skysight-inc/HackerNews huggingface dataset:
> "Not as secure" means specifically this punts all the actual security of the system.

In my opinion, not quite; the peer private key only exists on the server for a short amount of time which somewhat mitigates the problem.

I agree it's not ideal but it is convenient, and a good balance for the average user in my opinion. I will support specifying a public key as part of the `add` command soon. See https://github.com/naggie/dsnet/issues/8 (also, see the FAQ)

Thanks for the feedback
Take a look at digital distribution stores for games that give people a fuss-free experience. Access a well organized catalog & help pages, discussion forums, wikis, etc. Keep track of your library, always get latest version, download anytime anywhere in the world from fast servers any number of times. That really made a huge impact on game piracy.

Now contrast the experience with something like Zlib.. oh hey: https://i.imgur.com/494nZjd.png

What a typical "illegal download site" that tries to bombard you with ads, puts a bunch of silly restrictions on you and then starts to nag for money to lift those restrictions.. what a pain.
Yatta: It's so easy, happy go lucky! https://youtu.be/rW6M8D41ZWU
Maybe, just maybe it’s a good product with good customer service? And the reason it costs so much is because you get what you pay for?
In this particular case it seems justified as the framework was part of a bigger project. So probably the majority of the commit history would not be relevant to the project in its current state.
Maybe so. But in the general case I think individuals typically have much better moral judgment than processes and organizations. And the individual whose moral judgment ultimately prevails is the one who makes the decision. It’s not something that can be delegated.
Yeah, it's far from a black and white issue. I am by no means against single tenant database structures, and for our initial use case it was likely the correct decision. I have not run into anything that stopped us in our tracks.

My pushback focuses on two things:

1: The Rails implementation of this, specifically with off the shelf gems and integration with ActiveRecord. Presents a lot of unknown framework complexity down the road. We are currently running on a fork of the Apartment gem as it breaks under newer versions of Rails.

2: Long term support for evolving business case. Now, this is very much a problem unique to our company and how our business/product has evolved. We started out with a very clear separation of account concerns, and as we've grown and pivoted things have changed. You are unlikely to experience the same evolution we have. HOWEVER, all startups face these unknowns, and giving yourself as much flexibility early in the game will pay off down the road. There are no right answers here, you just have to think it through and weigh the costs/benefits. Maybe for you that flexibility is found in single tenant. For us it appears in hindsight that multi-tenant would have been the best long term choice.
Exactly. It's about developer lifetime value, not single customers.
"A couple of months ago, I was a train wreck that ate too many cinnamon rolls and watched Netflix while laying in sweats on the couch. Yesterday, I ran 3 miles, did 40 minutes of yoga, meditated, ate steel cut oats with berries for breakfast, then turned on my favorite business podcast while I showered, all before work started."

Kudos to your success. Please do not get complacent. I had a similar brief transformation at the start of this year and felt on top of the world for a couple months.

Then I got Achilles tendonitis which made even walking extremely painful for about 6 weeks. My son's mom died after a long fight with cancer. That same week my current girlfriend was diagnosed with cancer. And then quarantine happened.

I let these events allow me to regress back to worse off than I was when I started. And it all felt so easy at first
Launcher wipes entire SSD when uninstalling
As a metaphor or to exaggerate? Sure. In this case the article is taking it literally!
YouTube reporting system is broken
I thought one of the goals of fast.com was to let users find out if their ISP is throttling Netflix. ISPs can't only throttle a speedtest if Netflix makes it indistinguishable.
I'm the sort of person that needs theory to be effective at practice. Without theory, I don't know what to pay attention to. If I just practice without theory, I don't see myself succeed.

For more on why, see: https://slatestarcodex.com/2017/09/05/book-review-surfing-un...
The point about changes requiring time to implement is well taken and I can even imagine people relying on notifications to catch bad behavior because I see some people doing that now.

