skysight-inc/HackerNews huggingface dataset:
Asking if it is possible to opt-out of the increasingly digital, interconnected, and interdependent aspects of society isn't particularly important. We need to try anyway to preserve the possibility.

Dan Geer on this topic[1]:

> The most telling fork in the road of them all is whether we retain an ability to operate our world, or at least the parts we would call critical, by analog means. Analog means, and only analog means, do not share a common mode failure with the digital world at large. But to preserve analog means requires that they be used, not left to gather dust on some societal shelf in the hope than when they are needed they will work. This requires a base load, a body of use and users that keep the analog working. [...]

> What we have here is an historic anomaly, an anomaly where the most readily available counter to an otherwise inexorable drift into a vortex of singleton technology risk and the preservation of a spectrum of non-trivial civil rights is one and the same counter: the guarantee, by force of law where necessary, that those who choose to not participate in the digital melange can nevertheless fully enjoy life, liberty, and the pursuit of happiness, that to opt out of the digital vortex does not thereby require that they live in medieval conditions, and, by doing so, we reap a national security benefit in the bargain as those opting out are the base load for the analog alternative. [...]

> And that is what I am here to tell you, that the future of humanity and cybersecurity are conjoined, so that as we prepare to make some decisions that are of the fork-in-the-road sort, we need to think it through because in making decisions about cybersecurity we are choosing amongst possible futures for humanity. Those decisions will be expensive to later reverse in either dollars or clock-ticks.

> The onrushing world of full personalization means the rational decision for the individual or the small entity does not and will not aggregate into the rational decision for society at large. Perhaps that is the core effect from a rate of change up with which we cannot keep. [...]

> You, we, are the masters of the universe now. What will we do with that power, which we have but a short while more?

[1] video: https://www.youtube.com/watch?v=gbDEbfijxNY text: http://geer.tinho.net/geer.ncc.8x18.txt
How old is your child?
AWS Network Firewall – New Managed Firewall Service in VPC
This happened to braintree/paypal like a month ago.. and broke their API
...it fell?

I've used a GTD type system to great effect for almost my whole career, and I like it very much. Details here if interested: https://cushychicken.github.io/posts/evernote-workflow/

Newport's deep work theory isn't so contrary to GTD. Sometimes, your "next step" is to just schedule time to write your big report, or do your big numerical analysis, or plan out your new driver structure.

Allen was on to something when he claimed open ended tasks with no closure create anxiety. A system that records:

-what you must do next, and

-when you must do it,

Relieved much of it for me.
It's invalid according to the spec. They are permanently reserved code points for use in UTF-16.

> The definition of UTF-8 prohibits encoding character numbers between U+D800 and U+DFFF, which are reserved for use with the UTF-16 encoding form (as surrogate pairs) and do not directly represent characters.

They could be replaced by the replacement character to produce a valid string.
As somebody who hadn't heard of this DB before, my thought pattern was basically:

"cockroachDB? Oh is this a joke project...? Why would they leave IBM for a...oh, cockroach like can survive a nuclear explosion. Huh."
Sure, but this is my personal machine, for stuff that decidedly isn't mission-critical
No it doesn't? All that happens is the previous cert would be accepted with a milder warning for a few weeks (not permanently) after you get a new one.

It's just a small grace window to let users still be able to use the site. Just like an expiration date on your milk. There's no need to toss it out immediately just because an extra nanosecond passed.
When adjusting for an improving system it’s best to ignore the first success. As in they shot down one, now how soon can they hit the next one. The issue is if they has a 1 in 1,000 shot they could have still hit the on the 6th test it just doesn’t provide much info.
Happens to all sorts of folks - https://venturebeat.com/2015/04/04/gmails-ssl-certificate-fo...
Absolutely, that's one of the reasons I may buy a first generation Apple product.
Well the future is all take out. The play here is cloud kitchens which is sort of door dash/uber eats 2.0.
It doesn’t work if the step blocks, needs some error handling, etc. Then comes the fun of writing yet another deployment system that fails to learn from other systems.

