skysight-inc/HackerNews huggingface dataset:
A Neural Scaling Law from the Dimension of the Data Manifold
Seems like a cool search engine but wish they didn't go so heavy on the box shadows
Google Photos: High Quality uploads to count toward storage (from Jun 2021)
The worst part of this is that Apple could have easily predicted this, that there would be demand to download the new OS, and put in place measures to prevent this from happening. I guess they just do not care.
Can History Predict the Future?
I thought this article provocative and thought-worthy.
Replace Apple with any CA on the world wide web, if I go ask them to revoke a certificate, they should just do as I ask. Not try and second guess me.

Apple is not to blame for HP requesting the certificate be revoked, not even apportioned. HP is the sole requestor and the sole entity responsible for the cert being revoked.
It really pisses me off when companies don't decide for me what information I am allowed to see. They are obviously smarter than me, and only acting in my best interest rather than their own, so it's best that they do this for me.
It’s not likely in the near term that Apple will lock down Mac software to the extent they do on iOS. But they’ve already taken many steps—over several macOS iterations—to either lock it down more than it had been, or to make overriding default restrictions difficult (SIP) or non-obvious (right click -> open to bypass gatekeeper). It’s unlikely they could take it drastically further without alienating a lot of developers, or without providing some kind of blessed escape hatch (e.g. you can run arbitrary software if you have a developer license; even that would alienate anyone developing software for non-Apple targets like web/server).
it has xeyes in web form (eyes follow your cursor)...
In case anyone else doesn't really follow web dev and was genuinely a bit shocked by seeing major version 11 of Angular, it's because they do a major release every 6 months, but just increment the major version number (cf. Firefox or Chrome) rather than using year/month version numbers (cf. Ubuntu) or incrementing the minor number (cf. OpenBSD).

With respect to "Angular 2", there's probably a comparison to be made here with Linux 5.x effectively being Linux 2.6.$BIGNUM; as far as I know, Linux major version bumps don't indicate anything more than a threshold of Linus's discontent at how much unsung change has accumulated since the last bump.
The Anarki codebase has diverged quite a bit from the Hacker News codebase, which itself has diverged from the default Arc language implementation, so searching Anarki to see how HN does things may not be useful much of the time, although much of the code is likely to be the same or similar simply due to how infrequently it changes.

Hacker News seems to have added unicode escaping on their own, as far as I know it's not in either Anarki or the Arc forum.I assume HN just has a function strip unicode from comments while they're being processed, based on a blacklist or killing everything outside of the ASCII range. That might happen in the general area of their version of process-story[0] in news.arc, but that's just a guess on my part.

HTML generation and entity escaping are done in html.arc[1] and more or less just consist of escaping some entities. You might also check app.arc and server.arc.

Also, comments are stored as raw HTML in Arc tables in flat files, which implies there is no sanitizing of content being sent to the reader, except for downconverting to markdown and back when editing.

[0]https://github.com/arclanguage/anarki/blob/573e6833289823385...

[1]https://github.com/arclanguage/anarki/blob/master/lib/html.a...
Granular app permissions are a huge thing for me; I really like being able to keep certain apps from having e.g. full disk access or camera access. Plus sidecar, as sibling already mentioned.
Harm reduction is the name of the game. It's far better to get 50% of the obese to move to the highly overweight category than it is to get 10% to the normal category. I wouldn't be surprised (though I'd want to see evidence) that offering less severe and more achievable advice is more effective as a population-level strategy.
With things like this, docker not running on apple silicon (because it doesn’t support virtualisation) etc there surly should be a market for developer laptops running Linux but with an OS that gets out of the way most of the time.

Who’s selling those?
Not necessarily true. It depends how your site is setup.

Users of eCommerce platforms generally will be SAQ-A since they are not the ones controlling the system which handles CHD. This covers platforms like Shopify, BigCommerce, 3dCart, Volusion, etc, where the platform itself must be PCI compliant on their own, separate from whatever PCI level you are compliant with.

If you self-host, such as Magento, XenCart or some custom implementation - then yes you will be SAQ-D.
The system has been patched since, yes. I was stunned reading this criticism of the powers given to the office of President:

> By the same means, he may render his suspensive power over the laws as operative and permanent as that of G. the 3d [George III] over the acts of the British parliament; and under the modest title of president, may exercise the combined authority of legislation and execution, in a latitude yet unthought of. Upon his being invested with those powers a second or third time, he may acquire such enormous influence -- as, added to his uncontrollable power over the army, navy, and militia; together with his private interest in the officers of all these different departments, who are all to be appointed by himself, and so his creatures, in the true political sense of the word; and more especially when added to all this, he has the power of forming treaties and alliances, and calling them to his assistance -- that he may, I say, under all these advantages and almost irresistible temptations, on some pretended pique, haughtily and contemptuously, turn our poor lower house (the only shadow of liberty we shall have left) out of doors, and give us law at the bayonet's point. Or, may not the senate, who are nearly in the same situation, with respect to the people, from similar motives and by similar means, erect themselves easily into an oligarchy, towards which they have already attempted so large a stride? To one of which channels, or rather to a confluence of both, we seem to be fast gliding away; and the moment we arrive at it -- farewell liberty. . . .
The reason I didn't use Cairo in the past is that it wasn't dealing with color correctly[1]. Which kinda makes everything you draw in it with antialiasing or transparency ... wrong.

