skysight-inc/HackerNews huggingface dataset:
Sort of. The quality of the data this tooling generates varies GREATLY among languages, build systems and environments. For packaged software like Solarwinds, sure you can try to run an SCA tool. But is anyone claiming an SBOM or SCA tool could have prevented that attack?

The bigger issue is services and hosted software. You can't crack open an API or website that stores your data to see what database they're using. You could ask that they publish an SBOM, but who knows if it's accurate.
Not blockchain tokens.

The interesting facets all come from the legal consequences of ignoring them, not the serial number or whatever.
At my employer, we have a company-wide database of which package is installed in which version on each machine (several ten thousands of them).

This allows the compliance department to follow known security issues, and they can then open tickets to the affected operating teams stating on which machines the software needs to be upgraded (or mitigations implemented), and they set deadlines based on vulnerability ratings. If the deadlines aren't meant, there's a hierarchical escalation.

In the case of the Equifax breach, such a mechanism might have helped. If the developers knew they had to update, but didn't, maybe the ticket from compliance would have given them the right nudge to actually do it.
Not everything has a business perspective. Sometimes people build things for fun or to learn something.
Most importantly, nobody wants to pay for anything on the web. Sad but true.
That seems totally reasonable. Progressive type safety is one of the major wins of Python IMO. I don't need type annotations to write some codemod script, certainly do to write a robust web service.
Forbes is one of those sites I've seen been anti-ad-blocker, and I haven't visited it in a couple years because it was just more hassle than it's worth. And yet, this page opened right up for me with no issue or pop-ups.

Firefox + uBlock Origin on Windows.
One thing I don't see talked about with reforestation, is that it's not enough to just plants trees. They are merely the most visible part of a forest, and alone die much quicker than when they are surrounded by all the constituents of a thriving forest: undergrowth, bushes, other types of trees, good soil, animals, bugs, etc.

Perhaps trees are just handy shorthand for "forest", but I think all the marketing pictures I've seen of reforestation projects are monoculture trees in rows, planted like a Christmas tree farm.
I don't get it. This doesn't have a pi in it, it's "pi compatible" ? Looks dangerously close to trademark infringement ? Maybe patent infringement? Why "pi compatible"? I suppose this means software not hardware since not same form factor and no I/o pins ?? Why not just say it's a linux machine? This is open source but pi is not ?
Ideally, not even getting the FD, but access to the data only (decrypted in flight)?
Agreed.

Widespread ability to read and write natural language seems to've, eventually, made written constitutions not so-much "viable" but "necessary".

It's easy to forget how innovative the U.S. Constitution was for being written, content aside.

https://en.wikipedia.org/wiki/List_of_national_constitutions

Definitely excited about the social implications of widespread ability to read and write executable language in the long run, note when France crossed 50% literacy though:

https://en.wikipedia.org/wiki/Literacy#/media/File:Illiterac...
I recently switched to Brave and have been quite happy with it. Their new syncV2 works pretty well. Plus, I get a perfect import of all chrome settings including extensions.
"1. To deter future crimes. If something is punished heavily people will be more reluctant to do it."

We know this doesnt work, we have been running this experiment in imperial britain for hundreds of years - in 1700 you would be hanged for stealing groceries. Executions were a public holiday, so everyone could see and be impressed.

It worked so well that while thiefs were being hanged, pickpockets cleared out wallets of the oblivious crowd watching.

Extra history has an excellent series that lends serious perspective on the subject:
https://youtu.be/XvMQY_y4qx8
It’s something I’m really keen to see. MyPyC can produce decent LLVM IR from basic python classes, to the point where accessing a builtin type attribute on an enum is just simple pointer without indirection. However that’s only one side of the python performance story, if people got into the habit of using Numpy arrays with MyPyC, python might actually be fast.
Ain't that the bitch of freedom?