Malware isn't impossible on mobile. Android install security is in a fashion crap and androids are 90% of the market worldwide.

OEMs base their installs on old kernel versions that support their custom never to be upstreamed modules needed to boot their board then after 0 through a few updates stop providing updates for their phones. This is so because their is no stable interface for kernel modules.

My own phone is running 3.18 while my laptop is running 5.6.

Ultimately a lot of people are running around with devices that are actually vulnerable to things we already know are broken in addition to the known vulnerabilities upcoming that will be known to attackers long before its known to OEMS.

You can posit a better more secure future but the honest truth is that our present work is crap and we have no particular reason to believe the future isn't also largely composed of crap. It's trivial to imagine that in a situation where you can derive an increasing payout for breaking security that the attackers wont keep pace with those trying to secure the future.

This pessimism has been the correct answer from the moment computers were networked to one another through today. Given that we have been bad at securing networked computers for 5 decades it behooves the optimistic to prove it.

Maybe in 5 years we will all be running devices running Sel4 with only substantially audited code but I would bet on more steaming piles of insecurity instead.

Thanks for the interesting discussion though.
You voluntarily put yourself in this position with no good way of fixing it. No one's forcing Facebook to do what they (and now you) do, eh?

My perception of reality is that you and your brilliant data scientist are (at best naive and unsuspecting) patronizing arrogant jerks who have no business making these decisions for your users.

You captured these peasants' minds, now you've got a tiger by the tail. The obvious thing to do is let go of the tiger and run like hell.
If std::string construction was the goal then sure, but that's not what the original benchmark that I've written was about. The goal was to find the fastest way to format an integer with or without std::string construction: http://www.zverovich.net/2013/09/07/integer-to-string-conver.... Those methods that construct a string but not required to are explicitly marked. The OP made some claims based on the method that doesn't construct std::string (which is one of the reasons it's rather fast) and then when I pointed out that it's unsafe switched to a much slower one but at the same time unnecessarily penalized other methods. It seems like moving a goalpost just to prove that your method is the fastest (which might be true but we don't know because of a poor methodology).
I think that is not quite right, but the distinction is subtle. The algorithm selects the content that you are most likely to be engaged with. For most people likely that is the filter bubble, and seeing only what they agree with. But for some folks, they actively like to have debates (or troll one another) and see more content they will not agree with, because what they don't agree with gets more engagement. The intent is to keep you engaged and active as long as possible on the site, and feed whatever drives that behavior.
You're taking a weighted average, not adding the fractions.

It takes a while to learn what that is used for.
Here's the paragraph I found most damning. It would make me want to assign liability to Facebook.

> The high number of extremist groups was concerning, the presentation says. Worse was Facebook’s realization that its algorithms were responsible for their growth. The 2016 presentation states that “64% of all extremist group joins are due to our recommendation tools” and that most of the activity came from the platform’s “Groups You Should Join” and “Discover” algorithms: “Our recommendation systems grow the problem.”
Widower Asks Jack Dorsey to Remove Trump’s False Tweets. Twitter Says No
If you're just gonna keep doing it, you're not "staying and fighting" at all.

You don't have to be the just-following-orders guy, is what I'm saying. Somebody else might--that doesn't have to be you, and shouldn't be.
Agreed. Is this like Dualingo for writing? Seems interesting, but an example would be good
Yet, here I am, currently setting up a static blog using Publish: https://github.com/JohnSundell/Publish
It has consecutive urls, relinquishes your drop of privacy.

.../140 -> test test test

.../141 -> My personal depression diary entry no.3 ...
Takashi and Kiyoko by Emina
The Good Scientist
Testing in Go: Philosophy and Tools
Very interesting point, I never thought about that.
Google Play Music is still holding my collection.
The OS provides functionality to set up the GPU and to compile code for it, and to shove samples into a sound card. That is it.
Why does Google Calendar use Vevay, Indiana (pop. 1,651) as a standard EDT city?
APOE e4 genotype predicts severe Covid-19 in the UK Biobank community cohort
I understand the sentiment. When I buy a book now I first decide if I will ever want to loan it to someone, and if yes, then I buy a physical book.

