skysight-inc/HackerNews huggingface dataset:
Snap/Flatpak are not doing it because that's not the layer which "does it". They provide the framework which allows since sandboxing today and will provide better sandboxing tomorrow. It's up to the app distributors to support it or not. We won't get full support immediately either.

It may be too hard today. But that's less "Flatpak is a security nightmare" and more "we're not using the features we have very well yet". I feel like some people expected 100% targeted profile for each app or will declare sandboxing a failure. This stuff will take years.
Show HN: Trim and Put Text Overlay and Upload onto TikTok, 1 line of Python code
You apparently didn’t read the parent: “ I'm sure the same model can be applied to Linux.” I was replying to that, so perhaps your reply belongs one level up. I read the parent as “all next-gen packaging formats should adopt this pattern” and envisioned a hell where said packages are the only way to get new software, if any of them gains enough traction. I already know of a few packages I depend on which are only officially packaged as snaps - I’ve had to find alternatives or look into compiling from source (not always feasible - I don’t have a ton of time to tinker anymore).
With today's tech, it doesn't make sense. I'll try to explain:

> consumer grade compute

Non-ECC compute is a no go from start. You won't believe how computers make mistakes when they're driven to their limits. Even with good cooling, frying RAM, CPUs and ethernet gear is ordinary events.

> local storage

Consumer grade HDDs are slow. SAS is not consumer grade. Consumer grade SSDs cannot handle the write cycles. The ones which can handle neither cheap nor consumer grade.

> internal networking

Gigabit ethernet is cheap but, is not fast enough anymore. 10Gig+, Infiniband and other stuff needs reliable high bandwidth PCIe, which is not in abdunance in consumer grade hardware.

You need more lanes, then we come to next point.

> Most applications that run on AWS and GCP don’t really need that premium Xeon/EPYC CPUs

Server CPUs are not about processing power all the time. Reliability, PCIe lanes, expansion and advanced virtualization which allows that high performance network to be connected in abundance and shared between VMs without performance penalties. So you can scale the number of jobs running on less hardware in smaller spaces.

> enterprise-grade storage that is 10X the cost of consumer grade drives.

Again, it's not about performance but about reliability at least half the time. Performance is required to be able to scale, not for independent jobs.
I bought some plants.
BxJS Weekly: Weekly JavaScript News
Isn’t reliability a huge deal for servers thou? There must be stats on hardware failure rates where the cloud provider cpus should have significantly less failure rates than consumer grade ones, I’m going to guess that that’s gotta be a trade off. Consumer CPUs clock faster but the thermal controls are dependent on a single machine, where as the data center has to deal with packed server farms, thus sacrificing performance for long term thermal management.
This. This allows sensitive data to never leave the storage layer.
I find wikipedia articles extremely poor on philosophy.

SEP is without a doubt the primary resource.
CutiePi – A Raspberry Pi 4 tablet
Title is from the shop page[0], which has lesser information.

[0]: https://shop.cutiepi.io/products/cutiepi-tablet
things_that_have_been_said_since_2017_but_have_not_happened.txt
The research at Los Alamos that Geoffrey West has summarized most recently in his book Scale demonstrates different dynamics are at work. Creatures and companies grow and age and die. Cities are a completely different construct. Rome and Londinium are both still large and influential. Two particularly stark demonstrations of this effect are Hiroshima and Nagasaki both of which were wiped off the map with nukes yet in roughly 30 years were back to being thriving urban conurbations. Times change, but influence remains more consistent than most expect. The startup scenes in Detroit and Cleveland are other examples of boom towns that were written off yet remain significant contributors.
Meta, web page implementation note, in the hope that someone at AnandTech will pick it up (or that anyone else can learn from it):

The many-in-one diagrams let you switch between different diagrams by clicking on a label. However, the technique that has been used is inferior, making it not obvious (difficult to find), a bit more difficult for touch input, and impossible for users of accessibility tools or those not executing JavaScript.

