skysight-inc/HackerNews huggingface dataset:
It may depend on a legal system in a country but I think 'Or will you have to prove that the 10 mil you now have was intended to be given to you and your "victim" isn't a victim at all' is more likely. For instance there were cases,where ATMs dispensed stupid amounts of money because of some error. People would normally be found guilty if they take the money that technically isn't theirs.
> Maybe it would be nice to write articles in markdown and have a custom static website generator that takes these and publishes them.

This is what I do. I have three static websites, each has a small (few hundred lines of code) Python script rendering them. I find it worlds easier than existing static site generators, where going even slightly off the happy path is usually a huge pain.

Some examples of custom things I've implemented, which were basically trivial due to doing it myself:

- A probability table renderer, which produces output like https://i.imgur.com/siNN5Tu.png from a CSV of values and probabilities.

- A custom syntax for acronyms, which get the mouse-over text and a link to a glossary entry inserted (with automatic pluralisation too).

- Custom rules for rendering markdown code blocks, to handle things like rendering GraphViz code to an SVG and inserting that in the page.

I usually use jinja2 for templating and pandoc or pymarkdown for rendering the content.

I've intentionally NOT made one static site generator to handle all three sites, as this is where the complexity and inflexibility of existing static site generators comes from. Specialised tools which can evolve independently are inherently more flexible than one complex tool which tries to do everything.

People often say that using a pre-existing static site generator means you don't have to implement features like hashing assets, rendering feeds, or handling tags/categories yourself. Which is true. But those are all very easy to implement, so it's not much of a selling point.
Probably just referring to desktop usage.
Most of the systemd components actually work without systemd as the init. I've used udev and nspawn without systemd-init.

As long as you don't have a problem with libsystemd existing, most things work fine without systemd-init. Mainly systemd-journal and systemd-oomd both require systemd-init.
They're RFID readers, you can set any card as "Express Pay" in Apple Pay and it doesn't require auth. I have my Ventra Card in Chicago as my "Express transit" card and it will still work even when the phone is off or dead.
Any secure co-signing approach would require putting app developers in the loop. Are app developers going to do that? If developers want to provide device-optimized APKs, they can do that already without this Google-signs-the-APK stuff.

[1] https://developer.android.com/google/play/filters
Yes, I know. Something needs to be done about demand. A tax on holding bitcoin might convince honest individuals and businesses (who pay their taxes) to sell. It might not be enough but it would help.

Make the tax proportional to mining revenue, and maybe the "set in stone" rule would be reconsidered?
So then why even bother with DeFi when what you're doing is just relaying trust back to a centralised human party?

It's just regular finance with extra steps.
> But every day I work in Go I get this gnawing feeling that software development could be so much better, that we could have been done weeks ago.

You should definitiely give Rust a try if you haven't. It has all the pros above without the boilerplate (and even better type safety)
How a cardboard box is made
>Google already controls the operating system, the installer, and the SDKs you used to develop your Android app in the first place. If they wanted to backdoor your app there are already plenty of opportunities to do so at multiple levels throughout this chain.

It's less straightforward to backdoor the OS/sdk because it's open source and built by various vendors. AFAIK the play store doesn't have a custom installer to handle installs, that's handled by the operating system itself. The play store has special permissions to install apps programmatically, but AFAIK it doesn't have ability to bypass the signature check, which is why this change is being made in the first place.
Google literally controls the software delivery platform and silently updates a highly privileged service called Play Services on every phone. That service can access and backup data from apps private storage.

They really really don't need to touch your APK to get any user or app data. If you don't realize that, you may have been thinking of wrong threat models.
SystemD solved enough problems that such a large number of distro owners switched to it that one of the biggest complains against it is how prevalent it is.
> This incentivises innovation.

It's only innovation into how to extract more profit from that specific pow function. Why would we care about it? (Or why call that innovation?)

> In POW you always have to invest to be competitive and have the most competing hardware.

I struggle up find a positive impact of this. There's been a number of negative side effects though.
I use daemontools instead of runit. What am I missing.

multilog is the simplest (smallest) and most versatile log rotating daemon I have found.
> if you work in this domain - how is Visio very expensive?

Working for a megacorp doesn't mean they shower their people with money for tooling (or anything beneficial, actually). They are incredibly wasteful in some respects, but very seldom in ways that benefit the people working for them, or the work they do for them. In truth, they are a bunch of c*nts that couldn't care less about their people ¯\_(ツ)_/¯

But now I digress, and will get back on topic :P

Also, when I mentioned cost, I meant in general - not just specifically for me in my specific day job. If you're solo-bootstrapping a startup for example, $280-530 might seem relatively expensive for a tool that you will seldom use. Perhaps less of an issue if you're using O365, or the Microsoft Action makes sense for you.

