skysight-inc/HackerNews huggingface dataset:
Pretty fascinating and also sort of "no duh." Thinking about how those with access to information networks have leveraged the technology throughout history, it seems like it is always used for the purpose of "moral grandstanding."

Social media is just the fully fleshed out network. I'm just thinking about the progression from letters, the pony express, the railroad, the telegraph, the telephone, radio, movies, television, internet, to now social networks.

Haven't those with access to the information network always used it to express why their opinion is right or wrong? The toxicity is maybe just a function of the rapid increase of access. There is now an "infinite" number of those with access to an "infinite" number of listeners. With TV or radio, the listeners are still there, but access to dissemination is highly restricted. With telegraphs or telephones, both access and audience are restricted.

I'm not sure if this problem was ever solved before. Maybe it was just stifled....
She never claimed to be a minimalist. She only claimed to be tidy.
It's a nice demo. But there seems to be a surprising lack of validation? Seems like anyone can delete any other user, or post as anyone else, etc. Then again, I can't read Haskell, so I don't know if there's something preventing that at a higher level than the endpoint logic.
Yeah though grammatical constructs are IMO breaking the rules and their frequency of use would probably be added to the dictionary as compounds, iama, youarea, thereis, .. are all more practical in a cracking dictionary than a few more 18th century salon talk words, etc.
The Guardian covers the story entertainingly https://www.theguardian.com/lifeandstyle/shortcuts/2019/nov/...
> Honestly, the way people have been dehumanizing each other over politics kind of scares me. It reminds me of the way propaganda dehumanizes 'the enemy' in war time. It's not a good way to look at other people, especially not over which political party they voted for.

It reminds me of this:

> And it is triple ultra forbidden to respond to criticism with violence. There are a very few injunctions in the human art of rationality that have no ifs, ands, buts, or escape clauses. This is one of them. Bad argument gets counterargument. Does not get bullet. Never. Never ever never for ever.

https://www.readthesequences.com/Uncritical-Supercriticality

But counterarguments, well, you might not always have one of those. It could be that actually you're wrong about something. And if you're wrong and you still have a big fat angry mob behind you who can shout down anybody who tries to point that out, isn't that better than losing?

No. It isn't. It's better to lose when you're wrong. Because it's the only thing that allows you to win when you're right.

But it still feels bad, and you still have an angry mob at your disposal, and if you're weak you do the wrong thing.

Too many people today are weak. And they, we, should feel bad about that.
Might be because you said "100%". I agree it's very accurate, accurate enough to be worth implementing even, but it certainly isn't 100% accurate.
This is an interesting attack, and certainly looks highly successful in terms of allowing a determined hardware hacker to gain root/bootloader access to a device that the manufacturer has attempted to lock them out of. Glitching with a 6V supply on a 3.3V bus is certainly something I'd want to be a little cautious of if the hardware was more expensive than a $10 dev board - I wouldn't buy a $800 IoT fridge and use this to install alternate firmware just for fun, but it's nice to know it's possible in case my fridge stops working because the manufacturer declares it end-of-life. It's just not clear to me if or how this is a bad thing. The author writes:

> This FATAL exploit allows an attacker to decrypt an encrypted firmware because he is now in possession of the AES Flash Encryption Key.

> Worst case scenario, he is now able to forge his own valid firmware (using the Secure Boot Key) then encrypt it (using the Flash Encryption Key) to replace the original firmware PERMANENTLY.

> This last post closes my security investigation on ESP32, which I consider now as a broken platform.

Isn't that a good thing for me as a consumer? I like the ability to decrypt and modify my own devices. I like that this is a permanent modification, unlike eg. dd-wrt where you have to prevent the bootloader from overwriting your software with that of the manufacturer.

The only thing I can think of that would be really bad is if I had a device with an ESP32 inside physically stolen then reinstalled by an attacker (or a counterfeit sold to me with malicious code from the vendor) and this exploit allowed them to get private data from my network to an Internet location. But they could already just buy or build their own device, ESP32 or not, to do that.

