skysight-inc/HackerNews huggingface dataset:
> I would assume the agent caches the key for signing.

For that to happen the agent would need to have some way to get the key out of the FIDO authenticator, which is deliberately not intended to be possible. I will now go away and confirm that this behaves as I expected and update this message shortly.

Update: Yes, the OpenSSH agent just has code to go talk to the authenticator each time it needs to sign something. The authenticator may or may not (most seem to not) allow this to happen without verifying user presence (e.g. via a button press or touching a contact) but even if your device does allow this the signed payload says whether the user was present, so a remote SSHD can (if it wanted) demand to see signed evidence of user presence or refuse login, and I think a SSH agent can't fake that without help from the FIDO authenticator itself.
Shove it in a full tower case. You can mount most server hardware easily in such a case. At that point, you can cool with big slow fans.
How amusing.

As a thought experiment, if using the term "slave" is prohibitively offensive in a computer program (even if the reference is only conceptual and doesn't have anything to do with human slavery--as anyone with half a brain knows), what is supposed to happen in the event that a program, or some "casual" text actually does need to refer to actual human slavery? Is it a topic that can no longer be put to words, because the words are offensive? For example, what if I wrote a computer program to do some sort of analysis on historical slavery data. Is it acceptable or not to name a variable "slaves?" Do I have to rename it "disadvantagedPersonsThanksBLM" ?

Would the reasoning be "conceptual slavery cannot be expressed in such a way, but real slavery is permissible to express" ?

What's next, "leader?" Maybe red-black trees have to be renamed? Integration tests? Maybe we have to switch default terminal colors to pink-purple to satisfy the definitely-not-fascists?
> eyesight ... worse since ... reading Agatha Christie

Like they say, an Agatha Christie a day keeps eyesight acuity away.
Crimea/Ukraine. Civil because they stole the land. Chechnya. Literally run by terrorists who murder their own people daily. And let’s throw in the casual assassination of domestic political dissidents as a free one. We should have dealt with Russia the proper way in the Cold War and glassed it end to end. I am hopeful we still will.
The truth hurts: how VanMoof got banned from French TV
The truth hurts:
how VanMoof got banned from French TV
Using Gmail at all seems to have the same effect as well since they pre-load and proxy almost all email content. Only when you use alternative mail clients might they see the images/remote content being loaded from a non-google IP.
In isolation, it's just another problem.

As part of a bigger picture, it's a reflection of society. There is real fear that the US government is just incompetent and gun violence is part of that jigsaw puzzle of deciphering if the US is actually going to grow in the future.
Not really the same thing. UPS is optimizing the efficiency of a multi-stop route given that making a lot of unprotected left hand turns (especially with a truck) can add a fair bit of time to a route.
> Ivanka Trump is co-chair of the American Workforce Policy Advisory Board, which was created in 2018 and tasked with recommending ways to improve job training.

Can someone explain why the presidents daughter is in such a position?
There must be stats for injuries or deaths by car. Is it public?
I think that the differences between the two models can be attributed to the difference between the cost of human labor in the two countries.

Everything mentioned in the Ecuador example is labor intensive: private sector busses driving around plentifully, moving laborers just parked next to the furniture market standing around waiting, many small proprietorships in close proximity haggling over prices, etc.

The big box model is better in the US where labor is very expensive. The "bazaar" model is better in Ecuador where labor is much cheaper.
The stakes in video games are imaginary. Trust between real people in real life is completely different. For soldiers, athletes and even business leaders, the stakes are real and having an in-person relationship makes a difference.
(2) Balikatan 2019- Marine KC-130Js Refuel F_A-18Cs
The "Bureaucracy vs Markets" or "Top-Down vs Bottom-Up" debates are stale.

These ideas had purchase a generation ago, when these ideas were proxies for Soviet vs American ideological sparring. That ended 30 years ago.

