skysight-inc/HackerNews huggingface dataset:
I am suggesting you could limit "binary verification" and just allow "sources you compile yourself", 'cause how much can a binary be verified? (enough to know your blob was hacked at the source and not along the way, yeah but as we see, that's not enough). What describing just involves "we make sure our vendors are sort of trying to be secure" and that's about it 'cause that's all you can be when someone hands you a binary.

And sure, there exist things like Linux drivers that are binary blobs in source code form but at least directs one's eyes to such things.

Edit: Also, even in these environments, some people and some software has to run the network itself, like a sys admin tool. Which makes sys admin tools something everyone should look at. And brings us to the present hack.
Bottom up vs top down. A lot of people benefit from a top down approach, especially those who haven't already decided they want to heavily invest in the subject.
You can track revisions forward that are by the same author, but you're right that finding forks is not possible with the current architecture.

E.g: when I publish my website, it gets a permanent address, like: hyper://b282d5efe484143816362d33b3f9b3ea45ecfb8a6ada97e278fdfdc6a725e22f/

When I change a file on the page, it is still accessible on that address, and so are the older versions. The same peers connected to the address will transparently receive the update and seed that as well.

And yes, it's totally separate from IPFS, but is built from many of the same ideas. Dat started back in like, 2011 or so? This is a good high-level overview of how protocol works: https://hypercore-protocol.org/protocol/ - the fundamental unit of storage is hypercore, the append-only log. IPFS's structure, the raw merkle tree, requires another layer on top to provide mutability, like IPNS or DNSLink, but I do not believe that these provide the same guarantees of "auto-propagate updates without loss of older version."

Hyper*/Beaker also provides mechanisms to use centralized authority like DNS to provide human-readable resources, that simply point from the DNS entry to the hyper URL.
A Historic Brazilian Constellation
>“Individual #1” follows the norm for unindicted co-conspirators

Yes, unindicted because it's not clear if you can indict a President. Those are waiting for the day Trump is out of office, when indictments will likely follow.

From the sentencing memorandum [1]: Cohen states he "acted in coordination with and at the direction of Individual-1", which is likely a felony - usually crime bosses dictating lower level people to commit crimes get harsher punishments than the underlings - and this will likely be tested once Trump leaves office.

So "Individual #1" is not merely a mention of a person. It's the label of a person that directed felony activities.

[1] https://www.vox.com/2018/12/7/18130805/michael-cohen-sentenc...
The whole thing is such a terrible, short-sighted justification. The logic being used is setting a precedent to ban or backdoor any encrypted non-moderated form of communication. e.g., Signal and Telegram.
Spotifyd v0.2.25
Theres never been a better time for Intel to build a phone and match it with open source OS software. If all the hardware is abandoning you then its time to build the hardware yourself.
>As a consumer company it means any new product (libra, unified family of apps etc..) will fail because of that.

I've seen multiple, separate parties see the commercials for Portal and be mildly interested in the product until it's revealed that it's by Facebook, and then they laugh and completely dismiss it a la "not a chance in hell I'm trusting Facebook to X".

I'd be curious to see how well they're selling (or not).
Because this is a political post, not relevant to tech or startups.
Tests have false negatives. The problem isn't so much the test, but rather the public which isn't fully qualified to interpret the results.

Biology and chemistry are complicated and messy. Sometimes signal is noisy or below the limit of detection.
Your response is hyperbole. Why does it have to be all or nothing? Just because not everyone should be held accountable for a large company’s decisions, doesn’t mean that no one should be.

Maybe someone sees it as an opportunity to learn from the talent around them, or enjoys the small piece that they’re working on.

But not everyone in a company that is less than favorable with a given population should be judged equally.
> The alt-text is also only illuminating in the sense that the CCP might heartily agree with it as well, as they see their crusade against free speech as nothing more than maintaining the public order and peace.

Which alt-text did you read? It cannot possibly be this one:

> "I can't remember where I heard this, but someone once said that defending a position by citing free speech is sort of the ultimate concession; you're saying that the most compelling thing you can say for your position is that it's not literally illegal to express."

This is saying "that your idea cannot be censored is not good enough in order to convince people that it's good". This cannot be used to censor anything -- in fact, it claims the position is legal -- neither by the CCP or anyone else. It's a judgment on the quality of the idea.

It seems to me you're trying to invoke the CCP boogeyman regardless of whether it actually fits this argument.
cat-v is full of good people these days. I'm more of a recent lurker there and I have had good interactions so far. Of course some are terse/inquisitive/contrary but never mean or nasty. Blunt perhaps? Nothing that ever bothered me.