> Visio's default of a printed page as Canvas is incredibly cumbersome - we want big canvases in which we can zoom in / out liberally for large diagrams (hundreds of components).

I don't understand your argument here; the Visio canvas can be whatever size you want - you can even let it auto-expand as needed if you want. I regularly do use it for diagrams of large systems with numerous components, and can zoom in/out just fine.

> It's more a question that it's not really an architecture tool for large systems

I like declarative diagrams very much (versioning is a huge plus too), and have been making much more use of them recently, mainly for UML diagrams. But actually, for large architectural diagrams they can become a sea of text that's difficult to work with. Being able to visualise* things more intuitively can be a bonus.

> It's a general purpose tool

This is one of the things I like about it - I can do architectural diagrams, sequence diagrams (or any kind of UML diagram), process flows, swim lanes, anything really.

Still, it has a gazillion features and capabilities that I'll never use (such as the extensibility you mention), and it can be really fiddly to size and position things just-so. Hence, I think something a little more focussed (like the OP's app, or the likes of draw.io) could be a great alternative.
Verifying that the build came from the developer tells you nothing about whether the app has been backdoored when your adversary controls the compiler used to build the app and the operating system used to execute the app. Reflections on Trusting Trust explains why:

https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...
In what way is Solidity terribly designed?
This is pretty cool!

> With modern CSS, WYSIWYG Web design is simply impossible. Web pages are crafted manually by editing CSS, that is by nature of CSS.

mmm.page[1] would like a word with you!

[1] https://news.ycombinator.com/item?id=27128424
Not a matter of if, but when.
> It is great to see effort being put into researching cleaner alternatives. Unfortunately, there is no working PoS-based system that does not rely on some degree of centralization in its security model.

This is false. See Algorand, Cardano, Mina, etc.

Proof-of-work is very much a technology of the past. It's the fossil fuel of cryptocurrencies.
Console Wars has some interesting reporting in it, but it's otherwise a terrible book. Absolutely filled with cliches, invented dialogue and business speak. It's also very clear that this book emerged from getting access to Sega of America chief Tom Kalinske and cannot solve the problem of getting anything meaningful out of Nintendo.
I doubt the judge is going to care that the “contract” passed through a bunch of different peoples hands (nodes in a network). They could still fine the seller or order them to return the funds to X.

If Y can’t be hauled into court because they are in another country or you just don’t know their identity, well that isn’t a problem specific to these “distributed smart contracts.”
It’s more that it would help the industry standardize on one size, which meant facilities in all places could also standardize and ensure edge cases are properly taken care of. The current status quo is “we have a strait, and the biggest boat you can squeeze into that should be able to pass through”; a standardized approach would be “if you build a boat X by Y, we guarantee it will go through - because we can basically put it on rails once you get here”. It’s a bit like they did with containers: from “build the biggest box we can fit on a ship” to “build the box that ships can guarantee will be optimally treated”.
> Michigan

https://en.wikipedia.org/wiki/The_Bottle_Deposit
Default -Bsymbolic-global-functions for shared object performance
beware that superstonk is a fishy sub that spawned out of nothing after the worst fringe element of wallstreetbets got the boot.
In the future I think smart contracts will be standardized - these kinds of things won’t happen unless you’re trying something new. If that’s the case there will probably be services/testnets to properly vet it before launching on a mainnet.
But aren't proofs exact in what they state? So it wouldn't be the proof that would be faulty. It'd be the interpretation of what somebody thinks the proof means to them, and that'd be something you could entirely objectively reason/work on.
The legal system isn't a computer that implements the law strictly to the letter based on only factual information. There are "reasonable person" standards, allowance/tolerance for mistakes, etc.

Relevant to this discussion is rules covering mistaken deposits to a bank account: recipients are obliged to return the assets, not shrug their shoulders and use the cash while they proclaim "Bank's fault; they're responsible!"
It really makes me so sad. My dad is too stubborn to use an app when he travels to my city, so he'd be just as likely to just take a cab instead of public transport, paying 10x extra because their ticket system is unwelcoming to visitors.
I don't follow any of this too closely, but I thought the whole idea was to get rid of courts by using precisely codified contracts?

What's the advantage if the result is the same system as before (lawsuits, courts, etc.) with added complexity of "smart contracts"?
You should word it differently because I never would have guessed that is what it means.
It was actually the other way around. :)
There is a site called maintainable css that resonated with myself regarding CSS naming and approach. https://maintainablecss.com/
You would have to also be sure to only load those cards from cash, which is an additional hassle.
How to Un-Potato Your Life
All exploits are technically some version of “just doing what the code allows”, I don’t see how that would change whether or not a hack/theft actually occurred.
A tool to generate ext2/ext3 filesystems from various sources (device tables, directories, tar archives, etc.) used mainly for generating embedded systems images or android ROMs.

https://github.com/bestouff/genext2fs
CKEditor is good but problem is that browser does not provide needed APIs for implementing good WYSIWYG solution.