This is only bad for draconian IoT manufacturers who want to enforce their terms of service and artificial limitations on hardware they think consumers are leasing but consumers think they are buying.
Please see the section about job ads on https://news.ycombinator.com/newsfaq.html
ADriving School Wellingborough – Google Search
lol what? Never a thing outside America? What an absurd thing to say
Or, he might split the vote with moderates, and ensure the choice of a more progressive candidate.

Game theory is funny that way.
B-52 bomber's “wrinkles” are a feature, not a flaw
I don't really know what happened. This place used to be excited about new tech nowadays it's... curmudgeonly.
The question isn't whether they're playing the same game. Indeed, it'd be surprising if they were, since the goals and principles of the two parties are often quite different. The question is whether "aha, that other party has decided to do the wrong thing rather than the right thing" is a helpful way to conceptualize the difference.

As another reply to you has shown, it's very easy to find specific differences and elevate them to an all-encompassing explanation, if that's how you decide you want to look at things.
I personally would like to see more efforts going into open source self-host alternatives, and cloud providers enabling one-click distributed mail server deployments that enable all the functionality you'd expect from like Gmail. Such as virtual folders (labels), better mobile apps, and reliable email service. Too much effort lately has been going into cloud hosted solutions, when I know many users would gladly pay $5+ per month for quality self-hosted email service.
I'd probably agree. It might also be a Peter Principle thing where Ballmer/Cook were great at busdev/ops respectively while Gates/Jobs were more inspiring leaders.
If you have an extension like Stylus installed, you can quickly write a new rule. This might also change the saturation of other elements, but I'd be surprised if you wouldn't consider that a benefit.

The desaturation is just a collection of rules like the following:

.c88, .c88 a:link, .c88 a:visited {
color: #888888;
}

If you want to make it darker you could just use the following in a Stylus rule for news.ycombinator.com:

.c5a, .c5a a:link, .c5a a:visited,
.c73, .c73 a:link, .c73 a:visited,
.c82, .c82 a:link, .c82 a:visited,
.c88, .c88 a:link, .c88 a:visited,
.c9c, .c9c a:link, .c9c a:visited,
.cae, .cae a:link, .cae a:visited,
.cbe, .cbe a:link, .cbe a:visited,
.cce, .cce a:link, .cce a:visited,
.cdd, .cdd a:link, .cdd a:visited {
color: #000000 !important;
}
To add to that, small tools are beneficial to the ecosystem, because they can be replaced as needed. Systemd takes advantage of this to replace existing tools, but cannot itself be easily replaced.
And, surprise, she discusses this exact retort to a simplistic summary of her method in the book.

It's fascinating how many people in this thread have never read anything she wrote, take a pithy sentence some other non-reader put forward as an accurate representation of what she stands for, and then "rebuts" her with the most glaringly obvious counter-example.
"NSO" is referred to in the article, but it's never expanded or explained.

Apparently this is the "NSO Group" [1], a private company in Israel that sells "Pegasus" [2] (also referred to in the article).

[1] https://en.wikipedia.org/wiki/NSO_Group

[2] https://en.wikipedia.org/wiki/Pegasus_(spyware)
> If I sign up for Walmart with `walmart@danshumway.com`, I haven't gained any privacy. If I sign up with `walmart@fastmail.com`, I've gained a great deal of privacy.

Depends on your thread model imo. Is it obvious to a human that "@danshumway.com" points to you? Yeah. Has anyone at walmart done the work to teach the computer about this? Probably not.
The Denver Broncos aren't a real NFL team. There is a team in Colorado that goes by that name, but it was created in 1960 by the AFL, and has nothing do to with the NFL other than being an American Football team. I believe the NFL now includes that team, but there are still only 16 "real" NFL teams.
C# Alternative to System.Text.StringBuilder, faster and less memory allocation
Advising NASA
Props for the effort, but who expects a cheap china MCU for consumer products to be resilient against glitching attacks? You don’t use that stuff in high-security settings anyway. For consumers products resilient to advanced hardware attacks, I can only think of the iPhone and some consoles. Anything else?
These critics should spend some time speaking to the medical research community. These aren't new questions.

