skysight-inc/HackerNews huggingface dataset:
> firewire

FireWire was very much standardised (IEEE 1394), and was co-developed by other companies. It wasn’t some obscure thing that only existed on Apple stuff. They also haven’t shipped a computer with FireWire in about six years I think?

> thunderbolt

Again, Thunderbolt isn’t even a primarily Apple-developed technology, it’s Intel. Plenty of computers ship with Thunderbolt 3 ports today, and a couple of years ago Intel dropped the royalty that used to be required.

> proprietary SSD connectors

Agreed that this one sucks.

> 30-pin connectors for the iPod, ADC, AAUI, Mini-VGA, Mini DVI

Nothing on that list has shipped for years, in some cases decades. The comment I replied to says they do this “in new devices”, but that is just not the case and hasn’t been for a good while now.

Don’t get me wrong, I’m not defending their practices over repair. I strongly disagree with their actions to politically extinguish the types of law that would force them to make it easier for people to repair their stuff.
Portugal energy crisis needs restrictions
You can rest your case all you want, you're still wrong. The language in the original comment did not imply ALL journalists. You are arguing against your own misunderstanding.
There is a Canadian version called CBC marketplace
It could have made sense, when the moonthly subscription cost was 50$, alas I doubt it.
So did pip, according to Wikipedia[0], it came out in 2011. Did python have a different package manager before this?

[0]: https://en.wikipedia.org/wiki/Pip_(package_manager)
I have heard of a few research projects about a decade ago - they were more trying to spot exfiltration of data. In the cloud security breaches it is mostly "Don't share big archives in the clear you fucking morons."
Security fixes, performance enhancements, new features. There are many reasons. But the point is you update in a controlled manner. You don't just push the latest version of everything out on to prod, but you also don't keep pushing the same version that worked a year ago.
You either die a hero or live long enough to become a villain.
I Hate the 30 Year Fixed Mortgage and You Should Too
this is some next level irony. Read the sentence he wrote after the first one.
This is such a bad article, I half suspect it's astroturfing and food intended for Apple apologists. It's focused on a single small part of the problem and unnecessarily misrepresented it.

As a reminder of the broader picture: Apple has a strong anti-repair stance, they have lobbied for this [1], have engaged in broad, deceptive strategies to remove 3rd party repair options, by confiscating legally refurbished hardware under the guise of "counterfeits" [2], attempting to confiscate grey market parts under the guise of "trademark violation" and threatening the 3rd party repair shops [3]. They profit from this continued attack by deceiving customers into expensive unnecessary part replacements, suggesting repair is not possible and generally coercing customers into buying new products instead [4].

[1] https://www.techdirt.com/articles/20180126/07355539089/apple...

[2] https://boingboing.net/2018/10/20/louis-rossman.html

[3] https://www.vice.com/en_us/article/a3yadk/apple-sued-an-inde...

[4] https://www.youtube.com/watch?v=o2_SZ4tfLns
“What is this Xorg stuff you are talking about already? Is it like Wayland? Oh you could run windows through the network? Nice! Wait, apps had to connect to a socket to draw stuff? So weird. Wasn't it inefficient as hell to send whole full screen windows at 100 Hz using this? Oh you could bypass this to have… what you call it again? “Direct rendering”? Sounds like a horrible hack.”
Yes :-) It's fair to say Python's approach to dependency management doesn't follow the Zen of Python, but there's a simple way documented in the tutorial:
https://docs.python.org/3/tutorial/venv.html
I like a lot of things in python, but unfortunately, everytime I happen to use anything which uses python, there's a good chance it won't work on my environment. And so I'm very surprised how python can be so successful if it doesn't actually work. I literally fix my env for some tool A, only to make it incompatible with tool B. And I can't believe I'm alone.
I know this isn't really a noteworthy project or anything but the kid is 17. I wish I had this kind of cheap China stuff at 17. I wonder where I would've been by now if I had!
I just rewatched the ad after 25 years and it still seems to me like a real offer.

