skysight-inc/HackerNews huggingface dataset:
> “The resolution as originally drafted placed unnecessary hurdles for mothers seeking to provide nutrition to their children,” an H.H.S. spokesman said in an email. “We recognize not all women are able to breast-feed for a variety of reasons. These women should have the choice and access to alternatives for the health of their babies, and not be stigmatized for the ways in which they are able to do so.”

I'm curious what those hurdles were.
Yes, Ethereum is transitioning to proof of stake.

Proof of stake is more secure than proof of work because an attacker must acquire a large amount of ETH each time they attempt an attack. Attacks against proof of stake are incredibly capital-inefficient.
If that were true, the people would have renamed them back 70 years ago when India took back control, just as a symbol of regaining control. They didn't.

Failing that, local culture would refer to those cities by those reticent names somewhere. Local newspapers, pamphlets, propaganda material. No evidence of that.
> If a big crypto-community notices an attack, the cost of a 51% attack would rise

Would it though, really? Why?

On the contrary, someone performing a 51% attack can and will freeze out all other miners, leaving them operating at a pure loss. If the attacker manages to keep up the attack, he will be able to bankrupt the competing miners, forcing them to turn off their hash power, and thus lowering the cost for himself.
Your original comment sounded a bit negative towards Qt, but it sounds like either the company was not legally complying with the license (in which case Qt was owed some money) or the company found some benefit in the paid product. In either case, I'm not sure there's a way I would view it negatively (unless Qt changed licensing on some used components such that the company was in compliance in the past but ended up unknowingly not being compliant by the time the rep was talking with them).

Talking to a sales rep isn't always a bad thing. Sometimes they let you know interesting things that are for offer you didn't know about, but would have bought if you did (or can give you trials of things you've been interested in but unwilling to pull the trigger on because you weren't sure how it would work).
I think it's fair to say that any of Google's individual technologies can be replicated in fairly short order, but the problem is that the combined effect of Google's collective suite of tools is powerful.

Yes, I can build a Gmail clone in a few months. No, I can't get Android Assistant to automatically read invitations from it, add them to my calendar, generate maps to the event on the fly, and tell me when I need to leave to avoid being late to get there.

So yeah, it's a moat, and it's a pretty damned big one.
The market is pretty irrational at the moment, throwing trillions of dollars at almost everything with non-negative returns, and as such almost everything Google does as a company right at this moment doesn’t really matter for their share price, they’re too big not to attract buyers for their shares (I suspect mostly index funds).
It made sense to boycott South Africa during apartheid, and it makes sense to boycott Israel today.
There are a lot of Bitcoin advocates that would attack out of motivations other than (short-term) profit.
Show HN: Generate karaoke video for any song in any language for free
There is absolutely no way to 51% attack a major coin like Bitcoin for as little as $700k an hour. They are extrapolating from Nicehash's mining rental prices, but Nicehash doesn't have anything like the capacity you'd need.

You can see here[1] that nicehash has about 500 PH/s (500,000 TH/s) available for rent. However, Bitcoin's total hash rate right now is 100,000,000 TH/s[2]. This means that if you rented out the entire nicehash market, you'd have 0.5% of the hash rate you need.

Could you get the other 99.5% by buying lots of mining hardware? Theoretically yes, but realistically no. Bitmain is a major supplier of this kind of hardware, so let's use their prices as a reference. They're currently promoting a 67 TH/s unit for $1585 [3]. You would need more than 1.4 million of these units, at a cost of over $2.2 billion dollars. Not that any supplier can fill an order like that quickly.

And we haven't even gotten to the power and operations costs. You'd need dozens of huge data centers to run all this hardware, each one consuming astronomical amounts of electricity. You'd probably pick your data center locations based on availability of cheap power and labor, and you'd become a major commercial presence in each of those towns. The local papers would have photos of you shaking hands with the mayor as your data centers open up. Everyone would know what you're doing, including the FBI.