Here’s roughly how it’s implemented:

<td onclick="document.getElementById('destroyer_bar').src = 'http://images.anandtech.com/graphs/graph16505/destroyer-power.png'">…</td>

The most important problem with this is that the table cell can be clicked on, but can’t be focused. You should roughly never have a click handler on a non-focusable element, focusable meaning elements like <a href>, <button>, <details><summary> or something with a tabindex="0" attribute. (But note that just adding tabindex="0" would not be sufficient, because onclick wouldn’t be triggered on pressing the Enter key. On links and buttons it does, because onclick is a misnomer for them, firing on activation rather than mouse click.)

This would be far better markup, probably paired with style adjustments to shift the table cell padding to the anchor, and making that anchor `display: block`:

<td><a target="_blank" href="http://images.anandtech.com/graphs/graph16505/destroyer-power.png" onclick="document.getElementById('destroyer_bar').src = this.href; return false">…</a></td>

That way, (a) the link works without JavaScript, opening the requested diagram in a new window; (b) with JavaScript, it behaves as previously, except that it’s now focusable, so users of screen readers can interact with it; (c) as a link, it’s more discoverable (e.g. hover and it’s obviously interactive, where with the current one, I was just guessing based on the framing that maybe it was interactive despite all the signs telling me it was just text); (d) as a link, tapping on a touch screen will work more reliably (the browser will be more inclined to interpret a tap that moved slightly as a click rather than panning).

One other thing I just noted: them http: URLs should be https:.
That confused me as well. The Mode 13h graphics framebuffer is at address A000:0000. How does this program get that value?

The key is the LES AX,[BX] opcode. BX is initialized to 0 by DOS, and the "Set video mode" BIOS call preserves BX's value. So the LES opcode sets ES:AX by reading a dword from DS:0.

What's there? A COM file is a single-segment program, so DS equals CS, and the code segment starts with the Program Segment Prefix. (The actual code is loaded at offset 100h.) So it loads the first two words of the PSP. What are those?

The first word is an "INT 20h" instruction, 20CDh, for compatibility with CP/M.

The second word is the segment number of the end of the memory allocated for the program. But DOS always allocates all memory to COM programs, so this will be 0x9FFF (assuming you have a full 640K conventional memory installed).

So ES:AX is set to 9FFF:20CD. And with x86 segmented memory 9FFF:0010 equals A000:0000.
For my part, I'm waiting for a convenient way to combine mypy and numpy. Numpy 1.20 started using type annotations in the most trivial way, but it's a start.
> Desktop users want the newest version of their UI apps and don't care so much about stability.

[Citation needed]. Can you imagine telling this to someone who is about to present on a conference call, but zoom updated automatically and fails to start now?
Exactly, I couldn’t even find a way to turn it off. Anyone could figure it out?

Edit, apparently Forbes doesn’t think mobile Safari on a modern mid screen device is important enough to make sure the option bar on the bottom renders ok. The buttons were hidden by their mobile view. Excellent dark pattern forbes!
Twitter Turns 15
Beeple did pretty well
Is it easy to even identify a remarkable trait, let alone copy it? Here, try this: tell me what's remarkable about warren buffett and then what I should copy?
Also, characteristics, not traits? Lastly, this is a very strange (to me) ethic to advocate when viewed through the lens of individualism. Is the idea here self improvement?
I wrote my first Fortran program in 1969. I have been active in the field of computing since then, both as an academic and as a programmer in industry. During this time, there have been several times when I first heard about something new, something potentially game changing. I remember some of them very clearly:

1. Around 1971: a Wang desktop computer. Imagine: a computer that fit on a desk!

2. Visicalc (spreadsheet). Wow! I remember thinking finally, a breakthrough for non-programmers.

3. Relational databases.

4. UUCP - a way to talk to remote computers.

5. HTML/HTTP - we knew from the start that this was big

And then there were many that were hyped but which I rejected as hype. Even when I was wrong, I still felt that there was something intrinsically wrong about this category of things.

These things either vanished, limped along (and still do), or which I rejected out of hand, but actually succeeded. Like Virtual Reality (back in about 1984), Fuzzy Logic, Proving programs correct, and, of course Bitcoin.