Why we keep reinventing wheels in infrastructure management and control beats me
Interesting. Other information [0] suggest that I should consume more lineolic acids compared to other fats to help my risk of Heart Disease that runs in the family. Not looking good for me hey!

[0] https://www.hsph.harvard.edu/nutritionsource/2014/11/05/diet...
Also, one engineer making 10 crud apps would probably share a lot of code between the apps. Which would allow him to make the new ones even faster. And the result would be easier to maintain.

If you instead hire 10 engineers to write 1 app each, you often end up with 10 apps using 8 different frameworks in 3 different languages. And then you will need 10 engineers to maintain them.
> What do you do when you're fired

Oh, that's another point. You wouldn't send the message "fire [yourself]" but rather "[you are] fired". Do you agree?
Unironically, it does seem worth spending the entire GDP of Hawaii on a 1 / 6 chance of intercepting an ICBM, if there's a nontrivial chance that you're likely to have a small number of ICBMs incoming towards cities. Other than second-order effects where anything which breaks MAD increases the risk of nuclear war, but I hope a 1/6 chance of interception of one missile wouldn't be significant enough to change the balance of power enough to make nuclear war more likely.
Captive Portals are the thing that sucks in this situation though.

If you offer "free" WiFi behind an annoying Captive Portal chances are I'll just use my 3G service if it works. Now, in my mind do you think I consider you offered me "free" WiFi? No, it was too annoying to use. So your competitor that didn't bother with a Captive Portal site and just posted their WiFi password on a chalkboard - they have free WiFi and you don't.
How is this any different from Google? Every time I go to google.com with any browser other than Chrome I get bombarded with "Don't you want to use Chrome instead?". I said No many times and they still send the pop up.
Both are annoying as hell.
This would require everyone to understand that previous certs still require high-security for at least a few weeks post expiration. This is not something we can rely on people understanding.
If they ever actually use it, then YES it will have been worth it, and many times over. Because we'll still have Hawaii. (Hawaii's GDP is just a very ironic choice as one of the major reasons for AEGIS ballistic missile defense is for defending it)
I completely reject the idea of simple word choice. Synonyms are not exactly synonyms; the more complex word can convey a substantially different idea in subtle ways. When speaking, we are forced to reach for simple words to keep up with the real-time pace of conservation. This restriction to the same few words homogenizes verbal semantics and limits our abilities to express nuanced ideas with speech. The very advantage of writing is that we don't have to write like we speak, and can instead take a minute to consider whether "berate" or "accost" or "chide" or "admonish" best communicates our ideas. Like all freedoms, this advantage is double-edged and gives writers the chance to bury their prose with flowery language, but I should hope that we can rise to that challenge and write more precisely than we speak.
The companies I've seen who are hiring remotely post the same job posting in every city they can think of, with "Remote" in the title. They'll have 500 job listings for the single role as a result, but their postings get seen.
No it's not. It is saying Javascript has asnyc/await which is just a specialization of the more general monad-o-syntax (or however you want to call it). And that is precisely what I meant.
This is an incredible list, thank you for taking the time to create it!
We're going to sell this to everyone in league against China. It's well worth the investment.
Sometimes people making the decision about hiring are not programmers themselves, or happen to be the bad engineers. In both cases, the difference between a good and bad engineer can be invisible for them.
I think the only way to get an open search engine going is to specifically target a niche first, build profit from ad results, and then expand.

My suggestion? Older folks don't have a well known search engine targeted at them, and there are features that could make a search engine helpful for them (High contrast mode or built in screen reading for the vision impaired, anti fraud results for common scams that target seniors based on search results, links to places to watch old shows when people search for character names), and they are a lucrative demographic, both in terms of having money to buy things but also for political ads.

I'm sure a focus group of seniors would have more detailed thoughts.
Why should every browser pick a random expiration date to enforce when there is already one agreed upon by everyone and embedded in the certificate?
The progress of human civilization may rely on the U.S. nuclear triad being invulnerable to a sneak attack.

