skysight-inc/HackerNews huggingface dataset:
In TFA, it says that they injected the exploit via stingray or cellular network compromise. I'm pretty sure that better isolation of the browser and other apps from the cellular network would have prevented that.

But yes, he would have been vulnerable to malicious sites exploiting browser bugs, as one always is. I mitigate that by compartmentalizing activities in multiple machines and VMs. For example, the host that this VM is running on contains absolutely no information about my meatspace identity.
No, we (the United States) have a system that is supposed to protect against mob rule, and why we don't have a pure democracy. This is why we have a constitution that takes more than a simple majority to change.

The whole idea of laws being ruled unconstitutional is that there are some things that even the majority can't do.
Presumably you’d run the AArch64 Windows builds, not the AMD64 builds, if you were on an Apple Silicon machine.
I too would be interested in a way to delete comments or accounts.
I haven't been a kid in...too long, but I have a decent recollection of Sesame Street, and I don't recall an excess of high pitched voices.

Elmo and several of the girl muppets are pretty shrill, but Oscar, Grover, Big Bird, and all the humans are normal. Kermit, Bert and Ernie have that rounded "muppet voice" which is kinda in between.

Screen time isn't great but Sesame Street is hands-down among the best childrens' television in existence.

Man, I kinda wanna watch Sesame Street now...
This happened in the early 20th century. Eventually things will be regulated and locked down.
hardware acceleration has been supported in FF since 75. however your display scaling has to be 100% on x-org or use it in wayland. Linux desktop would've been perfect if it weren't for the fragmentation. btw currently running ubuntu 20.04
I think this is very insightful. I hated higher level mathematics specifically because I couldn't see any use for it. Due to a variety of circumstances I ended up taking my math classes out of sequence with the physics and EE classes in my EE degree and as a result I'd get a concept introduced in math that had no apparent use, only to find out the next semester or year what you would use it for. Very frustrating at the time.

As I developed my 'self learning' style it became clear that I was way more successful (retained more knowledge with a better understanding) if I could "make up" some problems and then work them out with the thing I was trying to learn.
> “secret weapon” and do not advertise it

Both Standard Chartered and Barclays loudly advertise that they use Haskell.

A quick web search turns up their job offers on Reddit, and both also send people to conferences such as Haskell eXchange, to talk about their team tasks, structure, and size. Example: [1]

Their code bases were discussed on HN before, e.g. [2].

Standard Chartered also funded the development of GHCs low-latency, non-stop-the-world, incremental GC, for 2 years until it was recently released [3].

[1] https://skillsmatter.com/skillscasts/9098-haskell-in-the-lar...

[2] https://news.ycombinator.com/item?id=13073605

[3] https://www.well-typed.com/blog/2019/10/nonmoving-gc-merge/
The PET emulator was an interesting case. It relied on the fact that BASIC 2.0 on the C64 was similar enough to that on the PET (and IEC serial devices similar enough to IEEE-488 ones, from the BASIC side, at least) that many programs ran unmodified. The interesting bits were adding some goop so that many common POKEs and PEEKs from BASIC would "just work" as well (like CB audio, screen memory, etc.). This was even enough for some machine language programs, though many choked on the different memory map.
Aviators in the Stone Age?
I'm lost. Anyways: the Google searches have nothing to do with already knowing Scott Alexander's real name.
Wouldn't this be a major problem for GDPR compliance?
Noun Adjunct
> you need to choose carefully.

So here’s the interesting part; can you recommend a distro that is universally the right choice for dev work?

If yes, please tell - I’d love to know!

If the answer is “well it depends a lot on your needs” that’s kinda the point of MacOS right? The fact that making the right distro choice requires serious thought is already problematic (hypothetically)
Has the particular cyclist you’re thinking of assaulting committed such a misdeed?
>You mean you you've never used any wireless connections to your machine? You've never had to set up backups or change audio settings? You've never had to deal with setting up one thing in 15 years? Since when did OSX gain the ability to read minds?