The latest in this category are NFTs which my intuition tells me is rubbish on so many levels. However, I think they will have some success, although I will never have anything to do with them (or Bitcoin for that matter).
So, can you provide "good enough" games with "good implementations" that are somewhat popular?
Maintainer here! That's exactly the idea. We're working with intoto and others to get metadata that we can actually verify, directly from build systems.

Rekor is a place to put and find that metadata that's globally visible and can't be tampered with.

We're hoping to add support for the ITE-6 in-toto link format soon, which I see as kind of like an SBOM that can be produced directly from your build system.
The farmers who make more money from the slavery aspect rather than the cocoa itself will move on to other crops.
The article complains about gas fees, how will they change after ETH2?
"Immediate perception" is a simulation, or more precisely, a reconstruction.

The measurement systems which interact with your body (light, sound, etc.) are woefully lacking in information. You use prior learned environmental models to reconstruct the environment, where the sensory stimulation merely resolves between models.
"Why be happy when you can be interesting" -- Slavoj Žižek

https://www.youtube.com/watch?v=U88jj6PSD7w
Without reading the article, I can imagine that listing the components of a technological product (i.e., an SBOM) is a _first step_ towards the goal of solving all those problems. Once you have a standardized way of communicating what a software product is made of, you can start thinking of automatically upgrading dependencies (Maven's pom.xml does this to some extent, and Dependabot and Renovatebot leverage this semi-standard to automatically upgrade your dependencies). If you take this one step (or two steps) further, you can start to automatically rebuild the code, automatically deploy the code, patch running systems, detect when CVEs are actively being abused, and so on. Basically, automate the heck out of this so that the "they just didn't do it" will not happen. And for automation, you need standards.
> Governments are starved of revenue by giant companies that have mastered the art of tax avoidance.

Your rebuttal appears to miss the point that O'Reilly makes.

First: This page [1] shows business tax is about 1B of 6B total for San Francisco. In most cities in the United States, business tax is a relatively small part of total tax revenue. Most cities derive the largest proportion of tax revenue from property taxes. For SF, it is 2B per year -- the highest of any tax revenue category. SF property prices have risen a lot in the last ten years, so property tax has also risen. I understand some of this could be attributed to a strong economy combined with difficult regulations to build new residential housing. Thus, SF has seen a historic rise in housing prices.

Second: Speaking more specifically to O'Reilly's point about the "art of tax avoidance": Are you familiar with "base erosion and profit shifting (BEPS)"? Sometimes you hear the term "Dutch Sandwich" or "Double Irish arrangement" in media. Global (tech) companies can greatly reduce national taxes by using these tax strategies. Thus, they deny much needed tax revenue to various countries where they operate. Please note: These tax strategies are not only limited to tech. Any industry that is heavily weighted towards "intellectual property", such as pharma, uses similar tax strategies. (General Electric was one of the earliest and most aggressive.) Famously, even Starbucks, which isn't a very "IP intense" industry managed to pay zero national taxes in the UK one year. After some embarrassing news stories, they offered a voluntary payment to the UK nat'l gov't.

[1] https://sfgov.org/scorecards//finance/expenditures-and-reven...
I am far away from being a dad but curious, how do you balance "providing for your kid" and "being there for your kid"?
NFTs are paying for a signature in a blockchain that links to a random URL. If you're lucky, it's IPFS and it'll go down when people stop hosting it. If you're slightly less lucky, it's whatever platform you went through that's operating an IPFS tunnel because cryptobros can't figure it out, and it will go down whenever your flavor or the month NFT site goes out of business, which is any time between six months and 5 years. IF you're even less unlucky, it's just a random link to a website, and I can't wait for people's art to be replaced with penises because that's what happens to hotlinkers.
Where do you guys get monies for all that?
For some reason I thought I shouldn’t include docker because it’s not running docker
This is mostly not to do with societies evolving and all to do with technology and science making certain jobs unnecessary. In some cases, like the English banning slavery across their Empire, where moral prerequisites were genuinely enforced, but even that was from a wealthy perspective (i.e. those setting the laws weren't directly affected by their enacting).
The birth of our child was the greatest contributor to both happiness and stress for my wife and myself. Everything else that happened last year is inconsequential in comparison to that.
Not really ironic.

