skysight-inc/HackerNews huggingface dataset:
A lot of it is just people parroting the same old boring tropes. They couldn't believe Linux had gotten easier to use than windows. I know this. I installed Windows few days ago. I can't install steam or chromium without getting blocked by windows. I have to download it from external sites while both of these are available in the software store on Ubuntu. It didn't nag me to login, switched my browser to edge after updates, forced me to read a marketing manual before starting the OS.

The search is useless. On Linux, it's so much better.

I had to download and run a bunch of scripts to get rid of the amount of data it was sending back home. I had to remove the bloat and ads it came with.

Give https://pop.system76.com/ a try if you don't believe that Linux is easier to use. Most people don't need to open the terminal anymore.
All of my personal Macs became unusable about an hour ago. Fan would kick up, CPU gets loaded, and every operation comes to a crawl. Thankfully it seems a PRAM and SMC reset solved the issue. Wondering if what's going on here is related. It would be quite the coincidence if not.
> I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view.

The answer is pretty simple: these problems are extremely rare, they don't last very long, and they tend to have fairly simple workarounds. You seem to have a principle that any non-zero chance of being affected by a problem of a certain type is a complete deal-breaker, but most people when buying a computer probably just subconsciously estimate the likelihood and impact of this type (and all other types) of problems and weigh that against other unrelated factors like price.
A few of these are incredibly close to the logos of NatWest (#825) & Mitsubishi (#831, rotated 30°).

Very interesting!
Ask HN: How do Angular and React compare in 2020?
Given how much crop land would be ruined, it is likely that global starvation would end most of humanity and not much of civilization would survive. Sure there would be people wondering around a hundred years later, but they might not know how to read, write, speak real languages, or reason abstractly. 99% of humans starving would make for some crazy times.
> I agree that breaking system availability when an OCSP server isn't available is user-hostile and unnecessary.

Based on the OP tweet... depending on the way it is unavailable, the failure is indeed ignored in some cases. "Denying that connection fixes it, because OCSP is a soft failure (Disconnect internet also fixes.)"

So it may be an actual unintended bug that a particular failure path results in a DoS instead?
Just like today's "don't spread personal data on the internet and avoid forms", the future of that will be "don't use a brain-computer device/software that is not entirely open-source".

We're warned. Now what we have to do is to work on reducing the power of malicious individuals who would want to read our thoughts by force. That's a political/societal thing more than technical. Or is it? what if it was financially not worth it for anyone to do such things...
Reading through the paper, I think the real buried lead here is that the reviewers discriminated in favor of selecting black and hispanic applicants, with a larger effect size than anything analyzed but test scores and attractive vs unattractive (not neutral vs unattractive). This includes obesity, grades / class rank, research publications, and honor society membership.

At least your appearance and test scores are mutable characteristics.
The alternative to a poor binary checking and cert revocation process isn't to get rid of binary signing and cert revocation.

I don't want that. I don't think it would serve Apple's customers to get rid of binary signing either.

Since there are no legal ramifications for security bugs that cause downtime, or for bugs that cause other functionality that goes down, I'm not sure why this particular bug would be any different. It's certainly not as bad as losing one's Google account permanently without recourse.
Post mortem of the geth bugfix that caused it:

https://gist.github.com/karalabe/e1891c8a99fdc16c4e60d9713c3...

"This fix brought Geth back into consensus with Besu, Nethermind and OpenEthereum (and the Ethereum specification itself); however it broke consensus with earlier Geth releases."
A local database with a hash of every possible non-official Apple app in it? Sounds like something maybe only storage manufacturers will like.

The thing is, this is not a new security problem/challenge. It essentially can not be properly solved if you don't have a tightly controlled environment. If it's a general purpose environment, where you can't fully control what ends up running on it, this particular approach to "security" is pretty much doomed, no matter how you address it.
It absolutely will - this post is referencing a July post which means it's the DTK.

Apple explicitly said that the DTK does not support hypervisors, and that final consumer hardware would. People posting garbage reports like this to HN annoys the hell out of me.
The information reveals in exquisite detail what times of day I'm working, what times I'm slacking off, which days I work too.

And whether I'm taking a long or short lunch break, or lots of breaks. Whether I stay in bed until late, or work late at night. It's enough to predict whether I'm a "good" worker.

It also reveals whenever I travel, which coffee shops and libraries I frequent and what times of day. It also reveals what time I open any of several video conferencing apps.

And the sort of thing some HR would like to browse when assessing job candidates. They wouldn't need to ask "do you know X", they could just consult the Apple log of how often I run the relevant commands. Things like "we see you ran 'git' an average of 145 times per day last month, tell us more about that".

And whether I'm running tools I "shouldn't".

All that seems quite sensitive and personal to me.
Evil is frequently caught masquerading as “do the right thing”.