Hell, today some trolls sent some poor schmuck to cat-v to ask about debugging linux kernel code because its an cantankerous plan 9 channel; Right? Instead, they actually received a little help (and a humorous sarcastic remark or two...) from some very knowledgeable people. Ironically, Instead of being run off with so called cat-v torches and pitchforks, they were helped and went on their way. Maybe they'll see the light and come back one day.
Its not one console held in a single repository. AWS has teams built around individual features, and each individual team is responsible for creating its own UI, which is why its not a particularly coherent standard. Open-Sourcing it would involve releasing thousands of repositories built on many different types of internal architectures, and would be largely infeasible to change/build upon without a solution like Vantage that sets up it's own IAM role.
Spotifyd just put out its first release in nearly a year, fixing many long-standing showstopper bugs.
This virus is significantly worse than the 1957 or 1968 flu, causing many more hospitalizations and deaths despite much stronger countermeasures. But those two were indeed quite deadly, worse than seasonal flu, and if a similar flu emerges in the future it should be treated extremely seriously. Hopefully we can learn from our severe systematic mistakes in the Covid pandemic to better prepare for and react to future pandemics of flu and other pathogens.
Mass Hysteria and Covid-19
It's nice to get the textual description, but pretty much every specific detail of the extended explanation teased out at the end includes things which are more or less incorrect but which nonetheless sound very believable. In essence, what happened at the end was GPT-3 was asked to write an OOM-killer-inspired story. I think this should be a cautionary tale against trying to use GPT-3 to provide commentary beyond a high-level summary.

This isn't a slight against the short-summary technique, which seems very cool.

Details: oom_adj isn't a flag, it's an int which can disable OOM on a per-process-leader basis but can also but can also be used to reduce the "badness" of a process when considering what to kill. Oom_adj is also deprecated and has been replaced by oom_score_adj. The OOM algorithm isn't called RSS. It doesn't seem to have been explicitly named, but the function which performs the key calculation is named oom_badness. This function assigns an integer "badness" to each process. A process' resident set size is an important part of calculating badness, but it's affected by several other factors (what they are depends on kernel version but they include the adjustment parameter). RSS is not (part of) the OOM calculation "by default" -- it's always included unless OOM is disabled entirely. RSS isn't a comparison of reserved physical memory against current virtual size, it's just the amount of RAM currently occupied by a process (i.e. not in swap or on disk). The OOM killer doesn't compare RSS against virtual size. RSS doesn't trigger the OOM killer. RSS isn't an algorithm.

Another interesting aspect of this, of course, is that GPT-3 likely wasn't trained on any specific kernel version, but on a large number of versions depending on which part of the Internet it happened to be reading. This means that it probably can't give a good account of any single version of fast-changing parts of the kernel like the OOM killer.

Source: https://github.com/torvalds/linux/blob/master/mm/oom_kill.c
And you still won't say it out loud, huh.
When I asked this question, I make the distinction between "currently used optimization techniques and algorithms vs their implementations in GCC/clang". How large is the gap? If the gap is small, it means the algorithms as currently used for optimizations are inherently expensive (i.e. a "good" compiler "must" be slow). if the gap is large, it means a much faster implementation is theoretically possible (i.e. a "good" compiler "can" be fast).
How many times did you call out the behavior when people were walking up to Trump supporters and punching them in the face? Bonus points if you posted it to places like, well, Facebook. Or bash their car or throw a rock through their window? This is not new, it's just happening to a different political crowd now and for some strange reason people can now finally call it out without feeling a tinge bit hypocritical.
What I was trying to get at, is there anything special (worse?) with an exposed DNS related service over anything else? Is that inherently more risky than other services?
I don't think OP is asking for protections that renters would not have from landlords. For instance, we all know that illegal activity gets you kicked out immediately. You can't be running a brothel or crack house on the one hand, and demand 90 days notice on the other. At least not in my state you can't. No court judgement is required either, the cops show up and arrest you, you're gone. (In fact, in my state, if a landlord does not boot you in a swift enough fashion, the municipality can confiscate his/her property.)

So that's fine. The rules should be approximately the same as the rental protection laws in the state hosting the data center. If you're running a service that is objectionable, but no cops or feds are knocking on the landlord's door, then there should be notice given that your provider wants to boot you. Again, if the owner has a fed asking him questions about you and your service, that owner should be free to act much faster. No one questions that.
Where does it say no one succeeded? It looks like a contract was awarded to Chainalysis, Inc.
It's hard to overlook that the political class is suddenly up in arms about this primarily because they suddenly perceive themselves as being under threat from it. Ordinary individuals and businesses have had to deal with the hegemony of the platforms for a long time and it hasn't really mattered until now.

