skysight-inc/HackerNews huggingface dataset:
If anyone with a strong stem background wants a minimal path to understanding this (or at least seeing what it takes to understand this) on a deeper level I have to recommend Leonard Susskind’s
“Introduction To Black Holes, Information And The String Theory Revolution: The Holographic Universe”.
It pulls no punches.

Read it with Feynman’s mantra in mind: (paraphrasing/retooling The mantra for lesser mortals like myself) just dive in, read until you don’t understand, then go find a book for that part, and read until you don’t understand, etc etc. I recommend having a “strong stem background” first or else this tactic may never terminate. Maybe Lenny’s Susskind’s theoretical minimum course could fit the bill for most of the background too, but I can’t vouch for how much GR is covered.
That is what I was thinking, a very heavy "micro" instance.

I am curious what exactly this is envisioned for. Running micro services do not require such things and the system requirements are so heavy, it would need more hardware to run that just running them all in a normal distro.

I never jumped on the container bandwagon since it seems like it adds overhead for very little gain that can't be done with much lighter solution.
There's another privacy-focused SSO solution from SimpleLogin that creates a different email address for each relying party.
Our space-ward expansion has some hard physics limits. And we've not yet eclipsed what was already done decades ago. And even settling Mars will require more sustainable lifestyles than most first world citizens now enjoy.
Privacy concerns aren’t the only reason to block it. It also makes software way more responsive. I was experiencing daily freezes that would disconnect my keyboard and mouse (particularly when waking the computer or connecting to an external display) on my 2020 MacBook Air before adding the entry to my hosts file which fixed the issue entirely. It was so pronounced and irreparable by Apple support technicians that I nearly ended up getting rid of the computer.
I feel Apple has done privacy well in so many cases, that the way this works is really disappointing :-/
Everybody knows that when they request a website their action can be logged. The opposite is true about desktop apps
> Chickpeas aren't hard to make delicious. Ditto for lentils as well

Yes. Check out my other comment about beans in this thread. All the dishes I mentioned there are pretty tasty. And so are lentils, if by that you meant masoor or masoor dal, or even if you meant tuar dal). And all those are high in protein as you say.
Perhaps io_uring is a way forward. Today you can already batch a bunch of IO calls and chain them together so that the next is only excuted when the previous one succeeds. With some additional hints journaling and similar filesystems could try putting such a batch into a separate transaction group. That would give you some crash all-or-nothing behavior but no rollback on error. It would also be on a best-effort basis, might only support some systemcalls etc.
Then the situation could be improved piece by piece.
There might also be usage data they collect conveniently.
Until they front it via cloudflare or aws. I got hit by AWS blocking when setting up a network in Russia for the 2018 World Cup - my unifi controller was on an ec2 instance that was blocked due to telegram shenanigans. Worked around the problem but shows that blocking an AS can lead towards an unusable computer.
So name calling...bc why not?
I closely associate calling someone a "traitor" with a threat of death.

Its history up to the modern day makes it equivalent to a statement that your opponent should be killed for their opposition. National politicians will certainly see that as a specific threat.

Jo Cox (UK Member of Parliament) was murdered in 2016 by someone repeating claims that she was a "traitor".
Once you have your domain, you can use Zoho create emails for your domain for free. They don't offer IMAP/POP3 access in the free tier though.
Because people here are thinking based on principles and values shared by the majority. They are thinking based on elitism that thinks highly of itself for disliking facebook. The same happens in US politics, where people disregard the “common good” (you know, healthcare) because “muh freedom trump good obama bad”
How can revoking apps stop a phishing attack?
I wonder if the author had Antonio Gramsci in mind during the redaction. It would be pretty funny they hadn’t.
I'm not sure what you're getting at. ;)

"They already know they exist ..." doesn't really seem to match up? Like, of course they do.

Anyway, I was just pointing out that the communication still seems pretty close to sending Apple the list of applications being run. At least, for applications created by dev's with only one major program for their certificate.
You also didn't ask them to put a clock in the top right corner. I hope that gets the same level of righteous exasperation.