“Don’t be evil” is nearly the opposite guidance.
IMHO when you're strongly incentivized to optimize for engagement stats attributable to you, you're pushing change for the sake of change with the darkest of UI patterns to ensure your changes are selected and "favored".
Not sure why you're getting downvoted but this is correct. KHTML -> WebKit -> Blink.
Got it, that makes sense. It also makes sense why I've not much been bothered by it in python since my relative small code bases don't have that many layers of abstraction laid on top of each other. I'm generally not working with more than 2,000-3,000 lines, and I can just about keep the basic structure in my head. (Unless it's been a while since I've had to revisit it... then I often hate my past self for getting "clever" in some way)
I've been on my Mac all day and haven't experienced any problems.
Apple runs ads as far as I know.

They also run the app store, which is an advertising platform
are you really comparing COVID to a hypothetical nuclear war?

COVID barely disrupted the supply chain because people who actually work those mission critical jobs had to continue working on site. This wouldn’t be the case if nukes were dropping
I guess its the same point that drove Xeno to demonstrate that he was so much much more rational than the average Greek his contribution to the history of thought was a set of arguments that motion was impossible.

Possibly with added profit motive. Say what you like about nuclear bombs actually being real, they won't torture infinite numbers of clones of you if you don't donate to Yudowsky's AI research institute.
macOS big-sur update failing for some
Ask HN: As Macs are out of the way what is the next best dev laptop
XPS13 is awesome and powerful. but they have an average battery life.

Razer15 advanced model is great too.

surface book looks nice too
What is a good choice?
The nags for regular apps don’t bother me too much, but the fact that I still can’t figure out how to run GDB worries me. The old CLI overrides don’t work in Catalina anymore. I’ve only ever owned Mac laptops and I’m seriously considering switching to a Linux/arm on the next laptop. I’m fine with the lack of ability to run random apps on my iPad, but not on my computer. Big Sur apparently won’t let me run the ZFS extensions or my vpn software (or I gotta hope the vpn has an upgrade). Apple has gone too far, from improved security defaults to whittling away the ability to override those options at all and run my own software.
Not uncoincidentally this was the year 1984 was published, and Newspeak is the official language of Oceania, so..
> Ruby works the same way

Kind of, if you ignore Rubygems, which is also part of stdlib at a lower level then bundler (and also, originally wasn't.)

> but bundler dependency manager solves it anyway to give you per-project dependencies not just system-wide dependencies.

It can do that because rubygems manages multiple installed versions of packages and allows per-project ("per call to require", potentially, IIRC) specification of which one to pull from the globally-installed versions (this was originally done by monkey patching require when rubygems was an add-on.) This lets bundler easily live on top of it providing per-project dependencies somewhat more smoothly than Rubygems does without requiring anything like a venv.

> Perhaps ruby was more "hackable" by bundler.

Ruby is ludicrously hackable, yes.

> (Bundler has now become part of ruby stdlib, but didn't start out that way, it definitely started hacking around the way the more fundamental stdlib 'rubygems' worked).

Rubygems also wasn't part of stdlib originally, and started out relying on hacking around the way Kernel#require works.
I strongly recommend Aegis on Android. Encrypted backups of the TOTP config, so you can easily recover it all if you lose your phone without having to reset everything, plus biometric support to unlock it.
> reportedly about 1,000x for Elon Musk personal worth.

Where does this number come from?
The KATU video is from the remastered video, the previous versions of the video were all bad U-Matic transfers.

You can tell the difference by the on screen text, the U-Matic transfers had, in layman terms, chunky text.
If you haven't downloaded your data from Apple recently I suggest doing that. The amount of personal info they collect has exploded over the last couple years.

Their Services business is moving them into Google levels of data collection.
Especially when they conceptually do the same thing.
xps is garbage.
You don't have to use "hosted fields", but it does mean you have significantly increased requirements regarding PCI compliance (SAQ D vs the much simpler SAQ A, for example).
Is it disdain or lack of interest in concentrating on appearance? I mean, what's the end goal? If i want success and you give me a choice of "improve what you do" or "improve what you look like" for the same result, I'll take the first one every time. If that pushes some people away, that's gain x2 - improvement and I know that people around me care on a deeper level than a lie of appearance (it will go away with time anyway).
Wait, you can't install a non MacOS on these things? Are they basically an iPad in a notebook form factor?
In the long term, all dear readers will not survive. So why worry?
I wonder if this explains why I was unable to print something for several minutes around the time this tweet was published? The printer manager refused to open each time I tried to print. Frankly, that's unacceptable.

I have preferred Apple/MacOS since 2007. However, my 2019 MBA suffered the infamous shaky keypress issue, randomly inserting an extra space when I typed. After 6 trips to the Apple store to fix under warranty I told myself it is my last Apple product.