It kinda reveals the deep underlying assumptions; "of course we can know the results of these interventions in advance, so we must base our ethics on that"... ok, but if you already know the effects, why are you testing them? You're testing them because you don't know. Unfortunately, there's no royal road to science knowledge, and, yeah, that means that some people are going to fail to get positive interventions, and some people are going to get negative interventions. Either that, or nobody gets anything and we just keep blundering on in ignorance. There is no answer where nobody takes any risks and everybody gets the good stuff guaranteed.
This is also viable, though I chose to never forward from Gmail to FastMail. In my case, my plan started long before I picked a replacement provider anyways. Second, forwarding breeds complacency: I wanted to make sure my emails never were seen by a Google server, so I didn't want to not notice that an email was sent at my Gmail, not my own address. (I still occasionally check my Gmail account for stragglers.)
Meet the entrepreneurs turning restaurant delivery into airport food
> or $180 for a cheese knife...

If it costs more, you'll, um, buy fewer of them?
Hakuna Matatagotchi
what is PRC?
Absolutely, check out this paper about using neurofeedback https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5717031/. This technique is purely for psychological disorders. My wife has chronic tinnitus, and my theory is that initial onset of tinnitus is related to physical damage, then it turns chronic because the brain develops a fear response to the noise, which makes it amplify the noise over and over
Again, I believe Nazi Germany is a useful analogy. I do not think it’s a perfect analogy, nor do I think that “actual Hitler” has taken power.

I do believe that civil liberties have been curtailed. For example:

- Not long ago, citizens from certain Muslim countries were unilaterally barred from entering the country. The implementation of this ban was so rushed as to be reckless.

- ICE has systemically violated the rights of citizens and legal asylum seekers. This includes harassment, illegal searches, illegal separations of families, numerous incidents of brutality, etc.

- Notoriously, we have built concentration camps along the Mexican border. Asylum seekers are detained there in conditions which undeniably violate their civil rights. Children have died because they were denied basic care. Hundreds of children have gone missing entirely while under US custody.

- In many US states, access to safe abortion has been severely limited by unconstitutional legislative action.

- Violence against American muslims, jews, black Americans, lgbtq, native Americans and other minorities is at an all time high. Many of the most violent attacks were perpetrated by people who openly confessed to have been inspired by hate speech coming from the President and his allies. The effect of this is that targeted citizens are less safe, and less likely to exercise their rights to free speech because of fear and government-sanctioned intimidation. Here the parallel to the Brown Shirts in Germany is quite strong.

- Trump just pardoned convicted war criminals. This sends a strong message to US military personnel that gratuitous violence and cruelty against civilians will be tolerated. This obviously violates the civil liberties of the people whose liberties our troops were supposed to protect in the first place..

- The EPA has been gutted along with major regulation of corporate pollution. If you consider access to clean air and water a basic civil liberty, then those have been severely curtailed as well.

- Voter suppression, both legal and illegal, is on the rise. Gerrymandering, the abuse of Senatorial powers, abusive purging of voter rolls, the disenfranchisement of former felons, voter intimidation, and outright fraud, all add up to restricting US citizen’s right to fair representation.

- The Judiciary is under attack on two fronts: the current GA is dismantling any semblance of independence from the President’s partisan interests. And the Senate majority is packing federal courts with unqualified loyalists. The result is that we may no longer have an independent judiciary in a few years. Hopefully I don’t have to explain the consequences of that for our civil liberties.
Thanks again boomers
> I assume he has requested and been given permisson to talk freely about it.

I don't assume he has to be, and it's good that people who are that old aren't afraid to talk about what they did then.

It's 50 years ago. To compare, General Groves was the military leader of a whole Manhattan Project published a whole book with the comparable amount of detail not even 20 years after the project, in 1962 ''Now It Can Be Told'':

https://en.wikipedia.org/wiki/Leslie_Groves
> I live an apartment building, so the average Amazon delivery driver drops off 20 or 30 packages as part of a route that probably has hundreds of packages, so probably marginally Amazon has a lot less carbon load for the last leg than me going to Target?

