skysight-inc/HackerNews huggingface dataset:
> It's about making desktop-class applications more accessible via the web.

I am not sure what "web" you're using, but as someone who uses noscript and has been enabling scripts for over a year now, I can firmly say JS is NOT used for making "desktop-class applications more accessible".

It's used for ads.
And spying. Lots and lots of spying.

Seriously.

Googletagmanager/analytics is everywhere, it doesn't deserve to be, it doesn't need to be. That domain needs to die a painful, horrible death.

facebook, twitter, sessioncam, and many others are used to bloat pages, increase my energy usage, decrease my battery quicker and contribute to the wastage of energy on an unprecedented scale.

Just ask yourself, how much money, battery life, bandwidth is spent every year on downloading useless scripts that as far as I can see offer no value whatsoever. By selectively deciding what scripts to enable I get the folliowing result:

1: pages are lighter, less bloated, and STILL WORK

2: I download less scripts, use less battery and save bandwidth and energy for myself and all humanity.

3: There is less spying as fetch() requests are blocked and there can be hundreds of them across a single web-page session (you can watch really bloated pages for 10 minutes, there can be 100's of requests easily).

Test: load the following two pages, study their usage, test each with JS enabled/disabled:

1: https://old.reddit.com (with JS:2.69, without: 2.34mb)

2: https://reddit.com (with JS: 8.58mb, without: 8.10kb, but the page is broken...)

Baring in mind old.reddit works fine with JS disabled, showing JS is not needed for a site like reddit to work at all.

Yet, "web developers" use them as if it's nothing. Pages that execute over seconds, possibly MB's of data, all the additional requests that are made to enrich the likes of FB/Google et al.

So no, SPA are a scam and the web is worse today than I remember back in the 2000's, at least we didn't have cookie pop up boxes because people can't help but abuse JS.

Most of the GDPR violations I've found thus far are from scripts that have no place or purpose, that slurp up user data without remorse, that, if disabled, doesn't impact the functionality of the page, and that enables the great surveillance capitalism and data-raping we are seeing today.
I remember reading about a similar result in software that judged job applicants. The system was trained on resumes of past applicants and the hired/not-hired outcome. Unfortunately, instead of providing a neutral guide, it just learned the biases of the humans who had made past hiring decisions. Of course, the designers of the system had excluded demographic information, but the system found proxies like extra-curricular activities that correlated with race, gender or social class.
I’m inclined to agree. Which parts do you have in mind?

It seems like being a highly paid security engineer requires a lot more commitment than being a highly paid software engineer.
I tried to find it a bit but I’ll do a more thorough search to see if I can figure out where I learned this. I’ll let you know if I find it.

EDIT: Did a thorough google search and looked through my podcast lists but I haven't been able to find it. I did find this podcast in my listening history which may or may not cover the topic, but unfortunately I don't see a transcript I can search through:

https://theorbitalmechanics.com/show-notes/ella-atkins
> its servers would need to do more work

So far I have seen no evidence that this would be the case (rather, I have reasons to believe the contrary).

> and its users would have to wait longer for content.

They would actually have to wait less. Recently two of the sites that I used to use switched to react. I was able to have open literally 100s of tabs with them, each of them loading almost instantly (excluding media). Now I can barely hold 2 open and they load slowly (even if we ignore the time that it takes to load the media).
Some good points, but for as many good points, there is a similar amount of misinformation, whether purposefully or due to lack of understanding.

- The claim that BTC chose a non-scalable solution for ease of running a node isn't true. The claim at the time was that Segwit and LN were sufficient to solve all the scaling issues, the hardforks were going to solve anyways with their block size increase. It also falsely states that the hard forks take up more hard disk space, when in fact BTC still takes more...