You have to put up with what other people do with it.
It’s not so much that they ignore continental philosophy, but rather apply an analytic view to everything. Their articles on Nietzsche and Marx are like this.
We're already living with dedicated software companies having serious issues with their internal lifecycles and secure build processes. The concept of a SBOM isn't bad but any nontrivial end product is going to be pulling in orders of magnitude more component software than even large nested BOMs do, and no one is willing to pay to maintain what they have internally, much less read and act on that.

In principle, sure, but in immediate practice it would be like california forcing the labeling of basically everything as carcinogenic -- a step sort of in the right direction but mostly useless in practice.

The one thing that absolutely needs to be considered is not constructing it in a way that encourages private and unmaintained forks or requiring business contractual liability. Most of software only works as well as it does because there is so much really good open source to draw on.
hardly anything, old mellanox NICs are practically free on eBay, DACs and 10g optics are a pittance. Even DC 10g switching is cheap.
Franky, 100ge is within home budgets now.
> We have reviewed the evidence relevant to mouse mammary tumour viruses (MMTV) and human breast cancer. The prevalence of MMTV- like gene sequences is 15-fold higher in human breast cancer than in normal human breast tissue controls and is present in up to 40% of human breast cancers.

> The evidence with respect to MMTV being responsible for a subset of approximately 30–40% of human breast cancers in Western countries and 10–20% in Asian countries is compelling. An exception is the lack of detailed information about causal mechanisms.

A role for MMTV-like viruses in human breast cancer is highly likely.
Irish Whiskey Sets Record for the Most Expensive Whiskey Collection
Those are (a) very heavily regulated by definition and (b) means to an end, which is to create societal good, ie, foster innovation (I don’t want to argue whether that’s actually the case - I’m just taking the statu quo position)

Could one say the same about tokens?
> The generic dilemma is this: do you want slow programmers, slow compilers and bloated binaries, or slow execution times?

Now that the Go team has approved a design for generics, which of these did they choose? Or did they “somehow manage to avoid all three of these bad outcomes”?
This would be the end of open source software as we know it.
Indeed, even flying a small plane like a Cessna 172 or a Piper Warrior feels like that.
It _could_ be possible, although prohibitively expensive.

https://twitter.com/jonty/status/1372163423446917122 for more context.
you seem fun.
How can some planets be hotter than stars? We’ve started to unravel the mystery
trading?
AFAIK this is the desktop version compiled to WASM, not a completely separate project.
NFTs don’t sell ownership. They sell NFTs.

It’s like creating a contract that sells the contract itself. Then maybe you stamp a photo of Michael Jordan on the cover and call it a Michael Jordan contract, even though the contract doesn’t give the buyer any rights to anything Michael Jordan related, except the contract itself.

Then you can go out and make more Michael Jordan contracts, because there’s nothing in the first contract stopping you from making more.

So yes, actual ownership must be done with real physical contracts still if you want to enforce things in the real world. NFTs can only enforce things within the NFT itself, which is useless for real-world ownership.
Flatpak in theory vs flatpak in practice are different things, as you highlight yourself ("...does not use standard file choosers, file APIs, etc.").

Suddenly, it's now on app developer to support the packaging system and not the other way around.
I like to see OS capable of full auditable logs of

every app execution in the system (phone, mac, linux, windows)
every .so, .dll use by each app and their hash/datetime creation.

every files/dirs creation / write/read by which app
every socket bind and connect requests.
and other privilege operations

There should be virus total type check on all app/.so/.dll.

There should be allow/forbid LIST for exec,file/dir access/socket, privilege ops access similar to typical firewall software - Not just for net, but also for app execution and files access.

"Default allow", "Default forbid - with log/notification" fully under user control.

like selinux, but with much better UI/UX (web base, build on top of ebpf?)
Ask HN: Software developers who moved to contracting/freelancing
I started thinking of moving from a salaried developer to contracting gigs recently and would like to know what was it like for others who did it before.

From what I understand, I'd be talking to customers more than the average salaried developer and basically go from being a developer to a small business owner in a sense (so I have to take care of my own financing etc etc) which I'm totally fine with.