For example in Sciter I've added transactional DOM mutations feature

element.richtext.update(function(ctx) {

ctx.setAttribute(...)
ctx.removeNode(...)
ctx.wrapNode(...)

});

Such mutation is performed as single UNDOable operation.

Also Sciter supports immediate mode painting a la ImGUI that helps a lot to make lightweight editing solutions.

The lack of needed API forced Google Docs to switch to Canvas based rendering and editing : https://workspaceupdates.googleblog.com/2021/05/Google-Docs-...
I have never used svlogd but at it looks like it does read logs from it's stdin, which is a solid step forward as it avoids much of the pitfalls caused by applications writing directly into log files.

Collection is just the first part of a log system though of course.
How does this play with alternative app stores? Could you then upgrade your app from them?
Also -ling is not so much a diminutive but more of a suffix for Nominalisation (Zögling stems from 'ziehen' [to raise],and refers to someone who was raised, Widerling from 'widerlich' [despicable], thus a despicable person, Schreiberling from 'schreiben' [to write], a Writer], Frühling from 'früh' early [spring]). Gives a somewhat pejorative connotation at times.

The key misunderstanding here is of course that 'Genus' is not necessarily 'Sexus'.
Can you link to such a document (one that details the spec for only recent versions of C++)?
I don't agree with her sentiment that alpine should adopt something similar. The whole reason I use alpine is because it doesn't use systemd.

I like alpine because it uses a simpler, lighter approach. It's not for everyone, and I'm pretty sure alpine maintainers don't intend it to be for everyone. It serves its niche really well as it is. For those who like systemd there's many distro choices already.

Edit: As detaro mentioned in another comment ( https://news.ycombinator.com/item?id=27176391 ) they are actually working on something, but they aim to solve the various issues around alpine that don't fit well with alpine's philosophy. It sounds like a good story and I'm open to this idea. The main reasons I don't like systemd are its complexity and its dbus reliance, basically bringing too many desktop paradigms into all Linux systems, even servers and containers.

So about my above point: I'm open to it adopting a service manager but not too similar to systemd :)
> No, you just categorically don't understand.

Of course I understand, as do the rest of the people not employed by red hat upvoting me.

Time and time again, I've seen systemd advocates making slippery, disingenuous, and outright false arguments. When they're called out on it, the goalposts magically move, a rotation of usernames appear to downvote and brigade which can be ascertained through downvote timing correlation. When they can't win an argument through facts, then they make bogus arguments that one doesn't get it, or some such nonsense - or claim they're a red hat conspiracy monger.

Seeing it over and and over again is lame, and played out.

Now, why don't you answer the question - if udev was subsumed by "libsystemd" as is claimed due to "code duplication" - then why did they not just include "libudev" as a dependency for "libsystemd"?

Of course, the question will never be answered, as it'll reveal the truth.
Sure, but the LEO has to ensure that their tools are not broken. This is not anyone's responsibility but theirs.
> but I don't sit there consciously waiting for it to do stuff.

100% of the time I want Jira to do stuff is when I'm interacting with it, and thus absolutely waiting for it.
Pyflakes should be the first "test" run, and it finds those kind of issues.
Proponents of Ethereum will say that smart contracts obviate the need for courts. I don't think this sort of Ethereum bug/hack thing has ever shown up in the court system yet. I'm sure someone will bring a case if they know who did it. If gaining access to someone's system using default credentials or no credentials is a violation of the CFAA then I'm sure this is as well.
Being able to provide insurance whose value is not co-related with crypto will be the game changer for newly minted defi projects to trust yearn with their treasury.
I didn't say anything about not working on yourself, but it's gotta be for your own approval. If you only try to establish connections with ppl based on how much money you make, well you're kind of narrowing a funnel a bit hey? This sort of rhetoric seems less about self-improvement and more about blaming people for your need to do so. Can't be framed as "Hey I fixed X, now will you sleep with me!?". The work should be put into (imo) just being more comfortable to be around and less of a goober if you are one.

When was the last time you just had an unassuming conversation that went well with someone down at the cafe, or met people at your gym that you vibed with? To say it's likely to find someone if you have zero charisma, aren't outgoing, have no hobbies, no sense of humour, and no beauty would be foolish, but then you're probably not even getting out from behind your computer at that point. That said, people have even met their spouses in World of Warcraft, so hope is not all lost.
Out of curiosity, would this allow Google to perform the signing _at the moment of download_?

By that I mean, would it be possible that 2 different people download the app from the Play store, one of them gets an unmodified version of the app and the other (perhaps based on the user's race, country of origin, etc.) gets an on-the-fly modified version of the app.