The problem is that the triad has been left to rot. The ground-based ICBMs haven't been upgraded in decades and probably don't work well. The subs were supposed to be replaced but were not and there aren't that many of them at sea at any given time. And the bomber fleet is out-of-date as well and way overdue for an upgrade.

It's questionable whether or not it cannot be defeated with some kind of sneaky first strike. Which leaves room for an adversary to find (or think they found) an opening. This could end up being the biggest mistake in history.

A good option seems to be to pay SpaceX to create a fourth prong of floating platform ICBMs in the ocean, or whatever Musk & co can come up with. Of course the U.S. gov should have full command of it.

SpaceX could also work on a redundant anti-North Korea missile defense system. I don't think there's much reason to work on a missile defense system against the major powers, since a solid M.A.D. system makes an attack from them highly unlikely.

SpaceX should put the Assured back in Mutually Assured Destruction. And they can use the profits from these projects to make life multi-planetary, which would provide another level of insurance for humanity.
Their 2020 laptops aren't even full machines. If you want to go from undocked to redocked, you have to shut everything down and reboot.

This has been going on for months. Do these people not use these machines? Do they not go between a couch and a desk with a Thunderbolt dock?
Are there any fabs that can compete with TSMC? Or EUV equipment manufacturers that can compete with ASML?
LinkedIn is probably ripe for disruption. I am not sure what that is right now but the coming recession means it's probably needed. It would probably be something of a cross between a temp agency and LinkedIn.
LGPL doesn't work for languages that don't have good support for dynamic linking. Static linking is mostly incompatible with the LGPL.

That makes it unusable for Rust, Go, and some C++ libraries.

Wheras with MPLv2 the contract is basically "if you make a change to any of the source code files derived from the original work, those changes have to remain under MPLv2". But linking that code from non-copyleft code is OK, and extending it with subclasses or traits is OK, as long as any modifications made to the original library itself are made available. And there is no limitations on linking proprietary libraries from MPLv2 code as there is with (L)GPL.
Integrate Nearby Service for an Enhanced Gaming Experience
I don’t think this is true. It feels like the same kind of argument as “one who cares about their suitor’s appearance must not care about the stuff that really matters, their personality.” It’s not true and it’s a false dichotomy.

Software projects that use databases often have lots of people working on it, reporting to people who don’t work on it. While I personally believe it’s easy enough to bury “CockroachDB” from sight, it may not be so easy everywhere.

Lots of people, techies and not, care about aesthetics and appeal. It’s not rational (in any technological sense), but it is what it is.
D-Wave Quantum Computing Lab Tour
I've found a direct correlation between the chance of a content farm and the number of ads on the blog. With 0 ads, the likelyhook of a content farm is 0%.
I would say the technical hurdle is about equal to comodo. What other cost is there?
Clearly you've fully bought into the right wing propaganda sphere and aren't open to other viewpoints (and I'm sure you feel the same in reverse about me), so it doesn't appear there's a productive conversation to be had here.
I'm more of a coder (and highly prefer adhoc/throwaway POC coding) but slipped into the same thing. By being someone who fixes the annoying problems I've bumped into useful people in various departments which helps bring things together when I need to.

Of course, they now have processes to avoid favours and such so we all have to go through the same internal ticketing and scheduling system and it's completely random whether you will get someone useful and helpful or not. You don't even see a name on the reply most times.

I knew an older guy who retired a few years ago and he also called himself glue at the time. He'd long abandoned coding (he secretly admitted to me that he could do a bit, but publicly claimed ignorance) but had a good handle on what the company could do and who was doing it, which helped him talk to the right people to design feasible solutions for customers.
Like many I've been burnt by this problem. I have a rule now where no certificate should ever be within 6 months of expiry, ideally we should renew every month.
> trying to explain the problem and eventual solution and not focus on _who_ fat-fingered the command-line with incorrect config to cause the outage.

