skysight-inc/HackerNews huggingface dataset:
Just a quick review of the four main points based on my own experience and also reworded hopefully respectfully:

1. Consumer internet founders are not great at life sciences

This is a distraction. Most of the money in internet has been with automating or supporting business operations for medium to large sized businesses. Life science tech brings unique challenges which is why so many life science tech companies are based in the valley or have offices here. Just to pick out one example the highest resolution ultrasound machines made come from a company based in the valley. This statement appears to be based more on the distracting powers of social media and consumer tech.

2. Internet regulation is upon us

This is good thing because regulations give consumers confidence in the reliability and safety of new technologies. Even the most care free developers do not expect that the current order of things will endure.

3. Climate response is capital intensive

This is a distraction from the fact that the most promising technologies for addressing climate response are extremely well represented in the valley. Analysis of orbital and aerial sensor data, automated sensors, control systems for solar and wind generation, modernized electrical grid support systems, and more were all led in part by companies in the valley. More to the point all of these technologies were initially developed by small companies for small applications. Real progress with climate response is likely to involve some big projects, but these projects will be successful because they are based on much smaller works.

4. The end of the betting economy

Economies are based on bets and consist of bets, as is said, all the way down. The difference is that the terms are changing. Instead of throwing money at pets.com or Facebook plugins or cryptocoin wallets founders are going to have to be more careful and sparing of resources. This is actually a good thing and is likely to at least in part lead to a return to business success competing with hype for available capital. The situation now is that investors can outspend customers in any sector so the venture capital space has become disconnected from genuine business success. Squeezing the slop out of the system should be good for everyone.

The analogy that comes to mind is being told that the future is being researched and started at universities and then concluding that frat parties do not yield meaningful tech progress, frat parties are consistently targeted for regulation, frat parties do not address social issues, therefore universities are not actually likely to host research and development that shapes the future. And yes, in this example the current giants in the valley are what amounts to a loud frat party.
Oookay. Nevermind that all modern phones use usb-c, I guess?
Spending time with my children. Work from home enabled that (as did liberal leave policies from work because of the pandemic). However, WFH also made my work much less effective and took away a lot of the joy from my job. I normally do about half desk work and half lab work plus lots of interacting with colleagues which has become less effective with WFH. And I have no dedicated office space at home, so WFH office work was also a challenge compared to my dedicated office at work (and my commute was only like 15 minutes and doesn’t have traffic to speak of, so it isn’t stressful).

But I will cherish spending more time with my children. It was a special time and a special age for them, too, where being stuck at home was less of a problem than it would’ve been if they were older.
Heck, my kids are theoretically engineers (at least their degree says so!), but even buying BackBlaze for them, I can't even get them to hit Ctrl-S from time-to-time. I think their mom must have fucked the milkman, because she is smarter than this herself...
NFTs Are a Pyramid Scheme and People Are Already Losing Money
Quick! Claim your abandoned space in california!
>Günter von Gravenreuth also rings a bell, haven't read that name in a long time

He died in 2010, maybe that's why we haven't heard much of him recently. De mortuis nil nisi bonum, but he was a bit of an annoyance.
I don't have anything against Flatpak but maintain a Snap package and think Snap has made a lot of good design decisions even if it still has rough edges. For a basic application it's pretty easy to package for Snap. A lot of the things that bother Linux power users like polluting their mounted file systems wouldn't matter to regular users. My understanding is they support either pre-declaring permissions or requesting them at run time.

https://github.com/argosopentech/argos-translate
My big problem with all the SBOM efforts is that any kind of compliance/accuracy will be best effort and most likely wrong, leading to more problems and blame.

This is not as simple as writing down your dependencies. Most people don't even know what their full set of transitive dependencies is, or how to even go about finding it.

How do you know the SBOM you get is even accurate? You can't just crack open a binary and look at what's inside. If you could, we wouldn't need these giant complicated file formats.
With further progress, in the future on Mars there will be robots who serve your drink of choice.

A more literal Mars bar robot.
Greed often outweighs any smarts.
Italy has long had a reputation of having some talented and hard working entrepreneurs and an inefficient and somewhat corrupt government so I guess the ambitious try running small businesses and avoid the government to the extent that they can.
The really screwy Storage Review graphs are a result of a test with too few data points, Excel being "helpful" with overly complicated interpolation, and poor test setup.

I have some similar graphs in my reviews, eg. [1], but to get something halfway neat and legible I have to limit how many drives are plotted at once and ensure the test stops when the drive reaches its limits. I also don't try to run this kind of test with a write workload against consumer drives, because it would require either heavily preconditioning the drives with enough writes to get SLC caching out of the picture, or using a ton of idle time to ensure each data point tested started from the same amount of cache available.

