skysight-inc/HackerNews huggingface dataset:
You can get to a point where you don't need to paraphrase, even when clarifying important details, but that usually happens when you've worked with someone for so long that you understand the intent behind their words close to perfectly.

Resolving misunderstandings on the internet is a good question -- it should be easier given that folks can usually edit what they want to say before publishing, and readers can read and re-read what's written. The __intent to understand__ seems to be the key thing in resolving misunderstandings here, both in online and in verbal communication
Grover Is Hiring a Senior Software Engineer in Berlin
Is DCSS any good these days? I remember playing it back aruond 2014 (0.14-0.15?) and beating the game a few times, but it felt like each update just increasingly dumbed it down
as someone who's made videogame cheats, ive always got a bit of a chuckle from the enthusiasm of users who defend players accused of cheating. sentiments such as, "it's not a hack, they are just good and you're a sore loser!". how to tell can be extremely difficult. but certainly anything digital that is competitive will have cheats. i regard digital games/sports as more like hybrid/centaur games -- you should assume your competitors are using technologies to their advantage. in a classic game like chess it's pretty lame, but that's why you go to your local club.
Also assets, interests, and possibly more.
Big advantage for me is network wide blocking on all devices with one central location to manage lists.
I have some concerns around the Signal foundation:

The initial $50M in funding was a loan, not a donation, from Brian Acton to the new nonprofit Signal Technology Foundation. By the end of 2018, the loan had increased to $105,000,400, which is due to be repaid on February 28, 2068. The loan is unsecured and at 0% interest.[5]

The Foundation is completely controlled by Brian Acton, who is the sole "member" of the nonprofit, with the right to appoint or remove every member of the Board of Directors. The Board consists of Acton and Marlinspike. Acton is also the President.[5]
That sounds like what I was thinking of, I must’ve misremembered the issue.

Do you have any sources on that history? All I can find with a quick search is blog posts asking whether GPL usage is declining.
How to Use Decentralized Cloud Storage
Party A: Acting like there is no consequence

Party B: Acting like there is no consequence and believing it.

To observers, highlighting the difference makes no difference.
Je n’ai fait celle-ci plus longue que parce que je n’ai pas eu le loisir de la faire plus courte. --B.Pascal

(I have made this longer than usual because I have not had time to make it shorter.)
I wonder whether maths really can be self-taught for more than about two generations. It has been known since the beginning of maths that it must be taught by teachers who understand the ideas to students who challenge the descriptions.
Propaganda is a pretty wide term.
At least, in the case of biometric authentication on device, the ability to use biometrics expires automatically when the device is turned off (and other times), so biometric credential theft has a limited window of vulnerability. This contrasts with many fixed biometric authentication systems that aren't used as often as a cell phone.
I've seen all sorts of problems with services that don't require a validated email address in the past.

Seems like a great idea... until a few years down the line you run into an issue for which you need to send a message to your users. And you can't.

These are often legal issues. Needing to forward on take-down notices, changing privacy laws (remember all of the emails that were sent out when GDPR came into effect).

Legal issues aside, the killer challenge is account recovery. People forget their passwords. How are you going to give them back access to their account without a verified communication mechanism?
2x Gen2x1
Couldn't you argue that being in the state of constant learning but never the feeling of being utterly lost keeps you on discord. Like it keeps making things feel fresh and when you want to change mappings or what ever you can move your servers around and what not. I don't know maybe not but I get where you are coming from. I find DM especially can get really mixed but than again I don't hate that. I think the threading idea that something like slack or teams(worst) is to much. I'm just trying to talk to people I don't need a thread the channel already classified what's going on there if need to look something up I can search the channel.
> There's no reason Apple needs to know either the specific piece of hardware

In order to revoke a specific device without cooperation of the device itself, which is one of their advantageous claims, they do.