I fear the outcome of this is going to be that it translates into massive regulatory overreach and splitting up of companies instead of what would be healthy - encourage competition through enforcing open standards and mandating interoperability and sharing of personal data. Those things would go a lot further to ensuring actual free speech as well as creating a healthier internet at the same time.
I... don't understand? You were an unpopular speech platform. I worked in porn for 20 years. I know what it's like to get kicked out of AWS, so does John Young. Why weren't they dockerized and prepared to move containers and backups at the drop of a hat? Why didn't they have hot spares elsewhere? There are literally thousands of hosting companies running the gamut from penny-ante to larger platforms like Rackspace, operating in a hundred countries, many of which don't know and don't wanna know what you're doing. The same is true to a lesser extent of registries. And Apple/Google kicking you out of their stores? You can still bookmark a mobile-friendly web app onto the home screen of an Apple device. You're not going to lose Qspiracy fans and nazis just because they have to do an extra step to get to your site.

Nevermind that maybe, just maybe, if your platform users advocate for violent revolution, you're going to have a harder go of things. Prior to approximately October, 2001, there was a taleban.com too. I didn't read any hand-wringing when they got the axe. Newsflash: At least Tor can't remove you.

The simplest explanation is that they saw this coming a mile away (who honestly didn't?) and this is engineered martyrdom.
Surely there is a middle ground: let businesses operate how they please so long as they follow the law, and have the law require them to act in a way which is considered reasonable. If you’re a business trying to sell something then you are required to be somewhat honest in how you represent the thing, especially if you are selling some kind of food. If you’re a bank then you are required to be fair to a certain extent in how you choose the customers you serve and what services you offer them.

I don’t see why a business that presents itself as a quasi-public space that is generally open to all at no cost should not have some duty to be faithful to the way it represents itself and to treat its users fairly.
>> The big difference: Beaker can host websites.

So, for individual user to host a website, he/she need to keep his/her hosting laptop alive all the time?
...or Huawei strategically decided to take advantage of their vertical integration (with HiSilicon ARM chips), by moving its processors up the value chain into laptops, thereby capturing more profit instead of paying Intel/AMD? Such strategic decisions are usually years in the making - and everyone could see the trajectory of ARM vs x86 for years

ARM processors in laptops predates the M1 by many years - you don't need inspiration from Apple to figure out that efficiently running x86 code on ARM hardware is useful.
Not one eye witness has been in, under oath, in front of a US Federal Judge and claimed they saw voter fraud. It has all been in hotel conference rooms. When the judge has asked for evidence they essentially get a shrug of the shoulders from Rudy G.
The problem is that Security Engineering is still treated as if it's a separate thing that is evolving.

It's systems engineering, where security is a necessary feature that's being grafted-on after-the-fact.
Yep, on many states something as simple as doing drugs is enough to kick you out at a moments notice even if are making no damage to the property. A digital platform being used to orchestrate the destroying of government buildings as well as planning the kidnap of gov officials and making death threats should get more lenience? Get outta here.
My bad. I just got carried away. I am sorry for that.
As others have mentioned, building on secured CI/CD infrastructure (+ ideally deterministic builds) would have helped here. But I'm not sure if thats good enough. Presumably if CI/CD was set up, some of the engineers would have had security credentials to configure any build servers anyway. And if the hackers could leverage that, they might have been able to just infect the build servers too.

As annoying as it is, I can't help but think we need to bring parts of ios / android's security model to our desktop machines. Its ridiculous that a single rogue npm module can access any file on my computer, including SSH credentials and (probably) secure cookies in my browser's trust store. Our desktop security model is obsolete, and should do more to protect us from threats like this.
Of course they are still there! But the conversations increasingly aren't taking place there. If free speech is essential to a liberal democracy, we're moving to a place where the majority of speech takes place in non-free-speech areas, and that does not bode well for the health of our democracy.
The problem you're really trying to avoid is not knowing that you're subtracting from your savings target. It's too easy for expenditures, especially small ones adding up over time, to grow unbounded without you noticing, and if you're putting "the rest" into savings, you end up noticing the problem after the fact -- you can only affect the next month.

If you instead allocate first, and operate the month assuming you never add had access to the funds, then it becomes painfully obvious that you've spent beyond the target -- and can make the decision then whether that's fine, and pull out the money from the savings buffer as needed (and presumably up the savings envelope for next month).

The main thing, I think, is that most people (not living hand-to-mouth) spend to their financial comfort -- not their physical comfort -- growing concerned mainly as they approach their upper limits, and then reduce accordingly. I'm thinking of Braess's paradox; you spend to the money you have, even if you'd be happy & fine with less.

So by reducing the total funds up front, you reduce spending earlier accordingly. Of course, no more so than what would make your lifestyle uncomfortable.
It's more complicated than that. You can see what passes are run by clang with the flags -mllvm -debug-pass=Arguments. It's certainly true that -O0 involves fewer passes than -O1 which involves fewer passes than -O2. But the speed limit is defined by the architecture. A compiler that was engineered for compilation speed with a goal of -O1 tier code quality would have a very different architecture from day 1 (e.g. unified IR, fewer passes, integrated register allocation and code generation). There's been attempts at "punching through the layers" over the years with things like fastisel, but there are limits.