- The hashrate comparison, the way it is charted is completely nonsensical, between BTC & ETH... it is quite literally comparing apples to oranges, their POW algorithms are completely different from one another and cannot be compared in hash/s terms. They are each respectively at the top of their hash domains. I'm doubtful this is due to ignorance, but moreso malice. Would love to see BTC miners do a 50% attack on ETH, which the author is essentially trying to instill into the minds of readers.
https://a.aliexpress.com/_mr3Zg1T

This is the price you’d pay if you are willing to wait. I rarely need just one component and 5 displays at $20 is serious. If you want to sell a device, a $20 can easily kill your profit margin.

I am talking about direct from China and potentially selling products because if you just limit the discussion to single component hobby use then no amount is really too high. Why not $40? $80? You only need one, right?
The equivalent would be advocating for "growing weed and being sex workers".
The idea that business isn’t about people communicating is strange
>> As the inscription on the Statue of Liberty says

There is only one inscription on the Statue of Liberty, it reads "JULY IV MDCCLXXVI".
It’s almost as if you should pick the right tool for the job. ;-)
> Fully server-rendered frameworks are not capable of delivering low-latency desktop-class applications

Evidently, neither is JavaScript.
What impact does an employee’s “morality” have on the business, from a Christian perspective? I don’t actually believe there’s a cogent argument that e.g. premarital sex makes someone less effective at their job.
This is literally the saving grace for Matrix in my opinion. As can be seen with Mastodon, federation tends toward centralization of the servers if there's even an incremental benefit to doing so and nothing encouraging otherwise.

Matrix at least seems to have fewer barriers to usability/functionality when self-hosting, which decreases the detriments of self-hosting and slightly lowers the drive to centralize, but until P2P is default standard for clients the convergence is likely to remain with a mostly centralized federation infrastructure target than a heavily decentralized one.
That's true, although anyone who cares about truly free software presumably would look into the details to check.

You can disable the telemetry: https://code.visualstudio.com/docs/supporting/faq#_how-to-di...

My point was really that it's free and open enough for any practical purpose I'm able to discern. Refusing to use it on the grounds of insufficient openness or freedom seems to me to require an unreasonably absolutist ideological stance on the issue.
I literally already said you can pay less on aliexpress, and the same absolutely applies to e-ink.

If you're making a point, I can't figure out what it is. This is way off topic.

EDIT: you have edited in some more relevant points, but there definitely is a price that's too high. If you had to pair a $35 computer with a $100 display, most people would absolutely find that to be too much in this hobby context. They would have to either have a lot of money, or a lot of passion for a particular project in order to justify that. Most people will find $20 to be reasonable.
Industrialization would be slower without fossil fuels, but that doesn’t mean it can’t happen. Small scale wood smelting can eventually make way to hydro powered electric based smelting.

We are used to a very energy extensive economy, but most of the world would be habitual without any home heating or cooling for example. Similarly, a network of street cars need something like 1% of the energy as individual cars for everyone in a city. Historically, rivers, streams, and canals where similarly quite efficient long distance transportation networks we have largely forgotten about.
I had to use Thug - because Thug is derogatory for everybody.

Communism is only derogatory for the few people that understand history
It perhaps helps to elaborate on why this is considered unprofessional. I'd think that for many their political viewpoints are more important than their current job. However their peers with whom they intend to discuss those, might not be in a position which allows them that choice.

Free discussions are necessary, but do it tactfully (and certainly not in writing as that just invites disaster as statements are taken out of context).
Sure, if you invent the automobile, tell me about it. I've said why I think the alternatives are inferior.
Do you want a life-long income while enjoying time with your family?
Interesting way of wording this, but if I paid for research and the patent process, and someone beats me to production and I have the patent protecting my investment into the idea they are now making money on, then yes, they'd owe me for my research, which I may or may not license to them.

If you think you've invented something, then you need to do your own research to see if what you invented hasn't already been invented. Otherwise your blinders cause you to waste your own time. That's never been new. It's the same with product names, and just about everything else (trademarks, copyrights, etc). There's even a saying for it: Why reinvent the wheel? Otherwise, absolutely everybody could claim they just didn't know it was patented, and steal anybody else's work as they wished, because "Sure I invented it after you did, but I also have a faster production line than you."

