skysight-inc/HackerNews huggingface dataset:
I like the IDEA but the implementation is not the good one.

Instead, this is what will be elegant:

pub enum SearchOption {
Left,
Full,
}

pub enum SearchOptionBeta:SearchOption {
Rigth,
}

Yep, extending struct and enums.

This mean MATCH touch "SearchOption" as the "stable" API and the inner crate touch SearchOptionBeta. When SearchOptionBeta need magic is that it match SearchOption too. Later is just a matter of replace one for the other.

And this is even useful for more than to stabilize certain fields or arms...
> But we are finally seeing emergence of desktop applications from major players for Linux because of electron.

In my experience, Electron applications seldomly follow the UI conventions of the host OS or offer much in terms of integration.

If the desktop app is really just the web site in a locked-down browser, then what benefits does this offer to just the normal web page?
Which is why slavery was abolished in the end. But it doesn't happen in a day.
And in full transparency in case it comes up here we are also investigating some intermittent access issues to our dashboard (only affects some users not all). Status here: https://status.auth0.com/incidents/1j399kcrzgzr
That's not hard, there are many ways to get your name and address ranging from data breaches to public tax records. So what do you want to do about it? Make reselling an address illegal? Half the economy would collapse out of inability to function; your doctor couldn't pay a service to send out their bill, for example. That's a US example but there are equivalents in other countries.
BMW has had auto dimming side mirrors for years in addition to the rear view mirror.
What Are “Blocks” in TinaCMS?
I still find it inappropriate for a FOSS project to promote closed non federated communication tools. Hopefully they won't be stuck with Discord because "we already switched to it".
The best thing to do is to stop driving. The whole idea is bad. We should be living in urban environments where we don't need to drive at all; driving is dangerous (30,000 people killed in the US every year, not to mention maimings), and an ecological disaster due to pollution and sprawl.
Google Cloud Is (Probably) Here to Stay
>but what's stopping the enclave from emulating the execution while also on the side performing some malicious operation?

That's what remote attestation is supposed to prevent. https://en.wikipedia.org/wiki/Trusted_Computing#Remote_attes...

Basically you're trusting the processor to truthfully attest its execution state. You can't emulate it because the attestation is signed with a key that's burned into the processor.
Are political automated calls "robocalls" or are they (strangely) exempt.
That seems to br the general sentiment in this thread. I hope somebody of power within Github is reading this, or someone that can pass the info along to such a person.
Names are known to be a vector for bias in resumes: https://www.nber.org/papers/w9873
Color me cynical, but I don't see how the dollar amount of the fine matters if it can't be effectively collected anyway. Recently it was revealed that the FCC had collected a few thousand dollars of $208 million levied in fines. [1] How is a bigger fine different?

[1] https://www.google.com/url?sa=t&source=web&rct=j&url=https:/...
The performance of Microsoft Word seems to be a universal constant across all known hardware.
How to Get a Job at a Startup Without a Computer Science Degree
Ask HN: Why is it so expensive to deploy a container to the cloud?
I have a variety of hobby projects that I deploy as Docker images to avoid vendor lock-in. I'd prefer to deploy these to a managed platform because I don't want to worry about OS updates, monitoring, failover, etc.

It seems like this should be extremely cheap to host: a provider could slice up a $5 VPS to host 10 services, selling for somewhere between $0.50 - $2.00 per service after overhead. Yet every time I price out cloud providers with managed Docker platforms the cost is substantially more.

Heroku's free tier only covers a single daemon or a handful of web services, and jumps to $7/service minimum after that. That gets expensive quickly.

AWS ElasticBeanstalk is ~$25 after you use up the free year, and AppEngine Flexible Environments looks similar.

I see a handful of other providers I've never heard of and am not sure I can trust.

Where are the cheap Docker hosts? Why can't I rent a fraction of a VPS instead of a whole one?
He probably didn't know that he was risking jail.
BR, Blockchain Reality, compress your acronyms on a DLT, earn rewards to spend on virtual real estate
> Most machines I work with these days take minutes to get rolling.