[1] https://www.nicehash.com/my/marketplace/SHA256
[2] https://www.blockchain.com/en/charts/hash-rate
[3] https://shop.bitmain.com/product/detail?pid=0002020011715132...
I think you're talking about "advertising," which is != "marketing."

To continue with my analogy, it's like saying "spam is bad, therefore all email is bad, and email is created by programming, therefore all programming is bad."
Not everyone's development environment is connected to the Internet.

Additionally, trying to compile the project from source is extremely painful compared to most projects: it's not really possible in any obvious way to duplicate the output of the binary distribution without looking at the guts of Qt's continuous integration environment for weeks on end.
By definition, to execute a 51% attack on Bitcoin, you would need to buy computing power greater than 100% of the entire network's current computing power. In other words, you would single-handedly double the global demand for computing power in this market.

Is there enough supply readily available to satisfy a doubling of global demand? How much would it cost to bring such computing power online? How quickly could it be done? Wouldn't the price of computing power skyrocket?

EDIT: Meekro's comment elsewhere on this page makes essentially the same point in a more concrete manner: https://news.ycombinator.com/item?id=22161500 -- I think his comment is better; read it. Also, see bencxr's analogy with trying to control 51% of global oil supply: https://news.ycombinator.com/item?id=22161575
I want great services, like email, and I’m willing to pay for them.
An Illustrated Reading List of Groundbreaking Mixed-Media Literature
Because ZFS raidz1 is not raid5, it's even labelled differently. Yes, it is a parity-based raid, but has slightly different semantics.
There are many more ways to make money off a 51% attack than just altering transactions.
Note that this is the same person whose message was allegedly censored.

The actual reason the message didn't reach the mailing list it that he's banned there.
Antirez Live Twitch
The tooling is just unstable in general in my experience. You never know when things will get into a bad state and you have to kill everything and clear your caches and restart. And then in my experience styles don't actually behave the same way on iOS and Android. They also continue to make breaking changes so you always have to be worried about not only your own code but your dependencies handling that appropriately. The debugger itself is also prone to crashing and requiring full restarts at inconvenient times. Overall, I feel like the amount of random bullshit and platform specific workarounds I have to do makes it so I'm not really saving time VS having 2 native apps and I'm less confident about the overall quality of my software. There's also A LOT of valuable things in the native SDKs that no quality wrapper exists for, so you're missing out on a lot of productivity benefits of the underlying platforms.
What's this about Transmit? Source for that? I use Transmit religiously and haven't heard anything about this.
I do notice it is a prime example of Godwin's law.

Except it didn't involve that kind of rhetoric at all.

Not until you brought it into the conversation.
"You yourself foolishly say, "Even in a 1% interest account, [US]$82k would make a good amount of interest to use for spending," apparently unaware that such a low interest rate is insufficient to compensate for even the lower rate of inflation"

You know what gives you much less protection against inflation? 0% interest. At least a 1% rate will significantly decrease the rate at which you lose spending power. If you keep your wealth in cash, you might as well light a few percent of it on fire every year.

And really, I'm not sure what your point is in general, you're sort of all over the place. You started out strong pointing out that older people, especially those from other countries, may well remember a time when putting all your money in the bank was a bad risk.

But then you sort of drift off and start implying that the risk of carrying your entire life savings in cash (monumentally fucking risky) is equivalent to the risk of bank and government insolvency (incredibly low risk). You really lost me there.

Also, if you think bitcoin is the answer to this, I have some bad news for you.
Actors with similar skull shapes might be used for more convincing deep fakes.
But they're alternatives that don't interoperate without more work. That's the advantage an ecosystem offers.
I release all the time, you can try it now :) I'm looking for feedback -- a 5 minute first impression is valuable.

http://www.oilshell.org/releases.html

The home page has links on "where to send feedback" and what to try / "help wanted":

http://www.oilshell.org/
For Linux distributions and even Homebrew on Mac OS nothing will change as they're not using "official binaries".
Does Godot support vector graphics?