At least if you care about these things which I do for the use cases I have for a vector graphics lib.

Did this get fixed in the meantime? Last time I checked this[2] was still open.

[1] https://skia.org/user/sample/color?cl=9919

[2] https://openprinting.github.io/gsoc2020/17-get-cairo-code-up...
This is an extremely touchy and hotbutton issue. Many scholors have researched this very topic quite a bit. It helps to illustrate the point when you look into historical tensions between the black and Asian communities, especially in California.

Asian communities face less discrimination from the white community as there hasn't been a lot of reinforcement of negative stereotypes relating to any of the Asian communities. Compare that with the history and treatment of the black community and you can trace a direct line from slavery to where many communities are today. A lot of propaganda regarding black people had been fed to whites for hundreds of years in order to justify their enslavement.

The black community has seen Asians as a "preferred minority" who has benefited from their civil rights work and at the same time given opportunities they didn't have without giving back to black communities.

There is a lot of nuance in there, but that's the super short version.
Im pretty sure a cis white male can get a scholarship if coming from a poor background. This link for examplw comes first when doing a quick google search, and everyone on their promo picture is white: http://www.collegescholarships.org/scholarships/low-income.h...
Bannon suggested that the White House should behead Anthony Fauci and FBI Director Chris Wray. He then suggested their severed heads be displayed on spikes, at the White House.
Other CAs allow you to revoke certificates. For example, it can be done via the API with ACME. It is unclear why Apple doesn't delegate this ability entirely to developer discretion, but presumably this is the reasoning.
This is awesome! Can’t wait to try it out.

One question: I assume RedPanda using raft to replicate the topic content not just metadata. Is that correct? If so, how does it perform better compared to Kafka’s ISR? Since raft might be slow for this kind of workload. If I remember correctly, Liftbridge was using raft for log replication and switched away from that because of the performance problems.
I was in the same situation 5 years ago.

The solution for me was focusing on 1 problem at a time for 1 year.

This was my personal solution:

I started with smoking and i quit smoking first. Year 1

Then weight. Just stop drinking soda or anything sweet and drop all candy. Withdrawal is awful (physically painful) for a week, after a month you won't miss it a bit. Forget about candy forever, just desserts in restaurants for special occasions.

Lift weights at home, start with water bottles. Just keep at it and try to improve a bit every 2 days, every small improvement is a win. Go for walks.

After a year you will be fine, i lost 45 kilos in 2 years whilst still enjoying normal food except candy. Year 2 (will become a habit)

Kickstart your career. Learn new tech in your domain and try to apply it in side projects and/or give conference talks about things you just learned. Remotely this is easier than ever. Have courage and propose architecture changes etc. If your company is unaccepting switch companies. Year 3

Now this one is hard because of covid: Go to meetups, especially gaming / board gaming focused ones. Make these social things a priority. If anyone asks you to go somewhere do it no matter what, even if you do not feel like it. Keep doing this, you will build relationships. Year 4
> Apple is more like Singapore, slick, seemingly benevolent, citizens honestly question why the rest of the world isn't run the same way.

Apple is more like a Vatican and Google is like Saudi Arabia. Both corrupt in different ways.
Okay, my question is: if a project is really in maintenance, what should be the duties of its maintainer?

The problem is: there are contributions, there are pull requests, they even get merged. The code gets reviewed, and it’s not an easy feat.

And while it’s all being done, whenever there’s a question of making a tarball, attaching a number to it, making sure the changelog has all it needs to say, people who do code reviews and merge requests suddenly all start feeling tired and bored. Too bored to slap a tag on a repository, too bored to roll a tarball, too proud of being a bottleneck.

Maybe a robot could do releases? It could even build GTK against the newly minted release and run its test suite too...
I think that's too simplistic a take. But it's a fair point that we should be concerned about corporate censorship if people start to depend on private platforms for public speech.

But oft-repeated falsehoods are harmful even if we know they're not true.
Beats me. Apple could just give developers full discretion, which would lower the amount of time it takes to get a really compromised certificate even more. Presumably, there is some good reason to have manual discretion, otherwise, why have it?
Depends on how old, I guess. I'm running Mojave, and ran into the problem.
I don't know if this is my personal experience alone, but I feel that open source spam filters like spamassassin and rspamd do a much better job than gmail's filter. Gmail's filter has too many false positives and false negatives. We shouldn't give up on email just because gmail is bad at it.