(Just discovered MacOS includes at least two fonts and a printer driver I never asked for. How dare they?)
No, once it's in that "battle stations" mode it won't stop for anything. Every mike I've had for decades.
>> This continued fearful response is preposterous.

Careful pal. The Emperor's new suit is made of the finest hypothesis.
But finance is up and out. The typical Harvard student in finance is not making that much, even 5 years out. I know plenty of them.
I got a call from a recruiter from a large company that simply “had to reach out” because my email was so unique. So, there’s that too!

Maybe it has hurt me somehow but...I wouldn’t want to work somewhere that would hold my email domain against me
I agree, how is sending a list of revoked certs not the best idea?
Apart from the kick-out risk, using SSO from Google/Facebook isn't good for your privacy neither. They usually have an iframe in their SDK that can track you even when you don't click on the login button.
Could this eventually be used to for example have a microwave that could make creme brulee by just targeting the top of the custard
What exactly do you mean ad-hoc? Can my friend without an apple account compile an executable with GCC send it to me and I can run it on my new Apple Macbook?
I don't quite understand why anyone would send data in clear text anymore, let alone Apple.
Thanks for the comment. I'll definitely consider playing with the price and adding more general IP legal content that folks commonly have questions about.
Yeah, the license requiring itself to be included in copies was what I was thinking of. Not having it in there leaves it in a gray enough area that I would be hesitant to rely on it for something where the licensing was important. Very possible the metadata being there and indicating the unique(?) license identifier of “MIT” would be enough to convince a court in the event of Problems, but I also am not a lawyer and like my usage rights to be unambiguous.
Backstabbing intertribal warfare is a bold new idea.
Right, so our eggs are not all in one basket, but in two. One claimed as rebel territory by the CCP and one still technically at war with a nuclear-armed hermit kingdom.
Privacy app that goes beyond data protection/deletion
... and that apple wants to merge its operating systems
Disclaimer: I currently work for June Oven.

The June Oven does this, and it works pretty darn well IMO. It's using just a video camera to do food recognition, but it's fairly high-accuracy for recognizing supported foods. The first few times you do it, frankly, it feels kinda magical.

But, actually, a lot of my usage doesn't lean on the pre-set programs. Rather, I do a lot of 'reheat leftovers' by sticking a temperature probe into the food, hooking it in to the oven, and having the oven automatically reheat until the internal temperature is warmed.
The Paradox of Choice.
While I agree with your sentiment, how has this worked in the past? Did things reset to 0 during WW1 and 2?
Most browsers are stopping ocsp because of the privacy use and the triviality to block it. Did Chrome ever do it?

That’s why CT came around.

Some background for those unfamiliar.

https://scotthelme.co.uk/revocation-is-broken/
"Windows has made amazing strides, bounding past controls afforded by other OSes, providing a great deal of simplicity for users while focusing on verifying who compiled code that is running on a user's PC"

By installing Candy Crush in every home user Windows hasnot made any amazing strides. In fact I would say windows 7/8/8.1 was far far better. What we have now? Candy Crush, Dumb Antivirus taking 20% CPU wasting unnecessary cpu time, Telemetry which sends data even if you opt out.

"I think the privacy arguments are far-fetched"
Really?? Just because there are other bad players in market. Just because apple rivals/friends are doing bad thing doesn't mean you have to go and say privacy arguments are far-fetched. Clearly the article is just white washing of apple
Harvard students are primarily interested in companies with reputable names? What a shocker.

Students who go to a selective school, often want to go to selective companies and continue to build their “brand” to maximize their success (or at least optionality).

It’s usually later on when people figure out what’s important to them and are confident enough to stray for the default path. For example, my current company is a well known one, but isn’t FANG. I chose there because I use / care about the product, and the culture is pretty much exactly what I was looking for. It’s growing, I’m paid well, and I’m relatively happy. I don’t feel the urge anymore to work for the hottest companies or what not.
It might be as simple as sweet vs spicy.
The idea that sending information about the cert is somehow not exposing the app is crazy. An attacker could easily download apps and sniff the network traffic to correlate cert info with an app.