Another good alternative would be JUCE. It's made for audio dev but it is crossplatform and has support for resolution independent UIs. It supports OpenGL and AFAIK Metal and Vulkan support are on the way.

https://juce.com/

Also Flutter will support desktop at some point.
I mean there are a couple ways to look at that. For me it's recognizing that building trust as a brand is part of creating value. The pump and dump scheme that you're describing is about exfiltrating that value from the brand.

But that doesn't really work until either the company is in a situation where you need to pump and dump to exit or it's in late enough stage that the leaders/owners want to exit/retire. Either way the long term health of the company and brand don't matter, by that point it doesn't matter to build trust with customers.
They can enforce it for downloads from their site. By adding some non-free component into that process they can make it hard for others to ship those packages.

However as long as they use (L)GPL and don't play trademark games, they can't stop others from providing builds.

For such builds there is a question how trustworthy they are (afaik there are no reproducible builds for Qt) and how hard maintaining such builds is.
I have worked there, in security, so yes.
>I'm curious what those hurdles were.

Made it harder for nestlè to make money marketing baby formula.
Memrise is better as its more structured. But it's only as a supplement. Duolingo is also a good supplement, not the primary tool. Best to take some class and drill textbooks with fill-in exercises. Then books with short texts on different topics - highlight words, memorize. Then find ways to practice in real life.

Yes people say they used Duolingo to being close to fluent, most people who speak very bad grammar and mix tenses but people don't correct them mush as they get the point. So most are unaware. I speak it from first hand experience knowing about 10 people like that.
At least they go out of their way to make sure we are free to use Linux or Mac (in addition to Windows) if we want as long as we don't bother them with end user support (VPN questions are fkne though).
One issue with all antivirus on windows, including defender, is the performance impact. It seems to be dreadfully single-threaded, or at least make single-threaded workloads even worse. Monitoring CPU use during updates easily shows this, there are periods where a single core is busy with the defender service and nothing else is happening.

Another issue that while microsoft's incentives may be better aligned it still fundamentally is an antivirus and thus an increase in attacksurface. There have been exploits against it[0] and it turned out that it did things with SYSTEM privileges and no sandboxing.

[0] https://bugs.chromium.org/p/project-zero/issues/list?can=1&q...
I do not think it would be a good idea to use file system level snapshotting for backing up a database. The database "knows better" about its internals, and can give more guarantees about the consistency of its data. I would trust a filesystem-levdl backup only as a last resort.
The leader in the space is Quickbase. They seem to be doing well, and worth at least a billion. https://pitchbook.com/newsletter/vista-to-acquire-quick-base...
The thing is that the developer has the choice to implement it or not.

On the other hand, Microsoft didn't get a say about LibreOffice being able to read it's files.
Stores that sell goods worth 700k in BTC?
Poll: Freedom Dividend
would you vote for a $1000 / month for yourself ?
So: Short a large amount of bitcoins, 51% attack until value plunges, earn massive amounts of money.

Of course, the problem with this is that there is no exchange that you can trust enough to actually do this.
I'm aware of that. But that is also partly my point, before ribbon there was 'File->Import...' which did essentially the same thing but at least for me (and many users I work with) was more discoverable.

Another thing is that LO Calc will present you with text import dialog when you open anything vaguely text like and also when you paste multiline plain text from clipboard.
If you're into lambda calculus or artificial life, then here is a landing page I made for several of my (and contributors) projects. You have here a lambda calculus parser and graphic rewrites reducer, a collection of artificial life animations which you can replay in js, graphical quines, presentations slides, you name it.

https://chemlambda.github.io/index.html
I'd quite like a world where both were recognized as potentially toxic and held in check by decent people.

Your attempt to present us with a false dichotomy is very suspicious.