Minutes? That sounds exaggerated.

How powerful was your Atari ST compared to other machines at the time versus the machines you work with these days compared to other machines available?

Because I'm not even on a particularly new machine and from a powered off state I'm logged into Windows and starting applications within 5 seconds. And for example that's at 7680x2880 resolution, not 640x400.
Can we loop in automated political calls as robocalls?
Believing is something I'll do in houses of worship. To learn whether it will be effective against pickpockets, let's wait for (or do) more research instead? I don't find it that far-fetched or unlikely.
If data is collected about you without your consent, that collection is itself harm, because your rights and intent are being actively bypassed.

That's plenty harm enough all by itself.
Dude, if you're referencing information theory you clearly don't understand how to create tech. Obviously they're not trying to simulate the universe accurately lol. Simulating the real world for specific use-cases to solve computer vision for practical applications is super interesting.
If they have customers, makes sense.
From what I understand: The blog answers, how does one store a secret without it being subject to brute force (and other offline) attacks [0], with:

Generation of the secret (on the client):

1. Generate sk: Key-stretch user-provided pass-phrase to 256 bits using Argon2 [1].

2. Generate a verifiable auth-token, token = hmac-sha256(sk, "auth key encrpytion") [2]

3. Generate a split secret-key:

3a. split1 = hmac-sha256(sk, "master key encryption")

3b. split2 = high-entropy-random-256-bits

4. Send key-pair (token, split2) to remote machines running BOLTed [3] server code in a SGX enclave [4] that replicate it using raft-consensus protocol [5] over Noise [6] in an hardware-encrypted RAM [7] and never on-disk.

5. Generate master-key = hmac-sha256(split1, split2)

6. Generate as many application-keys as required, and use these to encrypt user's data, for instance, app-key-sge = hmac-sha256(master_key, "social graph encryption") and so on...

-

Recovery of the secret (by the client):

1. On the client, using user-provided pass-phrase, generate sk, token, and split1, like above.

2. Send the token to a remote machine. If the token is valid, remote lets the client retrieve split2 [8] with which the client can now generate the master-key and app-keys, as before.

3. If the token sent is invalid, remote lets the client retry a very limited number of times before destroying the secret key-pair.

---

[0] From the post, ...we’ve been working on new techniques based on secure enclaves and key splitting that are designed to enhance and expand general capabilities for private cloud storage. Our aim is to unlock new possibilities and new functionality within Signal which require cross-platform long-term durable state, while verifiably keeping this state inaccessible to everyone but the user who created it.

[1] https://en.wikipedia.org/wiki/Argon2 (end-users prefer shorter passwords but one gets better entropy with longer passwords... which is what Argon2 brings to the table)

[2] https://en.wikipedia.org/wiki/HMAC

[3] https://github.com/facebookincubator/BOLT (prevents speculative execution exploits: https://en.wikipedia.org/wiki/Speculative_execution)

[4] https://blog.quarkslab.com/overview-of-intel-sgx-part-1-sgx-... (used for strict code and hardware attestation)

[5] https://www.youtube-nocookie.com/embed/YbZ3zDzDnrw

[6] http://www.noiseprotocol.org/ (Wireguard and WhatsApp use it, too, for end-to-end communication)

[7] https://eprint.iacr.org/2016/204.pdf

[8] Thanks u/jlund: https://news.ycombinator.com/item?id=21839394
That's assuming human minds and computers won't exponentially increase their processing capabilities. Moore's law disproves the later and I hope Neuralink or some other crazy tech company will disprove the former. That's pretty much the hope of all transhumanists.
Shared cache is no longer a thing!
Lazerlights are freaking expensive. Well above $10k was normal a few years ago.
I wonder if this is why turkey post’s tracking has been down for days.
I've been playing around with it for a bit, but I don't really see what it has to offer that Vagrant doesn't already do.

"multipass launch" and "multipass shell" do the same as "vagrant up" and "vagrant ssh".

