skysight-inc/HackerNews huggingface dataset:
I'm pretty sure that most people, upon having one of their certs expire, do not find the private key and release it publicly. In fact they often generate a new cert from the same key...
> That's just... moving the expiration date.

No it's not, you still get a (slightly) nagging warning. Just one that's much milder (without the red alert, fear-mongering, etc.) and still lets people use the site for a while.

> Why not provide those milder warnings BEFORE the current expiration date?

I indeed almost suggested this, but the problem is the site owner hasn't done anything wrong in that case, so the warning would be an actual false alarm.
I think it's used to delegate unpopular decisions.

You need tools for your group.

IT wants to use tool MSFT.

Everybody has been using tool X for a while. They like it, but there is issue Y.

How does upper management resolve this?
Alternatively we could have people understand all certificates, regardless of expiration, are high security. Is there any reason someone would want to publicize an expired certificate? Additionally, I can think of a few existing reasons someone would avoid publicizing an expired certificate.
Why don't systems that use certificates have a configurable webhook they call to warn of such things?
No, I'm just assuming that you're going to follow through on that thought and realize statistically no one does that for self signed certs except corporations which aren't human persons anyway.
It’s collected (generally speaking) one way or another. Unfortunately right now it’s collected from the lower and middle classes, but no matter what you do drugs, treatments, doctors, hospitals, etc. cost money. It’s never, ever, ever “free”. If a drug costs $2,000/month there are probably some inefficiencies baked into the price, but even if it were $500/month, that $500 has to come from somewhere.
How about this, then - the progress of human civilization relies on MAD being solid for all involved. The US is one of the groups involved, and thus human civilization relies on the US nuclear triad being taken seriously.
I'm fiercely against the stupendous military bias in our budget, but in this case, yes, this is without a doubt worth the price.
Lies we tell ourselves about developer infrastructure
I do the same for the same reasons, pi-hole docs recommends 0.0.0.0.

I am wondering if you have multiple resolvers set up on a client, if you receive an nxdomain response if it will attempt another resolver? Which wouldn’t be what you want to happen with a block list.
It's a valid warning for devs, considering that it isn't fixed yet.
How is it a good thing to have more efficient dictators?
I feel like it would be better to show a warning earlier rather than after it expires.

Browsers could start showing warnings that a cert is expiring soon when something like 5% of the cert lifetime is left (with a max of like 1 month for some of those crazy long lifetime certs).
> Other than second-order effects where anything which breaks MAD increases the risk of nuclear war

Does this apply to classified projects?
> This could end up being the biggest mistake in history.

You're talking about global scale nuclear war. This is a given.
Thanks. Yeah, I was disappointed to see checkout via Codecanyon only, Envato takes up to ~55% as a commission.
The whitelist approach reminds me of Yahoo's internet directory or DMOZ. The internet directories all ended up closing.

That approach will not scale in the general case, not even with the search engine following links from said sites. Too many areas of interest, too many languages, nowhere near enough people to categorize 'high-quality' sites all the time.

It could work for domain-specific searches for expert communities. SourceHut should start with a good code search engine...
When has Australia ever experienced these rolling blackouts across states due to solar? The most recent substantial blackouts (2019 in victoria) were due to extreme heat causing the power stations to be unable to meet demand, plus some stations being offline [0]. This is totally unrelated to the uptake of solar which ameliorates peak demand for aircon power.
[0] https://www.abc.net.au/news/2019-01-26/victorian-blackouts-w...
For more context, Cal Newport discusses this article a little bit on his blog: https://www.calnewport.com/blog/2020/11/17/when-did-producti...

> My latest article for The New Yorker, published on Tuesday, is titled “The Rise and Fall of Getting Things Done.” It’s not, however, really about David Allen’s productivity system, which longtime readers (and listeners) know I really admire. It’s instead about a deeper question that I hadn’t heard discussed much before: Why do we leave office workers to figure out on their own how to get things done?
You've perfectly demonstrated the problem with these kinds of revisions. "Phrases in green use passive voice" removes the passive voice, and in doing so, completely alters the semantic content of the sentence. The passive voice expressed a meaningfully different notion.
Not really, if an enemy knows you can shoot down 1/6th of their missiles, the'll just send more missiles.
Why is the ratio of new queries relevant at all?