You can't claim you invented Widget-A if I already did, and can prove it. Which I would through my patent of Widget-A. If you want to invent a competing Widget-B, then invent it, and don't use Widget-A without a license with me. You didn't invent it if I already did and have a patent as proof.

That's what a patent is and what it does. It doesn't stop invention. It protects inventions from outright theft (or even accidental theft). Go ahead and invent, but if you weren't first, you aren't the inventor.
Do you want a life-long income while enjoying time with your family? If yes, then ONPASSIVE is the perfect platform to get exactly what you need. The world's most potential income solution is awaiting a grand launch soon. Come.. join us immediately as 445756+ people worldwide are already ahead of you and more are joining everyday. You can just sit back and enjoy the ride.
Well, name one error that persists despite not making the error, and you can definitely say I'm wrong. But that wasn't the point. The solution is to go to the right site. You were supposed to use your imagination to come up with ways that might be caused to happen. The article and commenters here suggested password managers that discriminate between the right site and the wrong site, that's an example. "OH SURE BLAME THE VICTIM FOR NOT INSTALLING A PASSWORD MANAGER!" If you're looking for a solution that doesn't whatsoever require the participation of the user, you may meet with some degree of disappointment.

There may be viable solutions that include still going to the wrong site, but I know for a fact that going to the wrong site does not happen if you go to the right site. It's a tautology just like your disingenuous Twitter-style reductionist accusatory re-interpretation of my comment suggests. Speaking of which, if you want to blame the victim, go right ahead (that was your idea), but I don't think the computer cares who gets blamed, unless and until it affects what gets typed in or clicked.
As a major user of Gentoo since 2002, it's been brilliant how Linux has gone from strength to strength. Before that, I was a Slackware user, since 1997. Long may Linux continue its march for many more years.

I've gone from Pentium Pro, SparcStations, various incarnations of Intel processors, UltraSparc, Pentium 4 64 bit, ending up with Threadripper. With all this my data has migrated with me all through these architectures. Still amazes me how well all that has gone.

Looking forward to transitioning to ARM or RISC-V workstations some day.
One of my favourite applications of knot theory is to classify all aesthetic tie knots, using topology to uncover unknown sartorial gems. It is a great piece of research from Cambridge, a short and accessible paper called “Tie knots, random walks and topology” by Thomas M.A. Fink and Yong Mao published in Physica A 276 (2000) 109–121.

It is available on the authors’ home page:

http://www.tcm.phy.cam.ac.uk/~tmf20/
Something has to be defamatory and expressed orally for it to be slander. Apparently, all the labeling should have been around libel.

I am having trouble adjusting to a reality in which I am the first to express this quibble.

https://www.nolo.com/legal-encyclopedia/libel-vs-slander-dif...
Oculus: Multi-User Accounts and App Sharing Coming Soon
The article focuses exclusively on the technical side. No, certifications are not required. Sure, they will get your resume higher on the list.

Security is much more than simply breaking stuff. You need to understand the fundamentals, CIA triad, risk, misunderstandings that arise from the fundamentals, issues that generally arise with security due to the context etc. Debunk also some common myths around security. Fundamentals can land you in tables that technical skills won't. It is one thing to land bugs and another to be able to sit in a meeting with a guy from engineering and reason with his team and reach an agreement. Generally, working with non-security folks is hard and knowing the fundamentals helps. This also requires soft skills. Know your limits and be honest about them. Also, it is good to listen to people and their concerns. Generally, soft skills are super important in security because in most cases your opening statement is going to be one of the following:
- I found some bugs that I want to discuss with you.
- You did X which violated that policy and it rang an alarm in SOC.
- We have this issue and I came up with this plan to build this to address it.
Being able to calm the other side is crucial or you risk derailing the conversation. Also, being able to write code helps a lot. As a matter of fact, I forced team-members to work for other teams for two months. Not only they brought skills back, my team now had an understanding of their work and potential pain points.