You seem to confuse using the machine with setting up.

Connecting a wireless connection (picking the SSID, entering the password, etc) is not "setting up". It's merely regularly using the computer.

The setting up we'd rather avoid, and that the parent talks about, would be tinkering to get your wifi chip working with your OS -- which you get the "pleasure" to do on Linux...
That's my favourite suggestion, but I suspect trying to type "kerfuffle" too often will make your hands seize up.
On a large monitor I have to scan left to right, almost breaking my neck in the process wtf.
Odd you used to be able to delete comments.
> I don't personally feel comfortable browsing on them

You should see the list of root certificate shipped with most major browsers.
The releases on the sidebar is handy, but something about the top of the page feels... disconnected. I think I’d like the “about” section at the top rather than in the sidebar. Getting rid of the double nav is a good improvement.

The non-centered readme is a little triggering, but maybe I just need to get used to it
I've done that a few times. And yes, it nuked my reputation, not that I've ever had a lot.
> I'm told they can be as small as a protein molecule.

Sounds about right given that we've just learnt that plants can take up plastic though their roots: https://www.nature.com/articles/s41565-020-0707-4
This is par for the course for mainstream media outlets. In 2017, CNN threatened to dox an anonymous Twitter user making political memes.

I don't know why people continue to speak to these outlets while their records, actions and ethics are appalling.

The slide into clickbait and yellow journalism over the last few years has been devastating to the industry. There isn't a major outlet left that hasn't been behind some whopping journalistic errors (usually repeatedly). Not even self-described neutral outlets like AP are immune.

At this juncture, I'd sooner trust an independent journalist with 50k followers and a handheld camera on YouTube than a major news outlet.
What about VMware Fusion? I understand desktop virtualization isn't how VMware makes money, but still VMware is the 800-pound gorilla in the virtualization space. I would be very surprised if Apple isn't also working with VMware to bring their product to Apple Silicon.
I don't think anyone should be vaccinated with an unproven vaccine. Any vaccine issued should have cleared Phase IV, with minimal short-lived and long-lasting side effects. I won't take a vaccine, nor have my children vaccinated until then. I'm also looking at the current rush for a vaccine with a jaundiced eye. I think the likelihood of ever finding a vaccine for SARS-CoV-2 is small, however I hope we get lucky, and the tremendous resources being applied to finding a vaccine pay off.

I don't think we disagree about the new vaccine risk level, since we don't have a vaccine, nor know anything about its side effects.

If a vaccine is has differing risks based on age group, then I would hope that we vaccinate the lowest risk group; assuming the risk variance is significant.

As a society, vaccinations are naturally government infringement upon individual rights. But a well-functioning society routinely infringes on individual rights. We place children in protective services when their parents don't care for them properly (in the mind of the government). We (in extreme times) invoke a draft for military personnel. As my dad used to say, your right to swing your fist stops at my nose. Rights are not inviolable; though care should be taken to limit infringement.

As SC Justice Robert Jackson once said, the protections afforded by the Constitution "must not be discredited by an interpretation to mean liberty without law."
>You can't have a firewall of "nobody is allowed to Google me". That's not how it works.

would you say the same of kendric lamar or mf doom? both fail the google test and yet the nytimes respected their pseudonyms.
It depends on what your background is already and what you want to do. I took some signals courses in school and we used the Oppenheimer textbook, but that's a lot of math if all you want to do is receive some ADSB signals.

Lots more recommendations here: https://news.ycombinator.com/item?id=14584377
Okay, right next to the 'edit' button on this comment I see a 'delete' button. That suggests one can indeed delete things.
Government cheese can be thought of as a milk battery.
Unfortunately, when the name “joyplot” took off, nobody in the datascience community was aware of the origin of the name “Joy Division”. As described in the book House of Dolls, joy divisions were groups of Jewish women in Nazi concentration camps kept for the sexual pleasure of soldiers. The band Joy Division took their name directly from this book and even quoted from the book in one of their early songs.

https://serialmentor.com/blog/2017/9/15/goodbye-joyplots

I wasn't aware of this either. Given the theme of Joy Division (the band)'s songs I think it's very fair to say they meant it ironically, but I do think it's fair not to name a beautiful plot type after something so horrible.
There are enough comments in this thread discussing whether this guy has any real privacy (read: is pseudonymous) or not that I decided to see for myself.