It is not like is Zuckerberg collecting "dumb **s'" data while having a dummy plug into his 3.5mm laptop port. That is hypocrisy.

This is just good advice.
Garden. I planted a ton of veggies in 3 raised beds and really enjoyed caring for the garden and picking fresh food. I wouldn’t say it was cheaper than the grocery, but probably cheaper than therapy. I code from a home office, so the green time was great for headspace and breaks.
Ironic coming from a website like fstoppers. What exactly is the "value" of fine art photography ? Why do people pay exorbitant amounts for basically a few hours of photos during their wedding, given that a wedding might end up divorce ?
People pay for whatever has "intrinsic" value to them. If Digitally generated/cryptographic art is it, so be it.
I mean doesn't that give him some level of knowledge?
I wish it was possible to use USB devices directly inside WSL e.g. for embedded development. I believe there are "tricks" like using USB over LAN, but I have not tried it yet. Once they make possible to use USB devices natively I'll be over the moon.
The only situation I see NFTs making sense is if there’s a virtual reality social network bigger than Facebook.

In that scenario perhaps. Then again even in that scenario blockchains are unnecessary.
Nifty but also likely against ToS, given there is an API key tacked onto the request to clients6.google.com.

Also this information is available publicly using googleapis.com/drive/{v2,v3}/files/fileId
Disabling JavaScript should work.
Mostly agree, but 'value' is a social construct, and as long as there is a subsequent rube, then NFTs will be NiFTy.
Google makes money off your data and spies on everything you do, more at 11
Using Firebox and uBlock origin and didn't see any prompts.
Law enforcement agents only stepped in after the perpetrator had been committing crimes online for a long time. From the article:

> As far back as 2016, the account with that moniker bought names, addresses, dates of birth, and Social Security numbers on the underground marketplaces that traffic in illicit online goods. He took that personal info to open banking accounts in the names of unwitting strangers, and used those accounts to make trades based on insider information he gleaned from others

The reason they do things like sell fake information is that they need to engage with the person, who is already committing these crimes on their own, in some way that produces the least amount of additional criminal activity. Hence the fake info sale and then the purchase of real into, both of which the guy was advertising online before the agents engaged him.

This isn’t entrapment. He was advertising illegal services by his own choosing. The police didn’t make him do these crimes on the dark web (before they even got involved). They simply engaged with him as another one of his dark web customers to build a case.
There's a browser extension, if you truly don't care

https://www.i-dont-care-about-cookies.eu/
You can, in fact, crack open the binaries and look at what's inside. The field of tooling for it is called SCA (software composition analysis).
Voss' "radical empathy" is not faking emotions. It's a communication technique.

Choose to drop your preconceptions. Hear what the other person is really saying. Increase likelihood of a successful negotiation.
In western philosophy there was a divergence in both in style, lexicon, and method in the early 20th century that was exasperated by the two world wars. They share common ancestors (Kant basically), but to a certain extent are mutually incomprehensible (an exaggeration, but not exactly untrue). The philosophical world basically divides into Anglophone philosophy (the dominant flavour worldwide) vs everything else which cannot be neatly categorized into a single brand.

Also, while there are non-western traditions none of them have the same degree of professionalisation and size (in terms of practitioners) as western philosophy. Some western philosophers would question whether all that many that do exist are doing the same activity - a curator/historian of philosophy or culture, vs actual philosophers trying to produce original work (again, broad strokes and exaggeration).
In some ways, things are better there on Windows here, because of code signing - if something isn't code-signed, you get a more prominent warning. I often wish for something like this on Linux (and it would have to be easy to use - no compiling your own kernel with additional modules for example).

