skysight-inc/HackerNews huggingface dataset:
What is a specific credible concern about cameras with public API?
We already have AMD's Secure Encrypted Virtualization (SEV). If you trust AMD, you can have a secure VM running on that CPU that's totally opaque to the person who owns the CPU. So even if the KGB could own the CPU, and the USA's president could use a VM on it in full confidence the KGB wouldn't know what calculations he's using it for. What's more it runs existing software, at full speed.

Well, that's the theory anyway. In practice, researchers say modifying the encrypted memory, then running the program and seeing what happens next reveals something, enough to get them root in fact. [0] But even so, it's a deficiency that can be fixed, so if we aren't there yet we will be one day.

The difference between SEV and FHE is where with SEV you have to trust AMD, but with FHE you don't have to trust Intel. China could have designed and made this FHE chips, and you should be fine. But on the downside FHE is very, very slow (and this won't really close that gap), and expands the data hugely and of course doesn't run conventional software.

To me it looks like that sorts of applications people are discussing here, such as database servers, will be done by SEV because of the shear amount data and processing they have to deal with. The article talks about speeding things up, but the primary bottle neck for those applications is MIPS/Watt. Speeding up FHE by throwing a huge GPU at it doesn't sole the MIPS/Watt problem. However, there are applications that tend to involve primary secrets - things like handling passwords, PIN's, PIN Pads, perhaps even gab.com's OAuth2 bearer tokens that involve tiny amounts of highly sensitive data. Perhaps FHE could be useful in dealing with them.

[0] https://arxiv.org/pdf/1712.05090.pdf
Just a quick glance at un statistics will show that they have serious issues with Israel.
Isn't "playing roblox" like "playing iPhone"? It's not a game, it's a whole platform/ecosystem.
Public goods funded with public money (i.e. tax money).
you are very right.
Junior hire were strategically placed in 'ok' teams.
they had common "low-key" projects on top of their regular assignments, and a particular effort was put on exposing them to various roles ( dev, TPM, BA, design ). The idea was to create a community of new hires that can tap into to reach for help, advices and the like.

This person took advantage of a large company with a fat belly to do awesome thing. I'm not even sure they realized.
Alternatives are meaningless unless they can get mainstream adoption from the software makers of the majority.
Maybe I wasn't specific enough here. When I said "smaller peptides," I should have instead written "free amino acids, dipeptides and tripeptides." The two papers you cited refer to topical application, but your statement in your first comment said that it is easier to get collagen from dietary sources. What I'm asking for is what size of peptide you're calling a "collagen peptide" and a source supporting a mechanism of absorption. Most references I find to "collagen peptides" are for unvetted dietary supplements.

There is not good evidence that peptides larger than 2-3 amino acids can be absorbed into circulation via the gut in more than trace quantities (1). Digested collagen will be rich in certain amino acids (glycine and proline in particular), but calling something as small as a di or tripeptide a "collagen peptide" seems like an oddly arbitrary choice. I am a medical student with significant background in biochemistry, so please don't feel the need to dumb it down for me when you explain.

1. https://www.cambridge.org/core/journals/nutrition-research-r...
So, basically MEGA (Make Europe Great Again)?
> How was selling more stock in that situation legal?

“We are selling to willing buyers at the current fair market price.”

- Margin Call, 2011
> (This is all fictional, of course)

Haha, you really had me going with that first paragraph. Felt so real.
The regex engine I maintain includes benchmarks against onig. It's been a couple years since I looked closely, but last I checked, onig was not particularly fast. Compare https://github.com/rust-lang/regex/blob/master/bench/log/07/... vs https://github.com/rust-lang/regex/blob/master/bench/log/07/...
Isn't git distributed with the Xcode command line tools?
Stigma? For not spending money? For me that's an instant cancel of the account and introduce my kid to a better class of friendsm
Canada as well. It's absolutely bonkers watching small businesses forced to shut down and go out of business while Walmart has people packed in.