Can you please share any lessons learned for those who walked a similar path? and any pitfalls you wished you knew before?

Thank you!
> You cannot intrinsically link real world items to tokens. The source of truth is the real world, not the token.

This is also why every project do to X but with blockchain (like solving counterfeiting/authenticity, copyright, etc) is either stupid or a con using a buzzword to try and solicit investment or media attention.

The reason blockchains work for cryptocurrencies is because the source of truth is the blockchain itself. This breaks down in the real world where the state of the real world is the source of truth and you'd need a trusted, centralized entity to bridge the two worlds, but at this point why use a blockchain instead of a database if you're going to trust a single entity anyway?
It’s by the founder of graylog.
Israeli Researchers Have Grown an Embryo Outside the Womb
Switched to Papercups from Drift a few months ago. Really like how dead-simple it is and the fact that we can reply and resolve customer threads right in Slack.
Suppose I was someone with money to launder. I'd draw a cat's arse, and buy it with my anonymous BTC wallet "money". No one would ever know where the money come from, especially if I anonymise transactions with one of the many services (e.g.: from what i read, some buy mining services, pay with the dirty money and viola, "clean" coin, while other services just make thousands of transactions to distribute payments and lose one's trace).

If I wanted to be real clever, I'd buy Elon Musk's or Jack's NFT, and sell it for more because hey "it's made by someone popular" so its more credible.

That's one explanation I have for the crazy amount of money moving around NFTs. Sure there are naive people, or some genuine traders, swapping NFT but those are a small percentage, and as the quote goes:
"When you have eliminated the impossible, whatever remains, however improbable, must be the truth?". Literally 90% of the coins and NFT's i dug into have no application and look at least dodgy if not outright scammy.

I have no proof other than my observations, just adding my thoughts to the conversation. The "it's rare" and "non fungible" arguments don't really stand in my view. There is a ton of rare stuff out in the real world that's simply useless.
NFTs are not meant for physical items, they’re digital certificates.

People literally burnt a Banksy painting before auctioning its NFT.
Can you explain the correct version from your perspective? It doesn’t clarify anything if you just declare someone else incorrect but won’t say why.
They keep a blind eye on superyachts.
This extension to redirect AMP pages to their original HTML ones may be of interest.

https://www.daniel.priv.no/web-extensions/amp2html.html
You said, “I run cycles of listening, paraphrasing and then solutionizing almost every day.”

Sounds like you’ve got a good foundation. Just cut out the solutionizing step, replace it with sincere questions and affirming statements, and you’ll be golden!
The effect of web browser “Input Lag” in HTML5 games (2017)
Ah nm see it's using the pi module. Pretty cool project.
Is your friend making that money on a regular basis? Or just once during a market mania?
I imagine if you asked Musk he'd say the cameras and automatic braking will stop it hitting people though dunno how well that will work in practice.
Yeah, but it's not really about how effective it is, it's about feeling like you're saving the world. I'm not denying there is some sort of impact, but the main goal with things like this is to get on the bandwagon rather than actually have a meaningful impact.
Data on blockchain is too expensive. Or to be more exact blockchains people actually use or care about.
The answer to your final question is that it isn't in fact obvious to all, right?
Like where, North Korea?

Did you spend even 5 minutes thinking about what you just said?

Civilians rely on cops for instructions and directions.
Furthermore a cop can order around civilians under threat of force.

If a cop forces you to commit a crime and then jails you, they can extort you for money corruption will be through the roof.

Thats what we have in Russia, the security services are superbly corrupt and regularly extort people. At least there they are breaking the law while doing so. You are suggesting we make it legal here.
Yea, you can absolutely do that. The country I'm speaking about is Denmark.

