skysight-inc/HackerNews huggingface dataset:
So how did they start using chatting to their friends with their current chat service in the first place? By that logic, few people would ever leave IRC or Skype or whatever they started using first. Users move, they just don't move for privacy. The fact that proselytization is even required to move to Signal is telling.

Everyone has time and ability to make their own choices with like-minded friends. They do it for everything else, that's how they started using WhatsApp and co in the first place. Their claims to caring about privacy are as convincing as a friend who keeps telling you "sorry, I'm too busy", "another time then?", "maybe", repeated ad nauseam. Then you see them at another party with someone else confusingly named "WhatsApp" and you realize they just couldn't make time for you, who is named "Signal".

Again, look at how quickly users switch when a service requires payment (IIRC WhatsApp did try to do this once and a lot of users chose to leave instead of paying). They're just too busy & helpless, right? How much proselytization did that take?
GP's point is that this should not be considered a constitutionally valid warrant, even if a judge granted it.
Scientific American is one of the most-respected science magazines for the intelligent layperson (non-professional) and has been for close to two centuries.

When 13,000+ scientists publicly get on-board with something, people had damned-well better pay attention. If you disagree, you'd better have some extremely convincing evidence.
> and doesn't spread it further to anyone without their full awareness and explicit consent.

Agreed, but which is impossible to actually control.
I recently upgraded from a 10 year old Lenovo W520 to a System76 Lemur Pro, and have been extremely pleased with the purchase. It is lightweight (~2 lbs); software is fast, responsive, and free of bloat; chassis feels robust; specs are above average for the ultra book category (40GB RAM and 2 NVMe drives); good battery life (around 6 hours real world use); and good online documentation. Overall, I would highly recommend, and I am excited to see what direction they continue to go in as a company.
> And what happens if they break something while patching the exploits?

Probably the same thing that happens when officers injure people or damage property in the course of executing a warrant (which is quite common). In short, either the victim is rich and/or outraged enough to venture a lawsuit against the relevant agency or they just file insurance claims and hope for the best.

I wouldn't be surprised if part of the reasoning for signing off on this action was that the risk of damage was considerably lower than what is routinely understood to be part and parcel of executing search warrants.
Why a Plan to Encourage Search-Engine Competition Failed
The Miraculous Measurement of the Muon
I hear 70% of all internet traffic goes through us-east-1
What CPU Names Mean
Actually, according to the brief they actually didn’t patch the servers, but only removed the web shell: “This operation was successful in copying and removing those web shells. However, it did not patch any Microsoft Exchange Server zero-day vulnerabilities or search for or remove any additional malware or hacking tools that hacking groups may have placed on victim networks by exploiting the web shells.”
Then everybody can have two accounts, Rx and Tx, right?

What is the problem then?

It would all be nicely wrapped in a fun and convenient app.

Having separate accounts allows you to immediately know how much tax you need to pay, it'll be just a fraction of your Rx account.
> Deno glue code around V8 is written in Rust.

The C++ V8 api is very reasonable to be used in a safe way. So i dont see this as a good point unless of course for people that wan to write some parts that need to be optimized in Rust.

Don't deal with NodeJs that much, but is a lot of node functionality in C++ modules? and if so they are presenting a lot of security bugs in a way that Rust might see appealing?

Because by not having direct access to the V8 api in its native language might limit you, the "glue coder", in the things you really can do.
Or if they just followed the plan for this exact scenario that was handed to them by the last administration, if we're talking about the US, where more than half a million people died preventable deaths.

I'd argue that the "response" at the Federal level was a massive under-reaction. Months of denial didn't seem to work out so well.
For laptops/smaller desktop screens, the taller ratio definitely makes sense, although for laptops it makes for some form factor challenges in terms of overall and perceived size.

For larger desktop screens, I definitely prefer the aspect ratio most closely matching full screen video. And for my comically large (43”) monitor, I couldn’t use the extra vertical space if I tried. Reducing the width would just limit my usable horizontal space and shrink video for my dual purpose TV use.

> Same goes with glare and non-glare

On this I’d also distinguish portable/desktop use cases. And weirdly they’re the opposite of what I’d prefer. It’s almost impossible for me to find large screen glass-front monitors with the contrast and color space benefits that come with that. And portable usage definitely benefits more from glare protection.
17th-century pirates might have stashed Middle Eastern coins in New England
It would consume more power too.

It's remarkable that AMD can even compete despite not having access to 5nm like the M1 does.

I'm very excited for the near future of 5nm AMD laptops. Even more for 3nm.
I just listed my old mac on eBay yesterday. It's from 2015. Absolutely would not bother with any other laptop.
Are you kidding me? SSD?

In 2012, 4-5 days after the purchase of my first and last MacBook Air, they gave me a quote that was half the price of the new MBA when a key cap just popped out. I literally was using it and it popped out.