The issue really is the people enacting the rules do not seem to have any real connection to most of the working class forced to suffer from them.
Discord's blog has some interesting articles.

https://blog.discord.com/engineering-posts/home
I like your landing page design
You overanalysed it. The math is simply that you are statistically unlikely to get your dollar back.
This estimate misses the entire benefit of Cloud Run which is metered compute billing. Nobody in their right mind would run a serverless stack if they had 250K connections 24/7. It’s specifically documented that it isn’t for long-running processes, just for event-based apps. More realistically you’d get 250k requests, serve them with a total of ~5 container instances, and then the billing stops 5 seconds later. It’s cheap. It’s not for websocket apps. It’s perfect for MVPs and spiky traffic. It’s an easy path to move the hosting to K8s, App Engine, or normal VMs (GCP VMs can just run containers with minimal config), which are all far better choices if traffic is predictable.

I think this is a far more valuable model than Function-as-a-service, where the runtime environment is strictly defined. Since “it’s just containers” you could write a web server in brainfvck if you felt like it, write a tiny dockerfile, then ‘git push origin/main’ and Cloud Run gives you a running endpoint. Okay, there is some devops work to set up that pipeline, but that is mostly boilerplate.

It’s Heroku but it scales down to zero (ie free) and up to 1000+ instances of your server in ms.
I don't think that smugly not running as root saves normal users; while malware running as your user can't trash your laptop, they can get your Google cookie and read and send emails as you, spend your money, view your private photos, etc.
Consumer Cellular
Do you have a way to migrate Zapier zaps? I feel like since that is the dominant ecosystem, having a way to easily port Zaps would be very beneficial. Building one of these things correctly is significant work, and it's hard to justify the investment in new platforms.
Does that work on Chromebook?
Er, but unless I missed something, Amnesty International didn't claim Israel used it for its toxic properties against humans or animals? They were against it being used for any purpose in Gaza, and chiefly cite it causing property damage. While that's still bad, it's not true that in that case WP counts as a banned chemical weapon. Ergo, the claim is false. White phosphorous is not a banned chemical weapon, and was not used for its chemical properties against humans or animals.

Also, even Amnesty International mentions that the purpose wasn't "illumination" — which would be ridiculous — the purpose was camouflage (which is apparently a typical use case).
It would certainly discourage risk taking on highly volatile instruments, and I'm not so sure that's a net contributor to the economy.
Yet, reviews can be removed :).

Reviews can be removed if they are shown to violate Google policies. Also, legal action can be taken to remove a review. Google does not write law about what reviews are permanent.
Alberta has had open schools since Sept 2020. No issues at all. A few minor cases trivially handled by the new procedures.

Honestly I find it bonkers that the US still has many of their schools closed.
While most is true, rfc3339 isn't a profile of iso8601. Both have cases when it's not valid in another.
At this price point hiring a dedicated dev seems like a no brainer. Also using GCR name for this is a bit weird when there’s already another GCP container product with the same exact name.
Interesting. In what sense(s) is the developer experience in Lisp machines different?
Your last comment nails it. But I think its also a Hn trope at this point to have a huge blindspot for social platforms and media companies... the demographic here tends to not grok their value appeal to the broader public.

Basically if you followed HN purely for investing advice you would probably have missed out on all of the major social media and new media platforms of the last 10-15 years.
This is great feedback geoah, thank you! We’ll note and prioritize.

Would love to learn more about tracking re-reads. Do you have an ideal ux in mind?
The Miseducation of America’s Elites
Human nature finds a way to subvert some of the best intentioned technologies.

This is fact. We need to get used to it and solve the tough problems: identity, moderation, spam, discussion quality, community norms, and so on.

Building a service is often easy. Marketing it is harder. Building something useful to a group of people in spite of human nature is probably the hardest.
Why not use an E2EE solution, like HomeKit for your camera?
Not currently. We don't currently see a lot of migration from Zapier, but we do see a lot of net-new development. It's definitely something we've thought about but we have just as many users using us for general purpose scripting and webhooks as API automation.
Just today I was thinking this exact thing. I'm trying to stop using Twitter and decided to setup and RSS reader as my source for finding out about news.
> and in general best practice is (or was) for commands to not alter their behavior based on whether they're attached to a terminal or not.