Being able to understand the pain of the other side and also come up with solutions (incl. writing code)
If I started again, I'd do the following:
1) Understand the fundamentals and the limitations
2) Build stuff. It helps relate with people.
3) Break stuff. It's fun and useful to understand what went wrong.
4) Have a broad knowledge but focus on specific fields. Some people like defending, some people like attacking, some like building stuff.
5) As every job, it has its laundry list and boring tasks that people need to make. Yes, Excel spreadsheets are a thing in infosec.
6) Don't focus too much on certifications.

Worthy reads
[1] https://www.freecodecamp.org/news/so-you-want-to-work-in-sec...

[2] https://lcamtuf.blogspot.com/2016/08/so-you-want-to-work-in-...

Edit: Saw this[3] comment. That comment reminded me of something. We've had, time and time, candidates with certificates that could do exploit stuff but couldn't use SSH. One of my first hiring questions was "How do you use SSH" and "How do you delete files from the terminal". I wasn't sure whether this guy was making fun of me or my resume sucked. Apparently, the guy was fed up with people not knowing to use a system that he started asking such questions regardless if you had a Ph.D. in Computer Science.
[3] https://news.ycombinator.com/reply?id=25814333&goto=item%3Fi...
This is good advice.

Go to your local security meetups, network, meet people. Chances are most of the people you talk to are hiring or know people who are hiring.

Get yourself a blog, write about your security research, write about your experiences with CTFs.

Showing that you care about security enough to do it in your own time is worth more than any cert.
Why do you care what other people think or mean when they repeat that? Trying to persuade strangers that they're wrong about an opinion seems quixotic.
To a first approximation, you can do all your heavy-cpu computation on the server and have the client be a close-to-dumb terminal or you can have the server do some preprocessing and the client do some postprocessing.

One spreads the load over CPUs better.
My very limited knowledge of SDR’s from when I was researching a project is that for a lot of use cases, the cheap ones just don’t have the bandwidth or frequency range. I ended up getting a limesdr which was enough to serve my needs, but it was still around $400 for the usb version.
Would the buffer index panic still crash the process and let them in?

Albeit, it'd probably be a Vec instead of a slice.
Two months ago, Microsoft announced the Pluton security processor and that future AMD, Intel, Qualcomm CPUs will have it. It seems to be for this exact purpose:

> These sophisticated attack techniques target the communication channel between the CPU and TPM, which is typically a bus interface. (...) The Pluton design removes the potential for that communication channel to be attacked by building security directly into the CPU.

https://www.microsoft.com/security/blog/2020/11/17/meet-the-...
>If they'd just pulled the chairs they couldn't afford from the competition, it would have cost the same and made us happy.

That just seems like a very poorly executed trial. Clearly the company should have decided on its price limit up front and brought in chairs that conformed. It's not even really unreasonable to decide that the price of Mirra 2s (which are perfectly good chairs) is fine but Aerons is not. But, in that case, don't bring in Aerons for people to try.
Don't confuse browser vendors with the people creating and abandoning frameworks left and right. I like the part of the HN guidelines that refers to something in particular being "a semi-noob illusion". The fragility of the web is like that: a semi-noob illusion that people come away with because they don't understand the layers underneath and who's responsible for what. The web has robustness and forward compatibility baked in. TC-39 in particular, which is responsible for defining "JS", even operates with the unofficial motto "don't break the Web".