After half an hour, I couldn't ferret out his last name no matter the search I tried, regardless of incognito mode, open session, etc. In fact, google kept trying to point me to some screenwriter, at least whenever I searched while logged in.

Admittedly, I don't remember ever reading his blog nor anything about him... But then again, that is probably true of most of his patients too, so my search results might be more representative of the results he cares about.

Now, something tells me that an NYT article would definitely bring his two personas closer together in anyone's search results. So, even assuming that my google-fu is weaker than I thought it was and it turns out that literally everyone (but me) can immediately know who he is, his fear still seems warranted to me.
I don't experience problems with cron itself failing to start jobs, but it doesn't have any monitoring built-in. Solutions exist for that, including wrapping cron scripts to notify or log when they start and stop.

Implementing retries, timeouts, etc. for jobs you initiate remotely over HTTP GET requests, and using a token for validating access, seems like a lot more integration at the customer side than just using cron.

Enforcing timeouts, or preventing them, means changing the web server (Apache) and runtime system (e.g. mod_php) to allow a process to run for longer than the default time. If I have access to Apache and PHP config I also have access to the crontab.

I use cron with HTTP GET requests locally, run with curl so I can set a timeout and capture the output. Apache restricts those requests to localhost, so they can't get initiated remotely. I have a simple wrapper that logs when jobs start and finish, and a monitoring page that shows last run time and success/fail status. Every job has an associated estimated time it should run so the monitor can show jobs that ran too long.
Interesting take, but Rockets to Mars are Sexier :-)
I am not a lawyer, but GDPR compliance looks like it doesn't quite apply due to not necessarily being targeted at European citizens https://gdpr.eu/companies-outside-of-europe/
The idealism you're expressing here is definitely worth aiming for. I'm unconvinced that basic human psychology as it has evolved is currently capable of such a thing.

A close friend of yours points to someone you don't know and says "That person is either on coke or meth, watch out."

Take that same stranger, now add the information that they are loved by their community, they have always been available and reliable for other people, which is in fact something you know first-hand because they are a dear friend of yours. One day they tell you in confidence "colechristensen I've recently been struggling with substances."

In both versions, it's the same good person with the same problem, but the information we have presents them very differently. Does that not affect your behavior at all?

I would be deceiving myself if I didn't admit that it would alter my behavior pretty dramatically. I am capable of being the proverbial idiot with a pitchfork simply because of how human psychology stereotypes and extrapolates on insufficient information as an evolved survival technique. Nature doesn't care if we're overly cautious 99% of the time, because not being cautious enough just 1 time can be fatal.

What you're suggesting is an awesome ideal, but we have a long way to go before achieving that, and approaching it too recklessly can end up being harmful to ourselves if we're not mindful.
Man, that's a sweet ride!
This sounds like an absolute dream. I'm envious, and impressed.
1) the chance that the US government is going to break up Google or Facebook is nil.

2) if you actually care about privacy, stop feeding those beast with your data. Self-host what you can, use alternative services for the rest.

(That said, I still use g-suite for email and shared docs).
Arizona would like to contradict your claims.

The only reason the hospitals aren't overwhelmed is that we kept the total case count low enough. Now that the case count is going up, we're seeing the same problems.

Yes, we don't seem to have quite the same equipment shortages as we had in March. That's good. That was part of the reasoning behind the lockdowns.

Yes, we seem to be doing better at keeping people dying, that's good ... but it's going to take up more hospital resources for longer periods, that's going to exacerbate shortages.
It's ok if you don't find it interesting, but don't assume everyone else thinks like you.