That said, all the major compilers can deliver adequate compilation speed on the order of 50-100 kloc/sec for well-structured C code bases. Speed is much more of a serious concern if you're working on large C++ code bases. Or if you're using LLVM as a backend from a language like Julia which does the moral equivalent of C++ template instantiation at runtime and feeds it to LLVM.
I think we may be passing each other on the word tech workers -- do you mean everyone who works in a tech company, including customer support, sales, marketing, operations etc or are you defining tech workers as just the people who work with tech, ie engineers, analysts etc. and possibly on the accessibility and rarity because pretty much anyone can get hired at a startup and most startups fail.

Most people in startups are not lucky (relatively to others in the US economy of similar job positions) they actually generally make less than people in established companies and if they don't have a favorable exit are almost always numerically worse off than those who chose the stable path.

The reason I see people typically working in startups is more impact, freedom, the ability to quickly level up etc, but unless your company exits and you get paid from that exit no dice.

I've had friends who's shares were worth less than they paid for them when their company had an exit.

I continue to work in startups because I really find satisfaction in it, (right now trying to get my own off the ground) but I would triple my total compensation as an employee in most cases if I went to go work for one of the big players and that compensation is a real tangible thing not anywhere close of a gamble. It's actually somewhat of a problem right now in how do founders attract good talent for that reason.

I think you simply have an inaccurate picture of the majority of startups and the types of money in them.
> That is a stretch of the reading of those provisions

Any, you know, the government and law enforcement have _never_ been known to do that...

"It's not 'collection' if we permanently record every phonemail/textmessage/email ever sent. It only counts as 'collection' if a human reads/listens to it!"

:sigh:
I prefer sex with people.
“Right to exist” talk sounds like socialism. It’s a free market. Find someone who wants to host your app. Pay them. There is no problem.
"Cadillac Halo" concept portfolio. EV Van & VTOL Drone. Very WestWorld

https://www.youtube.com/watch?v=lDFZqa422nI&t=6m52s

GPU demand is unquenchable. Especially at $300 for the NVidia RTX 3060. 4K real-time rendering. 8K RAW video editing. We are past the inflection point for graphics price to performance. Putting a lot of visualization power in everyone's grasp ;)
They comply with the GDPR. You have the right and ability to both export and delete your data at short notice.
I used to post quite a bit more. Times have changed.
I tried it recently, and it kinda reminded me of the earlier days of the World Wide Web, with the easy way of just creating websites and publishing them, and everyone out there trying something new and experimenting. Like the "small web" movements popping here and there now, but this one is in fact actually spearheading a completely new platform! And I think the way it's integrated in the browser is brilliant, and unexpectedly to me suddenly puts the Hyper protocol's ecosystem possibly ahead of IPFS in user-friendliness and fun-factor at this moment. It's the kind of a good race/competition between decentralized technologies and their communities happening now, that is so inspiring and awesome to watch and be a spectator to, or maybe even part of! Huge thanks to the authors of the Beaker Browser for putting so much love and care into creating it! <3
WhatsApp clarifies privacy changes and Facebook data sharing
I played with WebRTC as part of a masters project about 7 years ago. I wonder how far it has come. It'd be nice to have some sort of a plug and play cloud service to deal with multimedia streaming in realtime and you can focus mostly on logic and UI/UX
Sure, but integration like llvm is integrated in Xcode would be impossible without open-sourcing Xcode.
Everything you described is a great gateway drug for GNUPlot :)

Inspired by your example, here's our rolling monthly sums of food expenses, COVID marked [1].

You can see where we moved (temporarily) to a place with lower food costs, and stopped eating out.

But there's also a dip around the holidays, because we spend a lot of that time with family and our food expenses go down proportionally. That dip happens to be consistent YoY, but we don't realize it because we have other things on our mind.

It's just great fun to have this stuff at your fingerprints.

[1]: https://imgur.com/a/8wb6YLn
Thanks for the response, that’s a good point.
Maybe Samsung will manage an Apple M1 competitor.
I always get a kick out of the goofy self-assuredness of 'computer science curriculums'. You must learn calculus and discrete math...oh, and CSS.
So what do you do when GPT generates nonsense? Because it sometimes will, at least during my experiments, create something that is irrelevant or just plain wrong and would require human intervention. In other words, what is an acceptable failure rate for these summaries you generate?
I was under the impression that Venmo uses Plaid’s APIs on the backend, no?
Why are you not answering the question?

You are literally grasping at straws here. Show us the proof where he said those violent supporters are special and he loves them like what Trump did. Biden has said that he does not support the BLM violence.

Where is the proof that Biden tried to "find" 11,000 votes by putting pressure on election officials.