Hard question to answer. As another datapoint, I did hear from some researcher in a podcast that deliveries are ecologically much worse than going to the store. I've mentioned this on HN a few weeks ago[1], but I'll cite the points for convenience. The original[2] is in Flemish, so any translation mistakes are on me. These were the reasons given for why ordering packages is less ecological:

- Many disparate products moved to many individual homes (many to many makes for a lot of 'movements', fragmentation)

- 15-20% of people is not home during a delivery attempt (useless impact)

- Returns are equally bad (people order 8 pairs of shoes knowing they'll send 7 back)

- Different delivery companies cause even more fragmentation (driving to the same home)

If I remember correctly (I didn't watch/listen it back anymore since 24 days), there wasn't really a question about it -- at least in Belgium -- that ordering is worse. Like, no exceptions were mentioned if I remember correctly.

[1] https://news.ycombinator.com/item?id=21373578

[2] https://www.youtube.com/watch?v=IRqKEK_xJvc
A billion-dollar idea: a combination pseudo-outrage, crybully, political correctness, troll, flaming and keyboard warrior pre-filter. And for 2.0: a micropayment cost to comment that adjusts based on social reputation and identity verification (people who give very good, high-signal answers should get some payment or bonuses periodically and per engagement).
Nick Brown Smelled Bull (2013)
So cost of ownership over time is similar and competitive for the non-free Stadia. But I'm not sure I really care about that, or that most people think of money that way. Its just easier to part with a few bucks every month for most people, than it is to part with $400 at one time.

You can look at the cost another way: Buying a console is like buying a 5-year pre-paid plan for a subscription service. That puts it in clearer terms, to me.

Anyhow, once Stadia's free version is released, unless its drastically limited in someway, it will be cheaper than everything. Honestly, I don't know why they didn't advertise as a primarily free service. People think of it as a paid service first, that has a crappy free tier, rather than a free service that has a value-add pro tier.
Strange optics not to mention the elephant in the room.

I could see them hitting some roadblocks and wanting to try again to get into China, but that would be a reasonable thing to come out and say.

It also would be reasonable to come out and say they've changed their minds due to political climate or some other risks.

Instead its... the new guy is busy?
Except an attacker operating at that scale would just start decapping the chips and inspecting them.
The earliest Malthusians were wrong in a lot of their models, but especially in their models regarding climate. Global population is rarely more than a red herring in climate models, and should be among the least of our concerns right now.

So too the "global carbon emissions arms race" seems to be a wildly popular red herring. Yes, China has a brief window now where they have the highest emissions, but China is also moving the fastest at mitigating carbon emissions and is on track at moving a lot faster than the US or EU in cracking down on carbon emissions. Perhaps ironically to someone of your apparent perspective, but the higher population density of China, and predominance in massive river and coastal cities, has left China with far more incentive and immediate climate crisis concerns than most of the US and some of Europe are currently facing. The US and EU "developed world" seems more at risk of being "rolled over" by the efficiency gains China is making in "green" markets than any threat that China is just going stockpile gas in some Mad Max style race to the bottom (of the oil well). Your next car could be Chinese because they are taking Battery Electric seriously, whereas US manufacturers still have some weird idea that the market for BEV is just a toy to play with. (At least the EU manufacturers aren't rolling over and practically giving the market away.)
This could be solved in theory by a streaming service that didn't try to lock you in. Alas, almost every streaming service of every kind does want to lock you in, and often the licensing agreements necessary to offer competitive pricing require it.

But having a pricier option where you can save your content offline would be a way to satisfy both audiences.

Although in this case, I personally think a pure subscription model should replace the fee + pay-per-game model as the basic streaming option.
Destructuring parameters with default values.

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
Some additional info is in Espressif's notification (CVE-2019-17391) which is linked to in the write up:
https://www.espressif.com/en/news/Security_Advisory_Concerni...