The open alternative to Google doesn't need to have the same capacity for download and indexing.
> BTW: US leadership probably caused more civilian death international than Chinese government's domestic figure. Probably 2-3 orders of magnitude more. Iraq Syria etc.

Going off the conservative estimates, the CCP-led Great Leap Forward killed over 10 million people. 2-3 orders of magnitude more than that is 1-10 billion.
My understanding is that GTD is for management-type tasks and deep work is for creative tasks. Paul Graham also has an article about allocating half-day units (1). But I guess that this is for a different type of work, not, for example, a sales rep.

I do find things like the Pomodoro technique useful for routine tasks. It will be absurd to try to prove a theoretical result with a tomato timer's frequent breaks. As Tony Robbins sometimes calls it, the latter needs "immersion" or deep work.

(1) http://www.paulgraham.com/makersschedule.html
Besides the ridiculous ranting, a lot of the problems aren't bluetooth per se, see Apple's W1 implementation. With Airpods Pro and an iPhone I get near instant setup, great range, etc.
The quote appears pretty pragmatic to me - not at all like nationalistic flamebait.
There are small and infrequently consequential anomalies in every election, in every state. A physical corollary of this fact is that most recounts at the statewide level result in perhaps ~100 ballots changing. That's because voter fraud in the US is very uncommon and does not demonstrate reliable partisan lean, and neither do alleged "glitches".

I cannot demonstrate from my keyboard that there are no cases of "dead people voted". It probably happens very infrequently. But I would note that in this election, at least some of these accusations have been proven inaccurate by diligent journalists.

I lived through listening to liberals whine about Diebold in 2004 in Ohio and through their complaints that Cambridge Analytica somehow stole the election in 2016. Both of these complaints were powered by motivated reasoning, and ultimately unfounded. Yours is too. I would evidence my claims by noting that the board just certified Wayne County.
I believe that's due to ahead-of-time transpilation, but as noted in another thread, JIT code within the browser would need to be transpiled just-in-time which would mean pauses during runtime.
The US anti-ballistic missile defence system is not designed or intended to work against China or Russia. It's not adequate. The goal is to shoot down handful missiles from rogue states like North Korea or Iran.
Ask HN: Is anyone working on an AI medical scribe?
They weren't doing that in hardware real time accelerated at 4k resolution in AAA games. This year they are. That's a big leap from your core 2 duo demos.
The mere existence of someone is not really PII. You don't know that I did that search, nor can you connect to anything else... and this is a constructed example in which I try to jam some sort of PII into a single search is itself a bizarre example that probably corresponds to fewer than 1 in 100,000 or 1 in 1,000,000 searches, if that. When's the last time you stuck your own PII into a search box and connected it to something of some sort of significance? It's a very small edge case.

A search history can reveal many things about a person. The mere fact that someone, somewhere searched for "star wars harry potter crossover slash", unconnected to any other search item, doesn't reveal anything about anybody.
Should we dismantle the DEW Line or is it still needed?
Have to say that whole exp is extremely fascinating to a non programmer such as me. Looks like once you dig deep into system programming you can get yourself some challenging and comfortable long term job.

Stick to the fundamental bro.
That link has some charts with FPS dropping over time as throttling kicks in. It drops from 110fps to 90fps.
Kindles suffer this problem. The battery lasts forever so you never get in the habit of charging them. Then you get caught out and it's at 0% and you can't read your book. Too much battery capacity is surprisingly harmful.
One other popular theory is having to do with democrats staying at home post-COVID and republicans ... not doing so. Nate Cohn seems to think it's pretty plausible https://www.nytimes.com/2020/11/10/upshot/polls-what-went-wr....
Since generally classified projects leak, I'd say "yes".
Is a launch from the marshall islands to hawaii really representative of a ICBM strike? Seems to be more similar to a IRBM strike, which is going to have a different flight arc and re-entry speed than an ICBM that actually has to build up enough energy to arc from a continent away.
It’s about having to face the emotional discomfort of being wrong - in many ways, including the viability of the idea.