Their reasoning: physical damage + (this is the kicker) in Air there’s no provision to repair the key or key cap, entire lower board/chassis needs to be replaced.

Yes just a key cap! I shouted to customer support. It was replaced. I decided I am not paying for another fruit company laptop. (In their defence they tried to pull this off in a country with pretty much no or no accessible consumer protection)
Well, it's WebAssembly, so there can't possibly be any exploits!
Why not just use sed?
Building a Powerful ASCII Game Engine for the Browser
Current request latency is also the read latency (from lambda function -> db). I should have been more clear on that.
You have misunderstood me: I don't want them patching systems; I don't want them touching systems that aren't theirs at all.

It's illegal for a reason. They committed the same crime by removing the web shells as was committed by the person who placed them there. (Who can put them right back.)
Being sick, especially recently, makes you less healthy and more susceptible to all kinds of viruses?
A friend of mine and I do this regularly.
Well the most obvious thought is if it doesn't go perfectly - server is compromised but works, feds patch it, patch breaks it in some unforseen way.
Sorry to hear that. I've had a Surface Book, SB2, SB3, and looking forward to Surface Book 4 and Duo 2. The moment I got my original Surface Book, I felt like it was "the future" of laptops. I know the price tag puts a lot of people off, but it's essentially a tablet and a laptop in one device.

Not sure I could live without mine.
I’m confused. Why would water proofing be less applicable to a (or their) laptop products?
Interesting, I’m not too worried about it right now though.
I'm in the same boat. I've been doing other stuff, buddy startup consulting that doesn't lend itself to resume padding. And now my resume looks stale and that I've been out of it, when I haven't.

Self-taught Pascal at 12. Then x86 assembly, C, C++ and so on. I have a BS EE/CS degree, could've done PhD but stopped. Typically do work now like AWS architecture, full-stack team lead, Sr. SRE/Production Engineer.

I've been living on savings for ~ 7 years between contracts that paid the bills for little time investment, but I'm at the point where a J O B would be a more stable source of income and increase daily focus. I do have a pending interview with a FAANG, but I'm wondering if the resume staleness or that fact I nuked my social media and antiquated LinkedIn is going to hurt too. I had a verbal offer from a startup interview via HN "who needs a job" but it was a scam for free brain picking when I could use a real job and the money now.
Five things I learned after solving 500 leetcode questions
I looked closely and read it thrice to see under what authority the judiciary claimed to use in making this order.

The word warrant does not appear on that webpage.
Absolutely true. So many are unable!

That's a big contributor to why I won't blame people for playing it differently.
I was just being a little sloppy in what I wrote. I meant you can encounter ambiguities in the language when you start using -a/-o or (). I didn't mean those particular examples' parse trees are ambiguous.
Willpower fits into that feedback loop as the neocortex's credibility to the hindbrain. Having an abstract goal is going against the grain of your learned routine. When you're expending energy on something new, at some point you get a gut check saying "Don't bother, what we were doing before was fine".
The authorities actually have wide latitude... there was one case where a house was destroyed in pursuit of a fugitive, LegalEagle did a whole show on it: https://youtu.be/Dk8QO6jE5dA
> Does it have potential as a safer, lightweight Electron alternative? Or are there better options than Deno in that regard?

If they target this, the big chunk of code will still be the same ones on Electron, so i don't think it would get to be safer or lightweight as compared to Electron.
I'm learning to just downvote and not respond to troll bait, slowly. And I got my upvote points past the point where I can set the color of the title bar so I don't care about those any more which helps.
The UK implementation of ePD is a pretty strict application, only allowing 2 grounds to use a "cookie" (note that means other identifiers like session identifiers, although everyone says cookie.

One grounds is necessity to deliver the packets to you (IP address can be used to route a reply back to you in TCP/IP), and the other grounds is to deliver a feature you explicitly request, and can't be done otherwise (adding an item to your shopping basket, for example).

Neither lets you go beyond functionality, so use of a TLS session identifier to me would be a straightforward breach, if the purpose was anything beyond basic connection setup. At that point, informed, explicit, specific, opt-in consent is required. And contrary to all the illegal cookie walls, you can't require or presume this consent - that isn't consent!
Google will find a way to punish other browsers in the same way they punish browsers like Epiphany or Falkon: by locking users out of Google properties for "security" reasons.
FCC finally starts tackling America's robocall scourge
I'd be worried about offering storage to random people, but what kind of compute are you worried about doing? I guess someone could use this as a kind of proxy, right? Like have your system perform some attack or send some communication.
Interesting. They're violating their own CFAA law (accessing a computer without authorization or exceeding the access granted) to remove web shells. Legally, this is hacking. Which means that the FBI just hacked a bunch of Exchange servers to clean them.