Vagrant has been around since 2010 and is super mature by now. Multipass seems to be limited to LTS Ubuntu releases, for now at least. There are Vagrant boxes for all Ubuntu releases but also Debian, CentOS or whatever else you would want to run.
You're right, that does sound like unjustified whining on my part. I looked up the email to check why it might have rubbed me the wrong way. The reason actually given for not sharing feedback was privacy--mine and theirs. Protecting my privacy didn't make any sense--I'm the one asking for it. If privacy of the five interviewers was a concern they could have just anonymized a bullet or two. If they're worried about liability they should just say that.
Spending more on nuclear subsidies in order to promote adoption is probably the only way that we'll see any significant growth of nuclear power. I'm all for it. But that still indicates that it's too expensive to compete in a private market.

I'm not convinced by a graph like you presented though. That's a measurement of subsidies which were spent, not subsidies which were available. In other words, if more nuclear power plants were built we'd be seeing a much higher amount being spent on subsidizing nuclear power. Since no one is building nuclear (thus taking advantage of available subsidies) and we are dropping wind turbines all over the place, it's only natural that renewable subsidies would far exceed nuclear.
Yes, the trend is upward, agrees with models that have much more dire projections in the near future.
Learn and Understand How These Habits Are Responsible for Making You Look Older
Domain randomization works well for robotics tasks.
What is the 'salmon cannon' and how do the fish feel about it?
There's no way that wireless links will ever be faster than backbone fiber - the whole notion makes very little sense. Starlink may be useful in other ways, of course.
I also tried writing an AI for Codenames a couple of years ago, with the help from some friends.
Interestingly, we also found out the hard way that the word "round" aren't used in the same contexts as things that actually are round, so our AI also struggled to connect "round" with words like "Jupiter" or even "Sphere". I'm not sure how to fix that, but maybe knowledge graphs could help?

But I also thought it was surprising how well it worked most of the time! It wasn't quite as good as a human spymaster, but with the right choice of scoring function we could actually get a model based on word embeddings to play a pretty reasonable game of Codenames.

https://github.com/Gullesnuffs/Codenames
More precisely: SpaceX is lobbying against Amazon getting a waiver on rules that SpaceX and other companies spent years complying with.
Seems everyone commenting on the post from earlier today totally missed the ultimate point of his post, which was UI bloat and failing to take advantage of keyboard efficiencies. It's almost like the large majority of them only read the title...
Until we start hiring mercenaries to set the law aside and hunt these people down across borders, I doubt a dollar will ever be collected. Heads on pikes optional.
Why are the updates on Shaken/Stir gone totally silent?
Google Cloud Platform Security Best Practices
> > SpaceX Is Lobbying Against Amazon’s Internet-Beaming Satellites

> Amazon is trying to get a waiver to FCC rules that companies like SpaceX and OneWeb had to follow.

Title is more than a little misleading. Space is a highly regulated business (for many good reasons) and forcing your competitors to comply with the rules is a very valid strategy.
To me, the obvious solution is to force providers to provide originator information (including name, number/ip, phone company, and country) to the end user to matter what. Then I can block whatever I want with a UBO style list.
12-in-1: Facebook AI’s New Framework Tackles Multiple Vision-and-Language Tasks
> The bill requires carriers to verify that calls are legitimate before they reach consumers;

That's in general what the bill provides. What else were you expecting to be enforced?
> branches cost nothing. They are very lightweight, unlike in SVN, you should create as many as you want.

Ahhhh. So the distinction matters if you bring in a bad assumption from SVN. It had never occurred to me that a labeled branch would be noticeably more expensive than the weight of the commits making up the branch.

> you can put a branch anywhere you want. You like an old commit and wanna try something new from it? Plant your flag here and start working.

Well... yeah. That's how you create branches. You go to the commit you want to branch from, and you run `git branch`. The fact that you can do this is immediately implied by the way you have to do it. I don't understand how someone could believe something different.

> deleted a branch by mistake ? No worry, it's just a label. You can recreate it in a blink.