This gets more intense the longer you’ve invested in it.

It’s so much easier to sit back and tinker.
I don’t see them doing that. All they are saying is progress rests on the US being able to fend off rogue sneak attacks, else everyone else is too unprepared for a foe who is willing to begin MAD. It’s anti nationalistic in fact and looks to assure the world isn’t susceptible to a sneak attacker.
Certificates have a great timespan like "do not use before" and "do not use after".

So you can't simply shown outdated certs because this make time totally useless. But you also can't shown cert from the future.

Other sad news - new browsers set that certs can have lifetime only for year and month:
https://www.michalspacek.com/maximum-https-certificate-lifet...
to effective fight against certs that are too long lifetime.

So this make a window for installing new cert exactly 42 days. And many people will fail on this trap soon.
I'd argue the problem might be the opposite: people are willing to differentiate on some matters (not everything), but security folks fail to help them do so. They treat every warning like DEFCON 1, as if an expired certificate is remotely similar to a compromised one.

People already understand expiration dates aren't exact. They deal with it in all kinds of places. It's not a new concept.
What about CoviDB-20?
Since cranelift is pure rust, that should simply PGO (mentioned this last week in https://news.ycombinator.com/item?id=25060762), which gave 16% for LLVM, hopefully the same for cranelift? So with those and not using the default linker, you could get significantly faster debug builds.

Exciting times :)
I like this for Jupyter notebooks, slightly quicker than setting up port forwarding
Discussions of GTD aside, the article seems to be advocating for individual productivity to be externally managed (through “management intervention”),

> It seems likely that any successful effort to reform professional life must start by making it easier to figure out who is working on what, and how it’s going [...] we might use virtual task boards, where every task is represented by a card that specifies who is doing the work, and is pinned under a column indicating its status. With a quick glance, you can now ascertain everything going on within your team and ask meaningful questions about how much work any one person should tackle at a time. With this setup, optimization becomes possible.

which misses the fundamental point that individuals have different ways of thinking, and therefore varied approaches to organization. One of the crucial aspects of GTD (or any other system) is to allow an individual to adapt it to their needs, while also slightly moulding their own approach where possible. Attempting to externalize that to a bureaucracy of standardized processes seems like a Taylorist nightmare designed to thoroughly demoralize the process of knowledge work down to executing tasks which only incidentally happen to require some thinking/judgement.

(To understand the full extent of what that “demoralization” means in this context, see this talk by Barry Schwartz https://youtu.be/3B_1itqCKHo )
The cost to build and maintain the infrastructure to handle renewal and tests to verify such.
Short answer: Safari 14 supports the same standard for extensions that Firefox and Chrome do, with the addition of some security issues the other browsers don't seem to care about, including not implementing certain features to hurt privacy and security.

Many authors have used Apple's utility to convert their extensions for use in Safari.

It's pretty straightforward; here's an example: https://ngyikp.com/safari-14-webextensions/

The author will likely need to make a few tweaks and changes; it shouldn't be that hard.
It's not just China. Everyone will want one. Europe, India, Israel, Russia, USA. Everyone is within range of someone who can have an ICBM by the end of the century.

And unlike bombers and tactical missile launchers, there's no ethical issues, because this saves civilians.
Buy him a Chromebook or an iPad this holiday. No one deserves this.
Let’s suppose your paying a 10% withdrawal fee on winnings and 0% fee on principle. If your payoff is 10% and you're also losing out on 2% to opportunity cost. Net winning is (10% * 0.9 - 2%) = 7% but your withdrawal fee is effectively reducing your winnings from 8% or 7% a loss of 12.5%.

On the other if the bet paid 100% of your money you would net (100% * 0.9 - 2%) = 88% and your fee dropped you from 98% to 88% a net loss of 10.2%.