Yes! It's important for the newspapers to hold Nixon accountable. The rest of us have stuff do so we can afford to buy papers that tell us whose fault that is.
Don’t Blame Section 230 for Big Tech’s Failures. Blame Big Tech
Allowing bypass is the old way of doing things, and many non-browsers still allow it, so you should ideally hold on to old certs indefinitely, but at least for a short while.
What is it? Genuinely curious, as I am using and relying on LetsEncrypt
Same thing with maned space missions. completely pointless waste of money. if we colonize a planet we will need machines to do it for us. if not completely automated then remotely controlled. no point in doing it any other way. I'm not even sure what the point of the ISS even is anymore.
And even then that's not true, parts of the Chromium projects still use UTF-16 internally.
Something I’ve noticed about UK conservatism — and maybe it’s true for the US too — is that women and minorities are much better represented at the very top than at the MP/Congress level. The Tories have 25% female MPs, but are also responsible for both female PMs. Half of the Great Offices of State in the UK are currently occupied by minorities. And if you look at the historic willingness of the Tories to run ethnic and female candidates for very important roles, it’s considerably better than Labour: https://en.m.wikipedia.org/wiki/Great_Offices_of_State

I guess all I’m saying is that it’s worth factoring in proximity to power rather than just raw numbers
Sure but cost of capital != inflation. And I understand the impact of fees but I’m wondering how they could influence high likelihood bet profitability more than low likelihood bet profitability?
They are geolocked for some features, however
> The progress of human civilization may rely on the U.S. nuclear triad being invulnerable to a sneak attack.

Please don't use this as a forum for nationalistic flamebait
I think it makes more sense to give warnings in the 72 hours prior to expiration, rather than after. At least browser console warnings.

Or have two expires in a cert - soft and hard.
That's just... moving the expiration date. Why not provide those milder warnings BEFORE the current expiration date?

If there's just an arbitrary point in time where after which we start warning people and then another point where the cert expires... Why move "expiration" around.
I agree, both approaches have merit.

But at this point I really have to question what code gets decent speedups with AVX512 that wouldn't preform even better on a GPGPU.
Everyone is on lets encrypt nowadays, which means they had no say in they expiration date. They merely said yes to "take it or leave it".
It's a beta, not a release version.

And it wouldn't be possible to run an M1 beta if there were no M1 products on the market.
An iron oxide fire is not the same as thermite: burning iron still requires oxygen from the atmosphere, like any other fire. Thermite has its own oxidizer built-in. So I suspect a pile of iron dust wouldn't be that much different from any other combustible dust in terms of fire risk.

None of the websites I can find mention iron as an example of a metal fire when talking about the dangers of using water on them. Metals like magnesium and lithium yes. But not iron: https://www.isystemsweb.com/metal-fires/

This source talks about the use of water firefighting at steel mills. That's not quite the same thing as powdered metal. But still illustrative: https://firesafeworld.com/fire-safety-in-iron-and-steel-indu...

As you'd expect, water on hot metal will lead to steam explosions. But from the sounds of it, the simplest solution to that problem is keep your distance, and keep putting water on the fire until it overwhelms the heat capacity of the molten metal.
It's safe considering the threat model: the worst his site has seen is some DDOS attacks. With a MITM his site might end up hosting a 0-day, but hijacking is unlikely to begin with due to how low-profile his site is (outside of tech circles). And they'd have to attack DNS as well as his certificate.
For the international version, I recommend including non-upper-middle-class-white-westerner clothes. Kilt, caftan,dhoti-kurta, pheran, kimono, etc.

Also missing: hats! Where are all the hats? And belts?? You can't wear a random belt with any old pants and shoes. And watch???

From a fashion perspective I would also put a big yellow warning sign over the cargo pants/shorts. Unless you're a carpenter, a photographer, or some other working person who needs to carry more than a wallet and a phone, no men should be wearing those.