Meanwhile, it seems trite to have these conversations in the abstract... comparing Ecuador to the US. It's not like these ideas haven't penetrated the political realm. They've been paramount in politics, policy and political thought for decades. Local, National & International.

This is positively naive:

"a swing back toward a messy city and a messy marketplace full of small proprietors—what I've heard called "capitalism with more capitalists""

We need to either find new ideas, and importantly, new terms. At the least, we could mine some new old ideas. How about Khaldun instead of Smith for a change... he was the original anyway.
Reminds me of the modern web that is more optimized for SEO than for the users.
Not at all. UPS does it to become more efficient, and that works because UPS has a lot of stops to make. But GP's grandmother did it to be safer even though it was usually less efficient.
This is not a compelling article. It doesn't even rise to the level of anecdata.
If we spent our time changing specs every time someone somewhere gets offended by something that didn't even happen to their generation, we will be spending all our time doing only this.
IIRC, that blog is paired with conference proceedings and COVID has thrown a lot of that in the air.
You are a hero sir and thanks for all the effort that you have contributed for redis. Someday, I too hope to create a project that would touch at least a fraction of as many people as redis did. You are a big inspiration. All the best for whatever you want to do next.
I 100% agree with you and I think it explains why most OSS UI projects are, well, terrible. Questionable features, inconsistent UX, millions of "options"... these are the hallmarks of a community model lacking strong leadership and a coherent vision.

As for the future of Redis I choose to be more optimistic. I think the Redis philosophy (thanks to Antirez) has become ingrained. The benefits of a minimal feature set are hopefully well-established.

In the very least I suspect this will last much longer than many expect before the bureaucrats take over.
Joint NATO fund to pay ransomware fees.
That requires some sort of malware (or similar) installed on the device/software creating the transactions which has access to the private key to leak it via some predetermined way and is different from what I thought you were saying that a pre-signed transaction could directly send funds to an unwanted address without you knowing by inspecting the signed transaction itself before broadcasting it.

Regardless, whatever job you have where what you've said is a legitimate threat model sounds like the most interesting job in the space.
Great idea.

I just implement it: https://github.com/yeo/ec2.shop/commit/ab258aef3ac2ad3d45b26...

Now by default it's text mode, so request by http client library or tool like curl, wget, httppie all get text bersion.

Only when detecting `Accept` contains `html` and user agent is safari/chrome/firefox etc it send html version.
That's the eMAG, not the Altra.
Mandatory posting? Count me in.
It doesn't work for me either. It comes up as a solution whenever I try to solve this particular problem but it doesn't work for some reason.
Oh duh, of course. Yes please confirm! Super eager to hear if this is the case.
Firefox's dev tools is a large part of why I switched back from Chrome. I just couldn't figure out how anyone is productive with Chrome's dev tools!
How to file a good browser bug
Thank you! And this is a very good idea:

> I'll just do whatever every morning I want to do for a long time.
Here is a more complete list: https://github.com/hengestone/lua-languages
> A 2700lb subcompact vehicle that scores Good may fare worse than a 5000lb SUV that scores Acceptable. This is because the small overlap tests involve driving the vehicle into a fixed obstacle, as opposed to a reference vehicle or vehicle-like obstacle of a specific weight. This is, in some sense, equivalent to crashing the vehicle into a vehicle of the same weight, so it's as if the 2700lb subcompact was tested by running it into a 2700lb subcompact and the 5000lb SUV was tested by running it into another 5000 lb SUV.

Its the "truth" until you run into something that's bigger than you.
> Is that not the case?

If simply having a better, and cheaper product will equal to immediate success then Mid-High End Fashion, as well as gazillion of other products in many other industry would not have existed as there are always competitors that offers something better at cheaper price.

Marketing / Discovery and Channels / Distributions. And that also excluding the software advantage Intel has.

AWS only just had their GA on Zen 2, nearly a year since they first made the announcement. Compared to Intel. I dont have any insider information. But I guess AMD has a lot to learn with regards to dealing with HyperScalers.