For the books I write I now only sell eBooks but under a Creative Commons Share and Share Alike license and I encourage people to share with friends. Writing books is a lot of work and I want them to be widely available. Then, you may ask, why not just put PDFs in the public domain? The answer is that I do enjoy getting some revenue from writing, so it is a compromise.
A podcast player that doesn’t feel like a hacked music player
No one is going to read your blog with netcat or just curl into a pager.

Idk, maybe we should revive the world of information served raw over TCP or telnet. HTTP is out of control.
Sony patents AI soundtrack generator that adapts game music to your emotions
When actually working with trigonometric identities, using parentheses typically gets unwieldily very quickly. Same reason sin(x) often becomes sin x.
They really need an editor. It's even worse than the syntax errors, saying something `felt more like a proof of concept [...] was immediately an impressive concept` is amateur wordsmithing. Better wording would be "Immediately, viewers were left with a strong impression despite the display being a proof of concept.`

> When Looking Glass Factory showed /of/off/s its first holographic display way back /on/in/s August 2018, it felt more like a proof of concept than anything — though it was immediately an impressive concept
https://en.wikipedia.org/wiki/Meta_(company)

This is the company in question, I'm not sure if there's an online repository for all the ridiculous drama and bad decisions though.
Perhaps they do that when I used a VPN. You can police your community without spying on them or collecting sensitive information. Reddit and HN did it since the start!
I disagree on this - I have a more optimistic view of the ability for people to change how they think.

You're right that a core belief tied into someone's identity is not going to be changed by new evidence, unless you can get people to value trying to figure out what's true and updating on evidence itself (rather than having an 'answer' already and just using motivated reasoning to come up with arguments that support their 'answer'). This is hard.

I know I've personally gone from someone who made these kind of bad reasoning mistakes - the smarter you are the more insidious they can be because you're better at being a clever arguer and coming up with plausible sounding reasons while ignoring or rationalizing contradicting evidence. I've worked hard to get better at it (and I still am, it's an ongoing process). Yes, this is only a sample size of one, but I think it's possible.

I have an optimistic view of the capacity for a person to learn how to think better, while simultaneously having a pessimistic view of the general public's current ability to think rationally. This may seem like a conflict, but really it just means that I think it's possible for us to be a lot better than we are, while recognizing it's a bigger project than just stating the specific evidence available for any specific argument.

People have to be willing to consider why they believe what they believe, and be honest about the potential to change their mind based on new information that contradicts what they believe to be true.

I think that's the goal we have to work toward first.
It used to be my coax node was shared by over 200 people, and that was 1 TV channel equivalent of data. Then DOCSIS 2.0 came out and those 200 people were split between roughly 7 TV channels worth of data. This is how you'd get the standard 6-26 mbps home internet.

Then Google Fiber came out and ISPs started running fiber to the streets of most houses, but not running fiber directly to each house. This was in defense of Google Fiber, so they could switch people to fiber gigabit easily with little transition. Now there is DOCSIS 3.0 which does channel bonding, so a single person can have up to the equivalent of 32 TV channels of data, getting up to 1.2 gbps if unshared. Today, the average home shares their bandwidth with between 0 and 3 other houses. The fiber is right outside. If you order gigabit cable internet they will run the fiber to your front yard but not let you connect to it directly.

On comcast the lowest speed you can order where you get fiber internet is 2gbps, and because DOCSIS 3.1 now allows 10+ gbps cable internet, Comcast fiber may become a thing of the past. In a way, DOCSIS 3 has been a set back for consumers. Sure you can get multi 100mbps even gbps internet, but it allows cable companies to not have to run fiber that last 30 feet.