Besides, I feel that gmail and most other webmail providers have created a bad usage pattern for email. Email is much more pleasant when used with an indexing tool (notmuch/mu), custom filters (sieve) and a proper spam filter. Custom domain with dedicated account (or alias) for development also improves the situation.
All this good, but I'm sorry, I can't breath without ublock origin
Side note: Skia can't render SVGs directly. You need a separate library to do the parsing and issue commands to Skia. I think they might have experimental support for simple svgs committed in the repo, though.
> ultimate control is with the manufacture, and not the user.

There are a host of ways of describing computer security, but in my mind the most fundamental idea is minimizing the amount of surprises a user faces. A brick might not be a useful stake knife, but it’s secure. Anyone can want more features, but features aren’t security.

If someone goes to a knitting blog they don’t expect it to have access to their exact location via GPS, phone contacts, social security number, bank routing number etc. As such for users to have meaningful control it’s generally 3rd parties not manufactures or users that security needs to deal with. If you want to use online banking you need to trust the device to not be sharing login information with random other apps you happen to have installed, that’s incompatible with allowing such random apps to connect with your bank account.

PS: Hong Kong users benefited from having devices not compromised by the CCP, that’s what I am referring to. Clearly more app stores would let various other apps in, but how may of them would have actually been compromised?
> Apple rocks the boat too much, their users might not feel so good about paying

Just today I heard a colleague say how tough it would be to move away from Apple because of their iCloud. Then you have all the apps and content (iOS and macOS) you already paid for.

The difference in business model between G, Apple (or other tech behemoths) are very superficial. Yes, to google and apple operations they are very different, but to a consumer: it's the same. Both try to become essential, all encompassing locking you in and increasing the cost of switching. All brands try to do this. But it's much easier for me to pick a new brand toothpaste after I'm done with previous one than for me to move app ecosystems, specially when those apps ecosystems are all locked down as all non-libre app ecosystems are.

You may "feel" like you're an Apple product because you think you can just buy less Apple products or not at all. That's until you consider the consequences of losing access to third-party content/products you purchase.
You can only read this product research report if you promise me something
> sponsor it through Microsoft $$$

You don't want that. When companies "sponsor" things they try to take them over, unless it's a pure donation, which is rare. The community then drops out because a company is in control. Later the project is abandoned by then company. It's a slow death spiral.

I would love if Guido could create a new PEP for extending modules with generic namespaces, ala Perl/CPAN modules.

There aren't 15 different libraries for doing the same thing in Perl, there's 1. You never replace it, you extend it by making a new module in a hierarchical namespace. The same core library's code might not change in years while new extensions can keep popping up. So even if you think Requests sucks, you can make Requests::UserAgent which inherits Requests code and extends it / gives a better interface. And these can be written & packaged by completely different authors.

Then maybe Pypi wouldn't have 5,000 nearly identical yet mostly unusable modules, or modules with nonsense names.
DOJ Finds 'Poor Judgment' but No Misconduct in 2006 Jeffrey Epstein Inquiry
Also, which is the bigger risk for most people: disruption to the cert verification, or malicious runtimes on their system?

(Hint: I have literally never seen an example of one of our bank's customers being unable to bank because of this. I have seen heaps and heaps of examples of endpoint compromises resulting in people having their accounts cleaned out.)
It's used by Chrome, Blink, and a lot of other projects, so unlikely to be killed any time soon.
One aspect of the problem is that whenever I need to build a particular system, the parts of that future system that are well understood system, with well understood tooling take almost no work - those either are available as part of a well-known framework or can be trivially included from a well-known library.

All the work that remains, all the work that consumes most of the time of programmers is the work where either that parts of the system is not yet well understood, or where well understood tooling is not available.

I'm not seeing the "factory" or "bricklaying" work anywhere, it has been automated or converted to reusable components or frameworks. Whenever I see people spending a lot of time on systems that could be "factory" work, the situation is that it could be "factory" work if and only if the system requirements and details were properly understood, and these people were mostly working and re-working on understanding and misunderstanding what's actually needed - and there's no way around that. Once they've understood it, any "factory" work part is quick and trivial to the point of being irrelevant in metrics.

So my point is everything that we need from software engineering practices is tools and practices to manage the part that isn't "factory" work, the process of understanding the details of the systems that we haven't built yet.
This isn’t because they compare to AMD unfavorably, but because they habitually compare against their past offerings and against their goliath du jour (notice how they very seldom compare against other software vendors anymore since the iPhone has been a stable profit leader).
You are a product for any private company, they are just different kinds of evil. It is in Apple interests to limit users freedom to run another OS on their hardware, to funnel applications through App Store.