Disregarding that property, Apple needs to know that the "CSR", ie attestation request, is coming from the secure enclave. That means that the "CSR" needs to be signed by some key. If the CSR signing key is unique per device, Apple receives device-specific information. This can't be an ephemeral key, as there wouldn't be a chain back to the secure element. If OTOH the CSR signing key is shared, it is probably exposed, or at least accessible for malicious signing, via the now known T2 compromise. There is much to be gained by such an exploit, so this isn't merely a thought exercise.

This complexity is all avoided by on-device attestation. EPID or EPID-like scheme could have been used, vs batch attestation.

Honestly, Apple is derelict in not describing this in more detail. Had they not made claims, it would be ok. But they are directly claiming to be better. I think we can be 100% certain they are aware of this depth of detail internally. Apple is not amateur hour.
Interesting, thanks. I wonder how much of this will be replaceable by good robots that can use smaller amounts of electrical power. Bug picking seems like a good candidate, watering too. Fencing not so much, etc.
> Instead Ikea use veneers and crumbling particle materials so you can't fix it at all.

As always, you get what you pay for.

A LACK coffee table costs $30, because it's made of particleboard.

But if you buy a HEMNES coffee table or a LIATORP for example, you will get a piece of solid wood furniture that will last generations, but it's gonna cost you $300 instead.

It's not exactly surprising that people are buying the "good enough" stuff that's 10x cheaper, because if that option didn't exist, people would simply buy a lot less furniture overall, because quality furniture is expensive, even at IKEA.
I can confirm I'm seeing this -- I just noticed, searched Google, and ended up ... here.

I have an email generated by one of our internal systems with a link to it, fetched via IMAP using Apple Mail, and the link is edited to be like so:

https://www.google.com/url?q=<ORIGINAL-URL>&amp;source=gmail...

We're on GSuite Business, and under "Spoofing and Authentication", have "Apply future recommended settings automatically." enabled. Probably some other options, too. I happen to have "Advanced Protection Program" enabled for my account; so this may be happening because of that.

Given the phishing attempts I've seen in my career, having this as an opt-in option for certain users ... well, let's just say I've personally had users I would have had this turned this on for and we would all be happier. I can also see the privacy concerns.

Perhaps we'll learn more about the opt-in / opt-out details in the coming days, so that users can make the appropriate choices for themselves?
Honestly, having worked for large companies, it's astonishing how few people are working on any given project. It's normally a handful of people actively contributing to any given specific project.
That's you not understanding the security model, not sophistry. The application is granting access based on a public-key exchange, which the key stored in a hardware store which cannot be retrieved even in the event of a system-level compromise[1]. The remote application does not see the biometric data or even know that it was involved in the process.

It's also important to note that this does not mean anyone who grabs a laptop gets access to everything. The device still uses a password to unlock — you're forced to enter the password on boot before you can use biometrics later — and someone who stole an unlocked laptop could, for most users, have auto-fill supply the passwords _except_ on devices with biometrics which usually require that check every time (as iOS users have been reminded in this year of mask wearing).

So let's walk through some common threats:

1. Password re-use: a major source of compromises, blocked by this system
2. Phishing: a major source of compromises, completely blocked by this system
3. Compromised email: also popular, blocked by this system except for the services which allow email-based MFA resets, in which case it'd be the same as a password.
4. Local system compromise (user or root-level): passwords are vulnerable, biometrics present a barrier when the attacker can't just do something like reuse the credentials stored in your browser's cookie store. Biometric data and FIDO keys cannot be extracted.
5. Stolen device, locked: both are probably secure as long as you don't have your password taped on the keyboard
6. Stolen device, unlocked: passwords are vulnerable if you have a password manager which doesn't require e.g. FaceID checks (which is what Safari does on supported devices), FIDO MFA is not usable if Touch ID or Face ID is configured. Biometric data and FIDO keys cannot be extracted.

1. https://support.apple.com/guide/security/secure-enclave-over...
I am also very curious if this makes any difference over just doing a mutex over a single connection and ensuring minimal contention.