This one's a little weirder; if you delete a branch, you _can_ recreate it, but it's only blink-of-an-eye easy to do if there's another branch containing the head of the old branch. Otherwise you're mucking around in the internal data.

> this branch is so good it should be master? Sure you can. Just swap the labels.

This is another one where I don't see how you would believe something different. Even if branches were huge, heavyweight objects, they have names, and changing the name of something is generally not so hard to do. There's a command solely for the purpose of renaming branches. (`git branch -m`)

> moving to a branch is cheap. Apart from moving the files to the working copy, it's just a matter of changing point of view on the history. Switch to branches often, it's fast.

And in my mental model, a checkout is indeed a (potentially mass) update to file contents (and, if applicable, file existence). Saying "apart from moving the files to the working copy" sounds -- to my ears -- kind of like the chestnut that "controlled for height, taller men earn no more than short men do". Setting up the working copy is the thing I'm looking to accomplish in a checkout.

I can imagine two types of people who want git training:

- Never used version control.

- Used subversion heavily; trying to update to the new new thing.

In your opinion, how many of these points are "git gotchas" that the first group need to be trained in, and how many are "subversion gotchas" that only really come up for the second group?
> If you want to use cloud init, there is a vagrant provisioner that supports it

Are you referring to this? Looks like it only works for virtualbox provider. https://github.com/jameskeane/vagrant-cloudinit

My main point is simplicity wins. No need to mess with providers and plugins and tooling/provider/plugin specific provisioning logistics.

Cloud-init is becoming the de-facto machine provisioning format, it's great to be able to hack on it locally and get the same results elsewhere. Sharing it is great as well, install multipass and point to the cloud-config. Done.

> If you destroy the machine the provisioning will need to run again - yes. But why would you destroy the machine if you don’t want it to start from scratch? But what toiling is there? Once the provisioners are defined, you just let them run - how is that different than a cloud init provisioned vm?

Fair enough! I agree which you here it was probably a bad example on my part.

> Once the provisioners are defined, you just let them run - how is that different than a cloud init provisioned vm?

Which provisioner for which provider? And what plugins does it need? cloud-init is just more simple and portable to use IMO.
Google Play Store is reportedly failing to show newly published apps in search
It seems the specifically designed logic to fail at a certain date is the reason. If stuff breaks because of a screwup, or at least something that people can be convinced is a routine screwup, that's one thing. Actually creating a new module to make something fail is something else.

It's like if the plumber designed, built, and installed a device specifically to make your plumbing leak or clog or something at a specific point in the future, instead of just installing a normal and expected device incorrectly.

The law does tend to take intentions into account for crimes and punishment. Killing somebody by a freak accident is different from making a plan in advance to kill somebody and executing it.

This does make it feel rather odd that it's legal to DRM things though.
>I still don’t know how we are going to be able to validate the remote attestation comes from the enclave and not, say, a virtualized one that just logs all the secrets but still attests correctly

by checking that the attestation is signed with the Intel key and not some self signed key?
Related: the essay "solitude and leadership", also well discussed on HN: https://theamericanscholar.org/solitude-and-leadership/
You haven't addressed parent's point. Until you do, your suggestions are laughable.
Any amount of jail time for non-violent crimes seems excessive.
My phone number was listed for my business about a decade ago. I get non-stop robocalls about healthcare every time open enrollment rolls around. I just block everyone that isn't on my contact list, but would love a better solution.
Fortunately we now have webasm, which will allow developers to write customized web browsers that will recreate the same HTML/Javascript/DOM web runtime environment that we have now, only somewhat less efficiently.
Reverse Engineering the DirecTV App’s DVR Authentication
My daily driver has extremely low-output headlights (old school sealed beam headlights). They work great, my eyes adjust to them just fine, except when I'm around other drivers with modern headlights.
Doesn't windows do a type of hibernate rather than a full shutdown.
Looks pretty nice and reminds me of Docker desktop. Are there any plans to make it easy to consume other non Ubuntu vms? We built something similar for Mac for Bitnami VMs and would be great to extend it to Windows and Linux
You might be interested in https://en.wikipedia.org/wiki/Tarski%27s_undefinability_theo....
I said "paragraphs-at-a-time", not "paragraph-at-a-time". You can't type paragraphs at a time on IRC because a single message can't contain newlines.