Not so sure about that. ls has been changing its output format based on whether it is being used interactively or not for as long as I can remember at least. Both GNU and BSD versions.
911 was about $30B. Fukushima was about $1T and counting.

We have alternatives to nuclear that don't make the state-backed insurance worthwhile, not so much to air travel - where state-backed last resort insurance is available.
I wish folks who announce security issues would link to the patches for the issues they are announcing. This should become standard practice.
You can rely on the maintainers of the Linux distribution to do the work for reproducibility. While also providing security updates. And vetting packages for licensing issues. That's what distributions are for.
I mean, there are... not-totally-unreasonable workflows that do clones as root.

Edit: although I am struggling to think of one that clones from an untrusted source.
This is a straw man argument. We can and must do both: build and be realistic about misuse.
Why you wouldn't use AWS http events for this. Especially because connections are decoupled from processing
In the 1990s, over a million Jews from the former Soviet Union settled in Israel. We should be clear about that. It is technically possible for the Palestinians to return. What prevents them from returning is deeply entrenched racism:

"In 2009, 72 percent named a Jewish majority as one of their two leading values, versus 71 percent in 2007, while 36 percent and 29 percent, respectively, named Greater Israel as a leading value. Democracy has been losing public support in the last five years. In 2009, 35 percent of the population opted for democracy as their most or the second most important value; in contrast in 2005, 60 percent of respondents chose democracy as their most or the second most important value."

https://reliefweb.int/report/israel/vox-populi-trends-israel...
Foolish California Bill Demands All Robocars Be Zero Emissions by 2025
The only 10 books AOC ever recommended to read
Nitpick, but newsboat is TUI rather than CLI, a sort of terminal GUI. (same for others ncurses stuff)
CLI stuff is more of a REPL.
Didn’t the collapse of Inmos go on to start an electronics hub in Bristol, a rather nifty unintended consequence.

I suppose if they tried to replicate that sort of pump priming failure they would be thought of wasting money.
This drives me nuts. Im operating under the assumption of a linear distribution. 4/5 still means in the 80th percentile. It’s better than average. 3/5 is “not amazing, not bad, what I would expect, an utterly normal experience”.

In some platforms I am happy with everything, leaving a 4, getting the follow up question “what went wrong?”

Nothing went wrong, they still exceeded expectations but I reserve my 5s for those “once in a year, best in class” experiences. I refuse to shift my MO to “less than 4 means something was bad”.
If it takes off and you're supporting millions of customers, a $60k infra bill is an amazing problem to have.

"Oh no, we're too popular!". Who says this?
That's great. The game costs nothing and it filters out trash people from her experience.
TikTok Landed on MIT’s List of 2021 Breakthrough Technology
Electron 12.0.0 – Electron Blog
Cloudflare, OKTA Hacked
Nothing is liquid yet. Also, practically every Bay Area engineer is an accredited investor because they hit the income requirements. Many are more actively involved than I am.
Oh god, when's the funeral for your bank account?
GauGAN Turns Doodles into Photorealistic Landscapes
This isn't a valid comparison. You don't know how many (and the hardware of) instances WhatsApp was running to support those 2M connections. And you're not comparing apples-to-apples: WhatsApp is not the same software that the OP is running.

Moreover, the 250K limit is an artificial limit imposed by Google for a generic cloud service. If you controlled _that_ software and tuned it for your specific application, you probably could squeeze an order of magnitude (or two or three) more connections out of it. Whether that's a worthwhile tradeoff is a function of whether the time required to rewrite the functionality of Cloud Run yourself (and run it, and maintain it) is lower than the cost of simply spinning up more boxes. If you're building a product and have the cash, it really doesn't matter whether you can run 250k connections or 2M connections if one could exist this week and suit your needs and the other could exist in 6-8 months when you build/scale/deploy it.
I spent a fair amount of money on MTG, but it gave me lots of fond memories. I think I would encourage future children of mine to play it, in the unlikely event it hasn’t become online-only by then.
It is in their interest to make you believe they can crack anything.