On some enterprise SSD reviews where it is actually appropriate to test them with random writes for days on end, I have produced graphs like [2], which are kinda messy but could be worse.

[1] https://images.anandtech.com/doci/16505/rr-rate-980pro-1000....

[2] https://images.anandtech.com/doci/15491/rw-clat_mean-p4800x-...
Gosh, thank you bud and parent-bud. You made my morning. Internet was invented for this. Suggest the rest to look at this.
Yeah train ride videos are amazing. I cannot put my finger on why though. I guess because it is mellow, chill, and open-ended. Plus you get to see all of this terrain and the changes to it in an easy to process way, on a time scale. Trains are a lot more comfortable to be on, or even watch, than airplanes, although airplanes often get you from point A to B faster.

I also like going on “walks” on VR, on Google Earth VR, especially via Google Street View. I like going to my old stomping grounds but I also like seeing new places. I also have used it to scope out new neighborhoods when moving, which is extremely useful.
the web is not viable for games because browsers are unstable targets that change things constantly, breaking the games. Back when there was a stable deployment target (flash) games were everywhere.
So rant about local politics and shaming people who decide to leave.

I am sure California tax rate is under 70%, but I find it highly non transparent and unpredictable.
If that became a problem, companies intending to skirt the disclosure would fork and “maintain” private branches of dependencies such that it couldn’t be determined if they were out of date.
My impression about ML is that it shines where "intuition of a master" is needed. That is, for example, the mastery of a "technician painter" who has build an intuition of imitating Van Gogh painting can be achieved through AI.

Any intuitive skill that can be built through hard work and years of experience seems to be within the realms of what AI/ML can learn to do. Separating background from the subjects, guessing the 3D shape of an object from a 2D image etc. Anything that people can master through experience, including stuff like "sensing that there's something fishy but can't tell exactly what" kind of intuition.

I bet that there would be welding machines that can help an amateur to weld like a master by learning and imitating the way a master welder does its job.
If three generations have kids at average age 22 then you need to be 88 to be at your great grand-child's wedding (if they get married at 22). It's younger than most of us do this these days - I got married at 31 - but there's no need for child brides. Your (very sad) example doesn't seem quite relevant, to my mind.
The rekor project under sigstore is interesting in this regard: https://github.com/sigstore/rekor

Its listed as a signature transparency log, but they support some sort of custom manifest system, so you can set your own schema in your prefered format (xml, json, yaml) - the only thing is they require the manifest / material file is signed (I guess as it then brings a level of non-repudation). I am hoping someone works on an SBOM type.

I heard some of the in-toto folks are working on the project as well. This is a good step towards a SBOM recorded supply chain.
The web site 18xx.games
If the probability of winning was static I would agree that the evaluation function is (Or can be) a prediction of win probability.

However, because the probability of winning is clearly dynamic over time, trying to predict that probability is inherently a future prediction of the outcome (I.e. a forecast) rather than the prediction of a value.

In that case, it does not make sense to view the evaluation function as probability because a forecast is not the same thing as a probability.

I'm looking at this from the perspective of the game. From the perspective of any given state in isolation I agree that it makes perfect sense, but in the context of a game it doesn't.

This is why I think that plotting all these values on a chart together and calling it "win probability" is non-sensical. It does give you an idea of the game state, but it's not a probability.
Ha!

I’ve toyed through out the years that if I ever got a tattoo, it would be:

mov ax, 13h;

int 10h
I hear you. I may do something similar. Like buying cheap land and building a tiny house on it by hand. And eventually joining a co-living community in Austria.
What do you do for health insurance?
Doesn't something like FDA approval of medical systems already require this? I believe you're required to maintain a list, and risk analysis of third party software you incorporate into medical products: https://en.wikipedia.org/wiki/Software_of_unknown_pedigree
Win32 applications can also be sandboxed, when packaged as MSIX.

Windows 10X original roadmap was to merge both sandbox models, and it is also part of Project Reunion goals.
I'm hesitant to go into detail about this on HN because people on here will do their best to attack/criticise and there's not much to be gained from that.

The short version is that the last year's politics have uprooted a lot of beliefs I held formerly that are common in Europe (some examples: stereotyping Americans in certain ways, having the acceptable view on the Democrat/Republican divide, assuming that society will react proportionally to threats and consider the health of all people, assuming that Europe cares at all about what effects its policies have on less well-off parts of the world, the Russian government being evil and the sort of general European take of Europe being the "pinnacle of civilisation").