Users en masse would not switch, not from Apple, not from Microsoft. Their price is not that high in dollars, it is high in freedom. And most users do not value that.
Hi everyone,

I'm one of the founders at Pondr and our goal is to build a tool that includes everyone in the ideation process and keep that process out of your work management systems (like JIRA and Github). Ideas are submitted anonymously so they aren't measured on who submitted them. When an idea is approved, we reveal the author. When that same author submits an idea in the future we weigh it a bit higher than someone who has had no approvals... so the system allows for a democratic selection of ideas (votes) or a meritocratic selection (approval history).

I'd love feedback on what this community thinks of the idea, implementation etc. Thanks in advance!
We are getting into a dark era of humanity.

Platforms with their corporate overlords now decide what I can and cannot see, because I'm too stupid to think for myself.

This has always been a slippery slope and won't end well. Zuckerberg as it stands today got more power than the president of the united states. He can swing any election and push any level of propaganda. I really want to see some laws around what they can censor.
1) You're moving the goalposts. First you said he was not a winner, now you're saying his wins don't benefit society.

2) The challenges faced by those two businesses make their restoration an even greater achievement.
It would be nice if more websites were usable without JavaScript, but our only hope is to fight very hard for very long
hy·per·bo·le - noun - exaggerated statements or claims not meant to be taken literally.

But, to tone down my own snarkiness-- in just a few months we have seen a dramatic increase in moderation in what people are allowed and not allowed to say. This is not going to end well, imo. We are just going to end up with the liberal equivalent of the oppressive religious right from the 80's.
> If you use your laptop as mostly a youtube machine or a social media station then yes, the described problems are not a big deal, in fact they are probably beneficial to your well-being

I've set up a few Linux installations for people who only use their computers as Facebook and YouTube machines, and I haven't had a complaint. They also wouldn't be able to break their systems if they tried.

I'm of the opinion that if ChromeOS would fit a user's use case, then so would Ubuntu with Firefox or Chrome, most of the time.

Those same Linux systems would fit my needs as a developer with only a few small changes.

Security, simplicity, power and ownership don't have to be mutually exclusive. You can have a simple and secure computer, and also have power over your system and own your hardware.
How to Pitch To Investors–Avoid these things
> AGI is another path to a post-existential-threat future for humanity but probably has the greatest risks because it accelerates virtually all of the existing risky technology and climate trends

No, it is not. The reason is this: it is science fiction. This makes it no less, or no more, dangerous than anything else I can make up with a quasi realistic chance of existing in the near term future.

When thermonuclear bombs were detonated, they thought there was a possibility that the reaction would get away from them, and incinerate the atmosphere. The first test, they were scared this actually happened as the explosion carried on longer than they expected.

The point? They actually assigned a probability (non zero) to this event, and then carried on with the test anyway. So I could say that a hydrogen bomb, using some iteration of technology just beyond our grasp is likely to kill every human on earth in the near future. Am I right? Who knows..but in conjecturing this I am no more or 'less wrong' than anyone saying AGI is the greatest threat.
Making users upset is also a direct threat to Google's business model. It doesn't really matter whether you're paying them $20 directly, or whether you're generating $20 of ad revenue - either way, you're worth $20 to them.

Of course, you are quite right to point out that Google's business model does incentivize behavior that isn't what their users would want. But the same is true of Apple - their business model strongly incentivizes them to create lock-in to the platform. Whether this bothers you more or less than Google's need to mine your data is I guess a matter of personal preference.
And I am not capable of judging for myself whether or not that is a bad idea, so I am grateful for the Facebook moderators and their superior judgment in making sure I don't see this!
But that is exactly what they claim they are there to do. They should either just accept any request, or do a good job at denying incorrect revocations.
It's just more of the same (overly-)simplistic debate.

Yes, Facebook is private property and can do what it wants.

And yes, the rest of us are free to criticize Facebook whenever it attempts to play the role of thought-police (a role I think few of us actually want social media platforms to play).
ooh thankyou!
All your points are fair - If stoicism works for you than all the more power. The fundamental tenant of all philosophies is to live the best life possible. For me, this is where the true beauty in philosophies lies.

Stocism doesn't work for me, I like to wear nice clothes, indulge in nice dinners when i should have saved more money, do stupid things like travel (Which seneca seems to have a strong dislike for) and have a general unbalanced life, where i get drunk with my friends and hate my life for the next three days. Life is about the highs and the lows, who needs balance.
Anyone using Pylance? It's a new Python language server implementation from Microsoft, and it's great. With 3.8's type hinting, you basically get a fully typed language, similar to what TypeScript did for JavaScript.
#3 makes sense (I believe I've posted it in a few comments) because HN has a lot of news on new standards