The police can also break down your door without a warrant and use anything they find against you. Them having entered illegally may have consequences for their unemployment(though it won't), but the evidence is still admissible in court.
When my company upgrades to 3.8 or higher, I'll be happy to include as much typing as possible. I can't wait until I can refactor Python more easily, it's a huge pain right now.
indeed -- also hilarious that pointing out the clickbait gets downvotes.
Can you do all of those without emacs ? My point is that yes Emacs can do so many things, but 1) it's all accessible from Emacs only and 2) it uses Emacs-only components. This is fine if you live inside Emacs, but it doesn't really integrate with the rest of your system
Filecoin is a possibility here (based on and created by the IPFS folks)
Before I sign up for this feel good thing, does anyone know whether it makes any meaningful difference/is enough to make any kind of impact? From looking at CO2 levels, we will be reaching 1000 ug/m^3 in my lifetime (threshold for headaches and other health problems). At 2000 it becomes a serious health hazard. Would money be better spent lobbying for abolishing coal burning power plants and making agriculture more carbon friendly (from what I gather, the biggest contributors to atmospheric CO2)?
That was my thought on it. What easier way to launder money than with virtual items of arbitrary value? "Man pays thousands for bicycle tire" would raise many eyebrows. "Man pays thousands for NFT picture of bicycle tire" just makes people laugh and shake their heads.
*Cryptocurrencies
Reminds me of THX 1138. Pretty good dystopian future movie where people are essentially required to spend their paychecks on the way home after work.

Also reminds me of the harm done to society by allowing idiots to publish articles like this.

It’s kind of a fun game to take a random topic and argue how it harms society. You have to add arbitrary rules though or it’s too easy.
I've been experimenting with Qubes and it's the only OS I'm aware of that adequately addresses this issue. It's not usable for non-technical users though without a lot of learning/training and it can be a bit tedious to use sometimes.

I have all my personal data in its own isolated VM (Qube). I do all my browsing in another VM, which has its own home folder and no access to my personal VM. All my sensitive stuff like banking is done in its own VM. Every proprietary application gets its own VM (mainly Teamviewer and VS Code).

So if I do happen to run some program that's malicious, it has effectively zero access to anything sensitive unless it's aware of Qubes and knows how to break out of the hypervisor (non-trivial).
How is it a poor imitation ? What is lacking ? (I've never used any of those predecessors)
The two aren’t mutually exclusive and the roles change as the kid gets older.

When they’re newborns you are focused totally on providing: they can’t feed themselves, change their diapers, or bathe themselves.

When they get older they can do those things but then start having questions about the world and girls and faith. That’s when it really gets fun because you strengthen the bond.

So you’re always providing for the kid. Being there is the tougher part.
Here is a counterpoint, and I encourage anyone here to tell me where I am wrong:

Why have tabs at all? Are you really needing to save the state of the vast majority documents and their JS? The suspender says no.

Why not consider all windows in which you aren’t typing a document to have a very small state, such as scroll position. And even the ones where you ARE typing a document can save the form fields in an encrypted file.

No, what you basically are saving is the already loaded DOM. And what if browsers took a radical approach to it as they are doing to third party cookie and... removed everything except maybe the latest 10 documents.

Yes the latest accessed 10 documents would be actually in buffers. The rest would be UNLOADED and browsers would save the state of their textboxes or scrollig, and restore it once the “same” elements appeared. But mostly they’d enable this new API to save state beforeunload and restore it, and that’s it. It’s not even a new API, you should already be playing nice by using this event and not storing some crazy state. Sure, infinite scrolling thingies would be broken, and the caches of many images would be purged but so what. Users can MANUALLY mark sites where they really NEED the caches to grow so large.

Instead, index the text on ALL sites and give the user a way to search their history of all their titles and bodies of all sites, as easily as they search google.

Every time the user opens a new tab, what they’re really saying is “bookmark this current site”. But why should they even make those decisions to bookmark. You should be storing are their history locally (and making it searcheable and making encypted backups of it across all their browser sessions on all their personal devices).