Happy to elaborate more in private if you're interested, but not in public (similarly, another effect of the last year is that I stopped using social media like Twitter).
Unless I knew the emails existed I would say "I have no idea what you're talking about, and I'm not interested in talking about it." But more succinctly, with just two words maybe. Something along the lines of "no comment". It's not possible for someone to have made even a cursory glance the history or ubiquity of the phrase "no comment" and honestly claim that it's either not a reasonable approach or not typically done. This just silly.
Pipes was the only example of the "no/low code" idea that ever made me believe that possible future was remotely feasible. I saw a fair few co-workers produce some really interesting things with Pipes, and many wouldn't have known where to begin if you sat them down in front of a Python prompt with lxml. Seeing them chain filters, mangle date formats and input types was really cool.

The screenshots in the linked article make me hope that similar tooling can rise again.
It means the developers are dogfooding their WASM support as Godot runs on top of its own engine.

Also excellent for ease of adoption with beginners due to zero install overhead.
Seconded. Today’s “narrow”applications are quite wide compared to the expert systems of decades ago. I wouldn’t say we are in a second AI winter when cool new applications of DNNs pop up frequently on HN.
Yeah, hard to say without knowing your situation. I suppose I try to maximize my daily rate and it's sometimes hard to find projects that are a good fit. If I worked more days, I could make more money. I used to make a lot more money, and be less happy. Also I moved from SV to cheaper cities in europe, so that helps me maintain a pretty awesome lifestyle. Trade offs.
This pretty much mirrors my experience word for word. It will be nice to get coworker interaction back when this is over, but I will miss the family time.

Another bonus: we have not gotten sick since the lockdown started. Previous years we'd average a cold every 2 months. (Whole family of course).
It's true that content publishers (music, books, video, academic papers, news, software, etc) are all being eliminated by the current disruption. The problem is that they added real value to the chain, and that value is also being eliminated.

The current trend towards heaping massive quantities of low-value undifferentiated product in a heap at the feet of the consuming masses is wonderful if your metric is quantity. By eliminating discoverability, accessibility, quality, and curation you can massively increase the quantitative choice of consumers. In theory the cost difference is either saved by the consumer or passed on to the creator.

In addition, eliminating the idea of capitalizing investment in content creation means far less investment in content creation. The marginal cost of copying is virtually free, but the cost of creating the first instance to be copied has not decreased.

I suspect what we're seeing is the first wave of restructuring: tearing down the old to create a vast swamp of crap. I expect a second wave to come in which the vacuum created by tearing down the old will be filled by new publishers and their ilk to provide the services of discoverability, acessibility, quality, and curation and the capitalization of content creation.
Because what we need to be expressing - and it would be better at a language level however that's done: is something that can be introspected reliably by the OS at runtime to create assurances about how data is used in the system.

We shouldn't need to put data in and then trust it doesn't somehow wind up being sent over the internet - we should be able to prove this before we put it in.

The system needed is something like SELinux for programs - data goes in and gets tagged that it's there, and before we do that whatever the trusted OS is prompting us for permissions for, it's actually proving the application will do.

Obviously this might not be a new language: abstracting out how files are used so applications go through trusted interfaces to do things is probably the better solution but the key is starting at user data first and being able to make positive assertions about what can't happen (in the absence of bugs in the enforcement mechanism obviously): i.e. "these personal photos can only be viewed by me, and be sent encrypted over the network to these classes of recipient encryption key" should be a reasonable policy statement we can enforce without needing to explicitly grant permissions to every app which wants to do something with photos.

If we can prove at runtime the app can't or won't be able violate policy, then we don't need to keep throwing "do you want to allow?" dialogs in the user's face and pretend we've done something useful for their security.

To my mind this ultimately requires us to have a runtime framework for tracking data provenance and entropy for what we feed into the system: at any given time we want the OS to have a good idea of where any set of data in an application came from, and how much entropy has been increased by transforms against it (i.e. taking the length of a file doesn't leak much data about it, but letting that be an unmitigated side-channel would be worse).

For example: the operation the user doesn't need to see is "this application is syncing your photos to your Google account". The operation they should be prompted for is "this application dumped a whole lot of data into a function we don't recognize, and the output data which we can see is tagged as possibly containing your photos, it now wants to send to this unknown IP address".
LakeFS: Git for data lakes. Branch, merge, revert on top of object storage
Geez, that site's cookie consent pop-up is several phone screens long, listing all manners of trackers..
Solution is different. Decriminalize software errors exploitation / hacking. Reliance on justice system is a fools' errand in a global economy anyway. There are two tiers of software operations. Global (FAANG etc) and local. First are rather good with security - because they pay attention. Local live in a fantasy world where people who should care are afraid to poke.

Incentives for local services (government, municipal, local companies) are misaligned. This is why their security is in such a bad shape and this is why they fail spectacularly.
Building a homeserver. Happened to grab a Zen 2 based minipc just before lockdown & chip shortage hit.