What's described in the article is a social phenomenon, worthy of study and reflection. The plethora of consequences that come from it, are already destroying the highest aspects of human thinking.

Left unchecked, and we will return to the dark ages. We are already seeing witch hunts and modern book burning.
No. The distinction seems fanciful, because it's not how information works. It isn't even how information worked before the Internet. It's a "the floor is lava" grade of anonymity, based on offering people permission to connect 2 publicly available dots. It's also moot, since, again, one of his best-known pieces was released under his real name.

Many of us have had the experience of being unhappy with what Google chooses to surface for our names. I never thought to declare "Anonymity!", Michael Scott style, to resolve that problem for myself.
Just awesome stuff. I use it in almost every diff based tool. Works seamlessly.
You can assuming you do it within their timelimits: https://github.com/minimaxir/hacker-news-undocumented#editde...
That doesn't help you if the particular Windows software you need to run hasn't been built for ARM.

People run Windows for the software library - not because they really like Windows.
In 2001 computers still had CD drives.
There are established standards for compostable plastics (ASTM D6400 in the US and EN 13432 in the EU). The products of the company I mentioned above comply with those standards as well as many other products I am sure.

So if you are looking at a biodegradable product, you should check whether it complies with the above standards. It is better to look for "compostable" as that implies compliance with those standards (at least if sold in the US or EU).

The standards have been criticized because they assume an industrial or municipal composting environment (which mostly differs from normal environments due to relatively high temperatures). So even if you have a compostable plastic it is better to put it in a compost bin and have your municipality compost it in an industrial manner.

But the compostable plastic under those standards will degrade under normal environments too it will just take longer. Even in your article, the compostable bag disappeared in the underwater test and disintegrated in the open air test. It only survived the under ground test, probably because of lack of oxygen.

So in summary compostable plastics should be composted and not just tossed away anywhere. But even if they are tossed away at random places they will degrade much sooner than actual plastics and thus present much less of a problem for the environment.
You could just deploy to ARM too: https://aws.amazon.com/ec2/graviton/
I think their point is unless you are seeing 50-50 ratio in everything, there is descrimination and bias. Not that I support this view but I think he could have put it more clearly.
Why do people think this is interesting enough to post it every week?
I think it's pretty sad that they don't warn you when signing up. And I think it's pretty lousy that they won't let you delete your account. I had an account that got into 4-digit karma before I realized I couldn't delete it. I was younger and wrote some stuff I'd love to get rid of. I've emailed the guys who run HN about it several times and every time it's the same lame excuse.
Yes, this bothers me too.

HN should allow this for a small fee as a compromise between the conflicting interests of comment authors and readers. The fee would limit the number of [deleted] comments but when someone really wants to have their comments removed, they would be able to.
aarch64 windows isn't useful to many (most?) people
Toydb: A distributed SQL database in Rust
Electric scooters have the same problem with segways in that they are too fast for sidewalks but too slow for bike lanes. And when you want to make a left turn, the scooter just can't go fast enough for you to safely merge onto the left-turn lane for cars like a bike can, so you end up waiting for two traffic lights like a pedestrian.
Expect-CT does almost nothing. Safari and Chrome both have CT policies that are enforced anyway, Firefox doesn't implement CT yet (patches doubtless welcome). The remaining thing Expect-CT might do (I have not tested) is ensure that bad guys can't present a certificate with a date prior to Safari/ Chrome's enforcement deadline. That's a small and shrinking window.

If bad guys can make a certificate dated February 2018 and valid until May 2021 that certificate will be accepted in Chrome despite not having any SCTs. A real one from that date probably does have SCTs but Chrome only required them in April 2018. Setting Expect-CT now might make Chrome reject that certificate for lacking SCTs if it was shown on a subsequent visit.

A year from the now the window is closed, Chrome will reject a certificate that says it was issued more recently and lacks SCTs, and it will also reject a certificate that says it was issued longer ago, because that violates Baseline Requirements on validity periods. But for now a February 2018 certificate could be valid yet not require SCTs.