Not sure why they said they cracked this app, because now they lost a source of intelligence.
Kicking the spam can down the road is not the only way to solve a problem, nor is it guaranteed to work.

Up front thinking and design can go a long way.
Why are so many athletics records falling?
That's because essentially, "state" and "caching" are the same thing on some level.

And the problem with state is that you have to make sure all your state transitions don't cause bugs. What we know as a "cache" is essentially creating new state representing existing state, with all new transitions...
Of course not, you need to be logged in to a google account and solve a captcha
;)
Japan to stage Tokyo Olympics without overseas spectators
Seems like the technical side of vertically integrated saas opportunities, which is mostly where things are going. Weve more or less built the parts bins. Now the remaining growth areas are in highly specialized, specific verticals. The issue I see is actually more to do with moving the data vs moving the computing. We currently perform all these integrations by moving the data around then taking 1% of it to do something useful. I wonder if offering serverless in-situ compute and assembling the results would be easier.
Guys last time I checked in our team, we decided serverless is good for requests under 800ms. After that, specially with permanent connections like web socket, consider using aws iot core mqtt over we socket. $0.08 per million minute of connections.

In this case: 60 * 24 * 30 * 250000 * $0.08 / 1000000=usd864 per month
I feel good knowing that some people have managed to escape.
You’re 100% describing how news organizations operate, that are source of the actual news. They have same initiatives. Skipping middle man curator leaves you with same fundamental problems.
Sure, I'm just saying this isn't a big deal and its likely no one was hit.
“ too busy and disinterested to deal” is a filter that allows RSS to work since FB et al would filter and bloat RSS if enough people used it. It’s value was already diminished considerably years ago when many systems and publication removed full text from RSS. It would get worse if it was used more.
Why asynchronous Rust doesn't work
Kosko 1.1: ESM Support
Right, for explicitly recording a timestamp without having to refer to a historical time zone database it would seem to make a tiny bit of sense... but recording the actual time zone would work just as well for historical data and future times. I just have a hard time imagining a scenario where you really care about the offset... the timestamp itself is enough.

Maybe it's just historical baggage from not wanting to keep that historical record of time zones around for all eternity?

I dunno. It's a bit weird to me. It's a very indirect (precise) measure of something that doesn't seem like it would have much use over just recording the direct measure (TZ and/or just the UTC timestamp)

The more your learn about datetime the more confusing it gets, I suppose :). I guess it's good to know that it can get very confusing (and therefore to tread carefully) and to temper one's expectations of datetime libraries.
This is just crazy though as GameStop has no demonstrated capabilities or plan to compete with Steam. They don’t make good software, they don’t have content or publishing experience.

I mean they can say they want to, so can McDonalds. But their plan is magical thinking and not sure why folks fall for this.

The worst but though is that they have a terrible reputation with gamers. Every gamer I know hates them. Some shop there like some tolerate Comcast, but they don’t have a fan base.
How is this related to https://tiny.page/ which it seems to embed?
I wish that were true. I witnessed police open fire on protesters here in the US so I still believe it could definitely happen here.
I'm reading through a collection of Borges' short stories right now. The Library of Babel was facinating and definitely reminds me of Invisible Cities. One Borges' short story I especially enjoyed was "The Circular Ruins"... you can see some of the concepts echoed in modern media.

I feel that Borges can insert a bit too much superfluous detail (maybe in an attempt to ground the work?), but the results are still thought provoking. Because the prose is old I sometimes need to force myself to re-read passages when my brain decides to zone out... it was written in a different time.
I'd recommend you take it, but you should definitely take some CS undergraduate classes too to have a solid foundation, either not for credits or required by the CS department.

It will be easier to find jobs in Chemistry industry where CS jobs are available, like data scientist.