And you may have notice, Intel has way more leaks than usual in the past 12-18 months. That is part of the PR play to keep people from buying AMD while they try to Catch up.

Intel as of today is still operating at 100% capacity with back-log orders to fulfil, and a new record revenue in the last quarter. So yes, technically Intel is inferior, but until all of those disadvantage materialise into financial numbers it is far too early to call the death of Intel.

I dont hold any Intel Stocks but speaking as an AMD shareholder.
Ukraine is not in civil war, Ukraine was invaded. I hope you supported the Iraq war? What a terrible civil conflict we had to get involved in.
[sound of whip cracking]
It's not general alternative. It's good some subset of inference tasks.

Intel deploys their own GPU some time in the future.
I'm interested to know what applications really scale to these core counts. When I was working with large datasets (for finance) other bottlenecks tended to dominate, not computation, so memory pressure, and throughput from the SAN were more important.

These high density configurations were key when rack space was at a premium, but these days, power is the limitation, so this is interesting to provide more low power cores, i'm just not sure who is going to get the most benefit from them though...
This page does not inspire confidence in the framework.

I don't need a non-ui piece of software to have the slickest site... but no lorem ipsum please.
> It works with any app that can be convinced to run arbitrary code.

I guess any Electron apps and apps using webview for its local resources do it too.
Bravo. This is really lovely!
Prevention is the wrong approach in the first place. The only thing US can do is maintain a technological lead.

Without technological lead, the US is much like Brazil, which is a middling nation with lots of natural resources.
Where is "down here"?
Contrarians Think: The Early Days of Square, Yelp and PayPal with Keith Rabois
Followup article: https://www.forbes.com/sites/davidhambling/2020/06/30/update...

TLDR; it appears to be monitoring for illicit shipping activity as the sensor package was identified as one that logs radio traffic.
Helidon follows behind, but yes I agree that Micronaut and Quarkus are probably front-runners for this space.
“Hate” has no definition? That’s a new one. Maybe consider consulting a dictionary.
EFF and heavyweight legal team will defend Internet Archive against publishers
Most logical naming of processors I’ve ever seen. E.g:
Q80-33 - 80 Cores 3.3 Ghz
Q32-17 - 32 Cores 1.7 Ghz
Re: DuckDuckGo, I like to use !s to delegate to StartPage.com which relies on Google but provides a more private experience (according to StartPage themselves, which I have not investigated much).

If you have comments on !s vs !g, I'll all ears. For example, I have wondered, to what degree does the "extra" hop: (a) help my privacy; (b) affect DDG's revenue stream; (c) affect the results.
Hmm, are you sure you aren't calling the agent of the old one?
I tried as well, not for the bounty (I didn’t get one) but because I thought I should responsibly disclosure for bugs I had found in sandbox enforcement. I have them a demo, they sat on it for a while (to be fair, if you emailed them they’d respond quickly saying they were still working on it, unlike things submitted through Feedback Assistant.) Then I got an email a month later saying that they had fixed my specific case for App Store apps and couldn’t see what the problem was, as they had apparently pushed a fix just after I first submitted my bug without telling me or posting the source code for dyld (a fix which happened to apparently break some apps, so they got their bundle IDs hardcoded in AMFI as an exception). They seemed to only be interested in the App Store, which I couldn’t test obviously, but I submitted a slight variation to work around the changes within a day, and a month later another variation that made exploiting the bug even easier. After the last one they asked for an extension to work on the last one, which I granted them; when that one started expiring I sent them an email asking what had become of the bug. This time they said they fixed it in the App Store and they wanted to credit me with a fix; there was no mention of sandbox enforcement outside of the App Store. Still, as they had run over the discretionary disclosure and said they fixed the things they cared about I went ahead and published a writeup…but it was a bit annoying because they didn’t even assign me a CVE or something to link to so people could get more information, so I’m not sure why they were asking for details about me…
You should charge through another platform! There's nothing exclusive about the relationship that we want to have with writers. As long as you're producing any content that is a) freely available and b) worth reading we want it surfaced to our community of readers and we want to compensate you on a per-read basis for it.

