LSM stacking" that you mean

The term "LSM stacking" is public. Search for it and you'll get good material.

> Are you going to convince Red Hat to

That's not how things work. Canonical and RedHat collaborate technically by improving parts of the system as necessary. Things are enabled or not based on market requirements.

> What about helping to maintain AppArmor support in Fedora?

Canonical already does that by working to upstream the patches. That helps Fedora and everybody else too.

> I'm pretty sure that everyone will say no to the idea of combining AppArmor with SELinux

Well, no need to guess.. there are open discussions about it.

> I think you missed the point. But sure, maybe. If there wasn't the CLA to get in the way...

For legal reasons that are not unique to Canonical we do require a pretty straightforward CLA to be signed. I've signed that sort of CLA myself for other large companies, both individually and in the name of Canonical, so the playing field is level here.
$100M in net revenue? What was the cost to start, run and maintain this project?
What part or AWS? Lightsail? S3 pages? Cloudfront? Lambda?
In reality every desired CPU architecture is x86-64.
I'm sorry, but that solution isn't workable to many (likely a majority of) users. Most will expect that when you open two programs that need to work on the same file, that if you save the file to your $HOME/Desktop that it will appear in $HOME/Desktop in other programs. Sandboxing or not. I'm happy it works for you though.
Sure!

The communities I'm familiar with are all part of the FEC [0]. There may be other successful longstanding secular communes, but I'm not familiar with others that are still around.

- Twin Oaks: Founded in 1967, tofu and hammocks, large [1]

- Sandhill: Founded in 1974, sorghum, tiny [2]

- East Wind: Founded in 1974, nut butters, large [3]

- Acorn: Founded in 1993, heirloom seeds, medium [4]

Of these, they've all got longstanding businesses which new people can easily plug into. Sandhill is the only exception to the "needs to be pretty big" idea, they had the same small group of very longstanding members for decades and then had turnover recently. Hopefully the new group will make it through, but it's never certain with small groups.

Sandhill also has had Dancing Rabbit next door for the last 20 years, which is large enough to provide a lot of social support that other small communities haven't had. A similar dynamic happened with Acorn as it was getting off the ground down the road from Twin Oaks.

[0] http://www.thefec.org/

[1] https://www.twinoaks.org/

[2] https://sandhillfarm.org/

[3] https://www.eastwindblog.co/

[4] http://www.acorncommunity.org/
In flatpak you are worse off, though, since - as the article indicates - they lag behind on security updates. If they get compromised by unpatched exploits, that sandbox is a valuable line of defense.
Forbes to Publish on Blockchain Journalism Platform Civil
Since the FBI got a warrant and were responding to allegations of a sexual assault, I can respect the argument for doing this in these circumstances.

Though I don't like that the difference in the way the law treats passcodes vs biometrics may weaken privacy rights.
Worthwhile reading, IMHO. Every idea is one that has worked for me at one time or another. I haven't seen them all together in a single article before.

I especially like the explanation that taking a break to successfully complete some other straightforward task (e.g. sweeping the floor) creates dopamine which gives rise to more creative thinking which can help you reach a break through on the original task.

Well done.
>Is it common to assume economic growth can proceed at an infinite rate?

Infinite rate = adding wealth at infinity dollars per hour. Clearly absurd.

Unbounded growth = adding 100 dollar per hour without an end date in sight. I can argue this is feasible:

Let's say you and I are trading loaves and fishes between us (using dollars as a medium of exchange). This makes a stable economy grounded in tangible goods. Then we introduce notion of intellectual property: I make paintings and you make software. Each year you make better software and sell it to me at higher price, then I make better paintings and sell them to you for the higher price. The price of bread and fish remains the same, so when the government comes in to measure the CPI they will see that the food price did not go up, therefore there is no inflation. So the dollar value of all transactions is going up, but the inflation is not going up. This can easily go on forever because it doesn't rely on any kind of natural resource that could be exhausted, apart from your hunger for better paintings and my desire for better software.
It's a sandbox like Android has a sandbox: each app lists a set of capabilities; the user gets a dialogue on installation where they have to grant those capabilities (or else cancel the install); and then for anything the app tries to do that's not in that set of capabilities, it fails.

A sandbox doesn't mean "you can never do [foo]." A sandbox means "you can never doo [foo] unless the user lets you." Even web browsers (the classical "true sandboxes") have an API that gets you access to the user's microphone, and another for access to their GPS data. There's just a dialogue in between that the user can say "No" to; and, having said no, the content of the tab can't ask again, and just gets denied automatically. That's what makes it a sandbox.
I've never updated a repo with a make file and I needed to script things that didn't belong in the main make file. I'm not sure what I'd prefer to do.
This is bonkers to me. How is this worth the damage they're doing to the brand?
What you would like to watch.

What you actually watch.

This is why I hate YouTube recommendations. It feeds my monkey brain.
I haven't for over a decade.

I love the FEC communities, though!

If my wife was up for it, I'd happily move back. One of the challenges of commune life is certainly the size of the dating pool.
This is something I have extremely mixed feelings about.

On the one hand, HN has enabled so many of us to learn about startups, and has leveled us up in our careers in so many ways.

On the other hand, HN is a bastion of toxicity, is extremely uninclusive, and so all this learning is only available to people willing to lurk in the cesspool.
Instagram's 2FA starts allowing apps like Google Authenticator
iCloud data for Chinese users is stored in China on servers owned by a Chinese company. Chinese law requires this and apple complies.
I very much enjoyed living part of my childhood at Findhorn in Scotland, an intentional community with some aspects of a "commune" or collective - https://www.ecovillagefindhorn.com/ and https://www.findhorn.org/faq/
The unspoken aspect of the pyramid scheme theory is that academia is great for the top one percent of Einsteins, and bearable for the top one percent of the most tenacious.
> Sandboxed programs have their own $HOME. You can drag & drop files into their $HOME. Full stop.

That is not very good.

Suppose you create an audio file with Audacity and a series of images with ImageMagick and GIMP, then use ffmpeg to combine them into a video and VLC to view it. They're all operating on the same files.

What we need is to add an application list to filesystem ACLs and then have security groups like Video and Finances which contain apps. Because GIMP should be able to access your photos but not your accounting spreadsheet.

It should even be possible to do some of this automatically by file type, e.g. GIMP can access any PNG file the user can but not any spreadsheet file, or read a shared library but not write to it.
https://www.findhorn.org/ in Scotland
I'm not sure about Europe, but in Australia fewer people own iPhones outright - it's normally something like $99/month with calls and data.
Sounds like Flint.

My general point is that there is nothing immoral about not paying taxes, it’s simply a cost / benefit if you’d like to avoid state violence in your direction.

However I think this isn’t a palatable truth and so people would rather justify their paying of taxes to make it easier.
I pull out an old phone from my drawer, swap the SIMs and live in the past for a couple of days. With most of my old smartphones I need to carry a battery pack to keep them juiced.