You see that the other offers(drink, shirt) are real and reasonable so the final one for the many points seems reasonable as well.

There was no disclaimer no nothing.

I know I was not alone at the time and we were young adults at the time.

If the offer had said 70 bazzillion Pepsi points then sure, but 7_000_000 points seemed somehow... real.
There was a publication in IEEE COOL Chips 21 (2018) [978-1-5386-6103-1/18] which compared a closed source implementation by a company (whose founder was involved in the creation of SuperH i think) of SH2 with RISC-V and an historic (pirate (as in patents were not expired then)) implementation of SH2 called Aquarius by some hobbyist.

The comparison seems to have some methodological flaws. But one result is, that is unaffected by them in my opinion is "that 2 stage SH2 re-implementation" needs fewer FPGA resources than "that 2 stage RISC-V re-implementation" on the same hardware at the same clock.

That honestly does not say much but it is the best comparison i am aware of.
When I moved to thew city, from my small town 300km away, my boss at my first serious software gig happened to have a holiday home in my home town.

My next serious job after that, the CEO was born and grew up in the same town as my father, population of just hundereds, in the middle of the outback 700km away. Big continent, tiny world!
> These conventional security tools are designed to defend the digital perimeter – an antiquated strategy given today’s borderless networks.

So perimeters are antiquated. Yet, in this case, a perimeter was not adequately enforced and was thus breached.

> For one, AI tools need not delineate and secure the cloud’s intrinsically nebulous perimeter.

Antiquated and nebulous!

> Rather, the latest such tools take an inside-out approach: analyzing what goes on inside a given cloud environment in real time to keep pace with ever-evolving users and architectures. As the environment changes, in other words, so, too, does the AI’s understanding of normalcy.

So we're replacing the "nebulous" perimiter with the notion of normalcy?

> Indeed, the risks inherent to IaaS and SaaS are highly user-dependent – the same activity associated with, say, a subtle insider attack when carried out by one employee might well be benign when done by another.

I assume he means "a thing that looks like a subtle insider attack".

This is always a red flag: the author is describing a scenario where AI is supposed to detect things that anomalous data. That's always struck me as the Hollywood vision of AI, where the computer is a magic oracle finding something that isn't right for reasons the designer never specified.

There are absolutely mathematical tests that can detect unnatural distributions of data[1] but they rely on a clear definition of what is natural.

I think we definitely have a problem with manually derived security rules. And most likely AI techniques could help designing a system to explain what our security rules and configurations are actually doing. Especially as configuration can be very dynamic as you have those rules being defined on the fly by code written in any number of languages.

But all of this still relies on very concrete notions like a perimeter because that's the math and the math hasn't changed.

[1]: https://en.wikipedia.org/wiki/Benford's_law
People gripe about the strangest things.

After using Go almost exclusively for about 18 months I have had to interface with existing C libraries exactly zero times.
Wired should be more careful when saying "He did, in a separate incident, exploit flaws in a college admission software to change his admission status to "accepted" " when in fact he found that security vulnerability and immediately reported it.
"Though the ‘girders’ were often thought to be a reference to the ‘rust’ colour of the drink, Irn Bru does have 0.002 per cent ammonium ferric citrate listed among its ingredients – a food additive containing iron hydroxide."

https://foodanddrink.scotsman.com/drink/16-facts-about-irn-b...
Sure, my point is just that gasoline isn't all sunshine and rainbows.

Large energy capacity batteries, and lithium specifically, definitely pose some new and "interesting" challenges. I'm optimistic though. Gas tanks are as safe as they are today because of several decades of safety-focused engineering and iteration.