I'm also fond of this comment from Roy Fielding:

> As architectural styles go, REST is very simple.¶ REST is software design on the scale of decades: every detail is intended to promote software longevity and independent evolution. Many of the constraints are directly opposed to short-term efficiency. Unfortunately, people are fairly good at short-term design, and usually awful at long-term design. Most don't think they need to design past the current release.

https://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypert...
I am mistaken: 2 or 3 of the projects named here have recent updates and they look good. I might have to play with these this week: https://www.truenas.com/trueos-discontinuation/
That’s an implementation issue. There’s no technical reason why a non-targeted ad needs tracking other than Google still trying to stalk people.
aka: too lazy to google.
Airliners have been proven to be much safer than rockets. By way of example, spaceflight has a 3% fatality rate for astronauts [0]. If (pre-COVID) Heathrow airport (80,000,000 passengers in 2019) had a similar fatality rate, 7000 people would die every day, at that airport alone. Airliners are massively, massively safe.

[0] https://en.wikipedia.org/wiki/List_of_spaceflight-related_ac...
Ah, I didn't know about the PGP code size. Point taken about the cost, and I hope you can sell to organizations. I'm surprised I can buy a competitor for £8, but then I can't run the proprietary programming software or, I assume, re-flash it. I'm happy to support a free software project anyhow. I wish I could register my Somu with the work Duo system rather than the display-a-number-you-type HOTP keys they reluctantly issue as the expensive alternative to expecting us to use personal phones for such purposes. Phishing, we've heard of it.
Because it’s bad compared to every other digital display. They’re always on the order of seconds, and get even worse the more colors there are. Tri-color displays (red, white, and black) are sometimes up to a dozen seconds or worse. For example, [0] has a refresh time of fifteen seconds! I’d be surprised if this isn’t an order of magnitude worse than that.

[0]: https://www.good-display.com/product/223.html
Can anyone who is closer to this field suggest what the major options for open source libraries in this area would be? Quantlib? OpenGamma Strata?
It aged well... for some reason.
That situation you describe never actually happened, except maybe during the very first few hours, days or weeks after the Web's birth.

Remember bandwidth, machines and access used to cost way more back then than they do now, so resource owners wanted to get the best bang for their buck from the get go. Note that resource owners means those who actually paid for network resources (companies, administrations, schools, labs), not people who merely benefitted from them for free because of their positions (teachers, students, lab rats etc)

You seem to be the unfortunate victim of a false memory, a similar phenomenon to that experienced by the "things used to be better" crowd.
What I Learned from Tracking My Anxiety Every Day
> - and allow armed forces and other groups that need it to run their own servers

if you can afford to run your own servers, then you can afford to run a build server too and push your own releases with the server patched.
This reminds me of a quote from Surely You're Joking, Mr. Feynmann!.

"When you're young, you have all these things to worry about - should you go there, what about your mother. And you worry, and try to decide, but then something else comes up. It's much easier to just plain decide. Never mind - nothing is going to change your mind. I did that once when I was a student at MIT. I got sick and tired of having to decide what kind of dessert I was going to have at the restaurant, so I decided it would always be chocolate ice cream, and never worried about it again - I had the solution to that problem."
> Not really, I don’t think all her research involved gathering and communicating relevant insights. There’s lots of other parts of research.

But that is, in fact, the definition of research ("the systematic investigation into and study of materials and sources in order to establish facts and reach new conclusions") and the publication of research findings fits the definition of communication.

I guess my point is: if you're going to be pedantic on the internet, you should consider whether it's worth your time defending your own contribution. I've got no qualms defending the idea that Rebekah Jones is a data scientist.
I'm sorry but I don't understand what point you are attempting to make. You listed several nations that already exist, and then said we should lump them together for some reason? I'm not sure I follow.
This is not true. The Pleiades cluster looks the same all year round.

Depending on how one defines the limit of what can be seen, there are either 0 stars, or 6 stars, or 9 stars, or hundreds. But only someone with very, very exceptional eyesight under very, very exceptional conditions can actually see seven stars but not nine.

Source: I've been observing the cluster, and the sky as a whole, for decades. I'll draw the locations of the six notable stars just as easily as some will draw the big dipper. And I've never, in decades of observing under many different conditions from different latitudes, ever seen seven stars.