The writer compensation is both a value prop for our users (it's the #1 reason that users say they would want to pay for a Readup subscription) and a growth mechanism for us since some writers will have an incentive to tell their readers to read them on Readup. We think that initially writers who have a non-existent or small subscription base would be most inclined to want to promote Readup to their readers but that should scale up as we grow.
There is probably no market at all for the privacy bypass where you make an illicit copy of Safari and arrange for it to be run so you can access files in ~/Library/Safari. This is simply not a high-severity bug. A good find, and an interesting writeup, but it's no RCE.
Oh wow, I hate this one so much.

I try to avoid opening multiple FF windows because I always close the wrong one last.
Intel reasons it's so massive that any way they decide to go is The Right Way and people will accommodate anything they do. So far, this is mostly true - we have code that takes different branches depending on the ISA extensions available, probably all the way down to x87.
> No, they're not.

Did you read the article? It seemed very clear to me that they had significant issues with customer support past just verification.

And what would you suggest as an alternative way to identify the user, anyway? Any alternative method of authentication seems doomed to fail - using a real name runs into issues with duplication, requiring users to set a username would likely require significant changes to the platform to support it and lots of people would forget it when they couldn't get their preferred username, and having a customer support code inside the app wouldn't help when the user loses access to their account.

It seems like there are alternatives, but none that the average user who signs in with Apple and needs to contact support will be able to get past on a consistent basis.
It is. So why don't remittance services do it behind the scenes?
> You don't find many small proprietors selling furniture and appliances in the U.S.; it works in cities like Quito because of the physical model of an open-air marketplace with many small retail spaces in close walking proximity to one another.

I'm very skeptical of this claim, it seems like the author has the cause and effect backwards. The physical marketplaces don't exist because there just isn't as big of a market for small furniture makers since labor is much more expensive in the US. (Plus as other commenters point out, few metro areas in the US are as large and dense as a city like Quito, so whatever selection there is will also be scaled down proportionally in most areas).

My now-wife and I still talk about the time years ago when we first moved in together. We needed a couch and walked into a small boutique furniture store in Brooklyn. They had this oversized, soft leather couch that I still to this day remember as the most comfortable couch I've ever sat on. The salesperson came over and started explaining how these are hand-made by one guy in North Carolina, we can choose the exact leather in the color/style we want and the craftsman will sit down at his bench and begin building the couch specifically for us. It was quite a compelling pitch but the couch was almost $6000 which we couldn't afford, so we thanked her and went over to Macy's where we bought a still very nice leather couch for under $800 to be delivered 3 days later.

You can absolutely get a boutique, small-batch, hand-made version of almost anything in the US. But we're so used to the prices that mass-production make possible that the vast majority of people are unwilling to pay for it.

One interesting thing though, is with the internet and direct to consumer brands, and improvements in manufacturing (or at least in easier access to cheap manufacturing), it seems like there are more affordably priced alternatives to big box stores now than there have been for the past few decades. It's a little weird to write an article about furniture buying habits in 2020 that ignores the massive rise of companies like Casper, for instance. The last time I bought a couch I bought it on Wayfair, which was incredibly simple and it arrived just as I expected. It sounds like the author had quite a memorable adventure in Ecuador, but it definitely also sounded like a stressful day of running around, and at least to me ordering online is a much more pleasant alternative.
I just can't see how these are better than smartwatches.
AMD had to take radical action to survive and it was never in Intel's interests for it to vanish.

Intel had the twin defensive 'moats' of x86 and the leading process technology.

But now Intel has stalled relative to TSMC on the process lead (and possibly lost it) and the last few days have shown that the x86 moat is crumbling. The world will not move to TSMC manufactured ARM overnight but a significant shift could happen quite quickly I think. Intel will / has defended with lower prices but that will ultimately mean a big shift in business model.

but ....