The developer - and likely 99+% of all users - would never know or even be able to tell because most copies of the app in existence are 100% what the developer created. But, for a few rare birds, backdoors are aplenty.

Regardless, I'm 100% against this. But, my thinking above is this is possibly far worse than I initially imagined.
> A guy on a team that I worked on detected one of those devices and called the university police (we were a tenant in a university building), who laughed, and then proceeded to methodically and politely walk the hierarchy of agencies with jurisdiction (sheriff, city police, state police, FBI field office, FCC, etc).

Since it took me a minute to parse: the guy on the team, not the university police, was the one who walked the hierarchy?
You would really put Swift over rust as an enthusiast-driven language??
People have largely switched already. Py2 is gone from default installs these days. So yes, even if it takes a while, people often do switch to better solutions.
If the SDK was backdoored it would show up on everyone's downloads, which greatly increases the chances of detection. Conversely, if the binaries were uploaded to an app store and were only signed by the app store itself, it's impossible to know whether you got a backdoored version or not.
To me it's equivalent to "To see what services load on boot, you can list that directory.".
> Repetitive, boilerplate is easier to understand and work with than highly abstract, extremely clever code.

I think much of the reason for disagreement is that this isn't universal. I find boileplate heavy code much harder to reason about than abstracted code. Especially if the abstractions are either standard ones (map, filter, etc), or well-documented.

I guess there's a happy medium. Personally I find Java too abstracted. Go not abstracted enough, and that lanaguages like Rust and JavaScript strike a good balance.
It's struggling because of poor management, mismatch in goals and debt-trap style financing.

Countries are looking at what happened in places like Sri Lanka [1] and pulling out.

https://www.nytimes.com/2018/06/25/world/asia/china-sri-lank...
I cannot shake off the feeling that the core developers standing behind systemd, pulseaudio, Gnome desktop spend a lot of time using macOS, and like it better than Linux.

This would explain why they imitate or copy many of its features (and misfeatures), and seemingly tend to replace the Unix ways with entirely different approaches. Effectively forcing things on users, as it was with pulseaudio and systemd, is also a very macOS thing to do.

I'm not opposed to replacing Unix with different approaches, as long as they keep playing on its key strengths, and do not remove modularity and composability. That is, Plan 9 is fine with me. Much of what Red Hat does, sadly, no.
I've migrated [1] my blog to Eleventy this year and it is a pleasure to work with. I especially like the data model and the flexibility.

[1] https://darekkay.com/blog/hexo-to-eleventy/
If a US or EU court finds participants of said node criminally or financially liable and the political will exists (which will happen when someone important enough gets screwed over by a bad contract) they may be deported, face criminal prosecution, be banned from transacting with US financial entities, etc.

Those things are not a small deal.
It is actually a problem specific to these types of contracts. It is very difficult to nearly impossible for me to get money to a company somewhere right now in a way that doesn’t surface who they are and where they are at in some really obvious (and traceable) way - part of the US War on Terror is the anti money laundering, and know your customer rules and heavy handed enforcement of US financial control.

In this case, you send some ether somewhere.
iPhone is taking your picture every 5 seconds
How do you get rid of courts? Do you imagine an alternate reality where existing regulations do not and can not apply? Because I'd recommend continuing to imagine.
It makes absolutely no sense to do it this way. So either let me sign the app and check it in Play store app, or recompile and modify my app as you wish and tell Play store app to not check the signature.
Portions of the SDK are open source, portions are not. Android also does not have reproducible builds, so you cannot audit that the open source you are viewing relates to the binaries on your phone. Android also widely depends on binary blob firmwares which also cannot be audited.

As it stands if you buy a normal android phone, then you must trust Google.
that is presumably to prevent the $ from ever being frozen. in some instances, devs will freeze defi tokens. very uncommon and controversial but it happened after kcuoin hack
I think smart contracts are meant to automate the work behind contracts/agreements, but if someone hacks you, well, they did something illegal and you can sue?
Nobody can force you to do business with them. Binance can't stop the transaction they can just not do business with that person.
I am not sure that it is seen as standalone. Surely, one doesn't use "Maid" or other archaic terms from which "Mädchen" is the derived word. But to me I am aware that its a diminutive. If I speak dialect I also use the dialectal diminutive (Mädle). Of course to someone learning the language that level of understanding is hard to reach without immersion for years.
Code won't make the complexity go away but it can definitely inform humans of various little things that would be too tedious or expensive to do manually.

There's a reason we don't have lawyers review every ecommerce or in-store purchase that's made: the process of shopping has been standardized to such an extent that most parties (merchants and buyers) don't need to sign a bespoke agreement for every transaction.

If we can get more complex agreements automatically hammered out, it represents not just large cost savings, but potentially creating more business for smaller players easily.