If you gave me a choice between an ICE or an EV fire, I'm absolutely going to choose the gasoline, but that's just because it's a very mature technology, with well understood practices for dealing with them. I'd be surprised if I have the same answer in 10 years time though.
Agreed. I still think that ruby is great for jamming out an API (far better in terms of development speed than go or rust) but a lot of the great gems that can speed up development assume server side rendering. That plus the fact that go/rust/whatever are probably more "interesting" and faster (at runtime) than ruby is an additional obstacle (for ruby!).
An example of why we don't need or should want AI - it may work well when it does work (still quite unproven and debatable), but when it breaks, the whole thing comes crashing down and makes things much worse than the conventional methods:

https://skylightcyber.com/2019/07/18/cylance-i-kill-you/
Cool, thanks. :)

Hopefully the algorithms (and code) they're using get Open Sourced at some point, so they can be looked over and possibly incorporated in things.
Does pipenv create cross-platform lock files? That has been my primary requirement when looking at solutions, more than the usability issue of Python using a bunch of tools and files for the whole development process without a coherent story.

iirc Poetry does have cross-platform lock files and a coherent story. I'm just blocked on some PRs due to the original author getting busy and not yet having delegated to lieutenants.
Ask HN: The safest way to store data online?
Imagine you have to build the safest way to store data online.

As "data" in this example, we take something really simple : a PDF.

And by saying "safest", I mean the highest level of security + usability/ease of use.

1. Which technology/ies would you use to ensure your users they deal with the safest storage solution online ?

2. And if you allow your users to share this PDF with someone, would this choice change ? You have to ensure the same security by sharing the document/data.

(FYI : we already built a solution - I want to compare our solutions)
What has the Second Law of Thermodynamics has to do with evolution?
If you think Earth is an isolated system, just go out on a cloudless day and see for yourself why that is not the case.
Manuka is a tree native to New Zealand and Australia, so that seems unlikely. Do you mean similar beekeeping techniques with different flowering plants?

I just did a search for [manuka honey uk], and found there's an awful lot of woo-woo around what to me in NZ is fairly ordinary honey!
I don’t exactly agree with the initial comment, but an accessibility audit would find a few blunders (like mint green text on a white background, which is very difficult to read)
Only _real_ (stop-gap?) solution I can think of is doubling down on security investments, both by expanding the number of people looking at security and on things like penn testing. Or are these not enough?
https://www.frontiersin.org/articles/10.3389/fpsyg.2018.0246...

"Extremism" is a value-judgement, not a pathology. Abolitionists were also called "extremists".

This is psychology in service of staziism--using questionnaires and fMRI to identify serfs with higher wrongthought potential--rather than diagnosing and treating illness.
Brrrr... I actually hate automatic snapping of windows when the window border gets to close to the screen border. When I want that on LXDE, I use the keyboard shortcut.
Lots of Afghanis use opium. Not much else to do out there.
Categories aside, if you allow me to suggest something, I would have built your toolkit in a different way. Instead of app type, I would have grouped them by process following the natural order that the business takes form in a start-up or any organization.

To me, the sequence that comes to mind is: Sync Comms > Aggregation of unstructured data/documents/media > Collaboration (whiteboarding, sketching, mind-mapping etc.) > Administration > Project Management > Development > Security, Monitoring and Reporting
I was building and selling these things about 18 years ago. My favorite part about it was I could scavenge all required components from a broken cassette deck. Made a nice income for a school boy, upgraded my computer from i486 to Pentium II.
We've gone from a single decent income being enough to provide for one's family to two incomes now being all but required can sure make it look that way. Before the 1970s/90s (depending on where you live) a man was "the" income. That was his role and it gave him something to optimize for. Now he's only bringing in half and that's assuming When everyone else around you gets a promotion it feels like you've been demoted even if you haven't. So what do you do to find meaning? Therein lies the rise of extremist movements, nobody ever made their mark on the world by being rabidly centrist.

Edit: Am I being downvoted for being wrong, wrongthink or because my opinion makes people uncomfortable?
There are many problems with using a MITM proxy, however. The primary problem is that it’s very very hard to ensure that it behaves exactly as the browser does and that it does not introduce security vulnerabilities.