All Google-owned TLDs are HSTS-pre-loaded, so if you use a domain in a Google TLD (e.g. example.app) then browsers
always use HTTPS anyway. Unfortunately it's unlikely that many older, popular TLDs will pre-load HSTS so most users will be unprotected for the foreseeable future.
I think this a very poor comparison to make because it denies the time dimension of video completely, which fundamentally affects how we perceive and use video, and also ignores the fact that still images linger and have different requirements.
While I'm pro right to be forgotten, and do believe HN should allow an account delete.

But HN's ethos is to inspire discussion and readability of it. Lack of a delete seems to be by design so that conversations are always readable.

You can see the spirit of that in their guidelines[0] such as "Comments should get more thoughtful and substantive, not less, as a topic gets more divisive".

You can further see that in the design in how they handle deletes [1], where once "archived" things are permanent

[0] https://news.ycombinator.com/newsguidelines.html

[1] https://github.com/minimaxir/hacker-news-undocumented#editde...
I am not very versed in those legal matters but I imagine there is a whole spectrum between Facebook (where all your content is personal and you should be able to take it out as needed) and Stack Overflow or Wikipedia (where taking out answered questions or articles when an author wants it doesn't make sense). I wonder how this is regulated, especially in regions with "strong" right to be forgotten e.g. Europe.

More than once I have stumbled on deleted Reddit comments that looked to have something I was looking for. Maybe it's good that the right type of content is posted in places with the right kind of deletion rules, but this should definitely be advertised clearly (so people don't start Q/A type subreddits, and conversely don't post personal info on HN).
Will qemu support be available?
> A few weeks later I added a new “private” group of screencasts for GitHub sponsors only. THIS is the secret sauce.

The secret sauce is selling a product (in this case courses/training), and using GitHub sponsors as a payment gateway.

It’s great, but it’s not really sponsorship.

If you’re a dev with a popular open source project, you can profit by selling related training/courses. A lot of devs are probably leaving money on the table.
Because we have a whole bucketload of idiots who can't be bothered to wear a damn mask and stay the hell home.

When 2 Mother's Day gatherings account for 50% of the cases in Santa Cruz county, what can you do short of saying "You're a moron."

It probably also doesn't help that a lot of Arizonans travel to California at this time of year to escape the heat.
It doesn't use paxos. It uses raft, an entirely different distributed consensus algorithm.
Mob rule is not anarchism (the ideology).

It is however anarchy (the term), which is much older, and used to convey precisely lack of order and mob rule.
I’m not sure what people can reasonably expect - you want to run one OS, virtualising another OS for a completely different architecture? You should probably just run a separate machine for a better experience at this point.
Windows for ARM can already run 32-bit x86 executables. They’re working to bring similar support for 64-bit software.
Ok, let’s say qualified candidates are 50% Indian. If 100 of the employees are Indian, what is the probability of that being a random coincidence? (.5)^100?

I see this throughout industry. Even if the qualified candidates are 75% Indian, and a team of 10 is 100% Indian, what’s the probability that’s a coincidence?
I’ve made mostly due with Google Doc with Google Drawings. They are editable, so better than a picture. However, the canvas has limited size, smaller than a doc page. It forces multiple drawings for a single flow sometimes.

We used to use Prezi. It is pretty amazing.
You should be allowed to delete your own comments for alot of reasons.

In particular, if you decide that a comment you made was overly negative, or offensive or has some other issue, then it is good for the quality of discussion that you be able to take the action and remove it. You are allowed to do this for a short time period after creating it, I think you should permanently be allowed to delete it.

I know HN does not like comments to be deleted because it breaks the historical value, but I think people, privacy, quality of discussion and individual personal right to curate your own online presence are more important than HN's right to maintain historical integrity. HN doesn't see it that way as far as I understand but hey, it's their site. Don't like it, don't comment.