PS: These numbers get much worse if the withdrawal fee includes the principle. Then you would be have a net loss of (110% * 0.9 - 2%) = 3% on the first bet and a net gain of 78% on the second.
"skip linking"

-- what's this part mean? Does cranelift have an option to directly make locally-resolved executables without external references somehow?
I agree with the bulk of what you're saying -- especially about practical considerations involving the software ecosystem and advantages of moving slowly, but I do believe there are some workloads where I'd prefer a hotter machine with more (and not shared) memory.

I think one of the advantages of M1 is its single-thread access to lots of RAM. That advantage kind of starts to fall off when your workload is heavily multi-threaded, which is often the case for buyers of larger machines with more compute cores.

I also believe that the advantages of low power consumption (or equivalently, thermal efficiency) fall off a little bit when you have a larger thermal envelope, because with a larger device (A) you can fit better cooling, and (B) bursts of compute take a longer time to bring the device to throttle temperatures.
and this was my main concern. Most teams I've worked in that used docker use x86 containers for the dev containers.
With a 1/6 chance of success, you can deploy multiple destroyers with ICMB intercept capabilities to defend a key target and get much better odds.

e.g. Having just three raises your odds to 50/50. (1-((1-1/6)^3) = .51

That essentially halves your opponents nuclear strike capability (at least for that target).
> people must renew every year or 13 months that just so happens to collect tons of rent seeking income from a few firms

Isn’t it primarily free CAs like LE that are pushing for shorter expiration times?

IIRC the primary argument is not about security or safety, but rather that shorter certificate lifetimes encourage companies to automate certificate renewal/make it a regular part of their business routine. If you only have to renew a certificate every five years, then it’s really easy to forget.
I'd be surprised if it was as fast. Cursory googling indicates roughly a 15% time reduction. So cranelift is set to save twice as much time as split dwarf.

If you have other stats, I'd love to see them. I imagine that c++ numbers don't translate over into rust 1:1.
Comodo is a renewal and updating an artifact (i.e. the actual cert), then you're done, vs. having to handle LE's API to deal with doing it 'automatically' and then carrying that forward. My point is simply that the cost is not zero.
Other way around. 10% profit 5% withdrawal.
It might be, but I got the idea from a colleague.
yes, equals.

a consultant can talk to the ceo as an equal.

however, a consultant can also talk to the mail clerk as an equal.
Not until I posted my hard work in one of these public forums for people to use and benefit.
I would much rather live in a world where there are viable options for responding to a handful of ICBMs that don't involve escalation.

Effectively, a credible ballistic missile defense + an arms treaty that caps the number of interceptors leaves relative great power parity stable.

But it does eliminate the "rogue state" or "rogue silo" threat. And arguably, makes them less attractive to pursue in the first place, thereby furthering non-proliferation.

If you're Iran, are you going to suffer all the economic pain of breaking sanctions, in return for a non-credible threat?
Most real world usages don’t max out all cores all the time.
There's a big emotional difference between sending a robot and a human to explore. The latter is clearly much more relatable and inspiring to people. So whether it's a pointless waste of money depends on what you're trying to achieve. But I'd argue that the inspiration and unifying aspects are two of the biggest payoffs of space exploration, and robots don't quite cut it there.

Also, humans are much more flexible than the robots we can currently create, which is pretty useful.
Ahh, that does seem like a more correct reading of the page. Do we have a source that's unambiguous? Seems strange to have a bot that's able to parse pages for their instant answers but then not use those same results for regular search.
Oura Ring TemPredict Covid-19 Study [not yet peer reviewed]
As far as 'autonomic' DB tuning, it'd be nice to essentially have a model that provides a set query performance and redundancy for a lowest possible dollar amount for a given workload. i.e I want my application's queries to have 99th percentile <=100ms latency - use whatever combination of memory, flash, disk, or compute is necessary to make that happen with four-nines reliability minimizing price. It'd then figure out what columns need to be stored on which medium, what in-memory indexes should exist, how many 'nodes' should be spot-instances vs reserved and so on..
Agriculture Datasets for Machine Learning Projects
Wouldn't they just do a 1 for 1 trade in AirBnB stocks or at least RSUs or options? That would seem preferable from an "aligning of interests" perspective.
I'm not sure what changed with COVID, but something has been much worse in the last 9 months. I've always used a personal system similar to what I understand "GTD" to be based on the article but everything about it has broken down. Instead of focusing on a task until it's completed, I'm constantly being yanked back and forth by whoever is yelling at the moment.