FUD. Why should we want "behaves exactly as the browser does", when browsers (in fact, mostly Google's) are in fact turning against their users?

While browser vendors are wary of any sort of interception of HTTPS traffic

Especially Google's, because that's one of the ways you can still block ads and modify pages to have them displayed as the user(-agent) wants, while it continues to slowly remove abilities from browser extensions.

Similarly, the MITM might not support the most secure versions of protocols supported by the browser and the server (e.g. TLS/1.3)

AFAIK there is no general protocol insecurity with TLS <= 1.2, unlike SSL3. There's also no reason for MITM proxies to not start using 1.3 too once it becomes more common, which I'm pretty sure will happen.

this approach is generally preferable to MITM proxies.

...because it provides no way to modify the content, i.e. being able to do things like block ads, inject stylesheets, and generally behave as the user wants.

IMHO the whole "security" thing has turned into a power-grab for companies to enforce their control over users, which is the most disturbing part. We want security, but also control, which is not the "security" they want.

(This comment was posted from a browser that does not support even SSL 2.0, but is using TLS 1.2 via a proxy... and I know that 1.3 will be coming sometime in the future. When that happens, everything that goes through it can also start using 1.3.)

Edit: yay, instant downvotes! I hope you enjoy being herded by Google, because that's where the future is heading if we don't oppose.
Well in just glad this is the top comment, as Python really is taking over the world for a reason.

And of all the bugs I have written in recent memory, not one came down to a lack of static typing. They were due simply to logic errors, flawed assumptions, misunderstood requirements, and good old race conditions. The static typing zealots like to think if it compiles is must be perfect, however this is a mirage. Unit tests in Python can compensate quite well for lack of static typing.
Salami sliced too thin.

The author is right about the problem, which I think is common knowledge. She mentions that there is a better way but doesn't tell us anything substantiative about it.

Maybe she wants me to like her on Facebook or sign up for an email newsletter or click click click but there are so many articles and so little time...
I use pyenv to switch between python versions (or just the `py` launcher when on windows), and pipenv will follow suit. It does require regeneration of the lockfile for each python version/environment in the scenario you describe, but you can also keep them organized in a folder and swap them out for each environment. You're right that it doesn't come included in the tool though.
Will the ABA Reject Due Process?
>The labor unions were closely linked with organized crime

The Teamsters (one specific union dealing with shipping) was linked with organized crime, yes, but it's hardly fair to claim that most unions had anything to do with them.
They almost rescinded that in PEP 357 and ultimately did so in PEPs 468/469. PEP -23 updated the standard library to match, but not until 3.9.1.a. Until then, beware the various blog posts you'll find on Google talking about this concept on 1.x.
Two lessons:

* When a contractor holds petty cash hostage like this, take them to small claims and don't let them force you to sign away your rights.

* Don't do business with a group that can't see why "OGC" is a bad initialism.
I used the default window manager that comes with xfce.

I tried setting up other window managers in xfce, and come to the conclusion it is not straightfoward, and the integration with the rest of the system is not perfect.

Also it was a feeling of imperfection that pushed me back (I am sure you can setup the linux desktop for your liking if you tried enough)
I am not an active patron, but it impresses me how creative some people are at discovering these tricks. It appears that McD doesn't seem to mind, rather they leave the door slightly ajar for some tomfoolery, making the user believe they have outsmarted them; usually they are just open-secrets eg. surveys on receipts for codes, can be a random number.

https://www.lifehacker.co.uk/2014/08/29/get-much-free-mcdona...
Nuclear planes have already been built and tested. The problem is the shielding to keep the pilots from dying is too heavy. A cruise missile gets rid of the need for that.
How stable is python to run a full trading / quantitative algorithm on?

I feel there are benefits for every language. I am just curious if super stable and scalable conditions can be met on python.
In the late 90s dot-com bubble, I had many friends at the Austin software company Trilogy (which hired extensively at our university).

Apparently they had an HR referral promotion where "you refer a person that gets hired, you get $5000, you refer two people, you get $10000, you refer three people, you get $20000, and so on..."