I wanted the MBA for the portable form factor. Now I work from home and portability is no longer a consideration. I will mostly likely ditch this device in favor of a linux system.

What a disappointment.
Yeah, Windows Defender does worse if you let it have sample submission on. It'll send binaries to Microsoft and they will run in Azure!

https://medium.com/sensorfu/how-my-application-ran-away-and-...

That said, "this has happened forever" is false too. These behaviors are relatively new and relatively under the radar. Many people don't know they exist to get upset about it.
A program signature database, perhaps? We could even call it: antivirus! No, that’s a bad name...

In seriousness though, the problem with offline databases that are changed a lot is a problem antivirus programs always had: they need updating. You can’t have the “latest and greatest” protection if you don’t know about the newest threat. That’s probably what Apple is doing here: using a database on their end that they wouldn’t have to distribute to end users. It’s not the best way around it, but there isn’t really a “best” way.
The OP literally says if you disallow connection or unplug the intenret it does fail open.

I think it's probably an unintended bug that this failure mode was fail-closed.

The costs of this unintended bug are going to be huge to Apple's reputation, as demonstrated in this whole HN thread, where many assuming what's going on is even WORSE than it really is.

(Personally I think having signed certs (with opt-in ability to run unsigned apps, as MacOS has) is fine. And fail-open OSCP revocation check is also fine-ish, although it would annoy me if it's making it slower to launch apps on the regular. The problem here is a bug, not one of design. But most of this thread is assuming Apple was doing something different than this. Of course, how often a company produces fairly catastrophic bugs is also on them).
No. Apple has a history of being extremely careful with personal data, and almost always goes out of its way to make sure it never even collects anything personalized. Of course, those could all be lies, I suppose.
Socializing is healthful to humans. Consuming alcohol is hurting.

Now if we'd go so far as to assume that people consume the same amount of alcohol at home, then staying home is a net negative for health. I don't actually know how alcohol consumption developed during lockdown, so I don't know whether there is any merit to that line of argument. But I see how it can be made.
Thank you for your support.

Transparency is an important part of my business practices, I'll post a (totally anonymous) breakdown of how much people paid on twitter once the product has been available for a while.
I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down.

I really had no idea until today.
Makes me wonder how much more un-repealable multinational-friendly garbage is making its way through legislatures worldwide under the guise of COVID relief. Surveillance, new taxes, repeal of tax breaks, new regulation, prohibition of assembly (in direct contradiction with 1a in the US, but only for certain groups) - think of the children, the ends justify the means! This very much reminds me of the legislative abuse that happened in the US after 9/11, consequences of which were extremely far reaching, and are getting worse over time even today, nearly 20 years later.
Also, just adding some sugar to this, don't forget that this study was in Norway. Overall health levels would be higher than in, say, USA. I'm talking about weight specifically.

Assuming healthy / not overweight would be a very big assumption to make for the US (as a Norwegian I went to the the USA, once, in 1999, and what I saw there shocked me), where another study could be to monitor mortality outcome of getting weight under control and exercising vs not.

I'd also love to see impact of weight resistance training added to the mix surveyed.
Ask HN: Multispectral/Hyperspectral Cameras for Hobbyists?
Does anyone know of a half decent multispectral, or hyperspectral imaging system?

https://en.wikipedia.org/wiki/Multispectral_image

I would assume there's more chance of an affordable multispectral system, are they any startups just out of stealth mode?
Having to restart every day. CPU was also pretty much pegged nonstop when in clamshell and connected to two monitors. Catalina doesn't do that.
I actually agree with you (and as someone who's been complaining about Apple for a looong time, I have the posts with the downvotes to show you're probably right), but I don't think HN is representative of the general populace.

I also still consider Apple's PR game to be top notch. Which is why so many folks are talking about loving the Apple app store in the thread about the recent Epic case that also popped up today. Although I'll note it's interesting that originally those threads seemed about evenly divided on the topic, and currently the pro-apple, pro-dictatorship voices seem to be getting mostly downvoted.

Regardless - I'd strongly recommend everyone out there to consider free and open software, on devices that you own (and you don't own a device if you don't have root access). Open source just keeps getting better - We happily re-implement the ideas and products generated by these companies, but we care about you - not the bottom line -because we are you.
It's an ISA licence, so they're allowed to design their own processors that implement ARM, but they would have to design them themselves (which is why they haven't)
This article was really great, and this gem stood out to me:

> When the hypothesis failed, we again rushed to move on with another work. We didn’t take the time to analyze why our theory was wrong. We didn’t question the experiment’s validity, which would have led us to realize our patch was wrong early on.

I've read dozens of postmortems where "someone did something to 'prove' that X wasn't the cause, but after ruling everything else out the team eventually realised that X was in fact the cause.", with 'X' being everything from "this patch can't have caused that behavior" to "I know it's not the kernel update because how could that have changed anything?"