The biggest TIL from this was the fact that there is a 2nd WAL mode that seems to have some additional optimizations relative to the first:

https://www.sqlite.org/cgi/src/doc/wal2/doc/wal2.md

I will definitely be experimenting with this in the future. We have some very write-heavy databases currently configured for WAL which may be able to benefit from the 2 file approach.
PWA's will be a huge deal in near future
Sure it was - sophistry is pretended an issue is simple by (deliberately) ignoring alternatives.

If biometrics are fallible, it matters zero how secure the digital system behind it is. That's obvious, and a comment belaboring the digital security is beside the point.

As for how hard to spoof, just google it. There are dozens of folks with techniques and hacks right now. It'll only get worse.
That's true for USA, but I believe that most countries have national police forces.
Goldman Sachs Open Sources Its Data Platform via Finos
At Caltech the exams were nearly always open book, open note. Furthermore, they were not proctored (by institute policy), and you could take them home and do them, and you were trusted to adhere to the time limit.

I.e. it was so easy to cheat there was no purpose to cheating. In many colleges, students brag to their peers about getting away with cheating. At Caltech, I never heard anyone brag about cheating. If you were caught cheating, the other students would ostracize you.
Free PDF merging tool that works without any file upload to ensure privacy
Virtual Bar in the Browser Voice Chatrooms Impromtu Zoom Conversations
no registration voice chatrooms
Unfortunate side effect of their success. Most bigger servers I'm on require having a verified account otherwise all you can see is a single message asking you to verify.
> Cross-Platform - You can reliably stay up-to-date on discord from basically every device you own with reliable notifications

Until there's a client update. When the client detects that an update is available, it asks to apply the update without any way to start without the update. So far, I had 2 weeks this year without the desktop client, waiting for the update to appear in the package repositories.
> ... blurring the lines between equity and debt no matter what you call it.

I agree that calling litigation financing a loan may be misleading because it could look more like debt or equity, depending on the structure. If the premium is fixed, then it looks like a zero-coupon corporate bond, except with uncertain maturity. If the premium is a percentage of the recovered amount, then it looks more like a stock investment.

The structure will probably also depend on the entity being funded (a corporate entity, a law firm, or an individual plaintiff). For a law firm, there are ethical restrictions on fee-sharing with non-lawyers. For individuals, there may be consumer protection laws that apply. Also, if the structure looks like a loan then laws regulating lenders may apply.

I'm not an expert in this, I just know enough to know it's complicated.
I'm on Fedora and have been for 10 years. My Nvidia card was installed in 2012. It's always worked fine with the proprietary Nvidia driver up until I got kernel 5.9. My system has been hell since then. I had to switch back to Nouveau, and now I get crashes in Xwayland and Nouveau several times a day. This is bad enough I'm about to order an AMD card on Amazon and ban Nvidia from my life.
In a similar fashion of transforming the mechanics of code as art, this reminds me of code poetry.

Here is my favorite, Capsized by Zak Kain for Stanford's Code Poetry Slam:

.ocean {
color: cornflowerblue;
pitch: high;
overflow: visible;
}

.boat {
color: firebrick;
transform: rotate(94deg);
float: none;
}

.rescue-team {
visibility: visible;
}

.crew {
widows: none;
}

https://web.archive.org/web/20170522035639/http://stanford.e...
Can someone give me a TLDR?

Just kidding - though I will say this type of behavior can sometimes fall somewhere between "Tricks to Sound Smarter at Meetings" and "what gives people feelings of power", so don't misuse it or misconstrue it being used on you as solely a positive force for understanding.

Two big takeaways (see? paraphrasing!):

Your tone should convey the desire to clarify and understand what the speaker said. If you don't have this desire, don't fake it.

“Studies in labor-management negotiations demonstrate that the time required to reach conflict resolution is cut in half when each negotiator agrees, before responding, to accurately repeat what the previous speaker had said.” - Marshall B. Rosenberg in Nonviolent Communication.