Also i don't get the argument for using HTTP. Aren't these two separate systems?
When I saw this comment this morning I was a little surprised, and I second guessed my own familiarity with my own brain. So I did what I do when challenged on the facts and did more reading. It’s not ambiguous. ADHD is directly related to dopamine (reception/production) deficiency. Medicating ADHD improves dopamine uptake (and production depending on the meds), and that chemical regulation relieves ADHD symptoms. It’s a small but perfectly reasonable stretch to infer that behavioral coping strategies that produce reward experiences which also relieve symptoms are likely producing similar chemical outcomes.
OCSP also allows CAs to revoke random websites’ certificates, yet nobody is making a big fuss about that (presumably because no OCSP server has encountered what Apple’s did and prevented websites from opening).
really love these reverse engineering articles <3
>>After all, masks and social distancing work, right?

funny how critical examination of that premise is not allowed.
XNU has had support for fat binaries since NeXTSTEP.
It depends where you live. Kettles are faster in the uk, but the us base power isn't fast enough to be fastly powerful.
sweet vs spicy
Seems like the solution is just put a short timeout on the OCSP call and fail positive? Nets the same behavior as when you’re offline.
I own that very microwave and agree completely.

It has never made me lash out in frustration, unlike every smart microwave I’ve used. It turns out, I also have never needed accuracy to the second when reheating food.
> It is disingenuous to say Europe or the rest of the world does not care about copyright when they have historically and increasingly laws that are as strict if not stricter than the US' when it comes to preventing copyright infringement. [1][2]

Those laws are to some extent pushed through by the US in international treaties on behalf of american copyright holders.
Apple has done a fantastic PR job regarding privacy. I am more skeptical about the status of actual privacy given their iMessage situation and now this.
I didn't know SimpleLogin. It seems really nice. Kind of what Apple does with their "Sign In with Apple".

It's not exactly a SSO, though.
Wait. Is it not common knowledge that Android and iOS log every application you open down to the exact millisecond you open and close them?

Is it not common knowledge how telemetry works for the operating systems? They generally batch up a bunch of logs like this, encrypt them, compress them, and then send them to the mothership (hopefully when you're on WiFi).
I think it would help if someone could quote or reference Apple's official position / explanation on this (if there is one).

You know, before declaring the end of the world, is there any information from the source (Apple)? Discussions here seem to have had several thousand comments without obtaining this basic info. It would be good to know, I would think?
In much of Europe and east Asia, yes! Germany and Japan in particular were bombed basically to 0...
The problem with that post is that it assumes that all application writers are writing crappy C.

Linus has tunnel vision about this, and it wasn't true in 2009 and is becoming increasingly untrue.

The people who need better tools to deal with this are the language implementers who almost always abstract over this. And since most language implementers target Windows and OS X as well as Linux, they are generally more aware of what better could look like than Linus.
A better privacy solution would be to sync revocation lists every so often (and, if you must, right before opening a new app). Is there any privacy-preserving reason to not go this direction? How often would you expect certificates to be rescinded? You could also use a bloom filter to significantly reduce the false-positive rate.
You can also use Gmail as POP3/SMTP client for your e-mail account at other provider.
Less too big to fail, more a national security interest in ensuring the US can make chips during a hypothetical conflict.

Great if you’re the company the gov’t blesses for this purpose (like Microsoft) but not so great for their competitors.
Two things I’m waiting on in C++: memory-safe “lifetimes” subset and zero-overhead deterministic exceptions, both proposed by Sutter.
Many invalid points, and straw men in your comment. Here are the more important ones:

“The argument here is that without Apple taking control of the user's software the user would fall prey to the privacy violating practices of the likes of Google and Microsoft, which is not true. Hence the "lie by omission".”

You say it’s ‘not true’. I think it’s quite likely to be true.

But more importantly - it’s an argument. Not a fact. You just happen to disagree with him. It’s not a lie of omission to simply come to a different conclusion.