You are either blinded by ideology or pushing an agenda.
Reminds me somewhat similar - CEO of Wolfram developed a nice way of record keeping: https://writings.stephenwolfram.com/2019/02/seeking-the-prod...

By the way, is there, by chance, a "note taking/indexing tool from photo"? I'd like to be able to take a photo of an title/abstract of computer science paper with my phone. And then be able to find it, by approximate date and keywords. (I use Android. Seems like something relatively easy to hack, actually, on top of Google photos.)
> all digital trace I'm leaving (tweets, internet comments, annotations)

I would be open to the idea of a tool which combines the entirety of my digital presence at any point in time in a single platform. Kinda like a dynamically updated list which updates itself - every time a linked account makes a comment, 'likes' a post or performs any activity that may link it back to me.
I suspect the care put into the message was more to ensure that this specific example would look reasonable on its own. When set in the context of the site it's posted on, and the other sites associated with the author (e.g. fsfesicherheit's other postings to HN), it looks more like a pattern of quite targeted harassment.

I personally have no skin in this game, but if the message was censored from the list I would give the listmasters the benefit of the doubt that this was due to the author of the e-mail rather than the content per se.
raidz1 is not raid5.

From https://pthree.org/2012/12/05/zfs-administration-part-ii-rai... :

> ather than the stripe width be statically set at creation, the stripe width is dynamic. Every block transactionally flushed to disk is its own stripe width. Every RAIDZ write is a full stripe write. Further, the parity bit is flushed with the stripe simultaneously, completely eliminating the RAID-5 write hole. So, in the event of a power failure, you either have the latest flush of data, or you don't. But, your disks will not be inconsistent.

> There's a catch however. With standardized parity-based RAID, the logic is as simple as "every disk XORs to zero". With dynamic variable stripe width, such as RAIDZ, this doesn't work. Instead, we must pull up the ZFS metadata to determine RAIDZ geometry on every read. If you're paying attention, you'll notice the impossibility of such if the filesystem and the RAID are separate products; your RAID card knows nothing of your filesystem, and vice-versa. This is what makes ZFS win.
You definitely did. It's a 16-year old game so it definitely was 32-bit unless someone created a port or an updated .exe using a newer Unreal version.
This would require funding, exchanging, and double spending all in the span of a few minutes.

The more confirmations you have to unwind, the more work you have to do to catch up with the long chain.

All that will happen is exchanges require a greater number of confirmations before allowing you to trade deposits.
I'm not convinced that owning a domain name is that reliable. Facebook is less likely to let their registration lapse in the next 30 years than I am.
>Same here, though it helped a lot that we were in the middle of nowhere and going outside was very much an option when someone was on the toilet.

"I have to pee outside" is going to count as a problem in most people's book.
There is one thing to know about though.

On Windows, since the vendors control the drivers, they can ship out new hardware support immediately.

On Linux, if the driver is mainlined, it's tied to your kernel. So if you have a really new graphics card you might need a new kernel also. If your preferred distro isn't Arch or Fedora (which have very up-to-date kernels), that might also be an issue. Debian Stable for instance might not have support for a new graphics card.
Interesting article on this topic:

https://blog.coinbase.com/how-coinbase-views-proof-of-work-s...

Also, Ethereum is transitioning to proof of stake which will make attacks much more expensive because an attacker must acquire large amounts of ETH for each attack.
Right, enterprise software is usually relying on the end user to program everything but instead of programming in C#/Javascript they're programming in Salesforce (or whatever)
>Wordpress

Do you mean saving document as a webpage in Word 97?
Meta: I spend a lot of time in crypto(currency) subreddits, and of course approach those conversations differently than I do when I see the same topics pop up on HN. That said, I see a lot of the Reddit-style comments and terminology ("altcoins", "shitcoins", derisive names, etc) show up where when there's a crypto discussion. Does this happen in other subjects and I'm just unaware of those topic's subcultures? Or am I correct that the level of discourse for crypto is that much lower?
Because the volume of transaction for these currencies is too low for the market cap to mean anything. Imagine if there are, say, 1 million fancycoins in existence, all owned by me. I manage to convince you to buy one fancy coin for $1. Does it means that I now have $999,999 left in fancycoins "market cap"? In theory maybe, in practice I'll almost certainly never manage to liquidate them at this price.