If you care less, community college is actually also a good choice.
You're being downvoted but you're absolutely right.

We have literally done this before:

https://en.wikipedia.org/wiki/1985_MOVE_bombing?wprov=sfti1

https://en.wikipedia.org/wiki/Pittsburgh_railroad_strike_of_...
True. They try different games. I tried asking them what they would recommend to other kids, but they said Arsenal, sports games, and Natural Disaster...they were not helpful!

Either way, they only play a few times a week, so maybe 3 hours a week. They usually play other stuff as well.
How is being recorded by your employer while on their premises giving away your freedom? It would be a different thing if they were tracking you out of work, but when you enter a premises owned by a business you kind of implicitly agree to be surveilled by them, as it is their right and freedom to protect their assets.
The Amnesty International article is against any use in Gaza _because_ any use in a dense urban env is by definition an illegal use of chemical weapons.

Camouflage isn't a valid use of chemical weapons on a dense population when the arguments are taken as a whole. Even Mustard Gas works as a camouflage, it'd mean the whole convention is pretty much unenforceable.
I appreciate this comment, and feel like I learned something about parenting from it.
Meteor explodes over Vermont with the force of 440 pounds of TNT
All I can say is that the only real options at the time seemed to be T-Mobile, AT&T, and Verizon. Sprint had a tiny network without reasonable coverage.

It was a bad choice, but still an obvious one. They were infinitely better than the others even if they weren't as good as say, Iceland.

Lack of competition doesn't help this market...
Windows has done symlinks (known as "junctions") since Windows 2000, so I guess it's a more recent feature you might not have learned about.
Its still on the internet though. Its just the VPN becomes the security barrier. Although if you keep it up to date, its going to be safer than iot crap
I'd been procrastinating on running a VPN on my phone, and this got me moving. Thanks, T-Mobile.
As a crop, cannabis has enormous carbon emissions
This is going on 25-ish years ago, but it was basically the Atkins diet. I didn't monitor calories in any way, but I lost about 35ish pounds eating that way (and exercising). I stopped because it was getting boring eating that way and I felt really greasy all the time. Plus it's kind of expensive and I was a poor college student.
Vladimir Nabokov's Superman poem published for the first time
ARM was also for a while an Apple subsidiary. They are not a pure European story.
Linux users have platforms like Flatpak that sandbox applications to known directories, and have multiple "app store"-like implementations with colorful buttons to make the process look unintimidating and non-threatening.

Another option is to simply use distro packages. Users of good distros who use distro packages have software that's vetted built from source independently, and compatible with the rest of the system.
Life's vast diversity defies easy definition
Deadlines and sprints are bad for you (2019)
The Intercept posted recently that their subscriber numbers have plummeted since Trump left office (and they can no longer post clickbait political yellow journalism).

I suspect the same thing happened to HuffPost. They can't dunk on Trump with 50 articles a day so the money is gone.

Trump was the best thing to happen to the media, because of the billions in ad and subscriber revenue he gave to them. He paused the news industry decline, which will now continue.
I've gotten stuck in a datacenter because I forgot the correct badge-out process. Tripped an alarm and got stuck in a man-trap.

For the uninformed - badge in to open the entrance door. The room then locks and you use your badge to open the exit.
Electron 12 includes native support for the Wayland display server protocol on Linux:

https://news.ycombinator.com/item?id=26317942
When necessary you can make an auto-expanding volume that's case-sensitive and leave your host FS alone. I have not found that I really want to have differently-cased but otherwise identical filenames in the real world at any point though.
I have most of the parts to do the individual tasks this thing is supposed to do. What I don't have is the time or desire to whip it all up into a functional tool including a display, buttons, etc. It doesn't do anything that you can't do right now with parts available from SparkFun/Ada Fruit/etc. It's the form factor and interface that makes it desirable.

In fact the form factor is too sexy for its own good in that it made it so desirable it has slowed down development as they had to go backwards in development to include several kitchen sink features that should have been left behind. But hey I'll take an extra kitchen sink when it comes.