He hasn’t presented any argument why he should be considered an apologist. You are arguing that he is an apologist. That is both ad hominem, and a loaded term, and it’s you who is using it.
I see. Thank you for taking the time to explain and even provide examples. Much appreciated and insightful.

I’ve been thinking a lot about how to make the issue template friendlier while keeping the rate of poorly written reports at an acceptable level. We definitely need to change our approach. Setting a hostile frame in an issue template isn’t helping anyone.

Thanks again for taking your time to explain. We still have a lot to learn and improve.
I guess you haven't heard of OCSP stapling? https://en.wikipedia.org/wiki/OCSP_stapling

Active OCSP is far from being considered a good thing universally.
Any insight from FAANG et al companies with respect to resumes? I would guess they’re just glanced at for years of experience to bucket candidates against a type of interview schedule that then determines level/comp and that’s about it. Any managers can weigh in?
>So no

You have a hell of a Fiat Punto

>The Punto is reliable, durable, and easy to modify

If you don't drive on salted streets..the frame oxidize under your butt.

>And Koenigsberg is a burg in Germany, maybe you meant Koenigsegg?

Yeah, but honestly i don't give a damn.
Easy: Revoke the certificate of the app doing the phishing.
Ah, my bad. I misremembered. Was probably muddling it with either the DS, as the other commenter mentioned, or the MIPS CPU in the Playstation.
The direction we are going is built in cell comms for all devices, good luck firewalling that.
> There is no information on how often the validation happens.

I wrote a blog post about this. My analysis indicates that Developer ID OCSP responses were previously cached for 5 minutes, but Apple changed it to half a day after Thursday's outage, probably to reduce traffic:

https://lapcatsoftware.com/articles/ocsp.html
Thanks! Note that I don’t have much experience writing Win32 apps so the code might not be top quality.

The universal lib is interesting for future work (the compiler inlined the few things I needed). For Win32s support generating a position-independent executable was the only problematic bit, but that's not an issue for libraries.
Shameless self-promotion: https://github.com/saagarjha/dummy_thicc. That reminds me that I have left PRs for the NeXTSTEP slices hanging around for quite a while…
That sounds like an ironclad law. But is there empirical evidence for it? And a rational explanation behind it? I mean it's very strict as a rule: "in EVERY case the second group ... ".

Strong claims like that require strong evidence and a theory of WHY that would (always) be the outcome.

I'm thinking of society as large. That is an organization too. Are we doomed by bureaucracy?
> The owner of a business with 200k in revenue is higher status than a McKinsey employee with a 500k salary.

What makes you say that?
Has anyone used a pi-hole to block apple privileged servers, like the OCSP one, while running Big Sur? I'm thinking of setting one up---not necessarily to block OCSP, because the points in this post about actually wanting to know when a certificate has been revoked are sensible---but to at least have the option in case of another disaster...

Relatedly, does anyone know if Big Sur allows one to use a custom DNS server on the device level with those privileged destinations? (He says, mulling the complexities of getting a pi-hole working with his mesh system.)
Well, you can block it. You need disable SIP and edit a plist.
Oh look, another asshole wading into journalism with zero training. If you can't interpret sources don't comment on them!

It's not clear which standards are enforced by the mods here. It seems like the "don't start trouble" standard....
The Hacker's Diet, if I recall correctly, puts forth the notion that "a calorie is a calorie." Whether this is correct or not is an on-going controversy, but I happen to think that it is an incorrect understanding. 300 calories of extra virgin olive oil and 300 calories of SweeTarts do not affect your body or your weight the same way.
Farewell, Alex Trebek
There is so much fragmentation in authorization and authentication that it is hard to see how we can “run in the same direction”. Facebook, google, etc have zero incentive to change anything.
Hey, that sounds.... just like a typical computer architecture course. ;-)

disclosure: I love computer architecture courses, and I highly recommend them.

edit: I also think you can skip the microprogramming, but I think I understand what you are getting at, which is that you do a multi-cycle implementation first and then a pipelined implementation.
I agree with the idea that the content should be emphasised. Unfortunately the extreme UI padding goes in the opposite direction for me.