From a sample selection of jeans and polo it recommended to me an orange polo shirt, a burgundy hooded down jacket, dark denim jeans, and yellow velcro sneakers. So probably there's some bugs to work out still. :)
> This is what is taught in undergraduate English classes

This pedagogy says more about undergraduate writing capabilities than ideal writing standards. Most students entering college need to be taught basic writing fundamentals so that they can then learn to violate them appropriately as maturing writers. The same is true for any art or craft: you develop foundational skills and learn strict rules to understand when it is appropriate to break them.

The Plain English campaign is much more persuasive for the workplace, where being easily understandable is a very high priority, but Plain English is not appropriate for all writing.
I read the book and tried to follow Allen's system until I stopped. But I did end up incorporating some of it into what I do.

One big thing I took away was a different way of looking at "someday" tasks - it is OK to record them even if they never happen - it doesn't mean they're useless.

The second one was review, and is probably a bigger deal for me. I never really went over my lists previously, which in retrospect was really stupid. Now I do, keeping things not done pruned and relevant.

But more importantly, I review things I did, including saving lists of tasks for things that might happen again. That has made a huge difference, especially as I manage more people. When someone asks "how do I do that?" and I can reply with a checklist, it makes me feel like maybe I'm not so bad at this gig after all. But really, the lists are for me - it is amazing how much I half-forget of things that don't come up much, and having last time's list saves me so much time.
Certain advanced instruction sets are also unsupported by Rosetta 2.
A Wintry Ride Through Venice
The experience in Linux distros is that extra arches surface bugs that other arches paper over, leading to higher quality software. For example unaligned memory access is slower on some arches but causes crashes on other ones.
Training users that "mild" warnings can be ignored is very bad for security, as users have trouble differentiating severity.

Hsts does not even give users a choice because nobody could come up with a scary enough warning.
I think this is reasonable for people dealing with SSL, like expecting a mechanic to know you change an oil filter when you change the oil.
Not Just Nuclear: Families are elders long buried and generations yet unborn
> Because Apple (theoretically at least) should start increasing their market share.

Should that be a serious goal for Apple though? Is there that much more money for them if they jump into the race-to-the-bottom budget market, where I assume much of the remaining share is? It seems there is some added value in being a luxury product.
Hypergraphia! I didn't know this was a thing until I read this post.

When I was in university I worked for a year as the News Editor
of the school paper. Every couple of weeks or so, we would get letters from a random guy. They were papers that had text written on almost every inch of them, sometimes both front and back. They were grammatically correct, but mostly just ramblings about topics like philosophy and war and politics and science. They started coming before I was there, and sometime during my tenure they stopped. Some were thrown away for sure, but I managed to collect what I could in one place, and when I left I took them with me. There are around 150-200 pages total. They are just cool.

Anyways I couldn't quite pin down what would cause someone to write such letters, but now I possibly have a name for it. Hypergraphia.

Samples: https://imgur.com/a/9nRzL6o/
As someone who has lost data due to a bug in Git [1], I don't like how it works.

[1]: https://www.reddit.com/r/git/comments/9b80ks/how_to_restore_...
I hate getting in arguments with a few sysadmins and certificate salespeople how long certificate periods are perfectly safe.

I’d rather have 5 year certs and rely more on revocation than have this stupid exercise where people must renew every year or 13 months that just so happens to collect tons of rent seeking income from a few firms.

It’s kind of like how the shift to non-expiring passwords. We were trying to correct for the risk of a compromised password by making it harder to have secure passwords. I think we’re better off with having really strong passwords that only ever get changed when necessary and allowing this my monitoring login actions for weird stuff.
In a world where you can simply compromise a cert of your choice we can get rid of the TLS theatre altogether.

No, the world we have is one where these expiry mishaps happen all the time, and everyone would be better served if certs had a warning expiration date in addition to the red alert one. It's the old "don't delete a customer the second they are late on a single payment" thing that everyone long recognizes as good practice.