With fiber your ping time is lower, so your internet feels quite a bit faster. Fast internet today isn't mbps, it's ping time.
can we do it by nocss ;D
Paternalistic is thinking you are in a position to define C and measure it.
Fortunately there is work being done on standardising the encryption of message headers when using PGP:

https://datatracker.ietf.org/doc/draft-autocrypt-lamps-prote...

It should be possible to go a step further, though, if mail providers offered a well-known reserved address like switchboard@domain which Alice could send an encrypted email to, and it would decrypt it to determine that the intended recipient was bob@domain. Ideally, Alice's mail provider would rewrite the sender headers to something generic too, relying on Bob to extract those from the email he decrypts.

That way the sending server would only know the recipient server (not the local-part of the recipient address) and the recipient server would only know the sending server (not the local-part of the sender).

Of course, this would make server-side spam filtering much harder, so it would benefit from some sort of bearer token system for bypassing such filters. The Autocrypt standard already uses special headers for signalling state between sender and recipient, but this header would require the mail provider to detect the new header and change their filtering rules based on it.
The computer is in the process of being blown up because it’s sitting on top of an underground nuclear explosion. It has to relay its data somewhere.
> The infrastructure for supporting addicts and those with clinical and severe mental health issues is at odds with the State's position that virtually prevents anyone being from admitted to an institution without their direct consent.

IMO, this is a good thing.

First, the idea of involuntary commitment is antithetical to the concept of individual rights. Even if you accept that there are times when it is necessary, granting that power to the state is to me unacceptable. This is a political stance, of course, and arguing politics isn’t what I want to do here so I’ll just leave it at that.

Second, I have found that no amount of help will solve a mental health problem if the person themselves doesn’t want the problem to be solved. Speaking from personal experience on both sides of this issue - someone must want to change before whether or not they can do so without assistance is relevant. Providing assistance to people who do not want to change is at best a waste of resources and at worst enabling them to continue a self-destructive cycle that they would have otherwise been forced to change by circumstance.

Because of the above, I strongly oppose legal mechanisms for involuntary commitment as a civil action.
Paying to Stay in Jail: Hidden Fees Turn Inmates into Debtors
Some changes require more of your attention than others. For example, eliminate cable TV. It's a one-shot effort, and then you never think about it again. A lot of saving are just not buying things: a second car, a motorcycle, a vacation, etc.
I hope they customized the injection mapping, but the GM LUU engine is still a naturally aspirated gas engine with 10.5:1 compression and 73.4 x 82.6 mm bore/stroke ratio, measurements which primarily came from the ICE-only target applications it was designed for.
Hey a quick question
Do you think can I host it myself. I really like the platform and can this support google analytics.
Yeah, gnusocial and family felt like glorified RSS readers + feeds to me. That's what attracted me to the network initially. My own Mastodon/Pleroma client is built entirely around the concept of "feeds" (whether it be user, hashtag, conversation thread) and simple combinations of feeds (eg grouping together multiple hashtags to form a "topic" or multiple users to form a "group").

Mastodon should be the exact opposite of IRC imo. Hashtags or message threads can act as a simulated chatroom but generally speaking, the power of feed-based social networks is that they invert the traditional power structure, thus yielding more interesting content.
Ah, good to know.

This is why we can't have nice things.
Its showing my location as Kansas (0, US) despite being in SF. Tried a different browser, disabled add-ons...no dice.
At LANL they put many experiments/sensors in the bomb stack.

A group I was with ran an experiment called PINEX (Pinhole Imaging Neutron Experiment), they used high speed video cameras to capture light/photons from a light intensifier. A meter diameter lead sphere was placed between the bomb and the light intensifier to attenuate the neutron signal. The length of the video cable (coax) was measured in time units.