So the message here is, if you don't clean up your act and you're on a USA network, we'll do it for you without your permission.

The beef is at the end of the article:

This operation was successful in copying and removing those web shells. However, it did not patch any Microsoft Exchange Server zero-day vulnerabilities or search for or remove any additional malware or hacking tools that hacking groups may have placed on victim networks by exploiting the web shells. The Department strongly encourages network defenders to review Microsoft’s remediation guidance and the March 10 Joint Advisory for further guidance on detection and patching.

The FBI is attempting to provide notice of the court-authorized operation to all owners or operators of the computers from which it removed the hacking group’s web shells. For those victims with publicly available contact information, the FBI will send an e-mail message from an official FBI e-mail account (@FBI.gov) notifying the victim of the search. For those victims whose contact information is not publicly available, the FBI will send an e-mail message from the same FBI e-mail account to providers (such as a victim’s ISP) who are believed to have that contact information and ask them to provide notice to the victim.

If you believe you have a compromised computer running Microsoft Exchange Server, please contact your local FBI Field Office for assistance. The FBI continues to conduct a thorough and methodical investigation into this cyber incident.
I was actually considering it a lack of courage: that Apple is so insecure and concerned with its own lack of or zero innovation in last decade or so that it forces its customers to keep buying costly new devices and keep getting costly repairs by means like making devices unrepairable (e.g. literally using a new pin configuration in every other MacBook SSD which are non standard to start with), making devices breakable (glass backs?) etc.
Why is MobileCoin a scam? Please elaborate.

I’m assuming your content is specific to MobileCoin and not about all cryptos in general..
The real question is, why do they have to have a sworn enemy? Its not like israel is going to invade them.
Fire Me, I Beg You
Thanks! I couldn't find the warrant before but that string was enough to locate it: https://www.justice.gov/opa/press-release/file/1386631/downl...
They used the word "supposed", not "can't". There are better arguments for what you're trying to convey.
No wonder banks refuse to lend to most startups!
You can muck around alternate data streams like a classic resource fork of a file on macOS by appending

/..namedfork/rsrc

to the file name.

ls ./groovyFontFile/..namedfork/rsrc

https://stackoverflow.com/a/42216808/8878480

I've tried it with ancient font suitcases -- the ones that pre-date dfont (data fork only) fonts.

It's somewhat ironic that all desktop file systems these days support myriad data streams on a file. I've implemented some on NTFS, played with extended attributes across tar archives between Linux and Mac and Windows. It's all there, but no longer used.
AMD Laptop CPUs don't support thunderbolt.
I'd (sincerely) appreciate if you'd expand on this in more considered language. After reading the article I was hoping to see more comments here reacting to and engaging with the central analogy this essay is built around (between the evolution of desktop and mobile client software platforms and the evolution of social media) but was disappointed to see that nearly all the comments ignored it and just made some tenuously related point about content moderation in general.

Your comment on the other hand seems to react (negatively, which is fine) to the central analogy, but its knee-jerk hostile phrasing is unlikely to be appreciated (or even understood) by anyone who doesn't already know what you're talking about and share your sentiments. So, if you were to phrase your sentiments in a more friendly (to the public, not necessarily to the writer of this essay) manner it could make this comments section more interesting and potentially fruitful.
2021 Annual Threat Assessment of the U.S. Intelligence Community
The issue is that JavaScript (by extension TypeScript) doesn't have the concept of folders.

You can only import a single file per import statement.

Developers create "barrel" files that allow them to re-export all of the important stuff in a folder externally. This allows for namespacing

// foo/index.ts
export * from './foobar'

// main.ts
import * as foo from './foo/index'

new foo.Foobar()

Or use destructured imports to help with static analysis tool that trace imports removing unused references from the final build

// main.ts
import { Foobar } from './foo/index'

Node has non standard behaviour where it appends `/index` to the import path if it's a folder allowing you to shorten imports to

import {} from './foo'
Preregistration of studies [0]. Submit design and models (e.g., logistic regression with these covariates and these exclusion criteria) before collecting data. This is relatively easy to implement and hard to get around, but does need to be paired with more acceptance of the importance of null results in advancing science.

[0] https://en.wikipedia.org/wiki/Preregistration_(science)
I think the rationale at the scale of this point in FAANG is to hire as many people as possible and see who can't hack it (pun intended). In the early days, they had to be more choosy about narrowing the talent pipeline with harder interviews.