But even then, paragraph-at-a-time is hard on IRC because there's a max line length that's surprisingly short (and usually just truncates the rest of your message once you exceed it!), and just because you'd stand out as being the person writing much more than everyone else and being slow to reply. IRC simply isn't a medium designed for carefully considered thought like that.
"John, we must destroy Skynet now."
Fedora has https://virt-manager.org/
Is using some other encryption for client interactions common vs just using TLS? I don't think I've seen anyone ever recommend any of these things.

"You can't simply send a single Javascript file over SSL/TLS. You have to send all the page content over SSL/TLS."

Is this a common problem in some way? It doesn't seem like a big deal unless you are trying to shave a few bytes off of your traffic.
Possible oldest fossil forest found in New York state
I read this because it's an interesting question but the article is just an advertisment for the poster's company. I didn't really learn anything and half-way through felt like a sucker.
This, not to mention programming languages in itself is sort of English ( Especially in Ruby ).

>If Tencent is unable to cross that bar, then the project should absolutely be rejected from the Linux foundation.

I could bet $100 dollar the result of that would then be politics.
You're comparing an implementation to an interface. Do you really think that's valid?
The default heuristic is that if someone sends a message on Matrix which is longer than 3 lines, it gets sent as a pastebin to IRC. This feels significantly better than spamming an N-line paste into IRC, which could be seen as even more toxic.

Open to suggestions on how to improve it, though...
I always try to buy directly from the supplier, if possible, rather than play the Amazon lottery. Amazon has way too many fakes and I’ve been burned too many times. I found it interesting that ThermoWorks is also wary of Amazon, and glad that they acknowledge it!
Yes, but powdery flurries are blown off by a light breeze not to mention driving at 25+ mph, so wipers don't often need to be used.
The ability for my country to forecast expenses and protect the safety and security of its citizens -- to name a couple of examples.
How to create a programmatically switchable USB hub – TestDevLab Blog
But then how do you simulate, or imagine all the possible ways of falling and all the possible places this could happen? You have one sample, that's all. Ultimately, you have to use domain knowledge, but domain knowledge comes from observed data. High fidelity comes from having a lot of data. This takes you back to ground one.
FedEx and UPS are complete shit, at least in my 10+ years of ordering packages. Email isn't formal and too easy to fake.
Just tested mine from totally off to login screen, took slightly over 12 seconds.
I don't know but political calls can be worst because they could be microtargeting you.
Looks fairly comparable, but the writeup at https://docs.cumulusnetworks.com/cumulus-vx/Development-Envi... makes me think it might not quite treat "standard Linux-world solutions" as first class citizens. (Not to mention "vagrant plugin install ..." also looks a lot like a parallel package manager.)
Thanks for the downvote, Greta
I completely agree it's bad UI design, but it's also become the standard. Some modern "standard" did away with buttons that look like the buttons we spent 20 years learning the look of, scroll bars that look like the scroll bars we spent 20 years learning the look of, hotkeys with underlined letters that we spent 20 years looking for and learning to speed our interaction with frequently-used programs.

It's absolutely bad UI design, but I think it's become the rule rather than the exception. It's just "prettier", according to some jerk who never used a hotkey in his life.
TinyTinyRSS is how I got to this page just now. Not google reader, but pretty reasonable.
And to not have to worry about the infrastructure gatekeepers.
It seems you have a lot of energy to spend on this online debate, and I do not.
This seems sorta unethical, like this could very easily be biased against one group by training data. Then if this were rolled out to a Target, they could use this to profile people and just point to the "algorithm". Oh, the computer says you look "shady", you can't shop here...
They were exempt in the old law so I doubt that's changed