Also reading more
Kind of a mix of side projects and parties on the beach. Fewer parties this year but so it goes.
I have run the browser on a separate user account for years
Housing is cheaper when the economy is worse. See Berlin.
The Linux Desktop has failed already thanks to the endless fragmentation and religious attacks on drivers.

Even ChromeOS and Android only package the Linux kernel, while building their own userspace on top.

With the Web turning into ChromeOS, and the return of timesharing via the cloud, there is even less reasons to care about the GNU/Linux desktop.
F-150s are not F-350s.
That can already be implemented with sufficiently creative uses of the JVM sandboxing tech.
2.5*8
The author, according to the bio-data on the piece, is "the Founder/CEO of Digital Barriers—developing advanced surveillance solutions for defence, national security and counter-terrorism. "
It's ironic that he is lecturing us on privacy matters while developing surveillance solution at the same time.
So the median salary for people actually working is just over $100K for all levels of experience. Which means that basically half of employed software developers in the US make <$100K. Yes, it's above the norm but less than a lot of people seem to think is easy to get.
Language is just a tool to express a collection of ideas.

The reason programming is not an extension of our natural language is because we haven't included those concepts in our natural language yet.

The world would be way better off if everyone had better logic and analytical thinking ability
I’m 36 and followed a similar path “retiring” a few years ago to be a stay at home dad. I missed out on my daughters early years due to being a workaholic and didn’t want to do the same with my son. I failed to realise when I was young I can earn more money but never more time and memories built from a phone video suck.

I enjoy spending time doing work on the house and since we moved to [redacted] in 2018 I do a few small volunteer jobs such as teaching IT, programming, and helping people improve their conversational English at coffee meet-ups or picnics in the park. Nothing special as I’m not properly trained but it keeps me active and social.

I should probably look at making some money from it but I also don’t really care and like how it’s something I want to do rather than have to do because money is involved.
I learned from this article that there is a non-metric ton :(.

(The idea didn't even occur to me. The German school system taught me 1t=1000kg, and that's it.)
> We know some things are objectively better than the status quo. With attack surface as big as a modern browser or media player, not having sandboxing would be a mistake.

Absolutely. That's why the comment that makes you characterize me as a luddite explicitly referred to the "sandbox everything wave".

Sandboxing has its place. Sandboxing everything (i.e. the "Flatpak way") is what I'm commenting on.
If they were taught this kind of thing from an extremely young age in school every year these interviews would be trivial, Just like speaking your native language is trivial.
Can we stop with the environmental impact complaints of ethereum. ETH2 (Proof of Stake) is running and will be merged very very soon.
I’ve used Squid as a filtering proxy in the past. Unfortunately, I don’t have a Mac, but this:

https://dev.to/suntong/squid-proxy-and-ssl-interception-1oa4

- looks like it might be a useful guide for setting it up as an SSL proxy.
I like to imagine that it’s just one guy named Adam.
I wish I could do that but I only think this is possible by getting a job in the US or Switzerland. They’re both not easy to get if you’re not a citizen there.

There was even this Swiss recruiter that scours HN, but after he finds out you’re a recent college grad he vanishes. At least, in my case. Maybe not in other cases.
It's stupid at face value. No pyramid required. You cannot intrinsically link real world items to tokens. The source of truth is the real world, not the token.

Add an unlimited supply of unique things, and how could anyone expect to make money from this?
Happy 28th birthday to the NetBSD project
Smart people can be pretty stupid.
With good enough manipulation techniques you can make anyone do anything, so basically services can send LEO to groom undesirable citizen into committing a crime and then lock them up legally. It's just slightly more sophisticated than Soviets did.
> or use an outdated release their distribution ships.

And a good chunk of those people often would be just fine with that "outdated" version.
Mars Bar Rover Will Chase You Around a Store
In the southern US public schools I was taught there were three goals of criminal punishment. I provide the list as a data point, and not representative of my personal views. The list is provided in no particular order.

1. To deter future crimes. If something is punished heavily people will be more reluctant to do it.

2. To reform the criminal. Time spent in jail might provide people with the opportunity to ‘turn their life around’. This time spent will prevent the criminal from doing any future crimes in the outside world both while in jail and after their release.

3. To provide justice to the victims. If something was stolen then it must be returned. Knowing a murderer is caught/safe will provide some relief to the victims. Justice is important to a civil society.
Surely that's a poor implementation? The parent post's point still stands. Browsers are "good enough" a very broad range of games. There's ample evidence of this if you wanted to look.
True story: They already do. I know one company that forked Ruby, and would likely claim every library they run under it is thereby forked for the sake of reporting.