I heard the referral schema was quickly cancelled once HR discovered exponential growth.
Source for that? The impression one gets from history is that without revolutions we would still be feudal farmers.
The Return of the Hateful Pairs
This is spot on. In my current workplace we use Clojure, and Clojure has many of the same problems in package management as Python does (no lockfile, no easy way to create reproducible builds, no way to declare range of dependencies unless you use version pin, etc. etc.).

However, I never saw any complaints about Clojure package management in any topic about Clojure here.
What do you mean long gone? It's easier than ever.
My impression would be that China isn't going to flip a switch after 50 years and suddenly switch to the Chinese system.

I would imagine they would do it gradually like they're doing now.
H-1B Visa Program: U.S. Cities That Use It Most and Why
Having been to a male-only school, I tend to see the gender segregation of children as a terrible idea.
How many shootings are tied to rap music? Maybe we should try banning that one next.
If I have a Foo I can't use myself, but that will make you $5, and you only offer me $3 for it, have I made $5 or $3?
> Anyone that watches his channel knows that Apple
> purposefully makes things hard to repair.

Anyone that watches his channel knows _that he claims_ that Apple purposefully makes things hard to repair.

Not the most trustworthy person anyway.
The main reason I get so curious as to why so many developers would rather use premade packages then spend r&d into highly optimized solutions.
When my accountant sends me a PDF he encrypts it, sends it via email, and sends me the password through a different channel.

This is how big accounting firms do it and also the lawyers I know.
From what I've gathered, the project grew faster than the original dev had time to build up other people to also monitor PRs and has since gotten very busy, slowing down the review process. I know I have several straightforward outstanding PRs. I hope this is able to be resolved so we can have a sustainable community.
That's what I mean: Python and JS are jockeying for position as the hot language right now.
The Small Regulatory Change That Led to the Messy Web
You can have both: provide a sane default for most users and allow people to roll their own.

The reason why Python gets extra criticism for this is because it likes to tell people that there should be one obvious way to do it and that it comes with batteries included yet it's dependency management system is just crap and doesn't follow that at all.
Huh?

He had his turn in 2015-2016. You mean still waiting for another turn?

https://en.wikipedia.org/wiki/Daniil_Kvyat#Red_Bull_(2015%E2...
> They remove support for existing standards (e.g. headphone
> jacks) - to sell you more shit

Except that your phone comes with already compatible earbuds.
Samsung 108Mp smartphone image sensor
Seems to work fine for telcos in the US. You can change retroactively change the price by adding "regulatory recovery fees." If your service is genuinely misconfigured, you will often get the standard line "service is not guaranteed" until(if) you get to a Level III Support Engineer.

And in the worst, worst case, you get thrown into arbitration which is already skewed in the telco's favor.
If you have "foo==0.1" installed,
and foo has the dep "bar~=0.2" (current vers of bar 0.2.1).

Then bar releases version 0.2.2

So your deps want bar 0.2.1,
but foo now wants bar 0.2.2

This breaks your pip install.

EDIT: there are a few other gotchas (please respond to this post if you know of any more)

e.g. from https://medium.com/knerd/the-nine-circles-of-python-dependen...

"If two of your dependencies are demanding overlapping versions of a library, pip will not necessarily install a version of this library that satisfies both requirements" e.g. https://github.com/pypa/pip/issues/2775
Maybe you can put an article out about that, if one of you guys enjoys doing those :) Sounds like something I'd be interested to read.
We certainly seem to have different definitions of violence, yes.

If 'violence' has been re-defined to the extent that mis-gendering someone is an 'act of violence' (https://everydayfeminism.com/2017/01/misgendering-trans-peop...), then you could certainly argue that ER have acted violently.

EDIT I see I'm being downvoted. Are we not allowed to have a conversation about re-defining words and being intellectually consistent with the re-defined meaning?
Not sure about you, but I am the owner.