Actually, I remember one IT-style interview 12-ish years ago with a certain FAANG that shall go nameless that had this sorta narcissistic/sorta dumb hiring manager, whose profile picture was a shirtless muscles pool pose, believed that a technology I inherited and was forced to use was an interview deal-breaker. And, at the time, I was at an IT department at Big Name university down the street where there were much more complicated and interesting things going on, like remotely uninfecting and patching worm-laden systems and putting together a fully-redundant/HA VMware cluster that had an FC SAN and blade servers (the thing back then).
this action only removes already installed web shells, and does not patch, nor does it prevent from future take overs of these servers, right?

if left unpatched, these same servers could be reinfected next day?
> Also stability wise i haven’t noted problems in years.

Counter anecdote: I have a laptop (single disk) running opensuse tumbleweed with root on btrfs, and it's managed to completely break its root filesystem twice. One of those times I tried to recover it, but in the end I just reinstalled.
Pre-pandemic I had a habit of chucking visibly sick people out of the classroom. No one needs whatever bug they are spreading, not me, not their classmates. This attitude of presentee-ism needed to die even then. We hope it's dead now.
Ants can shrink and regrow their brains
Sorry, what is the overlap in usecase between DynamoDB vs. Redis vs. FaunaDB? There aren't many problems I would be evaluating either DynamoDB or Redis for - usually the problem domain is one or the other (an in-mem DB vs. a persistent store). I also have no idea what FaunaDB is, so I'm not sure how it compares to either.
Some HN readers like me also don’t think about privacy much at all.

I like the sites and apps that accept my data as currency so that I can use/browse them without getting out my wallet. Plus I like seeing ads for products that I might want to buy. Win win.
> You wouldn't say "we should exit the burning house one at a time in case we get hit by a meteor outside, caution here is the logical and ethical thing"

I always appreciate an apt analogy.
In short, "The lesson I take from Dunning-Kruger is that self evaluation is hard."
> Just seems odd that somehow the FBI is the best server admin here?

Without arguing for or against it, I can see this new role viewed as a "sysadmin of last resort" wherein an authorized institution steps in to ensure a minimum security level among neglected systems in their jurisdiction.
Well, using more highly enriched uranium means you can make reactors lighter and more compact which is very important if you want to send them to outer space. I don't think Iran has any immediate interest in that but it's very much on NASA's radar.
Ok. Well, perhaps you aren’t actually aware of what the J&J is. I enjoyed the part about spreading bullshit though, good one.

No, there have been no previous live viruses that have been genetically modified to look like other viruses (embedding Covid spike proteins) injected in humans before three months ago in any scale.

We have treated animals with exactly this however, including pigs against piggy rona.

I recommend reading the whole post next time, not just stopping at “live virus”.
> has Saudi and the Gulf monarchies against it close by, and is an enemy of Israel

It is a self declared enemy of Israel. There is over a thousand miles and two countries between them. Israel has never threatened Iran and has no interest in attacking it.

As for the Saudis and Gulf monarchies, religious differences and hegemony struggles aside - as far as I know Iran are the sole aggressors supporting proxy wars and attacks in the gulf (they literally regularly blow up Saudi oil refineries). I don't think it is at all threatened by the Saudi and Gulf armies, which are not formidable, and has never been attacked by them.

This is some Scooby Doo villain level inversion. In case it isn't completely clear to you, Iran is an expansionist rising power competing with Turkey for control over the ME and Persian/Arabian gulf over a Shia/Sunni cold-religious-war type background, a centuries old holy war... their beef with the house of Saud is about who should control Mecca, feel free to read up about it.

> A more balanced view, understanding the motivations of all sides, may help arrive at an actual solution to this awful standoff, where innocents bear the brunt.

That would involve some knowledge of the history of the region and basic understanding of the cultures and actors involved.

Start by understanding what an Ayatollah is and why they have been ordering their own citizens to be hanged from construction cranes, disappeared, and tortured, for half a century.
It's an amusing reference to the cheeky line from the historic Unix man page for `ed`; "the standard Unix editor".

RE: who decided.. well, the presence of `ed` was a requirement for an OS to be accredited as POSIX-compatible, so that's presumably why `ed` decided to describe itself as 'the standard'. But `ed` fell so far out of favor once screen-based editors (`vim`, `emacs`, etc) became commonly available that the "the standard" line which continued to hang around in ed's documentation became a bit of a Unix in-joke.

The modern GNU version of the `ed` tool describes it as "line-oriented text editor" instead of as "the standard Unix text editor". And only briefly mentions the old phrase in an apologetic explaining why that old phrase was used in the past.

So the short version of the answer: it's not. It's an in-joke which is attempting to draw to mind a comparison of this software against older, simpler Unix tools like `ed`. Which IMHO is totally valid, if you say pass is to lastpass as ed is to vscode. Simpler tool, possibly easier to use for keyboard-focused folks, focuses on doing just one thing and doing it well, etc.
> I'd be worried about offering storage to random people

Isn’t that precisely how IPFS works?
You can replace Kwin with a WM of your choice.