They could get about a frame and half of video off the CCD and out of the bomb hole before everything was vaporized. The video was captured using analog-to-digital signal converters and then interpreted later. The ADC, memory, pulse generators (to trigger light intensifier, start the CCD sweep, etc.) were sitting in a CAMAC crate attached to a customized VAX. They even has a customized VAX and monitor to visualize or analyze the captured data. The captured frame would be rendered into a gray scale image of a concentric circles that meant something to the bomb physicists.

My intern project involved showing how the ridiculously expensive and fragile VAX setup could be replaced by a modern workstation running off the shelf software. Of course, this was not well received, that is why my mentor had me do the work and presentation - he would never have gotten away with it himself. No matter though, bomb testing was stopped soon enough.
You're welcome! I found it in a second-hand bookshop a few years ago and bought it for novelty value. It's a pretty good summary of the wealth of hardware and software options available at the time. Someday if I have access to a better scanner I'll upload a higher quality scan.
The example project page is super hard to parse
At least the Spotify UX is still better than Apple Music! I'd love it if Spotify would let you sort your playlists by last listened to like Pandora somewhere in the app. Currently I have to search and scroll every time to nearly the bottom of the library to find my Workout playlist which I use religiously at the gym.
My text editor with hand-coded HTML begs to differ
Rats Will Devour Your Car
Haxe module-level fields are (almost) here
That one is clear to me, although it might be for a reason you find displeasing: if the thing being computed was an "inverse square root" in the sense of a functional inverse, then you'd be computing a square and it would make much more sense to call it that instead.
And in the linked article the probable cause is much more prosaic:

"The attacks may have been perpetrated in order to mine cryptocurrency; investigations are ongoing."
This title is so inappropriate. Is it any wonder so many people have an issue with toxicity in the tech community?
I don't think we share the definition of "scale".

Extremely few companies that sell B2B SaaS software for enterprises have 10K customers, let alone 100K (that's the kind of customer base that pays for a Sauron-looking tower in downtown SF). Service Now, Workday, etc, are publicly traded and have less than 5000 customers each.

All of them also (a) don't run a single multitenant cluster for all their customers and (b) are a massive pain in the ass to run in every possible way (an assumption, but a safe one at that!).
Massacre at Huế
That's not the problem, it's that the update can't be done in the background.

On iPad or iPhone, when I get an update, it installs overnight and my device is immediately available to use after restarting.

On every Windows device I've ever had since Windows 8, I have to sit there and wait for some reason. (I've already selected the 'use my sign-in information to speed up...' option)

Every single time that Windows updates, there is no way to get it to perform the entire process when I'm not using the device. As soon as I restart or log in, there is more lengthy 'configuration' or 'working on updates' to be done. It's unacceptable.
I always have to think about that one when I had just been spending 20 minutes trying to formulate an elaborate response to someone's comment, just to proceed to sigh and close the thing without posting it.
Probably most of the time it was for the better too.
This is a far better URL for this submission. Not sure why anyone chose to hit the down arrow.
Being able to automate tests for memory leaks is very helpful but I would much rather incorporate the browser dev tools than not when debugging memory. Doing it only in javascript feels very janky (weak maps, attaching giant array objects to things, waiting ?? amount of time for the automated GC to run).

I was debugging memory leaks in some pretty large javascript products and while I did initially start with methods like this post, I only started to make reliable progress when I became familiar with the heap snapshot tool. Diagnosing problem is trivial (just filter the heap snapshot by a Class name and count the instances) and it is The Tool To Use to actually resolve it (tracing the chain of references in the retainers view)

In the future if I need to write automated tests to identify memory leaks I will look into automating the Dev Tools rather than fumbling with WeakMap or performance.memory.usedJSHeapSize
> the memeplex that is society

This concept stands out to me. Is this phrasing something I’d not encountered before, and it looks like there’s a whole are of anthropology that I’ve somehow overlooked to this point.

I have some reading to do :)
Social media companies have played a primary role in overthrowing governments and manipulating elections across the world.
I thought Cloudflare also peered caching servers?