That’s what the user really WANTS to do. It’s the same idea as “gmail search” had when Google first launched GMail versus ordering all your mail in hierarchical folders. Think about it!
This was my advice to someone: don't expect any returns. Do it as a fun experiment, not an investment

People piss away plenty going to casinos or clubs or amusement parks. So buy in with your for-fun budget, not your savings. Quit when it stops being fun
Main pain points:

- sometimes sites are built in a weird way and something like document download doesn't work, modals/content loading misbehave

- HomeDepot.com; about 30% of the time when I visit that site, I cannot successfully Add to Cart... why it works sometimes and not others is a great mystery!

- recently was working through a React/Redux tutorial and was put off that the developer assumed you were using Chrome in your development workflow (OK this isn't a typical browser usage pain point, but it lowered my opinion of the tutorial author...)

- reCaptcha is much more obnoxious when you're not a Chrome/Google user; no doubt the same tools you use to compartmentalize your online behavior to separate it from Google's prying eyes is why that tool is so cruel to Firefox users

- Gmail.com is painfully, dreadfully slow (I just use Thunderbird instead)
working from home.
Yes. a) is very heavily regulated by the chain/protocol used to make the tokens work and b) would be to introduce scarcity to digital items, which possibly creates good and fosters innovation (I similarly don't want to argue whether that will actually be the case) in fields which benefit from scarcity.
Reforestation actually means the restoration of the natural forest. If this consists of one type of tree, it can look like a monoculture. Reforestation organizations usually try to re-establish a diverse forest, as this is sustainably resistant to parasites and other environmental influences.
So they not only destroyed art, but also wasted energy on creating the NFT, adding to global warming.

If there's anything that's not absolute evil in all that, I fail to see it.
I stumbled across a pair of socks that were selling for converted 160MM USD worth of Ethereum.
Just in the last week, he started 2-3 weeks back I believe. I doubt the mania is going to last but this is a very low risk high reward market for artists.
This is really really cool. Congrats on the launch!

We're working on something similar as our non-profit project [1] built on the integration system for our browser. It will be a free service that lets you connect a few SaaS providers to start (Jira, Github, Gitlab, etc) and automatically plant trees (with some multiple). Stripe is also doing something similar at the payments level. [2]

Two things:

1. These threads always go to a "trees are just virtue signaling" conversation. I think focusing on the trees misses the forrest. Passive allocation of $$ towards good causes through these systems will help teams get involved and associate it directly with their work. This sort of thing is good and feels good. We can focus on better allocation and give people options in the future.

2. There are millions of issues/tasks/sales/PRs/etc closed every day and all of them have a real monetary value for orgs. Im sure we can capture a real % of that. It also moves social responsibility out of closed departments to having everyone in teams involved and contributing frequently and effortlessly. Its exciting!

P.S. I wouldn't normally share this sort of thing on another Show HN but I think we're probably 100% aligned in our goals of getting donations to projects that need it. If I can help in anyway or you'd like to get involved with any of this please email me parham@cloudsynth.com :)

[1] https://cloudsynth.com/social-impact/trees
[2] https://stripe.com/climate
No. Entrapment in the US means they push you into doing something you weren’t inclined to do.

A cop saying “I’m a cop and you have to smash this window or someone will die!” is indeed a form of it, but there are others.

An undercover cop who pushes and prods and begs you to get them some pot until you give in is entrapment, even if they never reveal they’re a cop.
People definitely aren't paying a lot for wedding photography because they think they can resell their wedding photos later for much more than they paid for the photography. And if they were, we'd think they were making a pretty strange mistake. Instead, they actually want the photography to exist that wouldn't otherwise exist if someone didn't make it.

Not at all clear that's true with much NFT.
Whoops! Thank you. :) Fixed.
As usual, https://xkcd.com/2347/

The contributors to oss are in a tricky spot. Look at what happened with AWS forking Elasticsearch, sure there were reasons, but it seems like there's a gap in the licenses at the moment, that doesn't account for the scale things like ssl play in modern life.
Whatever legal terms you'd use, you'd want to aim to not scare small companies in the hope of anchoring a income stream when the scale and find our the oss clause kicks in.
Haha sorry to disappoint :P