For these small coins like DeepOnion you'll crash the market completely if you try to sell even a moderate amount of coins. There's simply not enough demand to move a big amount of coins at this price.
Intramural softball was my way of getting off the tush and being more active during the week (and because I love baseball). Runner ups in league play this year, which was awesome! I'm thinking of looking for a newbie friendly soccer team this summer, having recently come to appreciate the sport on a whole new level thanks to a new coworker who moved here from Portugal and schooled me on the mechanics of the game after work a few times.
Not really. Millennials certainly face different problems than previous generations but it would be generally inaccurate to say that they are financially worse off. Going back to that article you linked, I have to take the opposite stance in terms of its quality. Articles which rely heavily on anecdotes to make their point are really not a good way to try to understand what constitutes "typical". In fact, they're mostly useless for that. If you want to understand what really is "typical" then you really need to dive into some dry and boring data releases. Let's use the BLS Usual Weekly Earnings of Wage and Salary Workers Archived News Releases found here https://www.bls.gov/bls/news-release/wkyeng.htm

These reports provide reliable information about median weekly earnings for full-time workers, are available online going back to 1996, and include more specific data about different age groups. Let's compare the age range of 25-34 in Q1 1996 (non millennials) to the same range in Q4 2019 (millennials) while adjusting for increases in cost of living using CPI-U. Here are the major spending categories assessed in CPI calculations https://www.bls.gov/cpi/questions-and-answers.htm#Question_1...

For ages 25-34:

Q1 1996 weekly earnings: $419

% change in CPI-U over duration: + ~66%

Q1 1996 weekly earnings in Q4 2019 dollars: $695.54

Q4 2019 weekly earnings: $815

% Increase in real weekly earnings: ~17%
Oak Tree Featured in CU Times: Limitless Loan Opportunities
This is a valid point. Sorry for my post. Blockchain has few moving parts, but the whole game theory around it is very complex.
Why are you assuming that hashrate would be obtained legally?

If you're already assuming criminality, go all out! BGP route hijack the unencrypted, unauthenticated mining traffic and call it your own.

Cost is basically nothing to do so, other than some jail time.
Oof. This really hurts. So often when folks complain about Google shutdowns, I defend G with “but that was a consumer product! GCP doesn’t kill off things. It’s different.” But here we have Google Cloud (in my defense, not GCP) killing off a powerful, proprietary Enterprise product with no viable migration path. At least folks get a year to migrate off, but that’s a lot of sunk cost.
Probably because of the far more atrocious "me and my wife" grammar error.

Edit: Wait, "for my wife and I" was a grammatical error?! The fuck? Fuck the rules! That's a stupid rule.
From the article:

>This article shows how to embed an R interpreter inside a D program, pass data between the two languages, execute arbitrary R code from within a D program, and call the R interface to C, C++, and Fortran libraries from D.
Well, the ultimate means of fighting involves firearms and things like ropes and trees which are not in the control of corporations.

Remember the quote about the boxes to use?
While it won't solve for SPA, the SPIFFE project (https://spiffe.io/) aims to deliver short-lived keys and certificates to workloads at runtime to allow them to establish channel authentication (mTLS) and encryption, and to generate & validate JWT tokens for individual message authentication.
It seems like people so often underestimate dark age intelligence, as if everyone back then just spent their time groping around in mud pits. I'm curious how extreme you could go (in a Sokal affair kind of sense) and get away with it. Start a rumor that in the dark ages people bathed in giant tubs full of chicken blood because they believed it would ward off witches and prevent their souls from decaying. See how long it takes before columnists are solemnly citing this well-known dark-age fact.