It's really not easy to get a code signing certificate fraudulently (or to steal someone else's), but of course, there are some issues with code signing: for example, certificates are relatively expensive, so very few OSS/free software projects sign binaries.
So basically: NFTs are a scam since the early adopters are not very good artists. And there is no unique value in them since its just Pepe memes, which are stupid to be NFTed, since it's just Gifs?

Oh and let's not forget about the Ethereum fees and how shitty the tech is.

This really reminds me on how everybody perceived internet in early noughties, when everybody was telling me it's shit and it will never ammount to anything.

Man they were right, there was literally no value, just like there couldn't be value in standardized mode of exchange for digital goods - it doesn't have to be Pepe GIFs only.
So not the EU obviously but in the UK, or London at the very least, I don't know of a single white collar worker where much-increased WFH won't be the norm. I'm not just talking tech but banking, law and so on.

We do indeed seem to be far ahead of our European neighbours in this regard from what I'm seeing.
What is softer.io redirects me to some parked domain
Does anyone have suggestions for mobile browser?

My best bet right now is duckduckgo privacy browser, but I do not like the fact that it is locking me in their search engine.
Ask HN: Help. Cloudflare may be enabling targeted extortion unwittingly
2 months ago, a family member (henceforth "FM") reached out for help. They Googled their name, and were shocked to see obscene results on the first page. FM's name is unique, they have little online presence, and mostly private social media. So, these results appear on the first page.

All URL contents had the exact same layout, and gibberish/generated content that bear no relation to the search result. Plus, a misleading banner at the top that does nothing but redirect the user to a porn site if clicked. All served via Cloudflare. All were in the format https://<domain>/<non-sensical word>

I reached out to Google removals, citing defamatory listings. They provided spam report URLs which I used. This was weeks ago, no change.

Namecheap was useless.

However, when submitting a report to Cloudflare, I was informed that the report would be forwarded to the hosting provider. It gave me the option to do so anonymously (which I did).

A week or so later, FM forwards me an email stating someone has attempted to log into their Facebook. FM has also received many calls on WhatsApp which they blocked, all from Nigeria.

The only explanation I can surmise: these actors have purchased names/emails from a data breach, generated keyed combinations of <domain>/<non-sensical word> mapped to individuals. So, with a given URL, they can identify exactly who submitted the complaint.

Assuming Cloudflare forwarded the reports with full URLs, it made my FM a target. These actors now have the name of a person who is wanting to protect their online reputation, and can reach out to make an offer to "remove" the content.

This is the only explanation I have. I will admit that I have no proof, only inference. FM is concerned that these results may negatively affect employment prospects, and I'm looking to help them as best I can.

Is this an extortion approach anyone has seen before? What can we do here? How do we get these results de-listed, and these sites shut down?
If you're thinking that the purpose of NFTs is to link real world items to tokens, you have a very weird view and would do you better to continue reading up on NFTs.

In its most basic form, a NFT is simply a cryptocurrency token with the total supply of 1. Nothing more, nothing less. Anyone claiming anything else clearly don't know what they are talking about. The source of truth is the token, as it's only about the token.
More Women in High-Status Jobs, Few Women in Things-Oriented Jobs
A Tool to Convert All Your Medium Posts to a Gatsby Blog in 5min
"What is this 'JavaScript' of which you speak?" asked Lynx.
Starting a strict workout routine. I could see/feel effects after a few weeks. Can't do this kind of workout anymore since the lockdown in my country, but really looking forward to getting back at it once it's allowed again.
This is the sort of thing that scares me about Linux:

> Andrew Morton took a look and was worried by what he saw:

> Geeze it's a lot of noise. More things to remember and we'll forever have a mismash of `page' and `folio' and code everywhere converting from one to the other. Ongoing addition of folio accessors/manipulators to overlay the existing page accessors/manipulators, etc.

> It's unclear to me that it's all really worth it.

It's worth it, dude. That there are people working on the kernel who aren't terrified of the current situation is genuinely worrying.
Beeple’s business partner bought the NFT. We have no idea how much went to Beeple. All we know if Christie’s got $9 million.