In the face of a crisis, if you are in charge you really have to take all the "facts" you are presented with as being contingent on the level of panic that the presenter is feeling -- being a great engineer is more or less orthogonal to calm under pressure.
Do you think your reaction would have been as strong if the post was written by someone else?
why would a mac with an intel processor need OS binary code for an arm processor?

I can understand apps having both, because the app needs to run on M1 or intel. But having both OS binaries is just dead disk space.
Do you really think that makes any serious difference if the sites you're visiting serves google ad or uses google analytics?

You think you are doing something, but I have strong reservations it achieves anything except making you feel better and more in control.
Back to terminal clients and mainframe in the sky? Apples on the great tree of knowledge.
clicked the link, got:

"Something went wrong, but don’t fret — it’s not your fault."

Took me a moment to realize that statement wasn't in reference to the statement "Guido van Rossum joins Microsoft".
I don't give half a shit about the physical appearance of my doctors - what could it possibly say about their competence as a doctor?
Understood. I guess I didn't make that leap because I find that embedded ML isn't what I imagined in this type of scenario. I would assume you'd invest more heavily in power usage to make the mesh sensor network fast/resilient.

A "base station" with connectivity for alerting and utility power at the edge of the sensor network is where I imagine any ML to run, and that could power your typical CUDA-capable GPU if necessary.

I guess that's still edge ML if the point is to not backhaul everything to a datacenter somewhere, but I wouldn't call it embedded.

That brought mind low powered devices with many sensors or sensors that capture more local data (i.e. microphones, cameras) vs. just an anemometer, GPS, and chemical ppm.
I wouldn't. Just as I wouldn't want a doctor who is a heroin addict.
Didn't this happen once before?
I'm sorry, but as a fellow Python "devop" too, this really reads like empty apologism.

>Nothing scales well. scaling requires lots of effort.

Sure, just like all PLs have their flaws, and most software has security vulnerabilities. But it's a question of degree and the tendency of the language. Different languages work better in different domains, and fail in others, and what Python is specifically bad at is scaling.

If only for the lack of (strong/static) typing and the relatively underpowered control flow mechanisms (e.g. Python often using exceptions in their stead)... While surely all languages have pain points that show up at scale, Python still has a notable lot of significant ones precisely in this area.

>docker, poetry, venv...

Yes, and this is exactly the point. There's at least three different complex solutions, none of which can really be considered a "go-to" choice. What is Rust doing differently? Hell, what are Linux distros doing differently?

>If you're really into performance then dump out to C/C++ and pybind it.

If you want performance, don't use Python - was the parent's point.

>If we are being realistic, most of the time 80% of python programs are spend waiting on network.

This really, really doesn't apply to all of programming (or even those domains Python is used in). Besides, what argument is that? If it were true for your workload, then it would be so for all other languages too, meaning discussion or caring about performance is practically meaningless.

>Granted, python is not overly fast, but then most of the time your bottleneck is the developer not the language.

Once again, this applies to all languages equally, yet, for example, Python web frameworks regularly score near the bottom of all benchmarks. I doubt it is because of the lack of bright programmers working in Python, or the lack of efforts to make the frameworks faster.

>Python isn't the problem, its programmer being "clever" or making needless abstractions of abstractions.

Just as C isn't the problem, it's the programmer forgetting to check for the size of the buffer, and PHP isn't the problem, it's the programmer not using the correct function for random number generation.

You can always trace any given error to a single individual making an honest mistake, that's really not a useful way to think about this. It's about a programming language (or an environment) leading the programmer into wrong directions, and the lack of safety measures for misguided "egotistical programmers" to do damage. You can blame the programmers all you want, but at the end of the day, the one commonality is the language.

Now Python is still one of my favorite languages, and I think that for a lot of domains, it really is the right choice, and I can't imagine doing my work without it. But performance and large, complex systems, is not one of those domains, and I honestly feel like all you've said in Python's favor is that other languages are like that too, and that it's the fault of the programmers anyway.
There are solutions for this like bloom filters etc. Google Safe Browsing system tackles a somewhat similar problem.
The behavior documented there is on FIRST run of a new executable.

You can like that behavior or find it unacceptable, but the issue in OP is not that, it was applying to executables that had already been launched plenty of times on the machine.
> of an awful function with multiple screenfuls of code

If you've got that, you will have deeper and more abundant problems to solve than will be helped by easily matching up braces.
The Anti-Federalist Papers
Our app went from 3.5 MB to 2.3 MB when we switched to Ivy. Our app is ~73k lines of code (not sure what "size" that makes it) and uses Angular Material heavily. It's a corp app though, not too concerned about bundle performance (yet).
Yes, can someone clarify this? What the hell is going on here?