My tldr Paraphrasing saves time, which people value more than money.
Btw, thank you for your blog reviews and videos.

Compute Module 4 + IO Board looks like a winner setup for a small multimedia box
Thank you so much for all the advice! It's really nice to know that shorter fasts can still have an impact on some people. This has encouraged me to try fasting again.

And huge congrats to you on reaching only 1-2 seizures a month. I know how much time, research, and mental energy goes into reducing seizures. That is a huge accomplishment!
Maybe... but if I steal your fingerprint, I have it forever.

And the courts can't yet force you to reveal secrets from your mind. But you can be compelled to use your fingerprint to unlock things.
Any application that has administrator/root privileges should be able to do that.
Martin Kleppmann on Programming Love Podcast
Centralization is inevitable. Scale-free networks grow hubs through preferential attachment. The hubs are the center(s). Basic network science.

Read Albert-László Barabási for details.
You are the one using sophistry, if anyone is using it. You are completely (and willfully!) ignoring how vulnerable passwords are in any threat model that invalidates a FIDO2 implementation of Face ID. No threat model invalidates the security of Face ID for the Web without similarly invalidating passwords. At least, you have chosen not to present such a threat model, which would help my (apparent) failure of imagination.

You cannot protect your passwords from someone who would physically take your iPhone before you can lock it and who would have a life-size reconstruction of your face ready and waiting. Such a person could shoulder surf your passwords with far less effort, or compromise one of the dozens of websites the average user re-uses their passwords on. At a certain point, the person in this threat model will just pull out a wrench and beat you with it until you help them get into your account. https://xkcd.com/538/

If you can show how some random person on the other side of the internet having your fingerprint helps them get into a website using your account... that would be interesting discussion. As it is, they must have physical access to your device. Your biometrics are useless without physical access and rapid action, since the biometrics quickly become useless as the device falls into a state that requires the user's passcode.

You're completely ignoring everything I actually said in my comments, so I'm done here.
Steve Jobs and Bill Gates Face Off – 2007
Why next year and not last year?

There certainly is a problem you'll see on HN because they think every company is out to get them because they read Snow Crash.

But Cambridge Analytica was not real for instance, it was just marketing fooling people. Palantir's biggest cheerleaders are the paranoid.

Marketers have done it for 100 years. So, yes it's all fake, you're hiring someone to fool people, see the problem, but I'm not sure it's a bubble if it never pops.
How is that different than someone "boosting" their own blog posts? Twitter seems like this person's medium of delivery for their content.
Other than matrix, what are some other alternatives or upcomers in the messaging field I should try.

Matrix still has a high burden of me setting up my own server and maintaining it. Till their P2P solution doesnt release, they have their own metadata problem.
This is a good point, but I think it is relevant to ask whether most people learning math in school have the experience you describe. I certainly did not. My math education consisted purely of recitation of things I didn't fully understand, and I got very good grades all the way through.
The git repo referenced in the header is 404: https://github.com/marco-lancini/cloudsecdocs/ which is relevant because there are some typos that could benefit from a PR or an issue, and separately a discussion about whether to rename "kubernetes master" to "kubernetes control-plane" (as I believe the upstream docs have removed that nomenclature from their docs)
privacy issues/concerns aside i think Discord is great. Mobile and multi-platform Desktop apps works the same way, it has modern features and integrations.

In fact it seems to have killed IRC for many, which is kinda sad. Most of the IRC networks i use are mostly dead now. For me Discord has replaced TS and IRC.
> They are using speech, in a sense, to think.

Oh yes, indeed they are. I never truly understood why some people close to me would just dump random issues at me, repeatedly, and actively refuse any attempt at guiding the conversation towards a possible solution. I knew I was supposed to handle it by emphasizing and letting them vent out, but I never could quite understand the frame of mind that goes behind this talking to vent out...