My personal theory is the ~60% of useless middle managers have nothing left to do without an office. They now split their days into asking for constant status updates on every conceivable detail, and "breaking down walls" which is pestering whoever is holding up a project by a couple hours because they are focused elsewhere.

I've disabled my IM client which made them shift to phone calls, and the next step is turning off call forwarding.
Did it pop up along the side of the screen and ride up and down?
All good growth involves ebb and flow, spring and winter, budding and pruning.
> Do the work to make sure you are building a product that people will actually find valuable

Real rich coming from a Facebook employee...

The big problems we face today are not supply-side gaps startups can help with. There gaping macroeconomic fuck-ups, either demand-side or unaccounted externalies supply-side. Startups cannot directly help with those very well. Better they nudged the economy to a new equilibrium after the goalposts are fixed.

Fine if you want to do a startup now, but no need to be a on a high horse about it.
It's worth considering the ancient history of viewing all central governments (including all the Emperors) as essentially being carpet baggers you can ignore if you're physically far enough away from them. So, this is the carpet-bagging elite.
I hate to say, I just tested it and MMS doesn't work on plasma Mobile (PostmarketOS with Plasma Mobile 5.20.3)
> drop the shit around

You jumped into a discussion. The person I replied to was treating the email we happen to have as some sort of unchangeable given. That's what I am objecting to. If you are disavowing that side of his argument, feel free to say so, but it looks to me like you lean pretty heavily on it.

> let me know when you can buy an item online without an account linked to an Email. I'd love to see an example.

You mean aside from the billion or so users of WeChat Pay?
How is a GUI a better option than the git cli? Especially for more complex operations.
Mosh has been making remote sessions bearable for years, and I'm grateful, but I made the switch to Eternal Terminal recently and it's better:

https://eternalterminal.dev

The native scroll support and tmux-aware behavior are both pretty slick.
I'm not sure but the moon would probably create a radio shadow shielding it from radio waves originating from earth as well.
I love KDE and think it is the best Linux desktop in terms of features and customization. Unfortunately it's just so damn buggy. Not in in unstable way, but there are just enumerable ways you can break it. It gets to the point that when you try something new that it has, you pause and think "Is this gonna break or stop working thus ruing my workflow again?"

It's why I went back to cinnamon. I mean in the realms of the phrase "Fuck, marry, kill", I'd fuck KDE, marry cinnnamon, and kill MATE.
I'm curious...has a true ICBM _ever_ been fired under actual combat conditions? (Not counting mid-range stuff like the Scud)
Things actually sort of ran that way once. The DMOZ directory system was a cannonical, list of sites by subject listed top-down. It was maintained by a community of volunteers in the fashion of Wikipeda. I believe it was used as one reference for Google and other search engines at one time. I don't know if such an "objective" system could be rebuilt, however.

Still, it's good to remember that it was once uncertain whether people should access the web using something a table of content (portal/directory) or something like an index (search engine). It seems the search engines won.

See: https://en.wikipedia.org/wiki/DMOZ
Yes that is what I mean.

I don't know for sure, but because of Cranelift's origins as a JIT for wasm, I suspect that it does.
That's not needed though, I manually extracted brew to /opt/homebrew per https://docs.brew.sh/Installation, and it works just fine in the native terminal.

file htop returns

htop: Mach-O 64-bit executable arm64

So this version of brew is compiling native arm64 code.
> most people who post here, who were similarly credulous about Theranos, uBeam and

That's not at all an accurate description!