Intel is the last firm with leading edge technology manufacturing in the US. If it starts to falter I can see a concerted effort to maintain that from the US government.
There was a huge thread yesterday on HN about this topic with many comments much longer than tweets. It is certainly a topic that can be discussed at length on HN. People were voted down and up, but no one was cancelled; we're all still here.

I'm not aware of any moderator preference against talking about this subject. Again: huge thread on it yesterday that persisted on the front page all day.

However, I don't think every single off-hand mention of race or gender needs to devolve into a subthread of 50 multi-paragraph comments. So I appreciate your decision to avoid it in this instance.
How much did they pay in exchange fees and "slippage" to convert that to dollars? And how long did it take to do that?
Pocket is great but people need to start holding their feet to the fire: it's been 3 years and Mozilla still hasn't open-sourced the codebase, as they promised they would. [1]

[1] https://blog.mozilla.org/blog/2017/02/27/mozilla-acquires-po...
How Much Sugar Is Good for Our Body?
Please keep downvoting this into oblivion! You’re only illustrating why people outside of tech think tech-people are so out of touch.
Absolutely right decision. There are no private companies in China, all of the corporate entities directly or indirectly depend on CCP, which uses every opportunity to damage national security of enemies.
If past revenue numbers are any indication [0], then Google as a lot of power of Mozilla.

They are privacy focused, so I suppose they don't make money through the sale of personal data; also their services are free. Unless there is some other revenue source I'm missing, there seems to be a significant dependency on search engines and similar partners.

[0] https://en.wikipedia.org/wiki/Mozilla_Corporation#Google
Firefox has slowly crawled back into my daily workflow of development as well as general browsing with the 67.0 release mid last year or so, that brought in major performance improvements.

Though there is one caveat that bothers me a lot. When auto restoring sessions after I've closed Firefox and launch it the next day, it restores the same tabs, but with the old data (for eg., youtube or twitch live channels / searches). Every tab needs to be refreshed manually to get the new data, which Chrome automatically does.
As others have mentioned do/end if preferable for multi-line blocks. I assume that's due to Ruby's extensive use of hashes (which are almost always multi-line) and to keep a clear distinction between the two.
Equity Compensation – Has the Promise of Wealth Become Illusory?
Insofar as webservers go, more cores equal more simultaneous connections, no? I doubt network links are saturated yet.
Three more to go.
> Neither is good or bad, they just work differently and some people like one over the other.

They like one over the other when both work out the same. If some accident happens and the bus explodes, killing the passengers, nearly everybody wants more regulation.

People want the standardization and predictability, but they don't want the associated cost and lack of flexibility. That's understandable, but it's also naive.
There have been several games made with Godot released on Switch recently. The main blocker is Nintendo's NDA's. There's a recent twitter thread[0] from developers of one of those games.

[0]: https://twitter.com/monolithofminds/status/12599133551769272...
Sad. I have their Myo band sitting around, but the company appears to never have gotten a solid hit. RIP Thalmic/North.

It'd be nice if Google was somehow prohibited from snapping up even more companies while under numerous investigations for antitrust during a global pandemic, but I think that attempted legislation has fallen flat.
What's the rumored price? They reportedly raised $200M. Employees get nothing, I'm guessing. Well, a secure job at Google is a decent consolation prize, at least.
I think the crypto community has a complex about it because of how often tx fees are used as a weapon against them.

In reality, intelligent people on both sides of that dichotomy should recognize tx fees (within reason) are mostly beside the point.
As I recall (using it as a hobbyist and student, not a professional) it was primarily geared towards static sites. As people moved more towards dynamic sites (or automated upload of new content via things like content management systems) it fell out of vogue.

People who still wanted static sites often kept them simpler and made them by hand, or used some scripts to tack on the complex parts (consistent nav bars, headers, footers, etc.) in a "compilation" step.