The fix is in ESP32-D0WD-V3 and ESP32-WROVER-E, but of course that doesn't do you any good if you've already shipped product.
I was going to say that it looks like an egg, so you should use the
Japanese word for “egg”… which turns out to be “tamago”. TIL!
People's Republic of China
Tangentially:

I've seen several blog posts from Google about using fakes and 'hermetic servers' for testing. We use GCP for our product, and unfortunately, Google doesn't seem to care much about making this easy. For example, I think I saw only one or two languages for which the Google Storage client libraries provided "fakes" of a Google Storage server. For PubSub (and maybe one or two other services?) there is the PubSub Emulator, which is unfortunately in Java and isn't supported by any of the CLI tools.

For all their love of fakes and hermetic servers, it would be awesome if they provided them for all the GCP services.
It's the sanity check to see if a language really is the worst someone has seen.
Not much info on what they can actually do with it
Might as well call the PC a broken platform since you can install your own OS.

Imo a platform is broken if the user can't control it.
Using jet stream for sustainable airship and balloon transportation
Yes, It is.
Probably in prep for the president apple visit. Which included shooting a campaign ad and "opening the new" existing factory for the mac pro factory in Texas.
By that logic, CSS is not a web technology because it can also be used in GUI toolkits like GTK[1]. HTML is used in ePUB files[2], so I guess it's not a web technology either...

Would protocols that use HTTP for transport like gRPC[3] mean that HTTP is not a web technology either? I don't know what is a web technology anymore...

[1] https://developer.gnome.org/gtk3/stable/chap-css-overview.ht...

[2] https://en.wikipedia.org/wiki/EPUB

[3] https://en.wikipedia.org/wiki/GRPC
Beating Wc with C
The CCP figured there is not much to gain from IP theft because all companies were local so no traction.
> Authentic in terms of DNS. That means using and enforcing DKIM at the minimum.

Sure, these are basic things that are generally used as strong signals, but all this does is filter out the incompetent spammers. If you're sending from yahoo or from gmail, you've already solved the reputation problem. And there are other ways of doing the same.

> If 10000 yahoo accounts are sending spam emails, then that's a Yahoo problem. Yes, I would refuse to accept incoming mail from @yahoo.com until they've fixed their complicity.

I'd expect that this is approximately the baseline number of yahoo accounts sending spam when they aren't being actively targeted. Its less than 1% of 1% of the active monthly accounts on yahoo. So you'd like to just block yahoo constantly?

> I disagree about not knowing that they do.

Sure they know, in the sense that I also know that there are always people spamming from every major ISP. That doesn't mean that they can immediately address things. And while you're busy blocking all comcast users from sending your users email, your users are busy moving to a different email provider that identifies individual spam senders so that they can still receive legitimate email.

In closing, a simple question: if solving spam is this straightforward, why hasn't an upstart competitor (yahoo, protonmail, etc.) taken advantage of this strategy to fix the spam problem? It appears you're presuming a centralized system, which defeats the point of email and significantly simplifies the problem.
Whoever builds a simple user experience for something so complicated will hopefully end up being the next google. There is a sore need for 'woke' consumers all over the world for the true future cost of their purchases. At this point money is no longer the sole facet of cost.
Oh no, I'm actually glad.

There's a case to be made that the benefit of a recession is that it kills off these types of wildly unsustainable businesses as they're forced to prove their model. It's been over a decade since the last one. This allows us to remove some of the froth from the market without necessarily going through the same level of hardship en route.
The first I heard of it in the 1980s. TI used a laser to project point on a rotating surface. Then someone used a flexible mirror in front of a speaker. The mirror would flex convex/concave changing the apparent distance to a vector display screen.

Just saying a modern 1000fps display could do this much better.
HN doesn't have a no politics policy.

https://news.ycombinator.com/item?id=17014869

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

Edit: maybe I should add that we do moderate posts that are just political, i.e. don't have an intellectually curious angle, as well as threads that depart from the path of curious discussion and sink into flames.