The fat toolbar in Safari is a good example. I care about the web content but now I have to give up part of my window real estate to the meta concern of the browser controls.

This used to bug me about Gnome 3 and it's sad to see macOS heading in the same direction.
I’m not up on the latest here, but did something significantly change with the lifetimes proposal? Last I heard, it was not a subset of the language, and was not attempting to be fully memory safe.

(That said I am looking forward to it too; every bit helps!)
Searchkit: Search UI with GraphQL, React and Elasticsearch
> I'd imagine fuel costs are a big part of the cost of running a ship.

"A 12% reduction in at-sea average speed, known as “slow steaming,” led to an average reduction of 27% in daily fuel consumption and thus fewer greenhouse-gas emissions."

Slowing down sounds a lot easier and cheaper than retrofitting bulbous bows or fancy new air lubrication systems.

https://qz.com/1608527/the-shipping-industrys-emissions-coul...
Yeah but the thing is that there are many CAs. The main problem is (IMHO) when you have a single party with conflicting commercial interests that controls all certificates for a given platform.
Fun video about microwave oven now vs thirty years ago:

https://www.youtube.com/watch?v=UiS27feX8o0

"The Antique Microwave Oven that's Better than Yours"
by Technology Connections
I think there are broadly two types of ways to lose in a war.

The first way is that you've been to articulate clear goals, have been able to string together methods and means that at least on paper allow you to reach those goals, have been able to secure the relevant support (so national/popular will, backing of an aristocratic class, etc etc) to see through the task, and then come up short. For a classic example of this, we can look at WW1 Germany. Despite everything we know about how the war ended up, there was a path (but treacherous) to the Central Powers achieving their goals and being able to set the terms at the end of the war.

The second level is that you've failed one or more of the above tasks. In which case you're likelihood is losing gets much higher, possibly to the point where future historians might look back and say that you've lost before you even started. For classic examples of this, you would look at WW2 Japan and Pearl Harbor. It is incredibly difficult to find any analysis that didn't require continuous strings of miracles for Japan to achieve its aims once it had attacked the United States. Note that the second case consists mostly of a lot of "non-military" things.

Another thing that may help you out in your quest is to grasp of some of those is to understanding the three tier organization of tactics, operations and strategy. In fact, I can point you right back to one the author's blog series (this is part one of a six part series) where he analyzes the siege of gondor (yes LOTR) from a realistic-ish point of view (https://acoup.blog/2019/05/10/collections-the-siege-of-gondo...).

It'll probably start to give you a feel for maybe how you could rephrase your original question into forms that'll more likely give you the types of answers that you'd be satisfied with.
> I personally would consider top 5 percent of any task to be the low bar of proficiency, so even that doesn't seem super impressive to me.

Top 5% among paid professionals is your low bar of proficiency?
What did you pin your Wifi to ?
I doubt you’re missing anything, I’m just being loose with my language.
don’t you need to enable analytics?
2016. Here's some of the slide from freescale/NXP about this from then: https://twitter.com/vivekgani/status/684893901602205696 .

Earlier version of myself used to obsess about ideas like this, these days more interested in appropriate technology rather than overall efficiency.

see also a demo video from then: https://www.youtube.com/watch?v=TR7fhBUTMso
Yes, it's often the wrong kind of deference, one that puts people on a pedestal but doesn't try to get to understand what's going on well enough to discuss war and military issues in a serious way.

I'm reminded of James Fallow's article:

The Tragedy of the American Military
https://www.theatlantic.com/magazine/archive/2015/01/the-tra...
There must be a few! I guess I’m a hybrid though. (Software guy) Anyway, cheers!
There will be a day when all apps on a mac will only be installable from the app store. Developers will be forced to buy macs and subscribe to Apple’s developer program to support it. Customers will be trained to not care. And HN Apple fanboys and fangirls will try to justify why this is a Good Thing(TM).