...until recently, during one of such conversations, hearing about the same problem for the 10th time this month, it clicked: I realized that they're doing the exact same thing I do with "brain dump" text files - up to the same phrasing, and "melody" of speech. Those people are just unloading their train of thought to sort it out, and the listener's role is just to be there and pay attention.

(I say "those people" not as a negative, but only because I'm not like that; I think I've lost the ability to use talking to think when I learned to use a text editor for that purpose.)
I really wish this article gets more attention on HN. Reading through the FB/Twitter "censorship" posts on HN leads me to think that a lot of people here are unaware of the level of misinformation and propaganda that exists. And that's just for English language media. There are also a ton of fake news tailored for other languages and ethnicity. For example, as a Vietnamese American, this has been a huge problem in our community.
Would it be possible to install a modern graphics card on this (e.g. some ati Radeon)? That would require some physical adapter on the one hand, and driver support for armv8 on the other.
Nobody is working for 8 hours a day
NYT finds network of over 1300 partisan news sites who hid Republican backing
The CUP Method – go from an idea to product-market fit
Interestingly, touch ID launched 1 year after Apple refused to unlock an iPhone for the FBI.
Zuckerberg Throttled Traffic to Progressive News Sites
> This is the story of Twitter going along with journalistic standards

But why, the Post is in fact a newspaper. Why do you want Twitter (which is not a newspaper) to make editorial decisions about what gets published or not, rather than actual newspapers?
Eden (YC S15) Is Hiring a Senior Engineering Manager
When you say self-taught do you mean even without using a really good text? Or do you mean that it actually can't be taught without a teacher? If you are saying that math can't be taught without a good teacher I don't really see how that is "known".
Can't tax law cases eventually make it to the Supreme Court anyway?
Yes people she met IRL. I'm not ready for her to go fully out into the wild internet yet
I have been chatting via text, as a major form of communication, for more than 20 years and at least 2/3s of my life. Before this thread, I have never even contemplated a period having any meaning more than the end of a though. And I certainly had no position of authority, so that didn't affect anything.

Same here.
I tried this in a private tab just before writing my response. It asked me for an username and a date of birth to make sure I'm 16.

It will then bug you to "claim" your account (add e-mail address etc.), but you can already use discord normally.
The “something you have” is the key stored in the secure enclave/yubikey/whatever. That’s the real authenticator in this scenario. That it’s (maybe) unlocked biometrically is nice, but secondary.
Let's say you draw 1 million samples from a uniform distribution between 0 and 1. I'm saying that if you know the distribution you can sort in O(N log(log(N))). Are you claiming you can sort them in O(N)?
I agree, I think the only appropriate time for an emoji is to acknowledge somebodies else's message but you don't have anything you want to say. A thumbs up or a celebrate.
> I don't agree that putting a period in casual textual communication is inherently hostile

In communication, your opinion of how something will be interpreted is far less important than opinions of the people doing the interpretation. You can stand firm in believing that adding the period doesn't make your message more hostile, but that won't change how your readers feel.
I reassembled my IKEA Malm bed after a move and it seemed to be better than before. It completely stopped squeaking or making any noise when moving around on it. (Not that it was particularly bad before, it just got better.)

That was the 4th move, where I had disassembled and reassembled it each time. One of those moves was across the country too.
I read Sons and Lovers when I was about 16 because it was like one of the top books on the modern library top 100 novels of the 20th century. Not bad, but far from great. I wrote him off for a few years as a dated blow hard.

A few years later I picked up The Rainbow in a used bookstore for no Particular reason. Ended up buying it. Turns out DH can actually write a stunning book after all. Women in Love is also great, but a death in the family affected my reading of it and I put the book down and haven’t managed to read anything by Lawrence since.
Why isn't a cinder block shack functional?
Gotta Catch 'Em Al1 Finding Typosquatters on the Python Package Index